last executing test programs: 5m27.838358003s ago: executing program 32 (id=200): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r1, 0x0, 0xfffffffffffffffe, 0x2}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x6, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2b8000000000000}) 5m14.400121063s ago: executing program 33 (id=327): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x6) 4m59.27694412s ago: executing program 34 (id=478): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000c6a000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 4m45.884093919s ago: executing program 35 (id=462): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)) fcntl$lock(r0, 0x25, &(0x7f0000000140)) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x80000000}) 4m32.235766565s ago: executing program 36 (id=657): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000a80)="d5", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x40000040, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}, 0x4, 0x1, 0x1, 0x4}}, 0x80) 4m15.243341003s ago: executing program 37 (id=790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f8008000240000000050800024000000b860800034000004751080003400000000308000140"], 0xdc}}, 0x0) 4m11.222110726s ago: executing program 38 (id=817): r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x4, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000a00)={0x14, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000fc0)={0x2c, 0x0, &(0x7f0000000e40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000006740)={0x18, 0x0, &(0x7f0000006640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x20}}, 0x0, 0x0, 0x0}, 0x0) 3m48.625788943s ago: executing program 39 (id=991): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) 3m21.203747565s ago: executing program 40 (id=1261): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf}]}}}]}, 0x3c}}, 0x0) 3m10.679192195s ago: executing program 41 (id=1355): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009c02"]) 3m5.093457675s ago: executing program 42 (id=1407): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e22, 0x9, @empty, 0xa2c8}}, 0x59a, 0x4}, &(0x7f00000001c0)=0x90) 2m55.755030107s ago: executing program 5 (id=1490): r0 = gettid() process_vm_readv(r0, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 2m55.479396701s ago: executing program 5 (id=1494): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m55.228265938s ago: executing program 5 (id=1498): r0 = syz_open_dev$mouse(&(0x7f0000000100), 0x9, 0x41) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r0, 0x0, 0x8007fff, 0x0) 2m54.169004492s ago: executing program 5 (id=1511): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) open_tree(0xffffffffffffff9c, &(0x7f0000000440)='\x00', 0x81901) 2m54.001645017s ago: executing program 5 (id=1514): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7fdfffffffffffff, 0x8080) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 2m53.653361179s ago: executing program 5 (id=1518): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280037800b0001006970367606690000180002"], 0x54}}, 0x0) 2m53.239046082s ago: executing program 43 (id=1518): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280037800b0001006970367606690000180002"], 0x54}}, 0x0) 2m41.329255733s ago: executing program 1 (id=1596): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80800) 2m40.474821709s ago: executing program 1 (id=1597): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2, 0x1, 0x0, @void, @value}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 2m40.260361937s ago: executing program 1 (id=1599): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x3938700}}) io_uring_enter(r0, 0x6b4d, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x3, 0x7, 0x0, 0x0) 2m39.982348917s ago: executing program 1 (id=1601): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0xffff}}]}}) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 2m39.109471219s ago: executing program 1 (id=1604): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1, 0x5}}, 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 2m37.551495214s ago: executing program 1 (id=1608): syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902"], 0x0) syz_usb_connect(0x0, 0xd0, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2f, 0xb3, 0xe5, 0xff, 0x12d1, 0x81b6, 0x952d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x2, 0xb, 0xd1, 0x130, 0xaf, [{{0x9, 0x4, 0x8c, 0xd, 0x1, 0xff, 0x4, 0x15, 0x8, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "7116f7c491"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8d, 0x8, 0x101, 0x80}, [@ncm={0x6, 0x24, 0x1a, 0xffff, 0x21}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x0, 0x0, 0x7, 0xed, 0x9e}]}, @uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xfffe, 0x3, 0x18, "3a1cac"}]}], [{{0x9, 0x5, 0x3, 0x4, 0x400, 0x7, 0xd, 0x1}}]}}, {{0x9, 0x4, 0x7a, 0x5, 0x6, 0xa3, 0x85, 0x8b, 0x1, [], [{{0x9, 0x5, 0x80, 0x4, 0x8, 0x9, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x8001}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x5, 0x8, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x14, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x6af}]}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x4, 0x8, 0x82, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x3, 0x200}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x48, 0xc, 0xb8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd3, 0x9}]}}, {{0x9, 0x5, 0x3, 0x3, 0x10, 0x3, 0x1, 0x4}}, {{0x9, 0x5, 0xc, 0x0, 0xc252baef35816377, 0x5, 0x9, 0x1}}]}}]}}]}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000ef0285b72eae795b11ad261777db75186baf0b2792ade1f10772662181fe046096c5df696334e2d8363970c8c3b029c88880576b08935b03795560230500ef286f21c974d520c247fd200851f90b2dd5e5f6b23909a23ee27007dae2a0fdf92809a931196df3be84781f7ecafa0a4bcf7e01a23999fdfb4b490f6cfe5edf3850576acb265f2ee288a85dfe7c79e969b738dbc61171dfd8f5e33fbf1ee05bc5bdeb164dc2458455e3ba438c9109dd001ad93df3fc235bed50ffce5ea79cfc8cf7d53a031691362ba21394bd614ec41f636ec0e299e370f5631acfab5a6519a36f963679457241bc05a307f8be0c828a43ed21ecdd1ee2b9b7ae315e5b515c71c39bf4b45f5e3f7cd3f6404fc93cf55949f0c3a7b87f86120153725784e98975c7617ffc7e8cc497f437853d9c04b195fa52848dd1555796b3cdf2527d7929631cca05e27c28566d2c47699bc6c3f5f76680c1db20c3089a3bdc5b44d224a0b3c2ca8087486aead1d034d94d32ad677b28b10ed58f8de2d5a8d25c7cae49ba35be16888ea8da622daf5f0f02d9c08752113ab1ec2bde50940e9bf33f91a6c5056aabc04eedfeb6535540e5c027ff4df6589cb47171bfbb564a2350564f4bdbcf4e048f2b34570d5ef2bb7939256325574c3bf96f022efde18e9274d5d40af19b0afe0c774b56ff010000bf8be42828b4cb3d6cf6930f5c4c71563e4eb0d341dc742bdb802b498fef8490b52ad16e131d8e3142ef3ffba81085ce4a028c7af46774b391e2124fcd93ff05c21ad0da384ff0017957481ee790b301e3e817c3b651bb99090189eed2862f89e6b5ca8e62a5f5ff0dc6ed83392fd551d0eedc491b3df83509d2fa1023eb77b8a13de09e22a7f19088bcbd8f47ad5a964ab6bbb94784d31b397229ae3fb66ffe0e9913d32301c844e58f000094f5766dc1ca5e8cfee332a28809591c14098f71a7bdcb88186bcd36a2ecce33a3048f6f97e14dac56e84a1fdfdee2bcd21132632905c060b3aca1d4446f456e2088e7257d575e8465d7ed767e415a616d1458a32e904a1ffaf090c2884d4a56958ab143cdb95b6c39e04010b888bd95b09d50d7e6c5c084aa8cdc21890b8ff3072ca215dde339bef126b07eb835d28f977ab43670412afe8361b60bf361aa4d351214801c57dad50ad6179a7507011e3060badbe396b3fb928c7e8b"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x81, 0x1a0ffffffff, &(0x7f0000000200)="5c71f905cac413551b2ac06c0800", 0x0, 0x4000}, 0x28) 2m37.330046068s ago: executing program 44 (id=1608): syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902"], 0x0) syz_usb_connect(0x0, 0xd0, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2f, 0xb3, 0xe5, 0xff, 0x12d1, 0x81b6, 0x952d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x2, 0xb, 0xd1, 0x130, 0xaf, [{{0x9, 0x4, 0x8c, 0xd, 0x1, 0xff, 0x4, 0x15, 0x8, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "7116f7c491"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8d, 0x8, 0x101, 0x80}, [@ncm={0x6, 0x24, 0x1a, 0xffff, 0x21}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x0, 0x0, 0x7, 0xed, 0x9e}]}, @uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xfffe, 0x3, 0x18, "3a1cac"}]}], [{{0x9, 0x5, 0x3, 0x4, 0x400, 0x7, 0xd, 0x1}}]}}, {{0x9, 0x4, 0x7a, 0x5, 0x6, 0xa3, 0x85, 0x8b, 0x1, [], [{{0x9, 0x5, 0x80, 0x4, 0x8, 0x9, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x8001}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x5, 0x8, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x14, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x6af}]}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x4, 0x8, 0x82, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x3, 0x200}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x48, 0xc, 0xb8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd3, 0x9}]}}, {{0x9, 0x5, 0x3, 0x3, 0x10, 0x3, 0x1, 0x4}}, {{0x9, 0x5, 0xc, 0x0, 0xc252baef35816377, 0x5, 0x9, 0x1}}]}}]}}]}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x81, 0x1a0ffffffff, &(0x7f0000000200)="5c71f905cac413551b2ac06c0800", 0x0, 0x4000}, 0x28) 2m21.639602935s ago: executing program 6 (id=1736): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) 2m21.455513548s ago: executing program 6 (id=1740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5, 0x1, 'H'}]}]}, 0x28}}, 0x0) 2m21.219624201s ago: executing program 6 (id=1744): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x21ac, 0x0, 0x0, 0x0, 0x0) 2m21.039118271s ago: executing program 6 (id=1746): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 2m20.792987495s ago: executing program 6 (id=1750): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000d32a2e96000040"]) 2m20.288026953s ago: executing program 6 (id=1759): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 2m19.996112773s ago: executing program 45 (id=1759): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 1m57.706759614s ago: executing program 0 (id=1973): r0 = syz_create_resource$binfmt(&(0x7f0000000240)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463d280202080000000000000002000300000000006f02000038000000e0000000000100000200200003009400060009400000000001000000e80000000700000005000000070000000300000000000000050000000500000002000000ffffffff0c0000000180000000000080080000000004000003"], 0x98) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1m57.364450874s ago: executing program 0 (id=1976): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004"], 0x34}}, 0x0) 1m57.068566273s ago: executing program 0 (id=1980): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1m56.767495766s ago: executing program 0 (id=1984): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) utime(&(0x7f0000000100)='./file0\x00', 0x0) 1m56.675957537s ago: executing program 0 (id=1985): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {}, 0x400, "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"}, 0x418}) 1m56.347749745s ago: executing program 0 (id=1989): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) write$FUSE_NOTIFY_DELETE(r1, 0x0, 0x0) 1m55.90487616s ago: executing program 46 (id=1989): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) write$FUSE_NOTIFY_DELETE(r1, 0x0, 0x0) 1m46.029441952s ago: executing program 7 (id=2071): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd10, 0x0, 0x0, 0x1}}}}]}, 0x78}}, 0x0) 1m45.672230178s ago: executing program 7 (id=2075): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r1, 0xd32, 0x1, 0x2}, 0x10) 1m45.393332859s ago: executing program 7 (id=2078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000f9ffffffff0500000008000300", @ANYRES32=r2], 0x24}}, 0x0) 1m45.087724295s ago: executing program 7 (id=2081): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x141431, &(0x7f0000000580), 0x0, 0x0, 0x0) 1m44.887845359s ago: executing program 7 (id=2084): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) rseq(0x0, 0x0, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_virt_wifi\x00', &(0x7f0000000080)=@ethtool_dump={0x40}}) 1m44.337385743s ago: executing program 7 (id=2091): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001300050000000000000000000700d1d1", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a8018000580140007800800010000000000080002"], 0x3c}}, 0x0) 1m43.847787203s ago: executing program 47 (id=2091): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001300050000000000000000000700d1d1", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a8018000580140007800800010000000000080002"], 0x3c}}, 0x0) 1m35.479032734s ago: executing program 4 (id=2175): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000ff11"], 0xffffffffffffff6c, 0x7ffffff7}}], 0x1, 0x8000) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 1m32.925363978s ago: executing program 4 (id=2181): r0 = landlock_create_ruleset(&(0x7f0000000040)={0xd351}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0xc0045878) 1m32.754590019s ago: executing program 4 (id=2183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @pic={0x81, 0x5, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}) 1m32.355469996s ago: executing program 4 (id=2186): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000049c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x2}}]}}, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 1m31.403987371s ago: executing program 4 (id=2198): semget$private(0x0, 0x4, 0x0) semop(0x0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) semop(0x0, &(0x7f0000001480)=[{0x0, 0xfffb}, {0x2, 0x7f, 0x1800}], 0x2) semop(0x0, &(0x7f0000001400)=[{0x0, 0x200}], 0x1) 1m30.79506426s ago: executing program 4 (id=2204): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={0x0, 0xfffe, 0x20, 0x1}, &(0x7f0000000500)=0x18) 1m30.154078273s ago: executing program 48 (id=2204): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={0x0, 0xfffe, 0x20, 0x1}, &(0x7f0000000500)=0x18) 1m26.355531643s ago: executing program 2 (id=2240): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x4083, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140)="eb", 0x1a000, 0x14ff, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 1m26.119991728s ago: executing program 2 (id=2244): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 1m25.974267299s ago: executing program 2 (id=2245): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r0) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0x7) 1m24.018906163s ago: executing program 2 (id=2258): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x28a0864, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0) 1m23.90142964s ago: executing program 2 (id=2259): unshare(0x22020400) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) 1m22.690204528s ago: executing program 2 (id=2263): timer_create(0x0, 0x0, &(0x7f0000000340)) timer_create(0x0, 0x0, &(0x7f0000000140)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) 1m22.313202231s ago: executing program 49 (id=2263): timer_create(0x0, 0x0, &(0x7f0000000340)) timer_create(0x0, 0x0, &(0x7f0000000140)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) 1m20.149740858s ago: executing program 3 (id=2280): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x0) 1m18.977627022s ago: executing program 3 (id=2286): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='Icpu'], 0xb) 1m18.857930522s ago: executing program 9 (id=2288): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) inotify_init1(0x0) 1m18.782782552s ago: executing program 3 (id=2289): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000280)="f017290676e87a169913", 0xa, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x8}, 0x8) 1m18.646020071s ago: executing program 3 (id=2291): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) connect$pppl2tp(r0, 0x0, 0x0) 1m18.459525509s ago: executing program 3 (id=2292): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x223216, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x20) 1m18.30564241s ago: executing program 3 (id=2294): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r1 = fcntl$dupfd(r0, 0x406, r0) write$FUSE_DIRENTPLUS(r1, 0x0, 0x0) 1m17.816427987s ago: executing program 9 (id=2296): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000010}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 1m17.754578137s ago: executing program 9 (id=2298): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)="6d209fd94b13c62c2b66e4beab01", 0xe}], 0x1}, 0x4000005) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12001) 1m17.587861895s ago: executing program 8 (id=2300): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc01c2, 0x1fe) write$binfmt_script(r0, &(0x7f0000000040), 0x4) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1m17.480295608s ago: executing program 8 (id=2301): mremap(&(0x7f000054d000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00003af000/0x2000)=nil) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mremap(&(0x7f000044b000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) mremap(&(0x7f00005fe000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 1m17.264993588s ago: executing program 8 (id=2302): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)="f3", 0x1}, {&(0x7f00000003c0)="23b5db3ae6d4", 0x6}], 0x2}}], 0x1, 0x0) 1m17.084240168s ago: executing program 8 (id=2303): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x8a, &(0x7f00000000c0)=0x2000000, 0x4) 1m16.818915097s ago: executing program 9 (id=2304): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x0, 0x29, 0x0, "13d0e541dcf78a5d98cef1faade910248c29dafe5afe60ef6690f30fc35b6fb13a1cc2262b9fa08d71dc6551107e34199c262e165f321541855bc6e219cda11555f7e0529721e74b13fe21bbba6de952"}, 0xd8) sendto$inet(r0, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) 1m16.560155043s ago: executing program 9 (id=2305): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x0, 0x3, 0x3}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 1m16.395048212s ago: executing program 9 (id=2306): r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x2, {{0xa, 0x0, 0x2000, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000a004e2200000000ff"], 0x90) 1m15.264528285s ago: executing program 8 (id=2307): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil) 1m10.97068293s ago: executing program 8 (id=2308): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) 0s ago: executing program 50 (id=2308): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) kernel console output (not intermixed with test programs): nterface: batadv_slave_0 [ 263.182966][T10257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.238135][T10257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.300127][T10257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.310588][T10257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.340380][T10257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.384871][T10053] veth1_vlan: entered promiscuous mode [ 263.550418][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.562711][T10257] hsr_slave_0: entered promiscuous mode [ 263.586517][T10257] hsr_slave_1: entered promiscuous mode [ 263.620488][T10257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.628805][T10257] Cannot create hsr debugfs directory [ 263.749204][T10053] veth0_macvtap: entered promiscuous mode [ 263.844207][T10053] veth1_macvtap: entered promiscuous mode [ 263.870219][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.930060][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.956580][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.977197][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.015797][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.026320][ T5845] Bluetooth: hci0: command tx timeout [ 264.042166][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.057013][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.067373][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.078736][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.091461][T10053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.139258][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.166408][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.190285][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.209444][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.219947][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.230801][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.241086][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.265651][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.292405][T10053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.399212][T10053] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.424948][T10053] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.445239][T10053] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.453995][T10053] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.586306][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.655694][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 264.795452][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 264.836456][ T25] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 264.865990][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.885618][ T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.898465][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 264.907925][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.919314][ T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.933840][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 264.951333][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.960991][ T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.968630][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 264.972227][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 264.987168][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.997367][ T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 265.005628][ T9] usb 6-1: config 0 has no interfaces? [ 265.010177][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 265.022281][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.026399][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 265.031811][ T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 265.052169][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 265.061505][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.071521][ T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 265.100149][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.108774][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 265.110203][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.139053][ T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 265.179203][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 265.180598][ T9] usb 6-1: config 0 descriptor?? [ 265.220542][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.231290][ T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 265.246231][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 265.264480][ T25] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 265.274998][ T25] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 265.296709][ T25] usb 2-1: Product: syz [ 265.301436][ T25] usb 2-1: Manufacturer: syz [ 265.311317][ T25] usb 2-1: SerialNumber: syz [ 265.343543][ T25] usb 2-1: config 0 descriptor?? [ 265.359179][ T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.378916][ T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.383343][ T25] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 265.498532][ T6883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.545702][ T6883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.604238][ T9] usb 6-1: USB disconnect, device number 12 [ 265.614703][ T9370] usb 2-1: USB disconnect, device number 11 [ 265.636198][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.646460][ T9370] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 265.659497][T10257] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 265.674970][T10257] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 265.774193][T10257] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 265.786972][T10257] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 265.942530][T10450] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.1483'. [ 266.003801][T10257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.078740][T10257] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.106761][ T54] Bluetooth: hci0: command tx timeout [ 266.119472][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.126669][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.161364][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.168530][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.366159][T10459] ebt_limit: overflow, try lower: 570423552/2483027968 [ 266.516534][T10465] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1490'. [ 266.536624][T10257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.666953][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.732719][T10257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.747686][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.913346][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.914369][T10257] veth0_vlan: entered promiscuous mode [ 266.992629][T10257] veth1_vlan: entered promiscuous mode [ 267.148031][T10257] veth0_macvtap: entered promiscuous mode [ 267.186013][T10257] veth1_macvtap: entered promiscuous mode [ 267.306928][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.350720][T10492] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1502'. [ 267.355091][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.405215][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.451204][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.482735][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.503932][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.526329][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.557983][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.579585][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.600354][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.617631][T10257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.628929][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.640648][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.650554][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.663211][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.705894][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.714497][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.733303][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.752749][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.796041][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.825161][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.841808][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.859634][T10257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.956611][T10257] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.999361][T10257] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.028464][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.035592][T10257] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.057278][T10257] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.344078][T10516] syz.0.1513 (10516) used greatest stack depth: 18672 bytes left [ 268.355175][ T25] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 268.388801][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.404033][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.463235][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.473937][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.546488][ T25] usb 9-1: Using ep0 maxpacket: 16 [ 268.573370][ T25] usb 9-1: config 0 interface 0 has no altsetting 0 [ 268.589885][ T25] usb 9-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 268.604056][ T6883] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.635211][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.666805][ T25] usb 9-1: config 0 descriptor?? [ 268.745484][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.808194][ T6883] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.034816][ T6883] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.084358][T10535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.128019][T10535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.130240][ T25] hid (null): unknown global tag 0xc [ 269.158868][ T25] hid (null): invalid report_count 15900 [ 269.170962][T10535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.201448][ T25] hid (null): unknown global tag 0xc [ 269.212355][T10535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.222311][ T25] hid (null): report_id 174113451 is invalid [ 269.249766][T10535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.300757][T10535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.301025][ T25] input: HID 0458:5013 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5013.000D/input/input23 [ 269.335412][T10535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.377806][ T6883] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.388709][T10535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.427508][T10535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.457573][ T25] input: HID 0458:5013 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5013.000D/input/input24 [ 269.544511][T10546] ALSA: mixer_oss: invalid OSS volume '' [ 269.558880][ T25] kye 0003:0458:5013.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.8-1/input0 [ 269.648392][ T25] usb 9-1: USB disconnect, device number 2 [ 269.730973][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.745127][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.760233][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.773351][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.838365][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 269.851418][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.093639][T10565] cgroup: fork rejected by pids controller in /syz0 [ 270.156000][ T6883] bridge_slave_1: left allmulticast mode [ 270.185300][ T6883] bridge_slave_1: left promiscuous mode [ 270.191097][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.217044][ T6883] bridge_slave_0: left allmulticast mode [ 270.222862][ T6883] bridge_slave_0: left promiscuous mode [ 270.324224][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.500512][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 270.697302][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 270.723742][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.743209][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 270.756839][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.767629][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.803024][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 270.820869][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.062715][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 271.083312][ T9] usbtmc 2-1:16.0: can't read capabilities [ 271.226345][ T6883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.257931][ T6883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.269109][ T9] usb 2-1: USB disconnect, device number 12 [ 271.295931][ T6883] bond0 (unregistering): Released all slaves [ 271.945612][ T54] Bluetooth: hci2: command tx timeout [ 272.201318][ T6883] hsr_slave_0: left promiscuous mode [ 272.223268][ T6883] hsr_slave_1: left promiscuous mode [ 272.242999][ T6883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.275197][ T6883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.313683][ T6883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.335197][ T6883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.349472][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 272.357223][ T5897] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 272.441429][ T6883] veth1_macvtap: left promiscuous mode [ 272.461451][ T6883] veth0_macvtap: left promiscuous mode [ 272.475995][ T6883] veth1_vlan: left promiscuous mode [ 272.502200][ T6883] veth0_vlan: left allmulticast mode [ 272.512916][ T6883] veth0_vlan: left promiscuous mode [ 272.525957][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 272.566165][ T5897] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.580992][ T9] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 272.597170][ T5897] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.615314][ T9] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 272.634669][ T5897] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 272.644350][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 272.673276][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.680841][ T5897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.684914][ T5897] usb 9-1: config 0 descriptor?? [ 272.709018][ T9] usb 7-1: config 1 has no interface number 0 [ 272.710271][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.724543][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.731738][ T9] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 272.731777][ T9] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 272.731823][ T9] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 272.731852][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.755795][ T9] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 272.791531][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.799510][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 272.813142][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 273.193537][ T5897] isku 0003:1E7D:319C.000E: unknown main item tag 0x0 [ 273.208578][ T5897] isku 0003:1E7D:319C.000E: unknown main item tag 0x0 [ 273.225260][ T5897] isku 0003:1E7D:319C.000E: unknown main item tag 0x0 [ 273.246835][ T5897] isku 0003:1E7D:319C.000E: unknown main item tag 0x0 [ 273.287945][ T5897] isku 0003:1E7D:319C.000E: unknown main item tag 0x0 [ 273.294909][ T5897] isku 0003:1E7D:319C.000E: item fetching failed at offset 5/7 [ 273.336249][ T5897] isku 0003:1E7D:319C.000E: parse failed [ 273.342167][ T5897] isku 0003:1E7D:319C.000E: probe with driver isku failed with error -22 [ 273.380879][ T9] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 273.411837][ T5897] usb 9-1: USB disconnect, device number 3 [ 273.575507][ T9] usb 7-1: USB disconnect, device number 5 [ 273.582887][ T9] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 274.025310][ T54] Bluetooth: hci2: command tx timeout [ 274.106888][ T9] net_ratelimit: 303 callbacks suppressed [ 274.106911][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.274114][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.355177][ T5844] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 274.570711][ T6883] team0 (unregistering): Port device team_slave_1 removed [ 274.579369][ T5844] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 274.589638][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.611742][ T5844] usb 2-1: Product: syz [ 274.616688][ T5844] usb 2-1: Manufacturer: syz [ 274.621433][ T5844] usb 2-1: SerialNumber: syz [ 274.634709][ T5844] usb 2-1: config 0 descriptor?? [ 274.718196][ T6883] team0 (unregistering): Port device team_slave_0 removed [ 274.905339][ T54] Bluetooth: hci4: command tx timeout [ 275.101050][ T5844] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 275.110147][ T5844] usb 2-1: Firmware version (0.0) predates our first public release. [ 275.118465][ T5844] usb 2-1: Please update to version 0.2 or newer [ 275.305676][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.384091][T10560] chnl_net:caif_netlink_parms(): no params data found [ 275.393962][T10686] warning: `syz.8.1548' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 275.487761][ T5844] usb 2-1: USB disconnect, device number 13 [ 275.869963][T10560] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.925781][T10560] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.933078][T10560] bridge_slave_0: entered allmulticast mode [ 275.956361][T10560] bridge_slave_0: entered promiscuous mode [ 275.970121][T10719] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.976545][T10560] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.984040][T10560] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.003042][T10560] bridge_slave_1: entered allmulticast mode [ 276.011767][T10560] bridge_slave_1: entered promiscuous mode [ 276.105392][ T54] Bluetooth: hci2: command tx timeout [ 276.302606][T10560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.338420][T10560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.349992][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.365075][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.392541][T10728] netlink: 'syz.1.1557': attribute type 2 has an invalid length. [ 276.415653][T10728] netlink: 'syz.1.1557': attribute type 1 has an invalid length. [ 276.579929][T10560] team0: Port device team_slave_0 added [ 276.639683][T10560] team0: Port device team_slave_1 added [ 276.720982][T10646] chnl_net:caif_netlink_parms(): no params data found [ 276.820575][ T6883] IPVS: stop unused estimator thread 0... [ 276.827124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.837152][T10560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.844490][T10560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.955792][T10560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.985786][ T54] Bluetooth: hci4: command tx timeout [ 277.007361][T10560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.014416][T10560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.061827][T10560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.145655][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.385953][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.406832][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.448651][T10646] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.465629][T10646] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.500139][T10646] bridge_slave_0: entered allmulticast mode [ 277.530238][T10646] bridge_slave_0: entered promiscuous mode [ 277.557975][T10560] hsr_slave_0: entered promiscuous mode [ 277.572954][T10560] hsr_slave_1: entered promiscuous mode [ 277.592703][T10560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.629678][T10560] Cannot create hsr debugfs directory [ 277.694127][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.717961][T10646] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.738496][T10646] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.764204][T10646] bridge_slave_1: entered allmulticast mode [ 277.788665][T10646] bridge_slave_1: entered promiscuous mode [ 277.947874][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.127585][T10795] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1573'. [ 278.185528][ T54] Bluetooth: hci2: command tx timeout [ 278.252490][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.287944][T10646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.434844][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.646962][T10646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.881838][T10646] team0: Port device team_slave_0 added [ 278.956765][T10646] team0: Port device team_slave_1 added [ 279.065777][ T54] Bluetooth: hci4: command tx timeout [ 279.113845][T10646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.146187][T10646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.186962][T10646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.234077][T10840] Attempt to restore checkpoint with obsolete wellknown handles [ 279.258325][T10646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.274042][T10646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.322813][T10646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.465496][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.623009][T10646] hsr_slave_0: entered promiscuous mode [ 279.636429][T10646] hsr_slave_1: entered promiscuous mode [ 279.665317][T10646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.672961][T10646] Cannot create hsr debugfs directory [ 279.700935][ T11] bridge_slave_1: left allmulticast mode [ 279.720624][ T11] bridge_slave_1: left promiscuous mode [ 279.735641][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.756587][ T11] bridge_slave_0: left allmulticast mode [ 279.762319][ T11] bridge_slave_0: left promiscuous mode [ 279.777249][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.188579][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.512425][ T9370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.027563][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.045811][ T1224] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 281.085615][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.128028][ T11] bond0 (unregistering): Released all slaves [ 281.149310][ T54] Bluetooth: hci4: command tx timeout [ 281.221117][ T1224] usb 7-1: Using ep0 maxpacket: 32 [ 281.262082][ T1224] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 281.282502][ T1224] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.304740][ T1224] usb 7-1: Product: syz [ 281.336569][ T1224] usb 7-1: Manufacturer: syz [ 281.341245][ T1224] usb 7-1: SerialNumber: syz [ 281.395596][ T1224] usb 7-1: config 0 descriptor?? [ 281.452022][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1591'. [ 281.469817][T10867] vlan2: entered allmulticast mode [ 281.476814][T10867] bridge0: entered allmulticast mode [ 281.483965][T10867] bridge0: port 3(vlan2) entered blocking state [ 281.502703][T10867] bridge0: port 3(vlan2) entered disabled state [ 281.513601][T10867] bridge0: left allmulticast mode [ 281.546267][ T9370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.964716][ T11] hsr_slave_0: left promiscuous mode [ 281.973693][ T11] hsr_slave_1: left promiscuous mode [ 281.993193][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.017171][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.038895][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.055137][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.068554][ T1224] peak_usb 7-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 282.079316][ T1224] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 282.086404][ T1224] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 282.142149][ T11] veth1_macvtap: left promiscuous mode [ 282.155679][ T11] veth0_macvtap: left promiscuous mode [ 282.171574][ T11] veth1_vlan: left promiscuous mode [ 282.181775][ T11] veth0_vlan: left promiscuous mode [ 282.585381][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.228301][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.292378][ T11] team0 (unregistering): Port device team_slave_1 removed [ 283.359773][ T11] team0 (unregistering): Port device team_slave_0 removed [ 283.625830][ T9370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.267179][T10958] batman_adv: batadv0: Adding interface: ipvlan1 [ 284.276423][T10958] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.304942][T10958] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 284.335376][ T1224] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22 [ 284.387253][ T1224] usb 7-1: USB disconnect, device number 6 [ 284.666241][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.120985][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.143572][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.162836][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.170922][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.208665][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 285.225580][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 285.465477][T10560] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 285.497778][T11024] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 285.524353][T10560] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 285.643608][T10560] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 285.659955][T10560] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 285.705954][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.818017][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.904734][T11038] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1617'. [ 285.929919][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.034267][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.148608][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.181147][T11016] chnl_net:caif_netlink_parms(): no params data found [ 286.275989][T10646] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 286.438439][T10646] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 286.494522][T10646] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 286.561204][T10646] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 286.585469][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.771044][T11016] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.805771][T11016] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.813886][T11016] bridge_slave_0: entered allmulticast mode [ 286.864820][T11016] bridge_slave_0: entered promiscuous mode [ 286.894552][T11016] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.912015][T11016] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.922168][T11016] bridge_slave_1: entered allmulticast mode [ 286.929491][T11016] bridge_slave_1: entered promiscuous mode [ 287.106719][T11016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.118892][T11016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.192482][T10560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.229361][ T11] bridge_slave_1: left allmulticast mode [ 287.235306][ T11] bridge_slave_1: left promiscuous mode [ 287.241092][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.281803][ T11] bridge_slave_0: left allmulticast mode [ 287.287773][ T11] bridge_slave_0: left promiscuous mode [ 287.293802][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.305494][ T54] Bluetooth: hci1: command tx timeout [ 287.882206][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.896879][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.909281][ T11] bond0 (unregistering): Released all slaves [ 287.954510][T10560] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.984849][T11076] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1626'. [ 287.996883][T11078] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1626'. [ 288.097558][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.104756][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.174462][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.181704][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.232461][T11016] team0: Port device team_slave_0 added [ 288.284751][T11016] team0: Port device team_slave_1 added [ 288.643141][T11016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.665636][T11016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.692687][T11016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.710772][T11016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.726878][T11016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.760283][T11016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.968696][T11016] hsr_slave_0: entered promiscuous mode [ 288.995829][T11016] hsr_slave_1: entered promiscuous mode [ 289.012031][T11016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.024337][T11016] Cannot create hsr debugfs directory [ 289.163445][ T11] hsr_slave_0: left promiscuous mode [ 289.176762][ T11] hsr_slave_1: left promiscuous mode [ 289.196090][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.203798][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.218213][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.226020][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.263024][ T11] veth1_macvtap: left promiscuous mode [ 289.274272][ T11] veth0_macvtap: left promiscuous mode [ 289.281616][ T11] veth1_vlan: left promiscuous mode [ 289.287368][ T11] veth0_vlan: left promiscuous mode [ 289.386227][ T54] Bluetooth: hci1: command tx timeout [ 289.872697][ T11] team0 (unregistering): Port device team_slave_1 removed [ 289.931356][ T11] team0 (unregistering): Port device team_slave_0 removed [ 290.368288][T11130] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 290.543856][T10646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.790646][T10646] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.954788][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.962046][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.033176][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.040413][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.274915][T10560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.495514][ T54] Bluetooth: hci1: command tx timeout [ 291.712135][T10646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.778376][T10646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.786256][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1652'. [ 291.834077][T11184] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1652'. [ 292.053725][T10560] veth0_vlan: entered promiscuous mode [ 292.080412][T11194] netlink: 'syz.6.1656': attribute type 1 has an invalid length. [ 292.166629][T10560] veth1_vlan: entered promiscuous mode [ 292.232837][T10646] veth0_vlan: entered promiscuous mode [ 292.379488][T10646] veth1_vlan: entered promiscuous mode [ 292.454805][T10560] veth0_macvtap: entered promiscuous mode [ 292.473859][T10560] veth1_macvtap: entered promiscuous mode [ 292.572425][T11016] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 292.586560][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.598797][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.610012][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.626019][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.636552][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.647624][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.660687][T10560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.669129][T11016] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 292.683606][T11016] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 292.718376][T10646] veth0_macvtap: entered promiscuous mode [ 292.739491][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.751952][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.765361][ T5897] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 292.771654][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.793472][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.804243][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.823242][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.835922][T10560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.843577][T11016] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 292.869673][T10646] veth1_macvtap: entered promiscuous mode [ 292.924592][T10560] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.925408][ T5897] usb 7-1: Using ep0 maxpacket: 16 [ 292.947409][T10560] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.970281][ T5897] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.013955][ T5897] usb 7-1: config 0 interface 0 has no altsetting 0 [ 293.021092][T10560] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.031841][ T5897] usb 7-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 293.041461][T10560] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.050799][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.066775][T10646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.081746][ T5897] usb 7-1: config 0 descriptor?? [ 293.090265][T10646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.104442][T10646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.117257][T10646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.127510][T10646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.138433][T10646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.150497][T10646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.161449][T10646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.174943][T10646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.189169][T11221] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 293.232536][T10646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.262067][T10646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.297814][T10646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.325083][T10646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.342725][T10646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.355095][T10646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.395105][T10646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.415132][T10646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.436391][T10646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.504114][T10646] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.513535][ T5897] kye 0003:0458:0138.000F: unknown main item tag 0x0 [ 293.521957][T10646] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.531740][ T5897] kye 0003:0458:0138.000F: unknown main item tag 0x0 [ 293.545732][ T5897] kye 0003:0458:0138.000F: unexpected long global item [ 293.546035][ T54] Bluetooth: hci1: command tx timeout [ 293.553185][ T5897] kye 0003:0458:0138.000F: parse failed [ 293.561730][T10646] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.583506][T10646] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.592871][ T5897] kye 0003:0458:0138.000F: probe with driver kye failed with error -22 [ 293.771821][ T5844] usb 7-1: USB disconnect, device number 7 [ 293.882025][T11016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.897264][ T6883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.920182][ T6883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.934040][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.955799][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.006660][T11016] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.042999][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.053522][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.060715][ T6883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.078443][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.119332][ T6883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.121943][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.134443][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.142261][ T6883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.347728][T11016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.539760][T11016] veth0_vlan: entered promiscuous mode [ 294.590080][T11016] veth1_vlan: entered promiscuous mode [ 294.705849][T11016] veth0_macvtap: entered promiscuous mode [ 294.781223][T11016] veth1_macvtap: entered promiscuous mode [ 294.841447][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.909534][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.953905][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.982682][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.021161][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.055112][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.094374][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.145223][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.165900][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 295.201385][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.221586][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.234504][T11016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.284591][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.314142][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.339835][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.366428][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.376540][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 295.409878][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.434892][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.455171][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.493463][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.503861][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.549043][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.563876][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 295.593664][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.621174][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.633355][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.648031][ T25] usb 1-1: config 0 descriptor?? [ 295.667427][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.694850][T11016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.758681][T11016] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.805360][T11016] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.845744][T11016] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.854743][T11016] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.078245][ T25] logitech-djreceiver 0003:046D:C531.0010: unknown main item tag 0x0 [ 296.087994][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.114225][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.115142][ T25] logitech-djreceiver 0003:046D:C531.0010: unknown main item tag 0x0 [ 296.176160][ T25] logitech-djreceiver 0003:046D:C531.0010: unknown main item tag 0x0 [ 296.226494][ T25] logitech-djreceiver 0003:046D:C531.0010: unknown main item tag 0x0 [ 296.243044][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.296834][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.303191][ T9370] usb 1-1: USB disconnect, device number 3 [ 296.557837][T11310] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1682'. [ 296.636568][T11316] team0: Port device virt_wifi0 added [ 298.031115][T11372] ipvlan2: entered promiscuous mode [ 298.706353][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1712'. [ 299.567975][T11445] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 299.574813][T11445] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 299.590096][T11445] vhci_hcd vhci_hcd.0: Device attached [ 299.602536][T11446] vhci_hcd: connection closed [ 299.628242][ T11] vhci_hcd: stop threads [ 299.654292][ T11] vhci_hcd: release socket [ 299.675603][ T11] vhci_hcd: disconnect device [ 300.243210][T11475] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1732'. [ 300.776913][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1738'. [ 301.059340][T11511] netlink: 'syz.8.1743': attribute type 14 has an invalid length. [ 301.099580][T11511] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1743'. [ 302.119326][ T70] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.331934][ T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 302.342189][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.12.0-rc6-syzkaller #0 [ 302.351183][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 302.361282][ T54] Workqueue: hci2 hci_rx_work [ 302.366040][ T54] Call Trace: [ 302.369362][ T54] [ 302.372327][ T54] dump_stack_lvl+0x241/0x360 [ 302.377059][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.382317][ T54] ? __pfx__printk+0x10/0x10 [ 302.386963][ T54] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 302.392304][ T54] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 302.397910][ T54] sysfs_create_dir_ns+0x2ce/0x3a0 [ 302.403078][ T54] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 302.408783][ T54] kobject_add_internal+0x435/0x8d0 [ 302.414045][ T54] kobject_add+0x152/0x220 [ 302.418516][ T54] ? do_raw_spin_unlock+0x13c/0x8b0 [ 302.423811][ T54] ? device_add+0x3e7/0xbf0 [ 302.428338][ T54] ? __pfx_kobject_add+0x10/0x10 [ 302.433650][ T54] ? _raw_spin_unlock+0x28/0x50 [ 302.438518][ T54] ? get_device_parent+0x165/0x410 [ 302.443651][ T54] device_add+0x4e5/0xbf0 [ 302.448039][ T54] hci_conn_add_sysfs+0xe8/0x200 [ 302.453026][ T54] le_conn_complete_evt+0xc9f/0x12e0 [ 302.458340][ T54] ? trace_contention_end+0x3c/0x120 [ 302.463641][ T54] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 302.469373][ T54] ? __mutex_unlock_slowpath+0x21d/0x750 [ 302.475028][ T54] ? __copy_skb_header+0x437/0x5b0 [ 302.480165][ T54] ? skb_pull_data+0x112/0x230 [ 302.484966][ T54] hci_le_enh_conn_complete_evt+0x185/0x420 [ 302.490893][ T54] hci_event_packet+0xa55/0x1540 [ 302.495889][ T54] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 302.501197][ T54] ? __pfx_hci_event_packet+0x10/0x10 [ 302.506593][ T54] ? tlv_data_is_valid+0x380/0x420 [ 302.511724][ T54] ? kcov_remote_start+0x97/0x7d0 [ 302.516770][ T54] hci_rx_work+0x3fe/0xd80 [ 302.521214][ T54] ? process_scheduled_works+0x976/0x1850 [ 302.526954][ T54] process_scheduled_works+0xa63/0x1850 [ 302.532549][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 302.538559][ T54] ? assign_work+0x364/0x3d0 [ 302.543171][ T54] worker_thread+0x870/0xd30 [ 302.547798][ T54] ? __kthread_parkme+0x169/0x1d0 [ 302.552850][ T54] ? __pfx_worker_thread+0x10/0x10 [ 302.557984][ T54] kthread+0x2f0/0x390 [ 302.562064][ T54] ? __pfx_worker_thread+0x10/0x10 [ 302.567198][ T54] ? __pfx_kthread+0x10/0x10 [ 302.571804][ T54] ret_from_fork+0x4b/0x80 [ 302.576241][ T54] ? __pfx_kthread+0x10/0x10 [ 302.580861][ T54] ret_from_fork_asm+0x1a/0x30 [ 302.585672][ T54] [ 302.610320][ T54] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 302.624625][ T54] Bluetooth: hci2: failed to register connection device [ 302.758916][ T70] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.012916][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.025978][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.034792][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.077097][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.100132][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 303.107418][ T70] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.118796][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.226325][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 303.378344][ T70] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.463226][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 303.468722][ T54] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 303.478765][ T54] Bluetooth: hci3: Injecting HCI hardware error event [ 303.498277][ T54] Bluetooth: hci3: hardware error 0x00 [ 303.564542][ T9] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 303.589160][ T9] usb 9-1: config 0 has no interface number 0 [ 303.624759][ T9] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.636489][ T9] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.646983][ T9] usb 9-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 303.656635][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.686316][ T9] usb 9-1: config 0 descriptor?? [ 303.761744][ T70] bridge_slave_1: left allmulticast mode [ 303.796328][ T70] bridge_slave_1: left promiscuous mode [ 303.828495][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.889275][ T70] bridge_slave_0: left allmulticast mode [ 303.905482][ T70] bridge_slave_0: left promiscuous mode [ 303.911392][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.065375][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 304.281895][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 304.331042][ T9] uclogic 0003:28BD:0094.0011: pen parameters not found [ 304.345950][ T9] uclogic 0003:28BD:0094.0011: interface is invalid, ignoring [ 304.355417][ T25] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.365950][ T25] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 304.377427][ T25] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 304.390955][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 304.397924][ T25] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 304.407248][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.441207][ T25] usb 3-1: config 0 descriptor?? [ 304.624691][ T9] usb 9-1: USB disconnect, device number 4 [ 304.701219][ T5854] Bluetooth: hci2: command tx timeout [ 304.877214][ T25] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0 [ 304.885275][ T25] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0 [ 304.893166][ T25] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0 [ 304.903285][ T25] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0 [ 304.922649][ T25] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0 [ 304.948600][ T25] hid-thrustmaster 0003:044F:B65D.0012: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 305.104407][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.156110][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.222162][ T70] bond0 (unregistering): Released all slaves [ 305.226076][ T5854] Bluetooth: hci0: command tx timeout [ 305.279926][T11580] chnl_net:caif_netlink_parms(): no params data found [ 305.287699][ T25] hid-thrustmaster 0003:044F:B65D.0012: setup data couldn't be sent [ 305.306914][ C1] hid-thrustmaster 0003:044F:B65D.0012: URB to get model id failed with error -71 [ 305.339133][ T25] usb 3-1: USB disconnect, device number 11 [ 305.546812][ T54] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 305.882230][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 305.955865][T11580] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.975298][T11580] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.986374][T11580] bridge_slave_0: entered allmulticast mode [ 306.012147][T11580] bridge_slave_0: entered promiscuous mode [ 306.069871][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 306.097001][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 306.115571][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 306.124702][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.139873][T11580] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.149344][T11580] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.161548][T11580] bridge_slave_1: entered allmulticast mode [ 306.194557][T11643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 306.207365][T11580] bridge_slave_1: entered promiscuous mode [ 306.245579][ T5897] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 306.273163][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 306.436029][ T5897] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 306.491892][ T5897] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 306.494790][ T70] hsr_slave_0: left promiscuous mode [ 306.544205][ T70] hsr_slave_1: left promiscuous mode [ 306.556604][ T5897] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 306.567784][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.587237][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.610144][ T5897] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 306.640251][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.674927][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.704979][ T5897] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 306.716003][ T5897] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 306.731453][ T5897] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 306.748622][ T5897] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 306.763482][ T5897] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 306.774309][ T5897] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 306.790527][ T70] batman_adv: batadv0: Removing interface: ipvlan1 [ 306.801720][ T9370] usb 1-1: USB disconnect, device number 4 [ 306.844230][ T5897] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 306.890708][ T5897] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 306.922812][ T70] veth1_macvtap: left promiscuous mode [ 306.976695][ T70] veth0_macvtap: left promiscuous mode [ 306.982364][ T70] veth1_vlan: left promiscuous mode [ 307.005867][ T5897] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 307.014975][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.015719][ T70] veth0_vlan: left promiscuous mode [ 307.030085][ T5897] usb 3-1: Product: syz [ 307.044803][ T5897] usb 3-1: Manufacturer: syz [ 307.055288][ T5897] usb 3-1: SerialNumber: syz [ 307.067719][ T29] audit: type=1800 audit(1730739282.188:30): pid=11688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1792" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 307.130653][ T5897] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 307.180307][ T1224] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 307.305643][ T54] Bluetooth: hci0: command tx timeout [ 307.442944][ T29] audit: type=1326 audit(1730739282.568:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.7.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b217e719 code=0x7ffc0000 [ 307.512683][ T29] audit: type=1326 audit(1730739282.598:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.7.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f70b217e719 code=0x7ffc0000 [ 307.577157][ T29] audit: type=1326 audit(1730739282.598:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.7.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b217e719 code=0x7ffc0000 [ 307.716970][ T29] audit: type=1326 audit(1730739282.598:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.7.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b217e719 code=0x7ffc0000 [ 307.739290][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.826449][ T29] audit: type=1326 audit(1730739282.608:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.7.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f70b217e719 code=0x7ffc0000 [ 307.917185][ T29] audit: type=1326 audit(1730739282.608:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.7.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b217e719 code=0x7ffc0000 [ 307.939531][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.989995][ T29] audit: type=1326 audit(1730739282.608:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.7.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b217e719 code=0x7ffc0000 [ 308.113500][ T29] audit: type=1326 audit(1730739282.618:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.7.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f70b217e719 code=0x7ffc0000 [ 308.174581][ T29] audit: type=1326 audit(1730739282.618:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.7.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b217e719 code=0x7ffc0000 [ 308.226911][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.267462][ T1224] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 308.274684][ T1224] ath9k_htc: Failed to initialize the device [ 308.364981][ T3381] usb 3-1: USB disconnect, device number 12 [ 308.393586][ T3381] usb 3-1: ath9k_htc: USB layer deinitialized [ 309.197031][ T70] team0 (unregistering): Port device team_slave_1 removed [ 309.335963][ T70] team0 (unregistering): Port device team_slave_0 removed [ 309.385294][ T54] Bluetooth: hci0: command tx timeout [ 310.083971][T11580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.100266][T11711] netlink: 'syz.8.1798': attribute type 5 has an invalid length. [ 310.150355][T11580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.437409][T11580] team0: Port device team_slave_0 added [ 310.477118][T11580] team0: Port device team_slave_1 added [ 310.524601][T11766] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 310.535173][ T9370] IPVS: starting estimator thread 0... [ 310.625242][T11769] IPVS: using max 18 ests per chain, 43200 per kthread [ 310.884326][T11580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.955301][T11580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.042209][T11580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.093919][T11580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.126737][T11580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.259874][T11580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.470035][ T54] Bluetooth: hci0: command tx timeout [ 311.919763][T11580] hsr_slave_0: entered promiscuous mode [ 311.941512][T11580] hsr_slave_1: entered promiscuous mode [ 312.245155][ T3381] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 312.380871][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 312.435236][ T3381] usb 3-1: Using ep0 maxpacket: 8 [ 312.442247][ T3381] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 312.481421][ T3381] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 312.491812][ T3381] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 312.501960][ T3381] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.515210][ T3381] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 312.525209][ T3381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.540883][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 312.620498][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 312.644627][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.687803][ T9] usb 1-1: config 0 descriptor?? [ 312.708959][ T9] gspca_main: sq930x-2.14.0 probing 041e:403c [ 312.749867][ T3381] usb 3-1: GET_CAPABILITIES returned 0 [ 312.765129][ T3381] usbtmc 3-1:16.0: can't read capabilities [ 312.952853][ T3381] usb 3-1: USB disconnect, device number 13 [ 313.058806][T11580] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 313.105741][T11580] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 313.152245][T11580] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 313.227247][T11580] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 313.479998][T11580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.544766][T11580] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.565525][ T9] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 313.584855][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.592107][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.627466][ T9] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 313.668630][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.675855][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.696893][ T9] usb 1-1: USB disconnect, device number 5 [ 313.848115][T11867] kvm_intel: kvm [11866]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xda [ 313.953408][T11580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.198240][T11580] veth0_vlan: entered promiscuous mode [ 314.351740][T11580] veth1_vlan: entered promiscuous mode [ 314.376298][T11580] veth0_macvtap: entered promiscuous mode [ 314.385777][T11580] veth1_macvtap: entered promiscuous mode [ 314.402335][T11580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.412915][T11580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.422933][T11580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.433637][T11580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.443720][T11580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.454265][T11580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.457774][ T54] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 314.464645][T11580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.474062][ T54] Bluetooth: hci2: Injecting HCI hardware error event [ 314.484463][T11580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.484492][T11580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.484513][T11580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.486273][T11580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.495589][ T54] Bluetooth: hci2: hardware error 0x00 [ 314.504404][T11580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.546410][T11580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.556908][T11580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.568227][T11580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.578656][T11580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.589396][T11580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.599370][T11580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.609916][T11580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.619860][T11580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.630450][T11580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.641798][T11580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.659034][T11580] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.670916][T11580] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.699945][T11580] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.775151][T11580] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.075153][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.104803][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.112463][ T5844] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 315.174043][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.183121][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.289804][ T5844] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 315.315659][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.339777][ T5844] usb 1-1: Product: syz [ 315.354449][ T5844] usb 1-1: Manufacturer: syz [ 315.376072][ T5844] usb 1-1: SerialNumber: syz [ 315.396097][ T5844] usb 1-1: config 0 descriptor?? [ 315.438809][ T5844] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 315.942362][T11937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1860'. [ 316.249980][ T5844] usb 1-1: USB disconnect, device number 6 [ 316.530529][T11958] tap0: tun_chr_ioctl cmd 1074025677 [ 316.536524][T11958] tap0: linktype set to 804 [ 316.554001][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1864'. [ 316.606349][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1864'. [ 316.675894][ T1224] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 316.724432][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1868'. [ 316.807892][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1868'. [ 316.985281][ T54] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 317.423748][ T5900] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 318.270898][T12032] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1891'. [ 318.725236][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1899'. [ 319.426051][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1909'. [ 319.519145][T12088] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1911'. [ 319.575220][ T5900] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 319.822863][ T5900] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.847039][ T5900] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.858932][ T5900] usb 9-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 319.872238][ T5900] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.903545][ T5900] usb 9-1: config 0 descriptor?? [ 320.125433][ T5900] usbhid 9-1:0.0: can't add hid device: -71 [ 320.131516][ T5900] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 320.161207][ T5900] usb 9-1: USB disconnect, device number 5 [ 320.223671][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1915'. [ 320.539169][ T1224] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 321.271718][T12165] wireguard: wg0: Could not create IPv4 socket [ 321.818011][T12189] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 322.427753][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 322.555769][T12213] __nla_validate_parse: 1 callbacks suppressed [ 322.555792][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1951'. [ 322.635249][T12213] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1951'. [ 322.655910][T12219] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1953'. [ 322.947127][T12223] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1955'. [ 322.985908][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1955'. [ 323.096393][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.102780][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.683295][T12255] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 323.691240][T12255] IPv6: NLM_F_CREATE should be set when creating new route [ 324.987359][ T5901] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 325.386669][T12320] vlan2: entered promiscuous mode [ 325.391826][T12320] vlan2: entered allmulticast mode [ 325.440034][T12320] syz_tun: entered allmulticast mode [ 325.462313][T12320] syz_tun: entered promiscuous mode [ 325.572551][T12320] team0: Port device vlan2 added [ 326.015282][ T5900] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 326.189769][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.218554][ T5900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.245419][ T5900] usb 3-1: config 0 has no interfaces? [ 326.250985][ T5900] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 326.320528][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.498825][ T5900] usb 3-1: config 0 descriptor?? [ 326.525697][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 326.536757][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 326.545954][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 326.556091][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 326.563795][ T5854] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 326.571583][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 326.580315][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.713608][ T3381] usb 3-1: USB disconnect, device number 14 [ 326.729037][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.969973][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.426226][ T11] bridge_slave_1: left allmulticast mode [ 327.431967][ T11] bridge_slave_1: left promiscuous mode [ 327.445637][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.517870][ T11] bridge_slave_0: left allmulticast mode [ 327.523614][ T11] bridge_slave_0: left promiscuous mode [ 327.570194][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.618760][T12386] netlink: 'syz.4.2001': attribute type 16 has an invalid length. [ 327.675317][T12386] netlink: 'syz.4.2001': attribute type 3 has an invalid length. [ 327.716321][T12386] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.2001'. [ 327.886901][ T9370] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 328.056889][ T9370] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.088198][ T9370] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.109989][ T9370] usb 9-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 328.137637][ T9370] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.159339][ T9370] usb 9-1: config 0 descriptor?? [ 328.286570][ T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 328.459079][ T25] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 328.470685][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.486068][ T25] usb 3-1: config 0 descriptor?? [ 328.495529][ T25] cp210x 3-1:0.0: cp210x converter detected [ 328.577174][ T9370] wacom 0003:056A:00E5.0013: unbalanced collection at end of report description [ 328.595844][ T9370] wacom 0003:056A:00E5.0013: parse failed [ 328.604297][ T9370] wacom 0003:056A:00E5.0013: probe with driver wacom failed with error -22 [ 328.678126][ T5854] Bluetooth: hci4: command tx timeout [ 328.779938][ T9370] usb 9-1: USB disconnect, device number 6 [ 328.920059][ T25] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 328.944190][ T25] usb 3-1: cp210x converter now attached to ttyUSB0 [ 329.033557][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.052621][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.067326][ T11] bond0 (unregistering): Released all slaves [ 329.142673][ T3381] usb 3-1: USB disconnect, device number 15 [ 329.155112][ T3381] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 329.196120][ T3381] cp210x 3-1:0.0: device disconnected [ 329.231219][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 329.231239][ T29] audit: type=1326 audit(1730739304.358:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.7.2008" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70b217e719 code=0x0 [ 329.263824][T12355] chnl_net:caif_netlink_parms(): no params data found [ 329.847107][T12355] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.901439][T12355] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.921548][T12355] bridge_slave_0: entered allmulticast mode [ 329.940127][T12355] bridge_slave_0: entered promiscuous mode [ 329.962344][T12355] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.974588][T12355] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.992009][T12355] bridge_slave_1: entered allmulticast mode [ 330.030711][T12355] bridge_slave_1: entered promiscuous mode [ 330.085707][ T5900] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 330.170595][ T11] hsr_slave_0: left promiscuous mode [ 330.177342][ T11] hsr_slave_1: left promiscuous mode [ 330.197671][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.224498][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.238717][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.246891][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.255788][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 330.263049][ T5900] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 330.275801][ T5900] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 330.290494][ T11] veth1_macvtap: left promiscuous mode [ 330.296502][ T11] veth0_macvtap: left promiscuous mode [ 330.298195][ T5900] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 330.302160][ T11] veth1_vlan: left promiscuous mode [ 330.318471][ T11] veth0_vlan: left promiscuous mode [ 330.329733][ T5900] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.352930][ T5900] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 330.362789][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.591009][ T5900] usb 3-1: GET_CAPABILITIES returned 0 [ 330.598864][ T5900] usbtmc 3-1:16.0: can't read capabilities [ 330.756023][ T5854] Bluetooth: hci4: command tx timeout [ 330.828999][ T9370] usb 3-1: USB disconnect, device number 16 [ 331.206294][ T11] team0 (unregistering): Port device team_slave_1 removed [ 331.271514][ T11] team0 (unregistering): Port device team_slave_0 removed [ 332.099541][T12355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.157859][T12355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.374605][T12355] team0: Port device team_slave_0 added [ 332.671882][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 332.825910][ T25] usb 5-1: too many configurations: 228, using maximum allowed: 8 [ 332.836187][ T25] usb 5-1: config 0 has no interfaces? [ 332.843058][ T25] usb 5-1: config 0 has no interfaces? [ 332.845091][ T5854] Bluetooth: hci4: command tx timeout [ 332.851513][ T25] usb 5-1: config 0 has no interfaces? [ 332.872573][ T25] usb 5-1: config 0 has no interfaces? [ 332.886336][ T25] usb 5-1: config 0 has no interfaces? [ 332.894665][ T25] usb 5-1: config 0 has no interfaces? [ 332.907773][ T25] usb 5-1: config 0 has no interfaces? [ 332.924868][ T25] usb 5-1: config 0 has no interfaces? [ 332.937467][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 332.994584][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.011107][T12355] team0: Port device team_slave_1 added [ 333.047758][ T25] usb 5-1: config 0 descriptor?? [ 333.227525][T12355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.247893][T12355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.273833][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.301161][ T5900] usb 5-1: USB disconnect, device number 10 [ 333.302329][T12355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.394233][T12355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.444582][T12355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.536216][T12355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.753849][ T11] IPVS: stop unused estimator thread 0... [ 334.195309][T12355] hsr_slave_0: entered promiscuous mode [ 334.243817][T12355] hsr_slave_1: entered promiscuous mode [ 334.289419][T12355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.311123][T12355] Cannot create hsr debugfs directory [ 334.945176][ T5854] Bluetooth: hci4: command tx timeout [ 334.983770][T12355] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.071353][T12564] gretap0: entered promiscuous mode [ 335.106560][T12564] erspan0: entered promiscuous mode [ 335.328257][T12355] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.539212][T12355] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.675135][ T5902] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 335.871605][ T5902] usb 3-1: config 0 has no interfaces? [ 335.888915][T12355] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.976926][ T5902] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=74.72 [ 335.986147][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.994228][ T5902] usb 3-1: Product: syz [ 335.998657][ T5902] usb 3-1: Manufacturer: syz [ 336.003297][ T5902] usb 3-1: SerialNumber: syz [ 336.021072][ T5902] usb 3-1: config 0 descriptor?? [ 336.274403][T12511] usb 3-1: USB disconnect, device number 17 [ 336.286137][T12355] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 336.329022][T12355] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 336.344219][T12355] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 336.429345][T12355] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 336.675368][T12355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.722073][T12355] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.741551][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.748781][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.811790][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.819016][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.919941][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2078'. [ 337.008109][T12355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.043411][T12355] veth0_vlan: entered promiscuous mode [ 337.056046][T12355] veth1_vlan: entered promiscuous mode [ 337.112552][T12355] veth0_macvtap: entered promiscuous mode [ 337.123585][T12355] veth1_macvtap: entered promiscuous mode [ 337.153441][T12355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.165567][T12355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.185465][T12355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.254561][T12355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.279477][T12355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.305684][T12355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.326652][T12355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.337343][T12355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.347761][T12355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.358351][T12355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.369813][T12355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.676476][T12655] ip6gretap1: entered promiscuous mode [ 337.694680][T12655] ip6gretap1: entered allmulticast mode [ 337.746635][T12355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.786661][T12355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.855162][T12355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.885166][T12355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.923660][T12355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.975138][T12355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.031258][T12355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.075100][T12355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.105033][T12355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.139633][T12355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.178322][T12355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.208625][T12355] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.235972][T12355] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.244791][T12355] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.279301][T12355] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.540350][ T52] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.617862][T12685] netlink: 'syz.4.2097': attribute type 11 has an invalid length. [ 338.687456][T12682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2096'. [ 338.948142][ T52] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.980292][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.996065][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.006452][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.032304][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.055173][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 339.066143][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.264107][ T52] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.492401][ T52] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.601298][T12718] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 339.692514][ T6883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.711600][ T6883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.751367][T12728] netlink: 'syz.2.2108': attribute type 2 has an invalid length. [ 339.867057][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.877558][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.237215][ T52] bridge_slave_1: left allmulticast mode [ 340.262741][ T52] bridge_slave_1: left promiscuous mode [ 340.287271][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.318691][ T52] bridge_slave_0: left allmulticast mode [ 340.346219][ T52] bridge_slave_0: left promiscuous mode [ 340.352041][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.535750][ T5901] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 340.718287][ T5901] usb 3-1: unable to get BOS descriptor or descriptor too short [ 340.737647][ T5901] usb 3-1: not running at top speed; connect to a high speed hub [ 340.747861][ T5901] usb 3-1: config 106 has an invalid interface number: 8 but max is 0 [ 340.765414][ T5901] usb 3-1: config 106 has no interface number 0 [ 340.775134][ T5901] usb 3-1: config 106 interface 8 has no altsetting 0 [ 340.787220][ T5901] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 340.805101][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.821147][ T5901] usb 3-1: Product: syz [ 340.826510][ T5901] usb 3-1: Manufacturer: syz [ 340.831160][ T5901] usb 3-1: SerialNumber: syz [ 341.050815][ T5901] kalmia 3-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 341.074439][ T5901] kalmia 3-1:106.8: probe with driver kalmia failed with error -22 [ 341.091091][ T5901] usb 3-1: USB disconnect, device number 18 [ 341.133677][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.145323][ T5854] Bluetooth: hci2: command tx timeout [ 341.162853][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.176732][ T52] bond0 (unregistering): Released all slaves [ 341.619848][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2120'. [ 341.731493][T12705] chnl_net:caif_netlink_parms(): no params data found [ 342.302283][T12705] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.314826][T12705] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.343701][T12705] bridge_slave_0: entered allmulticast mode [ 342.360854][T12705] bridge_slave_0: entered promiscuous mode [ 342.477393][ T5902] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 342.507463][ T52] hsr_slave_0: left promiscuous mode [ 342.513445][ T52] hsr_slave_1: left promiscuous mode [ 342.548124][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.555961][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.575493][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.584207][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.623795][ T52] veth1_macvtap: left promiscuous mode [ 342.637413][ T52] veth0_macvtap: left promiscuous mode [ 342.645179][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 342.672155][ T5902] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 342.675894][ T52] veth1_vlan: left promiscuous mode [ 342.699201][ T5902] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 342.708482][ T52] veth0_vlan: left promiscuous mode [ 342.729472][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 342.744854][ T5902] usb 3-1: Product: syz [ 342.761343][ T5902] usb 3-1: Manufacturer: syz [ 342.770310][ T5902] usb 3-1: SerialNumber: syz [ 342.827722][ T5902] usb 3-1: config 0 descriptor?? [ 342.833623][T12814] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 343.080028][ T9370] usb 3-1: USB disconnect, device number 19 [ 343.225819][ T5854] Bluetooth: hci2: command tx timeout [ 344.196109][ T52] team0 (unregistering): Port device team_slave_1 removed [ 344.278246][ T52] team0 (unregistering): Port device team_slave_0 removed [ 344.770834][T12705] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.791106][T12705] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.803903][T12705] bridge_slave_1: entered allmulticast mode [ 344.818117][T12705] bridge_slave_1: entered promiscuous mode [ 344.879473][T12857] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2147'. [ 345.151909][T12705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.228106][T12705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.306206][ T5854] Bluetooth: hci2: command tx timeout [ 345.337676][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2156'. [ 345.533082][T12705] team0: Port device team_slave_0 added [ 345.585895][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2160'. [ 345.616687][T12893] bridge_slave_0: default FDB implementation only supports local addresses [ 345.656926][T12705] team0: Port device team_slave_1 added [ 346.107656][T12705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.133187][T12705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.235283][T12705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.321074][T12705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.350855][T12705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.445782][T12705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.771261][T12705] hsr_slave_0: entered promiscuous mode [ 346.801287][T12705] hsr_slave_1: entered promiscuous mode [ 346.852773][T12705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.883982][ T5901] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 346.895722][T12705] Cannot create hsr debugfs directory [ 346.985130][ T1224] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 347.115348][ T5901] usb 10-1: Using ep0 maxpacket: 8 [ 347.124511][ T5901] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 347.142892][ T5901] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.151382][ T1224] usb 5-1: Using ep0 maxpacket: 16 [ 347.159020][ T1224] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.183844][ T5901] usb 10-1: Product: syz [ 347.190900][ T1224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 347.205683][ T5901] usb 10-1: Manufacturer: syz [ 347.210428][ T5901] usb 10-1: SerialNumber: syz [ 347.239851][ T1224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 347.251657][ T5901] usb 10-1: config 0 descriptor?? [ 347.273388][ T5901] gspca_main: se401-2.14.0 probing 047d:5003 [ 347.287708][ T1224] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 347.329767][ T1224] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.364946][ T1224] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 347.374592][ T1224] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 347.385488][ T5854] Bluetooth: hci2: command tx timeout [ 347.402193][ T1224] usb 5-1: Manufacturer: syz [ 347.423287][ T1224] usb 5-1: config 0 descriptor?? [ 347.845122][ T1224] rc_core: IR keymap rc-hauppauge not found [ 347.851116][ T1224] Registered IR keymap rc-empty [ 347.860104][ T1224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 347.862416][T12705] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 347.917442][ T1224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 347.917459][T12705] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 347.958668][T12705] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 347.990844][T12705] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 348.006970][ T1224] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 348.056449][ T1224] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input26 [ 348.068883][ T5901] usb 10-1: reset high-speed USB device number 4 using dummy_hcd [ 348.105822][ T5901] usb 10-1: device reset changed ep0 maxpacket size! [ 348.137416][ T5901] gspca_se401: read req failed req 0x06 error -19 [ 348.156923][ T1224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 348.165139][ T5901] usb 10-1: USB disconnect, device number 4 [ 348.237651][ T1224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 348.255762][ T1224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 348.285190][ T1224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 348.306802][ T1224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 348.334009][T12705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.341198][ T1224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 348.350091][ T5901] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 348.385253][ T1224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 348.415343][ T1224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 348.449769][T12705] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.466069][ T1224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 348.487529][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.494660][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.516336][ T1224] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 348.528705][ T5901] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.578792][ T1224] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 348.588355][ T5901] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.599609][ T1224] mceusb 5-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 348.609152][ T5901] usb 10-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 348.638480][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.645766][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.656152][ T1224] usb 5-1: USB disconnect, device number 11 [ 348.666541][ T5901] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.748224][T12705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 348.759089][T12705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.791543][ T5901] usb 10-1: config 0 descriptor?? [ 348.793350][T12705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.832154][T12705] veth0_vlan: entered promiscuous mode [ 348.846284][T12705] veth1_vlan: entered promiscuous mode [ 348.943004][T12705] veth0_macvtap: entered promiscuous mode [ 348.952797][T12705] veth1_macvtap: entered promiscuous mode [ 348.971732][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.982617][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.993722][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.004726][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.014894][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.025634][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.035690][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.046270][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.056260][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.066813][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.069422][ T5901] usbhid 10-1:0.0: can't add hid device: -71 [ 349.079268][T12705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.094751][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.105380][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.109671][ T5901] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 349.115951][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.115977][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.115998][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.116016][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.116035][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.116051][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.116071][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.116087][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.117555][T12705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.197930][ T5901] usb 10-1: USB disconnect, device number 5 [ 349.267460][T12705] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.285256][T12705] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.323842][T12705] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.355231][T12705] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.491697][T12985] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 349.583750][ T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.616606][ T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.724211][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.747600][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.443240][T13019] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.489228][T13026] pimreg4: entered allmulticast mode [ 350.558388][T13016] pimreg4: left allmulticast mode [ 350.796562][T13033] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2197'. [ 350.855163][ T1224] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 350.941071][T11580] syz_tun: left allmulticast mode [ 350.960917][T11580] syz_tun: left promiscuous mode [ 351.124573][T11580] team0: Port device vlan2 removed [ 351.189763][ T1224] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 351.227805][ T1224] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 351.251474][T13033] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2197'. [ 351.251757][ T1224] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 351.270404][ T1224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.329201][T13029] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 351.342837][ T1224] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.364756][ T29] audit: type=1326 audit(1730739326.488:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.9.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003017e719 code=0x7ffc0000 [ 351.387067][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.471726][ T29] audit: type=1326 audit(1730739326.488:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.9.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003017e719 code=0x7ffc0000 [ 351.593435][ T29] audit: type=1326 audit(1730739326.498:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.9.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f003017e719 code=0x7ffc0000 [ 351.663683][ T5844] usb 3-1: USB disconnect, device number 20 [ 351.682510][ T29] audit: type=1326 audit(1730739326.498:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.9.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003017e719 code=0x7ffc0000 [ 351.704835][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.727926][ T29] audit: type=1326 audit(1730739326.498:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.9.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003017e719 code=0x7ffc0000 [ 351.845180][ T1224] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 351.870764][ T987] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.061437][ T1224] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 352.095045][ T1224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.103242][ T1224] usb 4-1: Product: syz [ 352.121958][ T1224] usb 4-1: Manufacturer: syz [ 352.148210][ T1224] usb 4-1: SerialNumber: syz [ 352.178737][ T1224] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 352.206289][ T5900] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 352.258194][ T987] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.327529][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 352.338930][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 352.369595][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 352.374307][T13069] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 352.393512][T13069] macsec1: entered promiscuous mode [ 352.399357][T13069] macsec1: entered allmulticast mode [ 352.405975][T13069] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 352.413658][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 352.422885][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 352.431829][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 352.641625][ T987] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.761511][T13079] netlink: 'syz.2.2213': attribute type 1 has an invalid length. [ 352.805261][T13079] netlink: 'syz.2.2213': attribute type 2 has an invalid length. [ 352.825875][T13079] netlink: 16074 bytes leftover after parsing attributes in process `syz.2.2213'. [ 352.927814][ T5902] usb 4-1: USB disconnect, device number 9 [ 352.961703][ T987] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.306702][ T5900] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 353.313937][ T5900] ath9k_htc: Failed to initialize the device [ 353.323820][ T5902] usb 4-1: ath9k_htc: USB layer deinitialized [ 353.734583][ T987] bridge_slave_1: left allmulticast mode [ 353.740416][ T987] bridge_slave_1: left promiscuous mode [ 353.746227][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.817521][ T987] bridge_slave_0: left allmulticast mode [ 353.823297][ T987] bridge_slave_0: left promiscuous mode [ 353.829784][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.965403][ T1224] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 354.132744][ T1224] usb 10-1: Using ep0 maxpacket: 8 [ 354.175232][ T1224] usb 10-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 354.184473][ T1224] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.227387][ T1224] usb 10-1: Product: syz [ 354.231822][ T1224] usb 10-1: Manufacturer: syz [ 354.243451][ T1224] usb 10-1: SerialNumber: syz [ 354.245256][ T987] erspan0 (unregistering): left promiscuous mode [ 354.253464][ T1224] usb 10-1: config 0 descriptor?? [ 354.299482][ T1224] gspca_main: sq930x-2.14.0 probing 2770:930c [ 354.307454][ T987] gretap0 (unregistering): left promiscuous mode [ 354.507682][ T5854] Bluetooth: hci0: command tx timeout [ 354.885916][ T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.911465][ T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.967255][ T987] bond0 (unregistering): Released all slaves [ 355.118978][T13073] chnl_net:caif_netlink_parms(): no params data found [ 355.128500][ T1224] gspca_sq930x: ucbus_write failed -71 [ 355.134327][ T1224] sq930x 10-1:0.0: probe with driver sq930x failed with error -71 [ 355.179460][ T1224] usb 10-1: USB disconnect, device number 6 [ 356.005915][T13139] syz.8.2234 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 356.077327][T13073] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.097048][T13073] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.126475][T13073] bridge_slave_0: entered allmulticast mode [ 356.149952][T13073] bridge_slave_0: entered promiscuous mode [ 356.180533][T13169] netlink: 'syz.3.2242': attribute type 4 has an invalid length. [ 356.512903][T13073] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.522985][T13073] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.545336][T13073] bridge_slave_1: entered allmulticast mode [ 356.562932][T13073] bridge_slave_1: entered promiscuous mode [ 356.585905][ T5854] Bluetooth: hci0: command tx timeout [ 356.624825][T13190] tun0: tun_chr_ioctl cmd 2147767519 [ 356.635448][ T1224] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 356.731469][ T987] hsr_slave_0: left promiscuous mode [ 356.766553][ T987] hsr_slave_1: left promiscuous mode [ 356.772772][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.792667][ T987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.843550][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.847905][ T1224] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 356.878639][ T1224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.882555][ T987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.906210][ T1224] usb 3-1: Product: syz [ 356.926914][ T1224] usb 3-1: Manufacturer: syz [ 356.931587][ T1224] usb 3-1: SerialNumber: syz [ 356.960810][ T1224] usb 3-1: config 0 descriptor?? [ 356.966453][ T987] veth1_macvtap: left promiscuous mode [ 356.972036][ T987] veth0_macvtap: left promiscuous mode [ 357.005395][ T987] veth1_vlan: left promiscuous mode [ 357.010767][ T987] veth0_vlan: left promiscuous mode [ 357.135246][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 357.221413][ T1224] usb 3-1: USB disconnect, device number 21 [ 357.325016][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 357.355992][ T8] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 357.395883][ T8] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 357.455717][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.488154][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.497634][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.506279][ T8] usb 4-1: Product: syz [ 357.510596][ T8] usb 4-1: Manufacturer: syz [ 357.515326][ T8] usb 4-1: SerialNumber: syz [ 357.822392][ T8] usb 4-1: 0:2 : does not exist [ 357.947813][ T8] usb 4-1: USB disconnect, device number 10 [ 358.174648][T13208] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2257'. [ 358.278624][ T5865] udevd[5865]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.621900][ T987] team0 (unregistering): Port device team_slave_1 removed [ 358.665436][ T5854] Bluetooth: hci0: command tx timeout [ 358.673717][ T987] team0 (unregistering): Port device team_slave_0 removed [ 358.965522][ T46] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 359.125282][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 359.144754][ T46] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 359.159874][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.167559][T13073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.177021][ T46] usb 4-1: Product: syz [ 359.177046][ T46] usb 4-1: Manufacturer: syz [ 359.177065][ T46] usb 4-1: SerialNumber: syz [ 359.192780][ T46] usb 4-1: config 0 descriptor?? [ 359.221959][T13073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.353723][ T29] audit: type=1326 audit(1730739334.478:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.9.2261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f003017e719 code=0x0 [ 359.426060][ T46] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 359.441245][ T46] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 359.461448][T13073] team0: Port device team_slave_0 added [ 359.475696][ T46] usb 4-1: USB disconnect, device number 11 [ 359.507924][T13073] team0: Port device team_slave_1 added [ 359.602302][T13073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.615964][T13073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.641937][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.695593][T13073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.710101][T13073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.718579][T13073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.744591][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.753398][T13073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.917707][T13073] hsr_slave_0: entered promiscuous mode [ 359.945495][T13073] hsr_slave_1: entered promiscuous mode [ 360.284335][T13232] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2268'. [ 360.403428][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 360.414955][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 360.427494][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.450402][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 360.458628][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 360.467294][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 360.473047][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.746525][ T5854] Bluetooth: hci0: command tx timeout [ 360.927950][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.036492][T13255] tipc: Started in network mode [ 361.041883][T13255] tipc: Node identity ac14140f, cluster identity 4711 [ 361.066893][T13255] tipc: New replicast peer: 255.255.255.255 [ 361.084873][T13255] tipc: Enabled bearer , priority 10 [ 361.086933][ T29] audit: type=1326 audit(1730739336.208:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13260 comm="syz.9.2275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f003017e719 code=0x0 [ 361.161169][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.297289][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.614530][ T29] audit: type=1326 audit(1730739336.728:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13272 comm="syz.8.2277" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69a857e719 code=0x0 [ 361.887375][T13284] netlink: 'syz.3.2278': attribute type 2 has an invalid length. [ 362.044893][ T12] bridge_slave_1: left allmulticast mode [ 362.051090][ T12] bridge_slave_1: left promiscuous mode [ 362.058264][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.071867][ T12] bridge_slave_0: left allmulticast mode [ 362.079328][ T12] bridge_slave_0: left promiscuous mode [ 362.085311][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.215886][ T5844] tipc: Node number set to 2886997007 [ 362.595635][ T5854] Bluetooth: hci1: command tx timeout [ 362.879188][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.891954][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.914843][ T12] bond0 (unregistering): Released all slaves [ 363.638914][T13317] input: syz1 as /devices/virtual/input/input27 [ 363.739319][T13246] chnl_net:caif_netlink_parms(): no params data found [ 363.933628][ T12] hsr_slave_0: left promiscuous mode [ 363.944055][ T12] hsr_slave_1: left promiscuous mode [ 363.975166][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.985473][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.005962][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.013448][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.063433][ T12] veth1_macvtap: left promiscuous mode [ 364.075170][ T12] veth0_macvtap: left promiscuous mode [ 364.080829][ T12] veth1_vlan: left promiscuous mode [ 364.095440][ T12] veth0_vlan: left promiscuous mode [ 364.675507][ T5854] Bluetooth: hci1: command tx timeout [ 365.187829][ T12] team0 (unregistering): Port device team_slave_1 removed [ 365.272453][ T12] team0 (unregistering): Port device team_slave_0 removed [ 366.749490][ T5854] Bluetooth: hci1: command tx timeout [ 368.829037][ T5854] Bluetooth: hci1: command tx timeout [ 394.124988][ C0] sched: DL replenish lagged too much [ 395.476477][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 395.592976][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.177654][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.195996][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 467.855082][ T5153] Bluetooth: hci4: command tx timeout [ 467.869457][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 496.188207][ T5859] Bluetooth: hci0: command 0x0406 tx timeout [ 496.203466][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 515.604021][ T30] INFO: task kworker/u8:1:12 blocked for more than 146 seconds. [ 515.611843][ T30] Not tainted 6.12.0-rc6-syzkaller #0 [ 515.655449][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 515.661963][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 515.669400][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.682813][ T30] task:kworker/u8:1 state:D stack:20480 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 515.693155][ T30] Workqueue: netns cleanup_net [ 515.698191][ T30] Call Trace: [ 515.701640][ T30] [ 515.704611][ T30] __schedule+0x184f/0x4c30 [ 515.709560][ T30] ? __pfx___schedule+0x10/0x10 [ 515.714466][ T30] ? __pfx_lock_release+0x10/0x10 [ 515.719824][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 515.725426][ T30] ? kthread_data+0x52/0xd0 [ 515.730068][ T30] ? schedule+0x90/0x320 [ 515.734348][ T30] ? wq_worker_sleeping+0x66/0x240 [ 515.739701][ T30] ? schedule+0x90/0x320 [ 515.743983][ T30] schedule+0x14b/0x320 [ 515.748265][ T30] schedule_preempt_disabled+0x13/0x30 [ 515.753763][ T30] __mutex_lock+0x6a7/0xd70 [ 515.758384][ T30] ? __mutex_lock+0x52a/0xd70 [ 515.763110][ T30] ? wg_destruct+0x25/0x2e0 [ 515.767739][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 515.772816][ T30] ? __pfx_free_percpu+0x10/0x10 [ 515.777881][ T30] ? kobject_put+0x272/0x480 [ 515.783099][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 515.788256][ T30] wg_destruct+0x25/0x2e0 [ 515.792646][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 515.797730][ T30] netdev_run_todo+0xe1a/0x1000 [ 515.802636][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 515.808057][ T30] ? unregister_netdevice_queue+0x26b/0x370 [ 515.814007][ T30] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 515.820348][ T30] default_device_exit_batch+0xa24/0xaa0 [ 515.826084][ T30] ? __pfx___might_resched+0x10/0x10 [ 515.831422][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 515.837724][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 515.843242][ T30] ? cfg802154_pernet_exit+0xc3/0xe0 [ 515.848631][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 515.854835][ T30] cleanup_net+0x89d/0xcc0 [ 515.859383][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 515.864375][ T30] ? process_scheduled_works+0x976/0x1850 [ 515.870220][ T30] process_scheduled_works+0xa63/0x1850 [ 515.875944][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 515.882511][ T30] ? assign_work+0x364/0x3d0 [ 515.897004][ T30] worker_thread+0x870/0xd30 [ 515.901694][ T30] ? __kthread_parkme+0x169/0x1d0 [ 515.907181][ T30] ? __pfx_worker_thread+0x10/0x10 [ 515.912375][ T30] kthread+0x2f0/0x390 [ 515.916755][ T30] ? __pfx_worker_thread+0x10/0x10 [ 515.921920][ T30] ? __pfx_kthread+0x10/0x10 [ 515.926740][ T30] ret_from_fork+0x4b/0x80 [ 515.931222][ T30] ? __pfx_kthread+0x10/0x10 [ 515.936070][ T30] ret_from_fork_asm+0x1a/0x30 [ 515.940903][ T30] [ 515.943996][ T30] INFO: task kworker/u8:2:35 blocked for more than 147 seconds. [ 515.951880][ T30] Not tainted 6.12.0-rc6-syzkaller #0 [ 515.957998][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.966888][ T30] task:kworker/u8:2 state:D stack:19448 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 515.977483][ T30] Workqueue: events_unbound linkwatch_event [ 515.983447][ T30] Call Trace: [ 515.987196][ T30] [ 515.990171][ T30] __schedule+0x184f/0x4c30 [ 515.994744][ T30] ? __pfx___schedule+0x10/0x10 [ 516.000552][ T30] ? __pfx_lock_release+0x10/0x10 [ 516.005846][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 516.011354][ T30] ? kthread_data+0x52/0xd0 [ 516.016106][ T30] ? schedule+0x90/0x320 [ 516.020394][ T30] ? wq_worker_sleeping+0x66/0x240 [ 516.026024][ T30] ? schedule+0x90/0x320 [ 516.030317][ T30] schedule+0x14b/0x320 [ 516.034523][ T30] schedule_preempt_disabled+0x13/0x30 [ 516.040337][ T30] __mutex_lock+0x6a7/0xd70 [ 516.045057][ T30] ? __mutex_lock+0x52a/0xd70 [ 516.049787][ T30] ? linkwatch_event+0xe/0x60 [ 516.054518][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 516.059825][ T30] ? process_scheduled_works+0x976/0x1850 [ 516.065804][ T30] linkwatch_event+0xe/0x60 [ 516.070355][ T30] process_scheduled_works+0xa63/0x1850 [ 516.076190][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 516.082229][ T30] ? assign_work+0x364/0x3d0 [ 516.087582][ T30] worker_thread+0x870/0xd30 [ 516.092248][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 516.105040][ T30] ? __kthread_parkme+0x169/0x1d0 [ 516.110137][ T30] ? __pfx_worker_thread+0x10/0x10 [ 516.117365][ T30] kthread+0x2f0/0x390 [ 516.121482][ T30] ? __pfx_worker_thread+0x10/0x10 [ 516.126727][ T30] ? __pfx_kthread+0x10/0x10 [ 516.131362][ T30] ret_from_fork+0x4b/0x80 [ 516.145155][ T30] ? __pfx_kthread+0x10/0x10 [ 516.149812][ T30] ret_from_fork_asm+0x1a/0x30 [ 516.154646][ T30] [ 516.444348][ T30] INFO: task udevd:5215 blocked for more than 147 seconds. [ 516.515419][ T30] Not tainted 6.12.0-rc6-syzkaller #0 [ 516.521396][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.794959][ T30] task:udevd state:D stack:21664 pid:5215 tgid:5215 ppid:1 flags:0x00000002 [ 516.842891][ T30] Call Trace: [ 516.854977][ T30] [ 516.857981][ T30] __schedule+0x184f/0x4c30 [ 516.862590][ T30] ? __pfx___schedule+0x10/0x10 [ 516.894997][ T30] ? __pfx_lock_release+0x10/0x10 [ 516.900118][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 516.924986][ T30] ? schedule+0x90/0x320 [ 516.929339][ T30] schedule+0x14b/0x320 [ 516.933547][ T30] schedule_preempt_disabled+0x13/0x30 [ 516.965000][ T30] __mutex_lock+0x6a7/0xd70 [ 516.969596][ T30] ? __mutex_lock+0x52a/0xd70 [ 516.974320][ T30] ? uevent_show+0x17d/0x340 [ 517.014980][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 517.020088][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 517.024889][ T30] ? uevent_show+0x163/0x340 [ 517.049628][ T30] uevent_show+0x17d/0x340 [ 517.054097][ T30] dev_attr_show+0x55/0xc0 [ 517.080601][ T30] ? __pfx_dev_attr_show+0x10/0x10 [ 517.094993][ T30] sysfs_kf_seq_show+0x331/0x4c0 [ 517.100017][ T30] seq_read_iter+0x43f/0xd70 [ 517.104674][ T30] vfs_read+0x991/0xb70 [ 517.125008][ T30] ? kernfs_iop_getattr+0x387/0x4d0 [ 517.130322][ T30] ? __pfx_vfs_read+0x10/0x10 [ 517.145025][ T30] ? fdget_pos+0x265/0x320 [ 517.149506][ T30] ksys_read+0x183/0x2b0 [ 517.153794][ T30] ? __pfx_ksys_read+0x10/0x10 [ 517.165007][ T30] ? do_syscall_64+0x100/0x230 [ 517.169850][ T30] ? do_syscall_64+0xb6/0x230 [ 517.174576][ T30] do_syscall_64+0xf3/0x230 [ 517.195411][ T30] ? clear_bhb_loop+0x35/0x90 [ 517.200154][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.215010][ T30] RIP: 0033:0x7f4ef9f16b6a [ 517.219478][ T30] RSP: 002b:00007ffd9accf658 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 517.244983][ T30] RAX: ffffffffffffffda RBX: 000055ce1f799c50 RCX: 00007f4ef9f16b6a [ 517.253022][ T30] RDX: 0000000000001000 RSI: 000055ce1f7a93d0 RDI: 000000000000000c [ 517.274994][ T30] RBP: 000055ce1f799c50 R08: 000000000000000c R09: 0000000000000100 [ 517.283059][ T30] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 517.314990][ T30] R13: 0000000000003fff R14: 00007ffd9accfb38 R15: 000000000000000a [ 517.323963][ T30] [ 517.335035][ T30] INFO: task dhcpcd:5509 blocked for more than 148 seconds. [ 517.342399][ T30] Not tainted 6.12.0-rc6-syzkaller #0 [ 517.364949][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 517.373671][ T30] task:dhcpcd state:D stack:20608 pid:5509 tgid:5509 ppid:5508 flags:0x00004002 [ 517.394983][ T30] Call Trace: [ 517.398324][ T30] [ 517.401289][ T30] __schedule+0x184f/0x4c30 [ 517.424978][ T30] ? __pfx___schedule+0x10/0x10 [ 517.429928][ T30] ? __pfx_lock_release+0x10/0x10 [ 517.445047][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 517.450583][ T30] ? schedule+0x90/0x320 [ 517.454863][ T30] schedule+0x14b/0x320 [ 517.464972][ T30] schedule_preempt_disabled+0x13/0x30 [ 517.470495][ T30] __mutex_lock+0x6a7/0xd70 [ 517.494963][ T30] ? __mutex_lock+0x52a/0xd70 [ 517.499757][ T30] ? rtnl_dumpit+0x99/0x200 [ 517.504359][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 517.514957][ T30] ? __alloc_skb+0x28f/0x440 [ 517.519630][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 517.534988][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 517.539990][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 517.564960][ T30] rtnl_dumpit+0x99/0x200 [ 517.569361][ T30] netlink_dump+0x647/0xd80 [ 517.573917][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 517.585011][ T30] ? netlink_recvmsg+0x60a/0x11d0 [ 517.590253][ T30] ? kmem_cache_free+0x1a2/0x420 [ 517.604993][ T30] ? netlink_recvmsg+0x60a/0x11d0 [ 517.610136][ T30] netlink_recvmsg+0x6bb/0x11d0 [ 517.635175][ T30] ? __pfx_netlink_recvmsg+0x10/0x10 [ 517.640575][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 517.655017][ T30] ? __pfx___might_resched+0x10/0x10 [ 517.660440][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 517.674964][ T30] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 517.680372][ T30] ? __pfx_netlink_recvmsg+0x10/0x10 [ 517.694966][ T30] sock_recvmsg+0x22f/0x280 [ 517.699544][ T30] ____sys_recvmsg+0x1c6/0x480 [ 517.704371][ T30] ? __pfx_____sys_recvmsg+0x10/0x10 [ 517.725392][ T30] ? __sys_recvmsg+0x30f/0x3d0 [ 517.730903][ T30] ? kfree+0x4e/0x440 [ 517.744985][ T30] __sys_recvmsg+0x2e6/0x3d0 [ 517.749687][ T30] ? __pfx_lock_release+0x10/0x10 [ 517.754772][ T30] ? __pfx___sys_recvmsg+0x10/0x10 [ 517.773416][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 517.785685][ T30] ? do_syscall_64+0x100/0x230 [ 517.790520][ T30] ? do_syscall_64+0xb6/0x230 [ 517.804968][ T30] do_syscall_64+0xf3/0x230 [ 517.809588][ T30] ? clear_bhb_loop+0x35/0x90 [ 517.814321][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.844976][ T30] RIP: 0033:0x7f0be967f91e [ 517.849475][ T30] RSP: 002b:00007ffd647c4258 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 517.864954][ T30] RAX: ffffffffffffffda RBX: 00007ffd647c5380 RCX: 00007f0be967f91e [ 517.872988][ T30] RDX: 0000000000000000 RSI: 00007ffd647c52a0 RDI: 0000000000000014 [ 517.895046][ T30] RBP: 00007ffd647c5310 R08: 0000000000000000 R09: 0000000000000000 [ 517.903087][ T30] R10: 00000000000000d3 R11: 0000000000000246 R12: 0000000000000c20 [ 517.934971][ T30] R13: 00007ffd647c5284 R14: 00007ffd647c52a0 R15: 00007ffd647c5290 [ 517.943065][ T30] [ 517.955021][ T30] INFO: task syz-executor:13246 blocked for more than 149 seconds. [ 517.962995][ T30] Not tainted 6.12.0-rc6-syzkaller #0 [ 517.984970][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 517.993729][ T30] task:syz-executor state:D stack:21728 pid:13246 tgid:13246 ppid:13220 flags:0x00000000 [ 518.025118][ T30] Call Trace: [ 518.028475][ T30] [ 518.031436][ T30] __schedule+0x184f/0x4c30 [ 518.425070][ T30] ? __pfx___schedule+0x10/0x10 [ 518.430017][ T30] ? __pfx_lock_release+0x10/0x10 [ 518.443395][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 518.449039][ T30] ? schedule+0x90/0x320 [ 518.453327][ T30] schedule+0x14b/0x320 [ 518.495092][ T30] schedule_preempt_disabled+0x13/0x30 [ 518.500644][ T30] __mutex_lock+0x6a7/0xd70 [ 518.545612][ T30] ? __mutex_lock+0x52a/0xd70 [ 518.550381][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 518.585042][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 518.590167][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 518.624990][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 518.630198][ T30] ? __lock_acquire+0x1384/0x2050 [ 518.675107][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 518.680687][ T30] netlink_rcv_skb+0x1e3/0x430 [ 518.715102][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 518.720669][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 518.755141][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 518.760421][ T30] netlink_unicast+0x7f6/0x990 [ 518.815013][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 518.820386][ T30] ? __virt_addr_valid+0x183/0x530 [ 518.852937][ T30] ? __check_object_size+0x48e/0x900 [ 518.865128][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 518.869972][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.906883][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 518.911903][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.965251][ T30] __sock_sendmsg+0x221/0x270 [ 518.970040][ T30] __sys_sendto+0x39b/0x4f0 [ 518.974587][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 519.034005][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.054014][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 519.095106][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 519.101183][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 519.145393][ T30] __x64_sys_sendto+0xde/0x100 [ 519.150250][ T30] do_syscall_64+0xf3/0x230 [ 519.154802][ T30] ? clear_bhb_loop+0x35/0x90 [ 519.204169][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.265253][ T30] RIP: 0033:0x7fdec81805ac [ 519.269749][ T30] RSP: 002b:00007fdec845f650 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 519.315066][ T30] RAX: ffffffffffffffda RBX: 00007fdec8e64620 RCX: 00007fdec81805ac [ 519.323129][ T30] RDX: 000000000000006c RSI: 00007fdec8e64670 RDI: 0000000000000003 [ 519.395598][ T30] RBP: 0000000000000000 R08: 00007fdec845f6a4 R09: 000000000000000c [ 519.403655][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 519.505348][ T30] R13: 0000000000000000 R14: 00007fdec8e64670 R15: 0000000000000000 [ 519.513429][ T30] [ 519.578924][ T30] [ 519.578924][ T30] Showing all locks held in the system: [ 519.782661][ T30] 1 lock held by pool_workqueue_/3: [ 519.788302][ T30] #0: ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 519.799485][ T30] 3 locks held by kworker/0:1/9: [ 519.804458][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 519.815767][ T30] #1: ffffc900000e7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 519.826867][ T30] #2: ffffffff8fcd3908 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 519.837787][ T30] 4 locks held by kworker/u8:1/12: [ 519.842941][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 519.854069][ T30] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 519.867037][ T30] #2: ffffffff8fcc6dd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 519.884291][ T30] #3: ffffffff8fcd3908 (rtnl_mutex){+.+.}-{3:3}, at: wg_destruct+0x25/0x2e0 [ 519.893632][ T30] 1 lock held by khungtaskd/30: [ 519.898663][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 519.908721][ T30] 3 locks held by kworker/R-ipv6_/3159: [ 519.914298][ T30] #0: ffff88803025b948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 519.945650][ T30] #1: ffffc9000c10fc80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 520.005082][ T30] #2: ffffffff8fcd3908 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 520.014795][ T30] 4 locks held by kworker/u9:1/5153: [ 520.795006][ T30] #0: ffff8880b873ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 520.815068][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 520.885088][ T30] #2: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_change+0xed/0x270 [ 520.955149][ T30] #3: ffffffff9a5e6da8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x16d/0x510 [ 521.035008][ T30] 3 locks held by syslogd/5197: [ 521.039928][ T30] 2 locks held by klogd/5204: [ 521.044656][ T30] 4 locks held by udevd/5215: [ 521.105048][ T30] #0: ffff8880793c78b8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 [ 521.113987][ T30] #1: ffff88807dc63488 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 521.235184][ T30] #2: ffff8880356663c8 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 521.244739][ T30] #3: ffff888078f840e8 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 [ 521.345214][ T30] 2 locks held by dhcpcd/5509: [ 521.350058][ T30] #0: ffff8880504c26c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: netlink_dump+0xcb/0xd80 [ 521.425050][ T30] #1: ffffffff8fcd3908 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 521.434066][ T30] 2 locks held by getty/5602: [ 521.503376][ T30] #0: ffff8880355ca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 521.567248][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 521.574961][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 521.596699][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 521.604777][ T30] 3 locks held by kworker/1:3/5844: [ 521.605217][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 521.620858][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 521.624975][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 521.629404][ T5845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 521.649255][ T30] #1: ffffc900036a7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 521.655345][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 521.675235][ T30] #2: ffffffff8fcd3908 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 521.780558][ T30] 1 lock held by syz.8.1994/12358: [ 521.805146][ T30] #0: ffffffff8fcd3908 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 521.814265][ T30] 3 locks held by syz-executor/12675: [ 521.884983][ T30] #0: ffff88801dfbcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 521.895851][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 521.912086][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 521.922674][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 521.931682][ T30] #1: ffff88801dfbc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 521.968929][ T30] #2: ffffffff8e93d338 (rcu_state.exp_mutex [ 521.969102][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 521.969108][ T30] ){+.+.}-{3:3} [ 521.993720][ T5845] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 521.995554][ T30] , at: synchronize_rcu_expedited+0x381/0x830 [ 522.023785][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 522.085139][ T30] 10 locks held by syz-executor/13073: [ 522.090679][ T30] 1 lock held by syz-executor/13246: [ 522.096119][ T30] #0: ffffffff8fcd3908 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 522.105658][ T30] 2 locks held by syz.9.2306/13352: [ 522.110940][ T30] #0: ffff88805e6aca08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 522.121436][ T30] #1: ffffffff8fcd3908 (rtnl_mutex){+.+.}-{3:3}, at: ipv6_sock_mc_close+0xc9/0x140 [ 522.132044][ T30] 2 locks held by syz-executor/13363: [ 522.137493][ T30] #0: ffffffff8fcc6dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 522.147062][ T30] #1: ffffffff8fcd3908 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 522.157306][ T30] 2 locks held by syz-executor/13365: [ 522.162795][ T30] [ 522.165385][ T30] ============================================= [ 522.165385][ T30] [ 522.173833][ T30] NMI backtrace for cpu 0 [ 522.178192][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller #0 [ 522.186991][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 522.197078][ T30] Call Trace: [ 522.200390][ T30] [ 522.203351][ T30] dump_stack_lvl+0x241/0x360 [ 522.208082][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.213322][ T30] ? __pfx__printk+0x10/0x10 [ 522.217958][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 522.222945][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 522.228445][ T30] ? _printk+0xd5/0x120 [ 522.232639][ T30] ? __pfx__printk+0x10/0x10 [ 522.237268][ T30] ? __wake_up_klogd+0xcc/0x110 [ 522.242170][ T30] ? __pfx__printk+0x10/0x10 [ 522.246806][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 522.251879][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 522.257898][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 522.263913][ T30] watchdog+0xff4/0x1040 [ 522.268181][ T30] ? watchdog+0x1ea/0x1040 [ 522.272623][ T30] ? __pfx_watchdog+0x10/0x10 [ 522.277325][ T30] kthread+0x2f0/0x390 SYZFAIL: failed to send rpc fd=3 want=160 sent=0 n=-1 (errno 32: Broken pipe) [ 522.281407][ T30] ? __pfx_watchdog+0x10/0x10 [ 522.286602][ T30] ? __pfx_kthread+0x10/0x10 [ 522.291206][ T30] ret_from_fork+0x4b/0x80 [ 522.295643][ T30] ? __pfx_kthread+0x10/0x10 [ 522.300244][ T30] ret_from_fork_asm+0x1a/0x30 [ 522.305037][ T30] [ 522.308179][ C0] vkms_vblank_simulate: vblank timer overrun [ 522.314858][ T30] Sending NMI from CPU 0 to CPUs 1: [ 522.320679][ C1] NMI backtrace for cpu 1 [ 522.320694][ C1] CPU: 1 UID: 0 PID: 46 Comm: kworker/1:1 Not tainted 6.12.0-rc6-syzkaller #0 [ 522.320715][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 522.320727][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 522.320763][ C1] RIP: 0010:arch_stack_walk+0x102/0x150 [ 522.320787][ C1] Code: ff ff 4c 89 e6 4c 89 fa e8 5b bd 09 00 83 bd 70 ff ff ff 00 74 37 48 8d 9d 70 ff ff ff 48 89 df e8 03 94 09 00 48 85 c0 74 23 <4c> 89 f7 48 89 c6 4d 89 eb 41 ff d3 66 90 84 c0 74 11 48 89 df e8 [ 522.320802][ C1] RSP: 0018:ffffc90000b67280 EFLAGS: 00000286 [ 522.320817][ C1] RAX: ffffffff815e9933 RBX: ffffc90000b67280 RCX: ffffffff917bd000 [ 522.320832][ C1] RDX: ffffffff9196aa01 RSI: ffffc90000b60000 RDI: ffffffff815e9933 [ 522.320846][ C1] RBP: ffffc90000b67310 R08: ffffc90000b67bb0 R09: 0000000000000000 [ 522.320859][ C1] R10: ffffc90000b672d0 R11: fffff5200016ce5c R12: ffff88801dea1e00 [ 522.320873][ C1] R13: ffffffff818092c0 R14: ffffc90000b67360 R15: 0000000000000000 [ 522.320886][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 522.320901][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 522.320914][ C1] CR2: 00007fe684267d60 CR3: 000000001234a000 CR4: 00000000003526f0 [ 522.320931][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 522.320942][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 522.320954][ C1] Call Trace: [ 522.320960][ C1] [ 522.320968][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 522.320996][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 522.321031][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 522.321057][ C1] ? nmi_handle+0x2a/0x5a0 [ 522.321083][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 522.321108][ C1] ? nmi_handle+0x14f/0x5a0 [ 522.321126][ C1] ? nmi_handle+0x2a/0x5a0 [ 522.321146][ C1] ? arch_stack_walk+0x102/0x150 [ 522.321164][ C1] ? default_do_nmi+0x63/0x160 [ 522.321192][ C1] ? exc_nmi+0x123/0x1f0 [ 522.321217][ C1] ? end_repeat_nmi+0xf/0x53 [ 522.321240][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 522.321264][ C1] ? process_scheduled_works+0xa63/0x1850 [ 522.321290][ C1] ? __init_begin+0x41000/0x41000 [ 522.321317][ C1] ? use_tpause_delay+0x1/0x1f [ 522.321340][ C1] ? process_scheduled_works+0xa63/0x1850 [ 522.321365][ C1] ? arch_stack_walk+0x102/0x150 [ 522.321384][ C1] ? arch_stack_walk+0x102/0x150 [ 522.321404][ C1] ? use_tpause_delay+0x1/0x1f [ 522.321427][ C1] ? arch_stack_walk+0x102/0x150 [ 522.321446][ C1] [ 522.321452][ C1] [ 522.321461][ C1] ? process_scheduled_works+0xa63/0x1850 [ 522.321489][ C1] stack_trace_save+0x118/0x1d0 [ 522.321511][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 522.321539][ C1] save_stack+0xfb/0x1f0 [ 522.321559][ C1] ? __pfx_save_stack+0x10/0x10 [ 522.321576][ C1] ? free_unref_page+0xcfb/0xf20 [ 522.321602][ C1] ? __slab_free+0x31b/0x3d0 [ 522.321619][ C1] ? qlist_free_all+0x9a/0x140 [ 522.321636][ C1] ? kasan_quarantine_reduce+0x14f/0x170 [ 522.321653][ C1] ? __kasan_kmalloc+0x23/0xb0 [ 522.321672][ C1] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 522.321696][ C1] ? wg_noise_handshake_begin_session+0xc4/0xb80 [ 522.321720][ C1] ? wg_packet_send_handshake_response+0x120/0x2e0 [ 522.321747][ C1] ? wg_packet_handshake_receive_worker+0x5e6/0xf50 [ 522.321780][ C1] ? page_ext_get+0x20/0x2a0 [ 522.321802][ C1] __reset_page_owner+0x76/0x430 [ 522.321822][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 522.321844][ C1] free_unref_page+0xcfb/0xf20 [ 522.321876][ C1] __slab_free+0x31b/0x3d0 [ 522.321895][ C1] ? __phys_addr+0xba/0x170 [ 522.321914][ C1] qlist_free_all+0x9a/0x140 [ 522.321934][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 522.321954][ C1] __kasan_kmalloc+0x23/0xb0 [ 522.321973][ C1] ? wg_noise_handshake_begin_session+0xc4/0xb80 [ 522.321997][ C1] __kmalloc_cache_noprof+0x19c/0x2c0 [ 522.322029][ C1] wg_noise_handshake_begin_session+0xc4/0xb80 [ 522.322054][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 522.322080][ C1] ? ktime_get_coarse_with_offset+0x143/0x190 [ 522.322104][ C1] wg_packet_send_handshake_response+0x120/0x2e0 [ 522.322134][ C1] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 522.322162][ C1] ? wg_socket_set_peer_endpoint_from_skb+0xc9/0x120 [ 522.322188][ C1] ? wg_packet_handshake_receive_worker+0xd2/0xf50 [ 522.322219][ C1] wg_packet_handshake_receive_worker+0x5e6/0xf50 [ 522.322255][ C1] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 522.322290][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 522.322317][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 522.322346][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 522.322377][ C1] ? process_scheduled_works+0x976/0x1850 [ 522.322402][ C1] process_scheduled_works+0xa63/0x1850 [ 522.322440][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 522.322469][ C1] ? assign_work+0x364/0x3d0 [ 522.322495][ C1] worker_thread+0x870/0xd30 [ 522.322527][ C1] ? __kthread_parkme+0x169/0x1d0 [ 522.322555][ C1] ? __pfx_worker_thread+0x10/0x10 [ 522.322580][ C1] kthread+0x2f0/0x390 [ 522.322597][ C1] ? __pfx_worker_thread+0x10/0x10 [ 522.322622][ C1] ? __pfx_kthread+0x10/0x10 [ 522.322639][ C1] ret_from_fork+0x4b/0x80 [ 522.322665][ C1] ? __pfx_kthread+0x10/0x10 [ 522.322682][ C1] ret_from_fork_asm+0x1a/0x30 [ 522.322715][ C1] [ 522.849691][ C0] vkms_vblank_simulate: vblank timer overrun [ 522.865025][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 522.871949][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller #0 [ 522.880757][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 522.890849][ T30] Call Trace: [ 522.894156][ T30] [ 522.897114][ T30] dump_stack_lvl+0x241/0x360 [ 522.901833][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.907072][ T30] ? __pfx__printk+0x10/0x10 [ 522.911712][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 522.917745][ T30] ? vscnprintf+0x5d/0x90 [ 522.922124][ T30] panic+0x349/0x880 [ 522.926066][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 522.932268][ T30] ? __pfx_panic+0x10/0x10 [ 522.936748][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 522.942162][ T30] ? __irq_work_queue_local+0x137/0x410 [ 522.947764][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 522.953176][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 522.959379][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 522.965603][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 522.971808][ T30] watchdog+0x1033/0x1040 [ 522.976183][ T30] ? watchdog+0x1ea/0x1040 [ 522.980649][ T30] ? __pfx_watchdog+0x10/0x10 [ 522.985368][ T30] kthread+0x2f0/0x390 [ 522.989472][ T30] ? __pfx_watchdog+0x10/0x10 [ 522.994189][ T30] ? __pfx_kthread+0x10/0x10 [ 522.998816][ T30] ret_from_fork+0x4b/0x80 [ 523.003276][ T30] ? __pfx_kthread+0x10/0x10 [ 523.007897][ T30] ret_from_fork_asm+0x1a/0x30 [ 523.012718][ T30] [ 523.016080][ T30] Kernel Offset: disabled [ 523.020410][ T30] Rebooting in 86400 seconds..