last executing test programs: 7.135154164s ago: executing program 1 (id=1333): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.010801541s ago: executing program 4 (id=1335): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 6.878603209s ago: executing program 4 (id=1336): open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) utime(0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 6.731068858s ago: executing program 1 (id=1337): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_dev$evdev(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) time(0xfffffffffffffffc) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {}, 0x3}, 0x45c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000006a00010500000000fddbdf25000000000000000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) 4.783037595s ago: executing program 2 (id=1346): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200), 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095", @ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=0000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x40}}, 0x0) 4.321970186s ago: executing program 3 (id=1348): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {}, {0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x81}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.043167209s ago: executing program 4 (id=1349): r0 = syz_open_dev$vim2m(0x0, 0xfd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './bus'}, 0x9) syz_open_dev$sndpcmp(&(0x7f0000000000), 0xa, 0x40280) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00222200000007bb695dec0b91d71d5e0649d1080b55ad6c27ab0000000007f3c2a78a0333f9ad53aa7ec76a6801f00676dae7d677c1db32f35a896f8643822857f6527b066f068bc88b387021ffaebe63015ac0cc83b585ad20772095ad90a88c3069c5862ad06998bf70e1c026668513fe6f3a7b760f7c422c6d68f9d7459c1fc267a1da1f2a1cf3898e18e78157644a12dd32b8ec7f63fd5853d1ceea6425dd3390d76f9d610cfcbeebd28ef42b02"], 0x0}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) 4.042470732s ago: executing program 3 (id=1350): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 3.9375419s ago: executing program 1 (id=1351): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) close(r3) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454ce, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000840), 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x102, 0x0) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f0000000180)=0x1) r8 = openat$cgroup_freezer_state(r6, &(0x7f0000002b00), 0x2, 0x0) close(r8) 3.888680186s ago: executing program 3 (id=1352): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.events\x00', 0x26e1, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_pid(r0, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.66321385s ago: executing program 1 (id=1353): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)='7!6ez', 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000002c0)="d16d42", 0x3}], 0x1}}], 0x4, 0x4841) 3.619742554s ago: executing program 3 (id=1354): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0xf0, 0x10, 0x713, 0x8, 0x0, {{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x1a, 0xa, 0x0, 0xa0}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0xffff, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40}}, 0xf0}}, 0x8000) 3.521328291s ago: executing program 1 (id=1355): ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x6, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000080)={"000c00816800df00", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r9}, 0x10) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0xc2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10) 3.371011827s ago: executing program 3 (id=1356): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xf}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x2, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)={0x14, 0x8, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}}, 0x0) write(r5, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) close(r4) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x48, &(0x7f00000000c0)=0xcb7c, 0x4) dup(r7) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x2, &(0x7f0000000100)=0x81, 0x4) fcntl$dupfd(r9, 0x0, r9) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 3.285181354s ago: executing program 0 (id=1357): getrandom(&(0x7f0000000ac0)=""/4096, 0x1000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5403340861a2275363501020301090212000100000000090400"], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000002800)={{r0}, "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"}) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000027c0)=0x40) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) write$binfmt_script(r3, &(0x7f0000000000), 0x61) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "b1d65ab71f5ef2fe", "9e8ecc7bb5352776725e1047711330ff2bb17b550800", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) sendmmsg(0xffffffffffffffff, &(0x7f000001f500), 0x0, 0x4c800) 2.020123049s ago: executing program 4 (id=1358): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000b40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa810000000800450000680000000000069078ac1414bbe000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x458, 0x0, 0x158, 0x2d8, 0x2d8, 0x1f0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, &(0x7f00000001c0), {[{{@ip={@remote, @loopback, 0xffffff00, 0xff000000, 'pimreg0\x00', 'veth0_to_batadv\x00', {}, {}, 0x33, 0x1, 0x44}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x24}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'xfrm0\x00', 'nr0\x00', {0xff}, {0xff}, 0x16, 0x3, 0x30}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x40, 0x9, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff000000, 0xffffffff, 'pimreg\x00', 'netdevsim0\x00', {}, {0xff}, 0x4, 0x2, 0x40}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xaf253e8c83fd0c2d}}, @common=@ttl={{0x28}, {0x3, 0x5}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x31}, 0xff, 0x0, 'veth1_vlan\x00', 'veth0_virt_wifi\x00', {}, {}, 0x4, 0x2, 0x11}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}, @common=@icmp={{0x28}, {0x0, "3b10", 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x80}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f0000000dc0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]}, 0x45c) r4 = epoll_create1(0x0) r5 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000040)={0x2}) poll(&(0x7f0000000180)=[{r4}], 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x9, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @common=@addrtype={{0x30}, {0x480, 0x18d5, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x1, 0x1, 0x3, 0x4], 0x3}, {0x1, [0x3, 0x0, 0x0, 0x0, 0x2], 0x4, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f0000000040)={0xa}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r8, &(0x7f0000000500)="a4", 0xffe0, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="10000000091483"], 0x10}, 0x1, 0xffffff7f00000000}, 0x0) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000003c0)={r2, 0x3, 0x6}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.967259403s ago: executing program 2 (id=1359): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xdee, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000005dba000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000040)={0x30}, 0x30) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x6000) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xf4}], 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = epoll_create1(0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f00000000c0)={0x6000001f}) read$char_usb(r9, &(0x7f0000000100)=""/169, 0xa9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_MON_SET(r9, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb4, r11, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8084}, 0x40003) close_range(r7, 0xffffffffffffffff, 0x0) 1.688507578s ago: executing program 4 (id=1360): timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0xfffffffc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xc5}, @TCA_FLOWER_KEY_UDP_SRC={0x6}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x46}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e22}]}}]}, 0x8c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.666431058s ago: executing program 0 (id=1361): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x769}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x4047}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.402953167s ago: executing program 4 (id=1362): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002140), 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000002180)={0x1ff, 0x2, {0x1, 0x2, 0x6, 0x0, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "b3f7e97c"}]}}, 0x0}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000006340)={0x2020}, 0x2058) read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000002300)="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", 0x2000, &(0x7f0000004300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000014c0)={0xffffffff, 0x1, 0x0, 0x0, 0x0, "05000000000000000000001000"}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) syz_open_pts(0xffffffffffffffff, 0x42) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x4000000, 0x0) 1.203611208s ago: executing program 1 (id=1363): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x3ec0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2f4b40f0828f84b9}, 0x20004094) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000000801040000000000000000000000000900010073797a30000000001c000480083012c954bea4446385b712e93a686900094000000000080001400000000008000438983e0320e08c904000000000"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x8, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0xb8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0xfffffffd}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x40080) ftruncate(0xffffffffffffffff, 0x0) 985.307237ms ago: executing program 2 (id=1364): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64fff000001c0002800500010004000000060018000010"], 0x4c}}, 0x0) 815.189707ms ago: executing program 2 (id=1365): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f00000001c0)={0x0, 0x37, &(0x7f0000000180)=""/55}) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000009600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)=""/102, 0x66}, 0x7}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x10021, 0x0) write$binfmt_misc(r2, &(0x7f0000000640)=ANY=[], 0xff79) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd000000000000000000000000000001"}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 700.129379ms ago: executing program 2 (id=1366): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64002300001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) 546.374094ms ago: executing program 2 (id=1367): syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41a}}]}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) syz_usb_connect$uac1(0x5, 0xdf, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0x2, 0x80, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x2c}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x9, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0xb, "f093252eb9"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x4, 0xf372, 0x9, "1c1e1536acc233c4"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x2, 0xf0, 0xd, 'y', 'K'}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3, 0xf80b, 0xfe, "034a816bc8e9385100"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0x3, 0x7f, "54270a40b9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x9b, 0x7, {0x7, 0x25, 0x1, 0x80, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x2, 0x4, 0x6, "ac416d0a0c11be85"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x40, 0x1ff8, 0x7, "5bb51bcfc73e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xf, 0x0, 0x1, {0x7, 0x25, 0x1, 0x81, 0x5, 0x6}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x2, 0x88, 0x3, 0x40, 0x3}, 0x3b, &(0x7f0000000080)={0x5, 0xf, 0x3b, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x54, 0x3, 0x8}, @generic={0xe, 0x10, 0x2, "429ed58ab08937c4b0ab6a"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "f915e2a9d5c1def98be487395dea9d26"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x3, 0x8, 0x4}]}, 0xa, [{0x52, &(0x7f00000008c0)=@string={0x52, 0x3, "729c7e0359375d519895706bcc2986a69c0ee78162f6596f480b3da2dbaea5462bb35dd5fb3d13ed9643f0181220bddce1667c7feb56f97e9887ec69043ede83d7e138a45ceb62a6b32362fcc1048648"}}, {0xec, &(0x7f0000000340)=@string={0xec, 0x3, "d76f9c9086364a971d4d8531953c7d6f0dc55bbc73dbfa405ddfd7a827b851ffb077bf9916c79dcda386b06e629f3305eda07d5c5f1582d62be7f81aaa98f561bc4a664a62d38688fec14454e75bc9839b57ebac7c733ec04b1121128e1bb30beb7f323f666957b5fa9b38ca7dd8223db5857060d599f034f08681282454b6024d5fbceac05c4b6b8872c5c5b567c1c318e775454ce32bd590c89513e2b2dff118108a655825c0a45dbbd25adf1a5c84c7cc70c4b774d84ed35abed12bfad546a2eb6cf0b33ff4078baad8a70bc7ad91ad959c852784232966f4ee996c7ef529224853a7fc625fd0fb8c"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2009}}, {0xf4, &(0x7f00000007c0)=@string={0xf4, 0x3, "f64465ce28024a00466175e66ef8fbbb376ecbc21c30392fe762ed997831499e2f70dd0f49be1114094e35888d8fe7c2eeca4406417669139d48e8452fdc3c499c424fd32ecb103374074fe304e39a3ce7e6b649e51d416aa4262f94ab2c44a8d9c1840f750b10761aebf339945886065eb64f3a371c280519d8b57b555f0f062989b9e6c5dffe75c9437ce1a67adcb4cf61f1cf66c2eca2aa9d85f1c22fc2c66d3de087de18ef17a7c0478e67bf7d55022b6dd36f03b5ad533e99f3a23d6cd81e4a59eb5ab8c0cbff1d36b39be00e9e2166e8e49da544617091a9be360f00e3d4a2358b18a8ef0bb0378f5faf5946f8b2c9"}}, {0x94, &(0x7f0000000940)=@string={0x94, 0x3, "cf2395d81f65d3835196a1a5e5196e3d5aaf53919c43769ea985c5eec63c825b4b6ee02cc04f213b943fe9feb9fa88161fa6c6cc8707d72a12f1339208ca9ec42961b6d69a115d5fc9fb1e90d2d7c4fc9d8b5c4ad71cc169fb2cf2ccb6aafde6214edd0f6f62db9927a09c803d4adffc1ce01d3132344e8ab76d4ffda1907bb6b995cf3e11cdb2092b468943bf1a80803bc6"}}, {0x43, &(0x7f0000000500)=@string={0x43, 0x3, "53228dd704d24e1c72bf3584a9165f3de92d0f2a2261eadd2cbdfc00a9be18380888d825a704a0f3cd4a64936cbb83d0579ceadea427f17120a2471f85baafea5f"}}, {0x5d, &(0x7f0000000580)=@string={0x5d, 0x3, "9aaa7560b3c429fa8083fc3f36745c37babfa1bcc77104ff891682cfdad7f4ba747ae238e4f8919ab3c8348de65d827b730f2600a8ff3eb07ac3eab5d13e9edcf23cab891c3291dff9f550b6b4328533b71fe3539f0774c97f47ac"}}, {0x22, &(0x7f0000000600)=ANY=[@ANYBLOB="220309470e000cddacdc9933cd79fa2d223965a890fd2788328a87c4e42d8775db02"]}, {0x50, &(0x7f0000000640)=ANY=[@ANYBLOB="500318e5777645a78013a4b2f68e8bf50e8e9553158fb168d05ae5075f80d221a6dbdfc7487bb4139952a1a50f5a0a383e6565a91517553a0becaea66c88b5fcbc65325d0400"/80]}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x3478}}]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c4600ea8600000000000000000003003e00000000000000000000000000f2ffffffffffffff00000000000000000000000000003800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9c66a958d2e3aa4e2b928af3b9d45167a7e03a64625f8118700c391d555"], 0xb0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffeffff}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "04616ce43cf5c286ab3b1bd1e60316e9", 0x5}}}, 0x1a) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92, 0x5000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) unshare(0x22020400) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x8, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x86, '\x00', @ptr}}) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x110, 0x2, 0x3}}], 0x30}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000440)=@req={0x1, 0x85, 0x7, 0xffffffff}, 0x10) 528.288173ms ago: executing program 3 (id=1368): syz_usb_connect$cdc_ncm(0x0, 0x9b, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x2, 0x1, 0x0, 0x40, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "416879fe7a"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x58, 0x1000, 0x0, 0x9}, {0x6, 0x24, 0x1a, 0x9, 0x11}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x3, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x2, 0x31}}, {{0x9, 0x5, 0x3, 0x2, 0x3bf, 0xf8, 0x5, 0x9}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0xe, 0x6, 0x17, 0x38, 0x9}, 0x4, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x1c01}}]}) 363.33194ms ago: executing program 0 (id=1369): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="0100000027e5ffff0100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x0) 336.569598ms ago: executing program 0 (id=1370): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) clock_settime(0x0, &(0x7f00000007c0)) 201.550469ms ago: executing program 0 (id=1371): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000b40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa810000000800450000680000000000069078ac1414bbe000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x458, 0x0, 0x158, 0x2d8, 0x2d8, 0x1f0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, &(0x7f00000001c0), {[{{@ip={@remote, @loopback, 0xffffff00, 0xff000000, 'pimreg0\x00', 'veth0_to_batadv\x00', {}, {}, 0x33, 0x1, 0x44}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x24}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'xfrm0\x00', 'nr0\x00', {0xff}, {0xff}, 0x16, 0x3, 0x30}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x40, 0x9, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff000000, 0xffffffff, 'pimreg\x00', 'netdevsim0\x00', {}, {0xff}, 0x4, 0x2, 0x40}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xaf253e8c83fd0c2d}}, @common=@ttl={{0x28}, {0x3, 0x5}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x31}, 0xff, 0x0, 'veth1_vlan\x00', 'veth0_virt_wifi\x00', {}, {}, 0x4, 0x2, 0x11}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}, @common=@icmp={{0x28}, {0x0, "3b10", 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x80}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f0000000dc0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]}, 0x45c) r4 = epoll_create1(0x0) r5 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000040)={0x2}) poll(&(0x7f0000000180)=[{r4}], 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x9, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @common=@addrtype={{0x30}, {0x480, 0x18d5, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x1, 0x1, 0x3, 0x4], 0x3}, {0x1, [0x3, 0x0, 0x0, 0x0, 0x2], 0x4, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f0000000040)={0xa}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r8, &(0x7f0000000500)="a4", 0xffe0, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="10000000091483"], 0x10}, 0x1, 0xffffff7f00000000}, 0x0) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000003c0)={r2, 0x3, 0x6}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=1372): timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0xfffffffc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xc5}, @TCA_FLOWER_KEY_UDP_SRC={0x6}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x46}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e22}]}}]}, 0x8c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): keep mac addresses unique to avoid problems! [ 525.804381][T12056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.836864][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.871308][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.909050][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.954882][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.987386][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.015788][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.049889][T12094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.194731][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.226998][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.255288][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.283386][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.308657][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.343196][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.366410][T12056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.457454][ T4619] Bluetooth: hci4: command tx timeout [ 526.472717][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.510736][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.534211][ T941] usb 2-1: USB disconnect, device number 48 [ 526.559976][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.572460][ T941] usblp0: removed [ 526.597779][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.617876][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.639894][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.651686][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.662445][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.690021][T12094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.773964][T12094] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.803881][T12094] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.820102][T12094] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.837510][T12094] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.871439][T12056] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.899630][T12056] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.919933][T12056] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.939171][T12056] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.253072][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.271553][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.368002][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.396861][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.432470][T12285] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 527.446471][T12285] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 527.523838][T12285] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 527.596687][T12285] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 527.608334][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.616169][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.679756][ T6238] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 527.708323][ T6238] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 527.742770][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.759231][ T6238] asix 3-1:0.0: probe with driver asix failed with error -71 [ 527.767048][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.840039][ T6238] usb 3-1: USB disconnect, device number 60 [ 527.918684][T12437] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1142'. [ 528.019256][T12285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.033273][T12444] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1076'. [ 528.092919][T12285] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.119967][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.127077][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.202220][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.209375][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.510413][T12285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.521042][ T6238] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 528.541210][ T4619] Bluetooth: hci4: command tx timeout [ 528.639052][T12285] veth0_vlan: entered promiscuous mode [ 528.653639][T12285] veth1_vlan: entered promiscuous mode [ 528.705948][T12285] veth0_macvtap: entered promiscuous mode [ 528.737577][ T6238] usb 3-1: Using ep0 maxpacket: 16 [ 528.783617][ T6238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.818234][ T6238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.836799][T12285] veth1_macvtap: entered promiscuous mode [ 528.847824][ T6238] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 528.897004][ T6238] usb 3-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 528.960655][ T6238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.003377][T12285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.024712][ T6238] usb 3-1: config 0 descriptor?? [ 529.034559][T12285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.045789][T12285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.065377][T12285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.091202][T12285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.105538][T12285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.116082][T12285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.165530][T12285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.208800][T12285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.267931][T12285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.300993][T12285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.317404][T12285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.328623][T12285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.339786][T12285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.350582][T10094] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 529.363091][T12285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.387111][T12285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.409417][T12285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.427765][T12285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.441611][T12285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.459800][T12285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.514239][T12285] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.557552][T10094] usb 4-1: Using ep0 maxpacket: 32 [ 529.565755][T10094] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 529.583059][T12285] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.596720][T10094] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 529.615890][T12285] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.627445][T12285] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.639116][T10094] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 529.651891][T10094] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.661671][T12465] team_slave_0: entered promiscuous mode [ 529.667414][T12465] team_slave_1: entered promiscuous mode [ 529.682824][T10094] usb 4-1: Product: syz [ 529.696655][T10094] usb 4-1: Manufacturer: syz [ 529.701571][T10094] usb 4-1: SerialNumber: syz [ 529.710954][T12465] team_slave_0: left promiscuous mode [ 529.716436][T12465] team_slave_1: left promiscuous mode [ 529.932661][T10094] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 529.961234][T12469] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 530.004068][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.028100][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.130164][T12469] program syz.0.1148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 530.143249][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.212860][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.517392][T11812] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 530.727473][T11812] usb 2-1: Using ep0 maxpacket: 16 [ 530.757153][T11812] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 530.803777][T11812] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 530.883971][T11812] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 530.914729][T11812] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 531.166473][ T6238] usbhid 3-1:0.0: can't add hid device: -71 [ 531.200469][ T6238] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 531.263524][ T6238] usb 3-1: USB disconnect, device number 61 [ 531.671318][T11812] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.680644][T11812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.688796][T11812] usb 2-1: Product: syz [ 531.693826][T11812] usb 2-1: Manufacturer: syz [ 531.698575][T11812] usb 2-1: SerialNumber: syz [ 532.053087][ T8] usb 4-1: USB disconnect, device number 50 [ 532.064336][T11812] usb 2-1: USB disconnect, device number 49 [ 532.129459][ T8] usblp0: removed [ 532.293020][T12504] [U]  [ 532.585516][ T4619] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 532.595296][ T4619] CPU: 1 UID: 0 PID: 4619 Comm: kworker/u9:1 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 532.606128][ T4619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 532.616165][ T4619] Workqueue: hci3 hci_rx_work [ 532.620833][ T4619] Call Trace: [ 532.624096][ T4619] [ 532.627009][ T4619] dump_stack_lvl+0x241/0x360 [ 532.631677][ T4619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.636859][ T4619] ? __pfx__printk+0x10/0x10 [ 532.641436][ T4619] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 532.646701][ T4619] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 532.652243][ T4619] sysfs_create_dir_ns+0x2ce/0x3a0 [ 532.657357][ T4619] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 532.662989][ T4619] kobject_add_internal+0x435/0x8d0 [ 532.668196][ T4619] kobject_add+0x152/0x220 [ 532.672609][ T4619] ? do_raw_spin_unlock+0x13c/0x8b0 [ 532.677797][ T4619] ? device_add+0x3e7/0xbf0 [ 532.682298][ T4619] ? __pfx_kobject_add+0x10/0x10 [ 532.687235][ T4619] ? _raw_spin_unlock+0x28/0x50 [ 532.692091][ T4619] ? get_device_parent+0x165/0x410 [ 532.697200][ T4619] device_add+0x4e5/0xbf0 [ 532.701529][ T4619] hci_conn_add_sysfs+0xe8/0x200 [ 532.706467][ T4619] le_conn_complete_evt+0xc9f/0x12e0 [ 532.711758][ T4619] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 532.717470][ T4619] ? __mutex_unlock_slowpath+0x21d/0x750 [ 532.723097][ T4619] ? __copy_skb_header+0x437/0x5b0 [ 532.728204][ T4619] ? skb_pull_data+0x112/0x230 [ 532.732966][ T4619] hci_le_enh_conn_complete_evt+0x185/0x420 [ 532.738864][ T4619] hci_event_packet+0xa55/0x1540 [ 532.743796][ T4619] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 532.749084][ T4619] ? __pfx_hci_event_packet+0x10/0x10 [ 532.754444][ T4619] ? do_raw_spin_unlock+0x13c/0x8b0 [ 532.759639][ T4619] ? hci_send_to_monitor+0xd8/0x7f0 [ 532.764830][ T4619] ? kcov_remote_start+0x97/0x7d0 [ 532.769849][ T4619] hci_rx_work+0x3e8/0xca0 [ 532.774264][ T4619] ? process_scheduled_works+0x945/0x1830 [ 532.779975][ T4619] process_scheduled_works+0xa2c/0x1830 [ 532.785552][ T4619] ? __pfx_process_scheduled_works+0x10/0x10 [ 532.791537][ T4619] ? assign_work+0x364/0x3d0 [ 532.796127][ T4619] worker_thread+0x86d/0xd40 [ 532.800724][ T4619] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 532.806620][ T4619] ? __kthread_parkme+0x169/0x1d0 [ 532.811643][ T4619] ? __pfx_worker_thread+0x10/0x10 [ 532.816749][ T4619] kthread+0x2f0/0x390 [ 532.820814][ T4619] ? __pfx_worker_thread+0x10/0x10 [ 532.825922][ T4619] ? __pfx_kthread+0x10/0x10 [ 532.830509][ T4619] ret_from_fork+0x4b/0x80 [ 532.834918][ T4619] ? __pfx_kthread+0x10/0x10 [ 532.839505][ T4619] ret_from_fork_asm+0x1a/0x30 [ 532.844274][ T4619] [ 532.847362][ C1] vkms_vblank_simulate: vblank timer overrun [ 532.861359][ T4619] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 532.875421][ T4619] Bluetooth: hci3: failed to register connection device [ 534.127346][ T5236] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 534.292834][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.307696][ T5236] usb 3-1: Using ep0 maxpacket: 32 [ 534.323218][ T5236] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 534.347201][ T5236] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 534.369064][ T5236] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 534.379288][ T5236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.390006][ T5236] usb 3-1: Product: syz [ 534.394190][ T5236] usb 3-1: Manufacturer: syz [ 534.401148][ T5236] usb 3-1: SerialNumber: syz [ 534.581278][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.637778][ T5236] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 534.770482][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.973949][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.010510][ T5224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 535.026583][ T5224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 535.036699][ T5224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 535.047119][ T5224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 535.054671][ T5224] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 535.068900][ T5224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 535.534759][ T5224] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 535.545527][ T5224] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 535.557348][ T5224] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 535.586823][ T5224] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 535.604304][ T5224] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 535.612775][ T5224] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 535.778057][ T35] bridge_slave_1: left allmulticast mode [ 535.790723][ T35] bridge_slave_1: left promiscuous mode [ 535.802032][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.821905][ T35] bridge_slave_0: left allmulticast mode [ 535.832435][ T35] bridge_slave_0: left promiscuous mode [ 535.860847][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.179099][ T5224] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 536.194792][ T5224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 536.203510][ T5224] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 536.212685][ T5224] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 536.222347][ T5224] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 536.232394][ T5224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 536.245098][ T5224] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 536.256841][ T5224] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 536.266331][ T5224] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 536.276030][ T5224] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 536.284477][ T5224] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 536.296392][ T5224] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 536.653146][ T6238] usb 3-1: USB disconnect, device number 62 [ 536.685331][ T6238] usblp0: removed [ 536.746321][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.758292][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.772414][ T35] bond0 (unregistering): Released all slaves [ 536.859264][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1180'. [ 536.993257][T12548] chnl_net:caif_netlink_parms(): no params data found [ 537.177565][ T5224] Bluetooth: hci2: command tx timeout [ 537.582669][T12548] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.627386][T12548] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.646190][T12548] bridge_slave_0: entered allmulticast mode [ 537.657489][ T5224] Bluetooth: hci0: command tx timeout [ 537.698100][T12548] bridge_slave_0: entered promiscuous mode [ 537.718374][ T35] hsr_slave_0: left promiscuous mode [ 537.727891][ T35] hsr_slave_1: left promiscuous mode [ 537.734003][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.747598][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.758014][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.767548][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.819278][ T35] veth1_macvtap: left promiscuous mode [ 537.824770][ T35] veth0_macvtap: left promiscuous mode [ 537.834684][ T35] veth1_vlan: left promiscuous mode [ 537.844770][ T35] veth0_vlan: left promiscuous mode [ 538.298582][ T5224] Bluetooth: hci1: command tx timeout [ 538.381503][ T5224] Bluetooth: hci4: command tx timeout [ 538.617423][ T35] team0 (unregistering): Port device team_slave_1 removed [ 538.674640][ T35] team0 (unregistering): Port device team_slave_0 removed [ 539.257790][ T5224] Bluetooth: hci2: command tx timeout [ 539.433735][T12548] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.447650][T12548] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.454866][T12548] bridge_slave_1: entered allmulticast mode [ 539.480623][T12548] bridge_slave_1: entered promiscuous mode [ 539.491292][T12590] delete_channel: no stack [ 539.532483][T12554] chnl_net:caif_netlink_parms(): no params data found [ 539.724605][T12559] chnl_net:caif_netlink_parms(): no params data found [ 539.738305][ T5224] Bluetooth: hci0: command tx timeout [ 539.793593][T12548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.827915][ T5236] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 539.921121][T12548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.942228][T12560] chnl_net:caif_netlink_parms(): no params data found [ 540.049119][ T5236] usb 3-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 540.077370][ T5236] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 540.086369][ T5236] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.01 [ 540.108593][ T5236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.121680][T12554] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.129003][T12554] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.136173][T12554] bridge_slave_0: entered allmulticast mode [ 540.147465][T12554] bridge_slave_0: entered promiscuous mode [ 540.157599][T12554] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.164721][T12554] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.171991][T12554] bridge_slave_1: entered allmulticast mode [ 540.172652][ T5236] usb 3-1: config 0 descriptor?? [ 540.179135][T12554] bridge_slave_1: entered promiscuous mode [ 540.276205][T12548] team0: Port device team_slave_0 added [ 540.285903][T12548] team0: Port device team_slave_1 added [ 540.313750][T12554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.329119][T12554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.377455][ T5224] Bluetooth: hci1: command tx timeout [ 540.400673][T12597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.423121][T12597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.443149][T12554] team0: Port device team_slave_0 added [ 540.458200][ T5224] Bluetooth: hci4: command tx timeout [ 540.484581][ T5236] usb 3-1: string descriptor 0 read error: -71 [ 540.492488][T12548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.517517][ T5236] usb 3-1: USB disconnect, device number 63 [ 540.528898][T12548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.559106][T12548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.579564][T12548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.586562][T12548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.612647][T12548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.628886][T12559] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.636081][T12559] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.644523][T12559] bridge_slave_0: entered allmulticast mode [ 540.651913][T12559] bridge_slave_0: entered promiscuous mode [ 540.661827][T12554] team0: Port device team_slave_1 added [ 540.732827][T12559] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.740800][T12559] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.750529][T12559] bridge_slave_1: entered allmulticast mode [ 540.760758][T12559] bridge_slave_1: entered promiscuous mode [ 540.841152][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.875789][T12560] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.886036][T12560] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.904288][T12560] bridge_slave_0: entered allmulticast mode [ 540.908466][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'. [ 540.911556][T12560] bridge_slave_0: entered promiscuous mode [ 540.950777][T12548] hsr_slave_0: entered promiscuous mode [ 540.957732][T12548] hsr_slave_1: entered promiscuous mode [ 541.025994][T12554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.033751][T12554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.061022][T12554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.093979][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.106167][T12560] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.114662][T12560] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.123944][T12560] bridge_slave_1: entered allmulticast mode [ 541.131418][T12560] bridge_slave_1: entered promiscuous mode [ 541.155286][T12559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.170321][T12554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.177681][T12554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.206339][T12554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.243980][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.271159][T12560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.284876][T12559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.337488][ T5224] Bluetooth: hci2: command tx timeout [ 541.337573][ T6238] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 541.354377][T12560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.391088][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.514060][T12559] team0: Port device team_slave_0 added [ 541.538453][ T6238] usb 3-1: Using ep0 maxpacket: 32 [ 541.551629][T12554] hsr_slave_0: entered promiscuous mode [ 541.569620][ T6238] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 541.580729][T12554] hsr_slave_1: entered promiscuous mode [ 541.597357][ T6238] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 541.608182][T12554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 541.615758][T12554] Cannot create hsr debugfs directory [ 541.636987][ T6238] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 541.646488][ T6238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.666635][ T6238] usb 3-1: Product: syz [ 541.674522][ T6238] usb 3-1: Manufacturer: syz [ 541.687467][ T6238] usb 3-1: SerialNumber: syz [ 541.697198][T12560] team0: Port device team_slave_0 added [ 541.718148][T12559] team0: Port device team_slave_1 added [ 541.811273][T12560] team0: Port device team_slave_1 added [ 541.827794][ T5224] Bluetooth: hci0: command tx timeout [ 541.915920][ T6238] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 64 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 541.930269][T12560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.943210][T12560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.969569][T12560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.017019][T12559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.024365][T12559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.050500][T12559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.065583][T12559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.072602][T12559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.101388][T12559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.133961][T12560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.141589][T12560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.167619][T12560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.439571][T12560] hsr_slave_0: entered promiscuous mode [ 542.453904][T12560] hsr_slave_1: entered promiscuous mode [ 542.461862][ T5224] Bluetooth: hci1: command tx timeout [ 542.473035][T12560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.482010][T12560] Cannot create hsr debugfs directory [ 542.537544][ T5224] Bluetooth: hci4: command tx timeout [ 542.562128][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.676150][T12559] hsr_slave_0: entered promiscuous mode [ 542.696448][T12559] hsr_slave_1: entered promiscuous mode [ 542.719952][T12559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.730770][T12559] Cannot create hsr debugfs directory [ 542.762459][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.996808][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.150729][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.417748][ T5224] Bluetooth: hci2: command tx timeout [ 543.904458][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.915003][ T5224] Bluetooth: hci0: command tx timeout [ 544.019485][T12548] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 544.082208][T10094] usb 3-1: USB disconnect, device number 64 [ 544.105189][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.116221][T10094] usblp0: removed [ 544.160913][T12548] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 544.181700][T12548] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 544.194137][T12548] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 544.223894][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.275468][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.397766][T12548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.451451][T12548] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.512396][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.519552][ T1057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.542772][ T5224] Bluetooth: hci1: command tx timeout [ 544.617807][ T5224] Bluetooth: hci4: command tx timeout [ 544.643192][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.650442][ T1057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.788165][ T35] bridge_slave_1: left allmulticast mode [ 544.793846][ T35] bridge_slave_1: left promiscuous mode [ 544.806915][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.828383][ T35] bridge_slave_0: left allmulticast mode [ 544.834045][ T35] bridge_slave_0: left promiscuous mode [ 544.869238][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.892155][ T35] bridge_slave_1: left allmulticast mode [ 544.898377][ T35] bridge_slave_1: left promiscuous mode [ 544.904097][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.930120][ T35] bridge_slave_0: left allmulticast mode [ 544.935781][ T35] bridge_slave_0: left promiscuous mode [ 544.957548][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.980620][ T35] bridge_slave_1: left allmulticast mode [ 544.986454][ T35] bridge_slave_1: left promiscuous mode [ 544.997522][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.028276][ T35] bridge_slave_0: left allmulticast mode [ 545.034295][ T35] bridge_slave_0: left promiscuous mode [ 545.048193][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.211993][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1189'. [ 546.264372][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.285025][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.300947][ T35] bond0 (unregistering): Released all slaves [ 546.549966][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.563652][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.575039][ T35] bond0 (unregistering): Released all slaves [ 546.721694][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.732385][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.744450][ T35] bond0 (unregistering): Released all slaves [ 546.986449][T12711] fuse: Bad value for 'user_id' [ 547.007541][T12711] fuse: Bad value for 'user_id' [ 547.026199][T12548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.200190][T12548] veth0_vlan: entered promiscuous mode [ 547.249224][T12548] veth1_vlan: entered promiscuous mode [ 547.487152][T12554] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 547.506861][T12554] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 547.560047][T12548] veth0_macvtap: entered promiscuous mode [ 547.580106][T12554] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 547.592982][T12554] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 547.688153][T12548] veth1_macvtap: entered promiscuous mode [ 547.871533][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.894193][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.907464][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.937433][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.952820][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.963724][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.974520][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.986852][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.998903][T12548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.167502][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.187420][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.197520][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.208306][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.219253][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.230709][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.240999][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.257037][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.270376][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.281049][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.293163][T12548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.362131][ T35] hsr_slave_0: left promiscuous mode [ 548.383674][ T35] hsr_slave_1: left promiscuous mode [ 548.399013][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.416467][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.425070][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.443797][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.462960][ T35] hsr_slave_0: left promiscuous mode [ 548.471232][ T35] hsr_slave_1: left promiscuous mode [ 548.477895][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.485304][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.493966][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.501828][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.514003][ T35] hsr_slave_0: left promiscuous mode [ 548.520429][ T35] hsr_slave_1: left promiscuous mode [ 548.526479][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.540333][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.551521][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.567392][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.682331][ T35] veth1_macvtap: left promiscuous mode [ 548.689058][ T35] veth0_macvtap: left promiscuous mode [ 548.694649][ T35] veth1_vlan: left promiscuous mode [ 548.712549][ T35] veth0_vlan: left promiscuous mode [ 548.726268][ T35] veth1_macvtap: left promiscuous mode [ 548.736279][ T35] veth0_macvtap: left promiscuous mode [ 548.742403][ T35] veth1_vlan: left promiscuous mode [ 548.748374][ T35] veth0_vlan: left promiscuous mode [ 548.754980][ T35] veth1_macvtap: left promiscuous mode [ 548.761246][ T35] veth0_macvtap: left promiscuous mode [ 548.766795][ T35] veth1_vlan: left promiscuous mode [ 548.773099][ T35] veth0_vlan: left promiscuous mode [ 549.405996][ T35] team0 (unregistering): Port device team_slave_1 removed [ 549.450150][ T35] team0 (unregistering): Port device team_slave_0 removed [ 550.228378][ T35] team0 (unregistering): Port device team_slave_1 removed [ 550.266939][ T35] team0 (unregistering): Port device team_slave_0 removed [ 550.986629][ T35] team0 (unregistering): Port device team_slave_1 removed [ 551.024840][ T35] team0 (unregistering): Port device team_slave_0 removed [ 551.506774][T12548] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.523137][T12548] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.539928][T12548] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.551573][T12548] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.591311][T12560] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 551.800833][T12560] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 551.889712][T12560] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 551.919567][T12560] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 552.136983][T12554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.296644][ T2519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.357952][ T2519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.433115][T12554] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.512704][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.519874][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.584034][ T2519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.602438][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.609613][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.634153][ T2519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.874069][T12559] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 552.924633][T12559] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 552.994095][T12559] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 553.068258][T12559] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 553.241768][T12560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.331001][T12554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.381064][T12560] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.394548][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.401702][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.492079][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.499287][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.527633][ T5224] Bluetooth: hci2: unknown advertising packet type: 0x63 [ 553.676884][T12554] veth0_vlan: entered promiscuous mode [ 553.699500][T12554] veth1_vlan: entered promiscuous mode [ 553.712010][T12559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.857902][T12559] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.896561][T12554] veth0_macvtap: entered promiscuous mode [ 553.910401][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.910459][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.946504][T12554] veth1_macvtap: entered promiscuous mode [ 553.990730][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.990789][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.027729][T12560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.089721][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.089743][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.089757][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.089771][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.091072][T12554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.163911][T12560] veth0_vlan: entered promiscuous mode [ 554.174079][T12560] veth1_vlan: entered promiscuous mode [ 554.175534][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.175557][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.175569][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.175583][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.175593][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.175601][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.194407][T12554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.256041][T12560] veth0_macvtap: entered promiscuous mode [ 554.289682][T12554] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.289717][T12554] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.289744][T12554] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.289770][T12554] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.295149][T12559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.381360][T12560] veth1_macvtap: entered promiscuous mode [ 554.625673][T12560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.637759][T12560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.637781][T12560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.637799][T12560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.637818][T12560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.637833][T12560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.642401][T12560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.646578][T12559] veth0_vlan: entered promiscuous mode [ 554.684614][T12560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.684634][T12560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.684643][T12560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.684651][T12560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.684661][T12560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.684669][T12560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.684676][T12560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.684684][T12560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.690623][T12560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.693491][T12559] veth1_vlan: entered promiscuous mode [ 554.698812][ T5234] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 554.863838][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.885198][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.919248][T12560] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.934999][T12560] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.948404][T12560] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.965387][T12560] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.148717][T12559] veth0_macvtap: entered promiscuous mode [ 555.159052][ T2519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.168052][ T2519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.189713][T12559] veth1_macvtap: entered promiscuous mode [ 555.217849][ T5234] usb 3-1: Using ep0 maxpacket: 8 [ 555.232885][ T5234] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.247065][ T5234] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 555.264732][ T5234] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 555.274537][ T5234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.360564][ T5234] usb 3-1: config 0 descriptor?? [ 555.395265][ T5236] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 555.465514][T12559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.508316][T12559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.535766][T12559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.562944][T12559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.607756][T12559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.619838][ T5236] usb 5-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=28.ba [ 555.637291][ T5236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.643066][T12559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.660067][ T5236] usb 5-1: Product: syz [ 555.687609][T12559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.699113][ T5236] usb 5-1: Manufacturer: syz [ 555.704921][ T5236] usb 5-1: SerialNumber: syz [ 555.728501][T12559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.743397][ T5236] usb 5-1: config 0 descriptor?? [ 555.782767][T12559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.827551][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.843274][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.865797][T12559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.914859][T12559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.929699][T12559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.941936][T12559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.955481][T12559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.966643][T12559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.977161][T12559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.050158][T12559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.094913][T12559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.115844][ T5277] usb 5-1: USB disconnect, device number 54 [ 556.127444][ T5234] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 556.128237][T12559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.173540][T12559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.294355][T12559] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.304747][T12559] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.314429][T12559] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.325742][T12559] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.348465][ T5234] usb 4-1: Using ep0 maxpacket: 32 [ 556.369465][ T5234] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.400007][ T5234] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.414188][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.429628][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.438447][ T5234] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 556.452839][ T5234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.494139][ T5234] hub 4-1:4.0: USB hub found [ 556.635571][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.667187][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.732690][ T5234] hub 4-1:4.0: 2 ports detected [ 556.868599][ T2519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.903425][ T2519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.081629][T10094] usb 3-1: USB disconnect, device number 65 [ 557.284564][T12827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.334746][T12827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.827102][T12872] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.828688][ T5234] hub 4-1:4.0: hub_hub_status failed (err = -32) [ 557.836415][T12872] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.851519][T12872] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.860240][T12872] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.912866][ T5234] hub 4-1:4.0: config failed, can't get hub status (err -32) [ 558.077408][T12879] random: crng reseeded on system resumption [ 558.194538][T12878] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1214'. [ 558.716023][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.977391][ T5234] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 559.187789][ T5234] usb 3-1: Using ep0 maxpacket: 16 [ 559.209618][ T5234] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 559.260864][ T5234] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 559.282759][ T5234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.302446][ T5234] usb 3-1: Product: syz [ 559.322896][ T5234] usb 3-1: Manufacturer: syz [ 559.340994][ T5234] usb 3-1: SerialNumber: syz [ 559.378388][ T5234] usb 3-1: config 0 descriptor?? [ 559.397953][ T5236] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 559.419930][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.420820][ T5234] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 559.523740][ T5234] usb 3-1: Detected FT232R [ 559.579895][T10094] usb 4-1: USB disconnect, device number 51 [ 559.593609][ T5234] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 559.638276][T12932] FAULT_INJECTION: forcing a failure. [ 559.638276][T12932] name failslab, interval 1, probability 0, space 0, times 0 [ 559.673077][T11315] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 559.677127][T12932] CPU: 1 UID: 0 PID: 12932 Comm: syz.0.1224 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 559.691018][T12932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 559.693146][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.701060][T12932] Call Trace: [ 559.701072][T12932] [ 559.701081][T12932] dump_stack_lvl+0x241/0x360 [ 559.722170][T12932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.727367][T12932] ? __pfx__printk+0x10/0x10 [ 559.731950][T12932] ? __kmalloc_node_noprof+0xb7/0x440 [ 559.737312][T12932] ? __pfx___might_resched+0x10/0x10 [ 559.742597][T12932] should_fail_ex+0x3b0/0x4e0 [ 559.747271][T12932] should_failslab+0xac/0x100 [ 559.751941][T12932] __kmalloc_node_noprof+0xdf/0x440 [ 559.757125][T12932] ? alloc_slab_obj_exts+0x3a/0xa0 [ 559.762230][T12932] alloc_slab_obj_exts+0x3a/0xa0 [ 559.767154][T12932] __memcg_slab_post_alloc_hook+0x31c/0x7e0 [ 559.773048][T12932] ? __alloc_skb+0x1c3/0x440 [ 559.777633][T12932] kmem_cache_alloc_node_noprof+0x222/0x320 [ 559.783521][T12932] __alloc_skb+0x1c3/0x440 [ 559.787934][T12932] ? __pfx___alloc_skb+0x10/0x10 [ 559.792868][T12932] alloc_skb_with_frags+0xc3/0x770 [ 559.797979][T12932] sock_alloc_send_pskb+0x91a/0xa60 [ 559.803180][T12932] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 559.808894][T12932] ? do_raw_spin_unlock+0x13c/0x8b0 [ 559.814087][T12932] unix_dgram_sendmsg+0x6d3/0x1f80 [ 559.819233][T12932] ? aa_sk_perm+0x967/0xab0 [ 559.823736][T12932] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 559.829277][T12932] ? iovec_from_user+0x61/0x240 [ 559.834122][T12932] ? aa_sock_msg_perm+0x91/0x160 [ 559.839049][T12932] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 559.844328][T12932] ? security_socket_sendmsg+0x87/0xb0 [ 559.849784][T12932] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 559.855326][T12932] __sock_sendmsg+0x221/0x270 [ 559.859999][T12932] ____sys_sendmsg+0x525/0x7d0 [ 559.864761][T12932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 559.870049][T12932] __sys_sendmmsg+0x3b2/0x740 [ 559.874728][T12932] ? __pfx___sys_sendmmsg+0x10/0x10 [ 559.879948][T12932] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 559.885841][T12932] ? ksys_write+0x23e/0x2c0 [ 559.890340][T12932] ? __pfx_lock_release+0x10/0x10 [ 559.895360][T12932] ? vfs_write+0x7c4/0xc90 [ 559.899769][T12932] ? __mutex_unlock_slowpath+0x21d/0x750 [ 559.905397][T12932] ? __pfx_vfs_write+0x10/0x10 [ 559.910170][T12932] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 559.916145][T12932] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 559.922470][T12932] ? do_syscall_64+0x100/0x230 [ 559.927232][T12932] __x64_sys_sendmmsg+0xa0/0xb0 [ 559.932084][T12932] do_syscall_64+0xf3/0x230 [ 559.936581][T12932] ? clear_bhb_loop+0x35/0x90 [ 559.941249][T12932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.947131][T12932] RIP: 0033:0x7f7e45b779f9 [ 559.951539][T12932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.971137][T12932] RSP: 002b:00007f7e4687a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 559.979540][T12932] RAX: ffffffffffffffda RBX: 00007f7e45d05f80 RCX: 00007f7e45b779f9 [ 559.987502][T12932] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000005 [ 559.995461][T12932] RBP: 00007f7e4687a090 R08: 0000000000000000 R09: 0000000000000000 [ 560.003419][T12932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.011378][T12932] R13: 0000000000000000 R14: 00007f7e45d05f80 R15: 00007f7e45e2fa38 [ 560.019354][T12932] [ 560.049751][T11315] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 560.059110][ T5227] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 560.068175][T12941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1224'. [ 560.079201][T11315] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 560.100274][ T5234] ftdi_sio 3-1:0.0: GPIO initialisation failed: -5 [ 560.108122][T11315] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 560.115478][T11315] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 560.126471][ T5234] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 560.280346][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.321448][T11812] usb 3-1: USB disconnect, device number 66 [ 560.352485][T11812] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 560.397107][T11812] ftdi_sio 3-1:0.0: device disconnected [ 560.622612][T12954] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 560.754257][T12954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.787618][T12954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.978501][ T11] bridge_slave_1: left allmulticast mode [ 560.984222][ T11] bridge_slave_1: left promiscuous mode [ 561.027568][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.089163][ T11] bridge_slave_0: left allmulticast mode [ 561.094845][ T11] bridge_slave_0: left promiscuous mode [ 561.144820][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.707396][T10094] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 561.903071][T10094] usb 3-1: Using ep0 maxpacket: 32 [ 561.930570][T10094] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.969403][T10094] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 561.994431][T10094] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 562.035859][T10094] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 562.045615][T10094] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.072557][T10094] usb 3-1: Product: syz [ 562.093567][T10094] usb 3-1: Manufacturer: syz [ 562.118756][T10094] usb 3-1: SerialNumber: syz [ 562.152348][T11315] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 562.183157][T11315] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 562.217730][T11315] Bluetooth: hci4: command tx timeout [ 562.230409][T11315] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 562.249639][T11315] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 562.258995][T10094] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 562.266369][T11315] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 562.275267][T10094] cdc_ncm 3-1:1.0: bind() failure [ 562.280767][T11315] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 562.626409][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.666484][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.708675][ T11] bond0 (unregistering): Released all slaves [ 562.775564][ T5234] usb 3-1: USB disconnect, device number 67 [ 563.024145][T12944] chnl_net:caif_netlink_parms(): no params data found [ 563.188556][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.195757][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.312245][ T11] hsr_slave_0: left promiscuous mode [ 563.340084][ T11] hsr_slave_1: left promiscuous mode [ 563.357507][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.367852][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.428392][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.435856][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.535503][ T11] veth1_macvtap: left promiscuous mode [ 563.543612][ T11] veth0_macvtap: left promiscuous mode [ 563.564282][ T11] veth1_vlan: left promiscuous mode [ 563.572888][ T11] veth0_vlan: left promiscuous mode [ 564.297424][ T5224] Bluetooth: hci4: command tx timeout [ 564.377547][ T5224] Bluetooth: hci2: command tx timeout [ 564.607398][ T5236] usb 1-1: device descriptor read/64, error -110 [ 564.725888][ T11] team0 (unregistering): Port device team_slave_1 removed [ 564.850782][ T11] team0 (unregistering): Port device team_slave_0 removed [ 564.878907][ T5236] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 565.081158][ T5236] usb 1-1: device descriptor read/64, error -32 [ 565.227696][ T5236] usb usb1-port1: attempt power cycle [ 565.697368][ T5236] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 565.751173][ T5236] usb 1-1: device descriptor read/8, error -32 [ 565.897445][ T5236] raw-gadget.3 gadget.0: failed to queue suspend event [ 565.908115][ T5236] raw-gadget.3 gadget.0: failed to queue reset event [ 565.997425][ T5236] raw-gadget.3 gadget.0: failed to queue resume event [ 566.013040][T13009] delete_channel: no stack [ 566.047653][T13025] delete_channel: no stack [ 566.101101][ T5236] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 566.167177][ C1] raw-gadget.3 gadget.0: ignoring, device is not running [ 566.174543][ T5236] usb 1-1: device descriptor read/8, error -32 [ 566.307402][ T5236] raw-gadget.3 gadget.0: failed to queue suspend event [ 566.325036][ T5236] usb usb1-port1: unable to enumerate USB device [ 566.385245][ T5224] Bluetooth: hci4: command tx timeout [ 566.412040][T13056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1237'. [ 566.457503][ T5224] Bluetooth: hci2: command tx timeout [ 566.510059][T13061] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 566.547723][T12944] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.566307][T12944] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.580914][T13061] program syz.3.1239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 566.597794][T12944] bridge_slave_0: entered allmulticast mode [ 566.622431][T12944] bridge_slave_0: entered promiscuous mode [ 566.644639][T12944] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.653846][T12944] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.661489][T12944] bridge_slave_1: entered allmulticast mode [ 566.670402][T12944] bridge_slave_1: entered promiscuous mode [ 566.683333][T12999] chnl_net:caif_netlink_parms(): no params data found [ 566.797945][T12944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.852932][T12944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.943383][T12944] team0: Port device team_slave_0 added [ 567.032654][T12944] team0: Port device team_slave_1 added [ 567.101212][T12999] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.117032][T12999] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.125308][T12999] bridge_slave_0: entered allmulticast mode [ 567.140696][T12999] bridge_slave_0: entered promiscuous mode [ 567.215187][T12944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.240907][T12944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.292675][T12944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.307193][T12944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.307211][T12944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.315966][T12944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.355253][T12999] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.355365][T12999] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.355510][T12999] bridge_slave_1: entered allmulticast mode [ 567.356805][T12999] bridge_slave_1: entered promiscuous mode [ 567.568904][T12999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.572025][T12999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.639815][T13083] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 567.650265][T13084] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 567.703248][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.805164][T12944] hsr_slave_0: entered promiscuous mode [ 567.815798][T12944] hsr_slave_1: entered promiscuous mode [ 567.848315][T11812] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 567.856753][T12944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.866216][T12944] Cannot create hsr debugfs directory [ 567.886111][T12999] team0: Port device team_slave_0 added [ 567.936506][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.997472][T10094] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 568.026967][T12999] team0: Port device team_slave_1 added [ 568.044446][T11812] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 568.067487][T11812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.087674][T11812] usb 4-1: Product: syz [ 568.091900][T11812] usb 4-1: Manufacturer: syz [ 568.100959][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.123478][T11812] usb 4-1: SerialNumber: syz [ 568.154140][T11812] usb 4-1: config 0 descriptor?? [ 568.198305][T10094] usb 3-1: Using ep0 maxpacket: 16 [ 568.231600][T10094] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 568.259405][T10094] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.284940][T10094] usb 3-1: Product: syz [ 568.306071][T10094] usb 3-1: Manufacturer: syz [ 568.324770][T10094] usb 3-1: SerialNumber: syz [ 568.353879][T10094] usb 3-1: config 0 descriptor?? [ 568.396652][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.457768][ T5224] Bluetooth: hci4: command tx timeout [ 568.514738][T12999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.528853][T12999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.556937][ T5224] Bluetooth: hci2: command tx timeout [ 568.563597][T12999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.657528][T10094] usb 3-1: ignoring: not an USB2CAN converter [ 568.767803][T11812] usb 4-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (1) [ 568.833716][T12999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.847274][T12999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.912989][T12999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.925911][ T5277] raw-gadget.3 gadget.0: failed to queue reset event [ 569.018787][ T5277] raw-gadget.3 gadget.0: failed to queue resume event [ 569.036248][T11812] usb 4-1: failed to fetch extended address, random address set [ 569.107376][ T5277] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 569.129603][ C0] raw-gadget.3 gadget.0: ignoring, device is not running [ 569.137613][ T5277] raw-gadget.3 gadget.0: failed to queue reset event [ 569.217932][ T5277] raw-gadget.3 gadget.0: failed to queue resume event [ 569.271675][T11812] usb 4-1: USB disconnect, device number 53 [ 569.307603][ T5277] usb 1-1: device descriptor read/64, error -32 [ 569.446757][ T5277] raw-gadget.3 gadget.0: failed to queue suspend event [ 569.459670][ T5277] raw-gadget.3 gadget.0: failed to queue reset event [ 569.466280][T12999] hsr_slave_0: entered promiscuous mode [ 569.478246][T12999] hsr_slave_1: entered promiscuous mode [ 569.484462][T12999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 569.497162][T12999] Cannot create hsr debugfs directory [ 569.548184][ T5277] raw-gadget.3 gadget.0: failed to queue resume event [ 569.637651][ T5277] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 569.649434][ C0] raw-gadget.3 gadget.0: ignoring, device is not running [ 569.656830][ T5277] raw-gadget.3 gadget.0: failed to queue reset event [ 569.750409][ T5277] raw-gadget.3 gadget.0: failed to queue resume event [ 569.775266][ T11] bridge_slave_1: left allmulticast mode [ 569.792705][ T11] bridge_slave_1: left promiscuous mode [ 569.801421][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.813700][ T11] bridge_slave_0: left allmulticast mode [ 569.819611][ T11] bridge_slave_0: left promiscuous mode [ 569.825353][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.849431][ T5277] usb 1-1: device descriptor read/64, error -32 [ 569.996075][ T5277] raw-gadget.3 gadget.0: failed to queue suspend event [ 570.017011][ T5277] usb usb1-port1: attempt power cycle [ 570.034130][ T5277] raw-gadget.3 gadget.0: failed to queue disconnect event [ 570.082510][ T5277] raw-gadget.3 gadget.0: failed to queue reset event [ 570.171184][ T5277] raw-gadget.3 gadget.0: failed to queue resume event [ 570.185644][ T5277] raw-gadget.3 gadget.0: failed to queue reset event [ 570.401721][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.414459][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.425850][ T11] bond0 (unregistering): Released all slaves [ 570.428089][ T5277] raw-gadget.3 gadget.0: failed to queue resume event [ 570.536146][ T5277] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 570.548301][T11315] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 570.558980][T11315] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 570.577197][T11315] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 570.585095][ C0] raw-gadget.3 gadget.0: ignoring, device is not running [ 570.592283][ T5277] usb 1-1: device descriptor read/8, error -32 [ 570.607178][T11315] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 570.622658][T11315] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 570.627696][ T5227] Bluetooth: hci2: command tx timeout [ 570.637510][T11315] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 570.680697][T12916] raw-gadget.3 gadget.0: failed to queue suspend event [ 570.705932][T12916] raw-gadget.3 gadget.0: failed to queue disconnect event [ 571.110688][T12944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 571.175617][ T11] hsr_slave_0: left promiscuous mode [ 571.218388][ T11] hsr_slave_1: left promiscuous mode [ 571.239280][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.246723][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.284602][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.296472][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.352473][ T11] veth1_macvtap: left promiscuous mode [ 571.358273][ T11] veth0_macvtap: left promiscuous mode [ 571.363908][ T11] veth1_vlan: left promiscuous mode [ 571.376754][T11315] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 571.381802][ T11] veth0_vlan: left promiscuous mode [ 571.390900][T11315] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 571.405090][T11315] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 571.419362][T11315] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 571.427186][T11315] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 571.437932][T11315] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 571.583311][ T5900] usb 3-1: USB disconnect, device number 68 [ 572.055203][ T11] team0 (unregistering): Port device team_slave_1 removed [ 572.099588][ T11] team0 (unregistering): Port device team_slave_0 removed [ 572.600642][T12944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 572.657793][T12944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 572.691176][T12944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 572.699749][ T5224] Bluetooth: hci0: command tx timeout [ 572.988511][T10094] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 573.054601][T13128] chnl_net:caif_netlink_parms(): no params data found [ 573.177930][T10094] usb 3-1: Using ep0 maxpacket: 16 [ 573.196611][T10094] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 573.222525][T10094] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 573.257925][T10094] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 573.291530][T10094] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 573.346647][T10094] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 573.374941][T13145] chnl_net:caif_netlink_parms(): no params data found [ 573.376673][T10094] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.391653][T10094] usb 3-1: Product: syz [ 573.397327][T10094] usb 3-1: Manufacturer: syz [ 573.407317][T10094] usb 3-1: SerialNumber: syz [ 573.497873][ T5224] Bluetooth: hci1: command tx timeout [ 573.519376][T13128] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.526563][T13128] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.540474][T13128] bridge_slave_0: entered allmulticast mode [ 573.548014][T13128] bridge_slave_0: entered promiscuous mode [ 573.555613][T12999] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 573.644797][T13128] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.656821][T13128] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.665128][T13128] bridge_slave_1: entered allmulticast mode [ 573.677746][T13128] bridge_slave_1: entered promiscuous mode [ 573.684597][T12999] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 573.711181][T12999] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 573.761796][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.873339][T12999] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 573.898065][T10094] usb 3-1: USB disconnect, device number 69 [ 573.906742][T12944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.975866][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.003154][T13128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.098502][T13128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.122412][ T5499] udevd[5499]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 574.198398][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.239309][T13145] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.246515][T13145] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.264965][T13145] bridge_slave_0: entered allmulticast mode [ 574.272984][T13145] bridge_slave_0: entered promiscuous mode [ 574.314587][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.362441][T13128] team0: Port device team_slave_0 added [ 574.388131][T13128] team0: Port device team_slave_1 added [ 574.415934][T13145] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.455422][T13145] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.477694][T13145] bridge_slave_1: entered allmulticast mode [ 574.493179][T13145] bridge_slave_1: entered promiscuous mode [ 574.558155][T13128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.566445][T13128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.594200][T13128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.622178][T13145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.634500][T13145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.649089][T12944] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.658012][T13128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.665592][T13128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.692622][T13128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.777521][ T5224] Bluetooth: hci0: command tx timeout [ 574.796966][T13145] team0: Port device team_slave_0 added [ 574.806575][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.813767][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.833012][T13145] team0: Port device team_slave_1 added [ 574.898475][T13128] hsr_slave_0: entered promiscuous mode [ 574.904922][T13128] hsr_slave_1: entered promiscuous mode [ 574.942468][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.949649][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.143351][T13145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.153014][T13145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.189219][T13145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.308392][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.355108][T13145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.366948][T13145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.405832][T13145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.538825][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.577762][ T5224] Bluetooth: hci1: command tx timeout [ 575.695301][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.744822][T12944] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 575.770928][T12944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 575.924311][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.088638][T13145] hsr_slave_0: entered promiscuous mode [ 576.127793][T13145] hsr_slave_1: entered promiscuous mode [ 576.145746][T13145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 576.178413][T13145] Cannot create hsr debugfs directory [ 576.213060][T12999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.443662][T12944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.526464][T12999] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.646369][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.653552][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.759911][ T11] bridge_slave_1: left allmulticast mode [ 576.765578][ T11] bridge_slave_1: left promiscuous mode [ 576.797473][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.807059][ T11] bridge_slave_0: left allmulticast mode [ 576.815804][ T11] bridge_slave_0: left promiscuous mode [ 576.821939][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.868583][ T5224] Bluetooth: hci0: command tx timeout [ 576.876341][ T11] bridge_slave_1: left allmulticast mode [ 576.887585][ T11] bridge_slave_1: left promiscuous mode [ 576.897578][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.929400][ T11] bridge_slave_0: left allmulticast mode [ 576.935232][ T11] bridge_slave_0: left promiscuous mode [ 576.953594][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.657661][ T5224] Bluetooth: hci1: command tx timeout [ 577.945130][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.962826][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.974155][ T11] bond0 (unregistering): Released all slaves [ 578.095907][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.111179][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.121542][ T11] bond0 (unregistering): Released all slaves [ 578.219791][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.226941][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.504462][T12944] veth0_vlan: entered promiscuous mode [ 578.581341][T12944] veth1_vlan: entered promiscuous mode [ 578.741074][T12999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.748226][T11812] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 578.858576][T13128] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 578.885662][T13128] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 578.910641][T13128] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 578.940382][T11315] Bluetooth: hci0: command tx timeout [ 578.948976][T11812] usb 3-1: Using ep0 maxpacket: 32 [ 578.977814][T11812] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 254, changing to 11 [ 579.001587][T11812] usb 3-1: config 1 interface 0 has no altsetting 0 [ 579.011371][T12944] veth0_macvtap: entered promiscuous mode [ 579.036756][T11812] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.40 [ 579.055668][T11812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.064964][T11812] usb 3-1: Product: syz [ 579.074886][T13128] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 579.083153][T11812] usb 3-1: Manufacturer: И [ 579.083174][T11812] usb 3-1: SerialNumber: syz [ 579.128123][T12944] veth1_macvtap: entered promiscuous mode [ 579.254910][ T11] hsr_slave_0: left promiscuous mode [ 579.263069][ T11] hsr_slave_1: left promiscuous mode [ 579.272892][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.280794][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.295786][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.307082][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.342141][ T11] hsr_slave_0: left promiscuous mode [ 579.358474][ T11] hsr_slave_1: left promiscuous mode [ 579.366500][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.376286][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.393480][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.401910][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.462288][ T11] veth1_macvtap: left promiscuous mode [ 579.468014][ T11] veth0_macvtap: left promiscuous mode [ 579.480797][ T11] veth1_vlan: left promiscuous mode [ 579.486094][ T11] veth0_vlan: left promiscuous mode [ 579.493812][ T11] veth1_macvtap: left promiscuous mode [ 579.500524][ T11] veth0_macvtap: left promiscuous mode [ 579.506238][ T11] veth1_vlan: left promiscuous mode [ 579.511901][ T11] veth0_vlan: left promiscuous mode [ 579.738288][T11315] Bluetooth: hci1: command tx timeout [ 580.256996][ T11] team0 (unregistering): Port device team_slave_1 removed [ 580.317688][ T11] team0 (unregistering): Port device team_slave_0 removed [ 580.618218][T11315] Bluetooth: hci3: command 0x0406 tx timeout [ 581.174543][ T11] team0 (unregistering): Port device team_slave_1 removed [ 581.223305][ T11] team0 (unregistering): Port device team_slave_0 removed [ 581.711959][T12944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.722665][T12944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.735953][T12944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.813156][T12944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.826887][T12944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.838029][T12944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.848883][T12944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.862115][T12944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.879431][T11812] usbhid 3-1:1.0: can't add hid device: -71 [ 581.896190][T11812] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 581.918765][T11812] usb 3-1: USB disconnect, device number 70 [ 581.944763][T12944] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.955027][T12944] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.964487][T12944] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.975624][T12944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.009180][T12999] veth0_vlan: entered promiscuous mode [ 582.155259][T12999] veth1_vlan: entered promiscuous mode [ 582.181993][T13145] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 582.216157][T13145] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 582.243089][T13145] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 582.327323][T13145] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 582.526251][T13128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.565369][T12999] veth0_macvtap: entered promiscuous mode [ 582.604720][T12999] veth1_macvtap: entered promiscuous mode [ 582.619561][T12999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.631561][T12999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.641420][T12999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.658425][T12999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.696581][T12999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.723212][T13128] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.736680][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.755010][T12999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.771191][T12999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.781875][T12999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.797782][T12999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.815880][T12999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.832869][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.848063][T12999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.868344][T12999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.901573][ T7876] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.908681][ T7876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.928092][ T7876] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.935152][ T7876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.988640][T12999] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.007403][T12999] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.020155][T12999] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.032870][T12999] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.073206][ T7876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.089390][ T7876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.349473][T13128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 583.524397][T13145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.552280][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.584084][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.613930][T13128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.628978][T11812] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 583.653168][T13145] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.762756][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.769938][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.799246][ T8] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 583.827797][ T2519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.846626][T11812] usb 3-1: Using ep0 maxpacket: 16 [ 583.856105][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.863245][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.867585][ T2519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.877251][T11812] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 583.890285][T11812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.930483][T11812] usb 3-1: Product: syz [ 583.935017][T11812] usb 3-1: Manufacturer: syz [ 583.960948][T11812] usb 3-1: SerialNumber: syz [ 583.973190][T11812] usb 3-1: config 0 descriptor?? [ 584.001171][ T8] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 584.012428][T13128] veth0_vlan: entered promiscuous mode [ 584.041670][ T8] usb 2-1: config 0 has no interface number 0 [ 584.086882][ T8] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.134996][ T8] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.161896][T13128] veth1_vlan: entered promiscuous mode [ 584.179529][ T8] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 584.223191][T11812] usb 3-1: ignoring: not an USB2CAN converter [ 584.243353][ T8] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 584.285722][ T8] usb 2-1: Manufacturer: syz [ 584.348560][ T8] usb 2-1: config 0 descriptor?? [ 584.364121][T13128] veth0_macvtap: entered promiscuous mode [ 584.428335][T13145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.438955][T13328] fuse: Unknown parameter '00000000000000000000003' [ 584.451384][T13128] veth1_macvtap: entered promiscuous mode [ 584.509493][ T5900] usb 3-1: USB disconnect, device number 71 [ 584.606943][T13128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.636019][T13128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.656911][ T941] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 584.663622][T13128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.687590][T13128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.698965][T13313] QAT: Device 0 not found [ 584.705274][ T941] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 584.715718][T13128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.729952][T13128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.752548][T13128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.780897][T13128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.793893][T11812] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 584.793932][T13128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.815853][T13128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.826517][T13128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.839781][T13128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.852919][T13128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.864083][T13128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.916106][T13128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.929777][T13128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.943467][T13128] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.955011][T13128] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.965089][T13128] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.974499][T13128] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.987689][T11812] usb 5-1: Using ep0 maxpacket: 8 [ 585.007034][T11812] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 585.028510][T13145] veth0_vlan: entered promiscuous mode [ 585.082103][ T8] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.18/0003:054C:03D5.002B/input/input71 [ 585.093866][T11812] usb 5-1: config 0 has no interface number 0 [ 585.123982][T11812] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 585.153392][T13145] veth1_vlan: entered promiscuous mode [ 585.172162][T11812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.211008][T11812] usb 5-1: Product: syz [ 585.245514][T11812] usb 5-1: Manufacturer: syz [ 585.282237][T11812] usb 5-1: SerialNumber: syz [ 585.293621][ T8] sony 0003:054C:03D5.002B: input,hidraw1: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.1-1/input18 [ 585.322635][T11812] usb 5-1: config 0 descriptor?? [ 585.340304][T13145] veth0_macvtap: entered promiscuous mode [ 585.359546][T11812] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 585.377309][T11812] pctv452e: pctv452e_power_ctrl: 1 [ 585.377309][T11812] [ 585.380002][T13145] veth1_macvtap: entered promiscuous mode [ 585.385136][T11812] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 585.385136][T11812] [ 585.478846][T11812] dvb-usb: bulk message failed: -22 (5/0) [ 585.512136][ T2519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.543986][ T2519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.566763][ T29] audit: type=1326 audit(1723317206.461:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13327 comm="syz.4.1268" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f045ff779f9 code=0x0 [ 585.588656][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.628813][T11812] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-22) [ 585.660666][T13343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.687884][T13343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.730601][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.754358][T13145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.775591][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.789579][T13145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.803822][T13145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.814430][T13145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.834595][T13145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.847302][T13145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.865277][T13145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.877380][T13145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.901931][T13145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.946523][T13145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.996905][T13145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.011683][T13145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.022314][T13145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.034227][T13145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.044805][T13145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.055139][T13145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.079754][T13145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.099768][T13145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.114575][T13145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.130985][T13145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.168361][T13145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.180202][T13145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.189962][T13145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.201932][T13145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.401196][ T941] usb 2-1: reset high-speed USB device number 50 using dummy_hcd [ 586.639502][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.721710][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.753413][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.843269][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.356028][T13361] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1255'. [ 587.484018][ T5277] usb 5-1: USB disconnect, device number 55 [ 587.707475][ T5274] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 587.907405][ T5274] usb 3-1: Using ep0 maxpacket: 16 [ 587.922081][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.933073][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.949848][ T5274] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 587.967673][ T941] usb 2-1: device descriptor read/64, error -71 [ 587.980351][ T5274] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 587.989943][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.042946][ T5277] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 588.054047][ T5274] usb 3-1: config 0 descriptor?? [ 588.247942][ T941] usb 2-1: reset high-speed USB device number 50 using dummy_hcd [ 588.267509][ T5277] usb 5-1: Using ep0 maxpacket: 32 [ 588.277021][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.291679][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.302041][ T5277] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 588.314160][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.335710][ T5277] usb 5-1: config 0 descriptor?? [ 588.448246][ T941] usb 2-1: device firmware changed [ 588.477096][T13358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.528300][ T5900] usb 2-1: USB disconnect, device number 50 [ 588.535622][T13358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.603999][ T5274] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 588.705144][ T5274] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 588.725738][ T5224] Bluetooth: hci1: unexpected cc 0x1407 length: 100 > 9 [ 588.755479][ T5274] microsoft 0003:045E:07DA.002C: unknown main item tag 0x4 [ 588.820046][ T5274] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 588.848359][ T5274] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 588.907825][ T5900] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 588.965836][ T5274] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.002C/input/input72 [ 589.012469][ T5277] ft260 0003:0403:6030.002D: chip code: 5e81 abf2 [ 589.040418][ T5274] microsoft 0003:045E:07DA.002C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 589.083363][ T5274] usb 3-1: USB disconnect, device number 72 [ 589.097189][T13398] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 589.139651][ T5900] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 589.176544][T13396] netlink: 'syz.2.1283': attribute type 33 has an invalid length. [ 589.187429][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.195476][ T5900] usb 2-1: Product: syz [ 589.226900][ T5900] usb 2-1: Manufacturer: syz [ 589.238758][ T5900] usb 2-1: SerialNumber: syz [ 589.256187][ T5900] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 589.341044][T13396] syz.2.1283 (13396) used greatest stack depth: 16920 bytes left [ 589.352102][ T941] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 589.378240][ T5234] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 589.469666][T10094] usb 5-1: USB disconnect, device number 56 [ 589.577888][ T5234] usb 1-1: Using ep0 maxpacket: 32 [ 589.584734][ T5234] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 589.593657][ T5234] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 589.602332][ T5234] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 589.611544][ T5234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 589.625944][ T5234] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 589.635801][ T5234] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 589.649960][ T5234] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 589.660550][ T5234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.678918][ T5234] usb 1-1: config 0 descriptor?? [ 589.807502][ T5274] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 589.899506][ T5234] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 589.938124][ T5234] usb 1-1: USB disconnect, device number 58 [ 589.975144][ T5234] usblp0: removed [ 589.981802][T10094] usb 2-1: USB disconnect, device number 51 [ 590.042983][ T5274] usb 3-1: Using ep0 maxpacket: 32 [ 590.058262][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.095429][ T5274] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 590.122475][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.150305][ T2519] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.169602][ T5274] usb 3-1: config 0 descriptor?? [ 590.346807][ T2519] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.379904][T13402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 590.411928][ T5274] usbhid 3-1:0.0: can't add hid device: -71 [ 590.429729][ T5274] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 590.458335][ T941] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 590.465604][ T941] ath9k_htc: Failed to initialize the device [ 590.482308][ T5274] usb 3-1: USB disconnect, device number 73 [ 590.497512][ T5234] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 590.506067][T10094] usb 2-1: ath9k_htc: USB layer deinitialized [ 590.581738][ T2519] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.713230][ T5234] usb 1-1: Using ep0 maxpacket: 32 [ 590.720885][ T2519] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.743767][ T5234] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 590.759070][ T5234] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 590.780491][ T5234] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 590.780768][T11315] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 590.789722][ T5234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 590.811124][T11315] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 590.821388][T11315] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 590.828082][ T5234] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 590.855361][ T5234] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 590.857431][T11315] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 590.882728][T11315] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 590.886035][ T5234] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 590.894678][T11315] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 590.905446][ T5234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.909514][ T5274] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 590.968229][ T5234] usb 1-1: config 0 descriptor?? [ 591.063008][ T2519] bridge_slave_1: left allmulticast mode [ 591.075476][ T941] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 591.095545][ T2519] bridge_slave_1: left promiscuous mode [ 591.117687][ T2519] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.128744][ T5274] usb 3-1: Using ep0 maxpacket: 32 [ 591.136165][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.155803][ T5274] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 591.172859][ T2519] bridge_slave_0: left allmulticast mode [ 591.188093][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.196266][ T2519] bridge_slave_0: left promiscuous mode [ 591.213417][ T2519] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.230947][ T5234] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 591.231719][ T5274] usb 3-1: config 0 descriptor?? [ 591.287523][ T941] usb 2-1: Using ep0 maxpacket: 32 [ 591.374593][ T941] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.436324][ T941] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 591.460259][ T941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.504141][ T941] usb 2-1: Product: syz [ 591.517853][ T941] usb 2-1: Manufacturer: syz [ 591.532269][ T941] usb 2-1: SerialNumber: syz [ 591.717658][ T5274] usbhid 3-1:0.0: can't add hid device: -71 [ 591.742700][ T5274] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 591.762237][T13397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1284'. [ 591.784501][ T5274] usb 3-1: USB disconnect, device number 74 [ 591.847543][ T5277] usb 1-1: USB disconnect, device number 59 [ 591.930388][ T5277] usblp0: removed [ 592.316876][ T2519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.351967][ T2519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.373984][ T2519] bond0 (unregistering): Released all slaves [ 592.598152][ T941] cdc_ncm 2-1:1.0: failed to get mac address [ 592.698866][ T5224] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 592.708115][ T5224] Bluetooth: hci1: Injecting HCI hardware error event [ 592.716698][T11315] Bluetooth: hci1: hardware error 0x00 [ 592.814314][ T941] cdc_ncm 2-1:1.0: bind() failure [ 592.838707][ T941] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 592.856181][ T941] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 592.880153][ T941] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 592.918682][ T941] usb 2-1: USB disconnect, device number 52 [ 593.021484][ T5224] Bluetooth: hci0: command tx timeout [ 593.169897][T13426] chnl_net:caif_netlink_parms(): no params data found [ 593.253505][ T2519] hsr_slave_0: left promiscuous mode [ 593.283071][ T2519] hsr_slave_1: left promiscuous mode [ 593.292407][ T2519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.301766][ T2519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.315912][ T2519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.327094][ T2519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.416221][ T2519] veth1_macvtap: left promiscuous mode [ 593.448863][ T2519] veth0_macvtap: left promiscuous mode [ 593.472570][ T2519] veth1_vlan: left promiscuous mode [ 593.496284][ T2519] veth0_vlan: left promiscuous mode [ 593.521991][T13467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.575489][T13467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.618610][T13467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.657504][T13467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.807322][ T5234] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 594.001172][ T5234] usb 2-1: device descriptor read/64, error -71 [ 594.196492][T13430] ALSA: mixer_oss: invalid OSS volume '' [ 594.291375][ T5234] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 594.507387][ T5234] usb 2-1: device descriptor read/64, error -71 [ 594.786439][T11315] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 594.857413][ T5234] usb usb2-port1: attempt power cycle [ 595.103520][T11315] Bluetooth: hci0: command tx timeout [ 595.339110][ T5234] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 595.411585][ T5234] usb 2-1: device descriptor read/8, error -71 [ 595.618780][ T8] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 595.734969][ T5234] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 595.813019][ T5234] usb 2-1: device descriptor read/8, error -71 [ 595.851428][ T8] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 595.884767][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.888229][ T2519] team0 (unregistering): Port device team_slave_1 removed [ 595.913518][ T8] usb 1-1: Product: syz [ 595.920446][ T8] usb 1-1: Manufacturer: syz [ 595.929584][ T8] usb 1-1: SerialNumber: syz [ 595.960161][ T8] usb 1-1: config 0 descriptor?? [ 595.979587][ T5234] usb usb2-port1: unable to enumerate USB device [ 596.043049][ T2519] team0 (unregistering): Port device team_slave_0 removed [ 596.480635][ T8] usb 1-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (1) [ 596.725392][ T8] usb 1-1: failed to fetch extended address, random address set [ 597.181710][T11315] Bluetooth: hci0: command tx timeout [ 597.298915][ T8] usb 1-1: USB disconnect, device number 60 [ 597.631581][T13426] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.660185][T13426] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.686004][T13426] bridge_slave_0: entered allmulticast mode [ 597.701551][T13426] bridge_slave_0: entered promiscuous mode [ 597.720457][T13426] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.743937][T13426] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.758655][T13426] bridge_slave_1: entered allmulticast mode [ 597.773187][T13426] bridge_slave_1: entered promiscuous mode [ 597.930246][T13426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.963988][T13426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.102420][T13426] team0: Port device team_slave_0 added [ 598.189626][T13426] team0: Port device team_slave_1 added [ 598.465899][T13426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.501832][T13426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.627393][T13426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.683979][T13426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.703514][T13426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.800599][T13426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.835624][T13558] netlink: 'syz.2.1316': attribute type 4 has an invalid length. [ 599.057563][T13426] hsr_slave_0: entered promiscuous mode [ 599.132128][T13426] hsr_slave_1: entered promiscuous mode [ 599.257366][T11315] Bluetooth: hci0: command tx timeout [ 600.806766][T13426] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 600.861278][T13426] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 600.922465][T13426] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 600.982314][T13426] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 601.276539][T13426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.348107][T13606] ptrace attach of "./syz-executor exec"[13145] was attempted by "./syz-executor exec"[13606] [ 601.356240][T13426] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.399964][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.407107][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.429584][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.436717][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.542488][ T25] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 601.551010][ T25] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 601.582627][ T25] hid-generic 0000:0000:0000.002E: unknown main item tag 0x2 [ 601.619526][ T25] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 601.646592][ T25] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 601.673192][ T25] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 601.709001][ T25] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 601.716416][ T25] hid-generic 0000:0000:0000.002E: item fetching failed at offset 8/18 [ 601.731001][T13426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.779915][ T25] hid-generic 0000:0000:0000.002E: probe with driver hid-generic failed with error -22 [ 601.887021][T13426] veth0_vlan: entered promiscuous mode [ 601.914574][T13426] veth1_vlan: entered promiscuous mode [ 602.030272][T13426] veth0_macvtap: entered promiscuous mode [ 602.068709][T13426] veth1_macvtap: entered promiscuous mode [ 602.122802][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.165291][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.200309][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.227304][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.237137][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.287317][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.297153][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.357290][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.391138][T13426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.420587][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.457872][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.489375][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.527363][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.565689][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.616756][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.635250][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.653874][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.664346][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.679835][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.696993][T13426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.753774][T13426] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.783389][T13426] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.811088][T13426] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.841077][T13426] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.072510][ T2506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.109503][ T2506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.265125][ T2519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.297391][ T2519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.566802][T13661] input: syz0 as /devices/virtual/input/input73 [ 605.425901][T13686] bridge_slave_1: left allmulticast mode [ 605.442881][T13686] bridge_slave_1: left promiscuous mode [ 605.454329][T13686] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.607492][ T5900] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 605.799578][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 605.812149][ T5900] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.854128][ T5900] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.899138][ T5900] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 605.916811][ T5900] usb 5-1: config 0 interface 0 has no altsetting 0 [ 605.947468][ T5900] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 605.966797][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.009814][ T5900] usb 5-1: config 0 descriptor?? [ 606.358616][ T5277] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 606.421714][ T5900] hid (null): bogus close delimiter [ 606.442590][ T5900] hid-generic 0003:045E:05DA.002F: bogus close delimiter [ 606.470929][ T5900] hid-generic 0003:045E:05DA.002F: item 0 4 2 10 parsing failed [ 606.493999][ T5900] hid-generic 0003:045E:05DA.002F: probe with driver hid-generic failed with error -22 [ 606.555744][ T5277] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 606.580228][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.613934][ T5277] usb 1-1: Product: syz [ 606.624952][ T5277] usb 1-1: Manufacturer: syz [ 606.650181][ T5900] usb 5-1: USB disconnect, device number 57 [ 606.665271][ T5277] usb 1-1: SerialNumber: syz [ 606.702236][ T5277] usb 1-1: config 0 descriptor?? [ 606.721948][ T5277] ch341 1-1:0.0: ch341-uart converter detected [ 606.910760][T13754] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1356'. [ 607.051129][ T5277] usb 1-1: failed to receive control message: -71 [ 607.060799][ T5277] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 607.089788][ T5277] usb 1-1: USB disconnect, device number 61 [ 607.112042][ T5277] ch341 1-1:0.0: device disconnected [ 607.388018][T13765] team_slave_0: entered promiscuous mode [ 607.393790][T13765] team_slave_1: entered promiscuous mode [ 607.430462][T13765] team_slave_0: left promiscuous mode [ 607.435937][T13765] team_slave_1: left promiscuous mode [ 608.187466][ T5900] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 608.227646][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1363'. [ 608.391005][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.429222][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.472477][ T5900] usb 5-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 608.485717][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.503471][ T5900] usb 5-1: config 0 descriptor?? [ 608.959411][ T5900] wacom 0003:056A:0300.0030: unknown main item tag 0x0 [ 608.978462][ T5900] wacom 0003:056A:0300.0030: Unknown device_type for 'HID 056a:0300'. Assuming pen. [ 608.997719][ T5900] wacom 0003:056A:0300.0030: hidraw0: USB HID v0.00 Device [HID 056a:0300] on usb-dummy_hcd.4-1/input0 [ 609.019286][ T5900] input: Wacom Bamboo One S Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0300.0030/input/input75 [ 609.087341][ T8] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 609.099849][T13800] team_slave_0: entered promiscuous mode [ 609.105598][T13800] team_slave_1: entered promiscuous mode [ 609.111804][ T5277] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 609.129404][T13800] team_slave_0: left promiscuous mode [ 609.134849][T13800] team_slave_1: left promiscuous mode [ 609.281003][ T30] INFO: task syz.0.950:11153 blocked for more than 143 seconds. [ 609.307327][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 609.312609][ T30] Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 609.320382][ T5277] usb 3-1: Using ep0 maxpacket: 32 [ 609.342165][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 609.350709][ T5277] usb 3-1: config 1 has an invalid descriptor of length 185, skipping remainder of the config [ 609.366391][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 609.375535][ T5277] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 609.394190][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.406946][ T30] task:syz.0.950 state:D stack:25232 pid:11153 tgid:11148 ppid:10487 flags:0x00004002 [ 609.425975][ T8] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 609.436199][ T30] Call Trace: [ 609.440154][ T30] [ 609.444209][ T5277] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 609.456694][ T30] __schedule+0x1800/0x4a60 [ 609.461365][ T8] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 959 [ 609.471684][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.481987][ T30] ? __pfx___schedule+0x10/0x10 [ 609.486957][ T30] ? __pfx_lock_release+0x10/0x10 [ 609.495340][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 609.504700][ T5277] usb 3-1: Product:   [ 609.510839][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 609.516527][ T5277] usb 3-1: Manufacturer: 濗邜㚆靊䴝ㆅ㲕潽씍뱛䃺꣗렧ｑ瞰馿윖춝蚣溰齢Գꃭ屽ᕟ횂᫸颪懵䪼䩦퍢袆쇾呄寧菉垛곫獼쀾ᅋሡᮎள翫㼲楦땗鯺쨸㴢薵恰駕㓰蛰⢁吤ʶ彍峀歋犈업枵쏁䕵픫좐᎕닢ဘ斊╘꓀뭝嫒᫟葜쳇쑰璷付嫓톾飼䛕㾳ߴꪋꟘ윋醭閭薜萧⤣駮繬⧵䠢ꝓ拼큟賻 [ 609.550447][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.558553][ T30] ? schedule+0x90/0x320 [ 609.562821][ T30] schedule+0x14b/0x320 [ 609.567421][ T8] usb 4-1: Product: syz [ 609.571928][ T8] usb 4-1: Manufacturer: syz [ 609.582560][ T30] schedule_preempt_disabled+0x13/0x30 [ 609.588137][ T8] usb 4-1: SerialNumber: syz [ 609.594446][ T30] __mutex_lock+0x6a4/0xd70 [ 609.607708][ T30] ? __mutex_lock+0x527/0xd70 [ 609.617286][ T30] ? usbdev_release+0x7a/0x7a0 [ 609.619429][ T5277] usb 3-1: SerialNumber: 䓶칥ȨJ慆믻渷싋〜⼹拧駭ㅸ鹉瀯࿝빉ᐑ三蠵辍싧쫮ل癁፩䢝䗨䤼䊜퍏쬮㌐ݴ㲚䦶ᷥ橁⚤鐯ⲫꡄ쇙྄୵瘐㧳墔چ뙞㩏᰷Ԩ箵录؏褩痾䏉窦드懏쿱쉦ꋬ鶪⿂웂㵭蟠ᣞ៯삧蹇뽧啽⬂퍭ͯ궵㹓㶢䨞롚쯀᷿댶鸎昡ꖝ慄酰뺩༶ꋔ謵ꠘ௯㞰徏妯즲 [ 609.626995][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 609.662491][ T30] ? __fsnotify_parent+0x20c/0x5e0 [ 609.674609][ T30] ? __pfx___fsnotify_parent+0x10/0x10 [ 609.690029][ T30] usbdev_release+0x7a/0x7a0 [ 609.697349][ T30] ? evm_file_release+0x140/0x1d0 [ 609.702515][ T30] ? __pfx_usbdev_release+0x10/0x10 [ 609.708023][ T30] __fput+0x24a/0x8a0 [ 609.712067][ T30] task_work_run+0x24f/0x310 [ 609.716682][ T30] ? __pfx_task_work_run+0x10/0x10 [ 609.722143][ T30] ? switch_task_namespaces+0xe1/0x110 [ 609.729338][ T30] do_exit+0xa2f/0x27f0 [ 609.733667][ T30] ? __pfx_do_exit+0x10/0x10 [ 609.738428][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 609.743866][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 609.749948][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 609.756361][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 609.761722][ T30] do_group_exit+0x207/0x2c0 [ 609.766350][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 609.771708][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 609.776950][ T30] get_signal+0x16a1/0x1740 [ 609.781536][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 609.788600][ T30] ? __pfx_get_signal+0x10/0x10 [ 609.793574][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 609.799353][ T30] arch_do_signal_or_restart+0x96/0x860 [ 609.804962][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 609.811230][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 609.817465][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 609.823264][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 609.840269][ T30] do_syscall_64+0x100/0x230 [ 609.844920][ T30] ? clear_bhb_loop+0x35/0x90 [ 609.851526][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.857667][ T8] cdc_ncm 4-1:1.0: bind() failure [ 609.864074][ T30] RIP: 0033:0x7fc619f76390 [ 609.873258][ T8] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 609.880122][ T30] RSP: 002b:00007fc61adc1b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 609.889907][ T8] cdc_ncm 4-1:1.1: bind() failure [ 609.901424][ T30] RAX: 0000000000000006 RBX: 0000000000101641 RCX: 00007fc619f76390 [ 609.911978][ T8] usb 4-1: USB disconnect, device number 54 [ 609.918015][ T30] RDX: 0000000000101641 RSI: 00007fc61adc1c10 RDI: 00000000ffffff9c [ 609.926056][ T30] RBP: 00007fc61adc1c10 R08: 0000000000000000 R09: 0000000000000000 [ 609.943276][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 609.967278][ T30] R13: 0000000000000001 R14: 00007fc61a106130 R15: 00007fc61a22fa38 [ 609.975525][ T30] [ 609.985705][ T30] [ 609.985705][ T30] Showing all locks held in the system: [ 609.999808][ T25] usb 5-1: USB disconnect, device number 58 [ 610.014738][ T30] 3 locks held by kworker/0:0/8: [ 610.020799][ T30] #0: ffff888018ea7d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 610.040664][ T30] #1: ffffc900000d7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 610.053111][ T30] #2: ffff88802401c190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 610.062421][ T30] 3 locks held by kworker/u8:0/11: [ 610.067847][ T30] 8 locks held by kworker/1:0/25: [ 610.072886][ T30] #0: ffff888018ea7d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 610.084672][ T30] #1: ffffc900001f7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 610.098675][ T30] #2: ffff888024061190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 610.107668][ T30] #3: ffff88806cfb6190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 610.116936][ T30] #4: ffff88806e9f4160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 610.128630][ T30] #5: ffff888060289a20 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 610.140445][ T30] #6: ffffffff8f70ae28 (input_mutex){+.+.}-{3:3}, at: __input_unregister_device+0x2f3/0x620 [ 610.150743][ T30] #7: ffffffff8e93d678 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 610.161679][ T30] 1 lock held by khungtaskd/30: [ 610.166537][ T30] #0: ffffffff8e9382a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 610.176450][ T30] 1 lock held by acpid/4665: [ 610.181119][ T30] #0: ffffffff8e93d678 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 610.192143][ T30] 2 locks held by getty/4976: [ 610.198819][ T30] #0: ffff88802b37c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 610.213950][ T30] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 610.224597][ T30] 5 locks held by kworker/0:5/5275: [ 610.229993][ T30] #0: ffff888018ea7d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 610.242255][ T30] #1: ffffc9000442fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 610.255185][ T30] #2: ffff8880242e3190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 610.264154][ T30] #3: ffff8880242e7518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x25b6/0x5150 [ 610.274255][ T30] #4: ffff888023a15f68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x25f4/0x5150 [ 610.284018][ T30] 4 locks held by kworker/0:7/5277: [ 610.289356][ T30] #0: ffff888018ea7d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 610.303081][ T30] #1: ffffc9000445fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 610.315092][ T30] #2: ffff888023fae190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 610.324083][ T30] #3: ffff88807cc60190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 610.338893][ T30] 4 locks held by udevd/5499: [ 610.343588][ T30] #0: ffff888067ed32f0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 [ 610.357117][ T30] #1: ffff888030342c88 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 610.372702][ T30] #2: ffff88807f714878 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 610.383003][ T30] #3: ffff88806cfb6190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 [ 610.392213][ T30] 4 locks held by udevd/6898: [ 610.396899][ T30] #0: ffff88804262d1c8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 [ 610.417367][ T30] #1: ffff888061e1cc88 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 610.426825][ T30] #2: ffff888050970b48 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 610.441928][ T30] #3: ffff88807cc60190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 [ 610.451031][ T30] 1 lock held by syz.0.950/11153: [ 610.456068][ T30] #0: ffff8880242e3190 (&dev->mutex){....}-{3:3}, at: usbdev_release+0x7a/0x7a0 [ 610.466454][ T30] 1 lock held by syz-executor/13426: [ 610.472759][ T30] [ 610.475206][ T30] ============================================= [ 610.475206][ T30] [ 610.495394][ T30] NMI backtrace for cpu 1 [ 610.499743][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 610.510253][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 610.520321][ T30] Call Trace: [ 610.523598][ T30] [ 610.526525][ T30] dump_stack_lvl+0x241/0x360 [ 610.531218][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.536433][ T30] ? __pfx__printk+0x10/0x10 [ 610.541036][ T30] ? vprintk_emit+0x631/0x770 [ 610.545713][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 610.550758][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 610.555692][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 610.561142][ T30] ? _printk+0xd5/0x120 [ 610.565296][ T30] ? __pfx__printk+0x10/0x10 [ 610.569885][ T30] ? __wake_up_klogd+0xcc/0x110 [ 610.574732][ T30] ? __pfx__printk+0x10/0x10 [ 610.579331][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 610.584359][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 610.590340][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 610.596317][ T30] watchdog+0xfee/0x1030 [ 610.600572][ T30] ? watchdog+0x1ea/0x1030 [ 610.604997][ T30] ? __pfx_watchdog+0x10/0x10 [ 610.609674][ T30] kthread+0x2f0/0x390 [ 610.613743][ T30] ? __pfx_watchdog+0x10/0x10 [ 610.618416][ T30] ? __pfx_kthread+0x10/0x10 [ 610.623014][ T30] ret_from_fork+0x4b/0x80 [ 610.627426][ T30] ? __pfx_kthread+0x10/0x10 [ 610.632011][ T30] ret_from_fork_asm+0x1a/0x30 [ 610.636777][ T30] [ 610.643627][ T30] Sending NMI from CPU 1 to CPUs 0: [ 610.650053][ C0] NMI backtrace for cpu 0 [ 610.650066][ C0] CPU: 0 UID: 0 PID: 2506 Comm: kworker/u8:7 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 610.650087][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 610.650098][ C0] Workqueue: bat_events batadv_nc_worker [ 610.650124][ C0] RIP: 0010:__lock_acquire+0x98d/0x2040 [ 610.650149][ C0] Code: 81 c3 c6 00 00 00 48 89 d8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 a8 00 00 00 80 3b 02 74 31 49 ff c6 48 8b 44 24 38 0f b6 04 10 <84> c0 75 6b 48 8b 44 24 48 48 63 00 49 83 c7 28 49 83 c5 28 41 ff [ 610.650163][ C0] RSP: 0018:ffffc900096ef850 EFLAGS: 00000002 [ 610.650177][ C0] RAX: 0000000000000000 RBX: ffffffff93469728 RCX: ffffffff816fca50 [ 610.650190][ C0] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff9372e8d8 [ 610.650202][ C0] RBP: 0000000000000000 R08: ffffffff9372e8df R09: 1ffffffff26e5d1b [ 610.650213][ C0] R10: dffffc0000000000 R11: fffffbfff26e5d1c R12: 0000000000000001 [ 610.650226][ C0] R13: ffff88802a650b28 R14: 0000000000000002 R15: ffff88802a650b28 [ 610.650238][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 610.650252][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 610.650264][ C0] CR2: 00007fed846d3178 CR3: 000000007e80c000 CR4: 00000000003506f0 [ 610.650280][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 610.650290][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 610.650301][ C0] Call Trace: [ 610.650308][ C0] [ 610.650315][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 610.650333][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 610.650361][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 610.650386][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 610.650408][ C0] ? nmi_handle+0x14f/0x5a0 [ 610.650424][ C0] ? nmi_handle+0x2a/0x5a0 [ 610.650440][ C0] ? __lock_acquire+0x98d/0x2040 [ 610.650461][ C0] ? default_do_nmi+0x63/0x160 [ 610.650480][ C0] ? exc_nmi+0x123/0x1f0 [ 610.650497][ C0] ? end_repeat_nmi+0xf/0x53 [ 610.650519][ C0] ? __lock_acquire+0x890/0x2040 [ 610.650540][ C0] ? __lock_acquire+0x98d/0x2040 [ 610.650562][ C0] ? __lock_acquire+0x98d/0x2040 [ 610.650584][ C0] ? __lock_acquire+0x98d/0x2040 [ 610.650605][ C0] [ 610.650611][ C0] [ 610.650625][ C0] lock_acquire+0x1ed/0x550 [ 610.650646][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 610.650670][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 610.650692][ C0] ? __local_bh_disable_ip+0x187/0x220 [ 610.650713][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 610.650733][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 610.650754][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 610.650773][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 610.650794][ C0] ? batadv_nc_purge_paths+0x30f/0x3b0 [ 610.650815][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 610.650836][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 610.650858][ C0] _raw_spin_lock_bh+0x35/0x50 [ 610.650878][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 610.650898][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 610.650921][ C0] batadv_nc_purge_paths+0xe8/0x3b0 [ 610.650948][ C0] batadv_nc_worker+0x365/0x610 [ 610.650970][ C0] ? process_scheduled_works+0x945/0x1830 [ 610.650991][ C0] process_scheduled_works+0xa2c/0x1830 [ 610.651023][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 610.651048][ C0] ? assign_work+0x364/0x3d0 [ 610.651070][ C0] worker_thread+0x86d/0xd40 [ 610.651097][ C0] ? __kthread_parkme+0x169/0x1d0 [ 610.651121][ C0] ? __pfx_worker_thread+0x10/0x10 [ 610.651142][ C0] kthread+0x2f0/0x390 [ 610.651165][ C0] ? __pfx_worker_thread+0x10/0x10 [ 610.651186][ C0] ? __pfx_kthread+0x10/0x10 [ 610.651210][ C0] ret_from_fork+0x4b/0x80 [ 610.651231][ C0] ? __pfx_kthread+0x10/0x10 [ 610.651254][ C0] ret_from_fork_asm+0x1a/0x30 [ 610.651282][ C0] [ 611.038445][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 611.045329][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 611.055840][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 611.065904][ T30] Call Trace: [ 611.069192][ T30] [ 611.072129][ T30] dump_stack_lvl+0x241/0x360 [ 611.076833][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.082049][ T30] ? __pfx__printk+0x10/0x10 [ 611.086660][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 611.092666][ T30] ? vscnprintf+0x5d/0x90 [ 611.097011][ T30] panic+0x349/0x860 [ 611.100929][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 611.107118][ T30] ? __pfx_panic+0x10/0x10 [ 611.111546][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 611.116945][ T30] ? __irq_work_queue_local+0x137/0x410 [ 611.122513][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 611.127900][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 611.134066][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 611.140245][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 611.146418][ T30] watchdog+0x102d/0x1030 [ 611.150768][ T30] ? watchdog+0x1ea/0x1030 [ 611.155197][ T30] ? __pfx_watchdog+0x10/0x10 [ 611.159866][ T30] kthread+0x2f0/0x390 [ 611.163922][ T30] ? __pfx_watchdog+0x10/0x10 [ 611.168581][ T30] ? __pfx_kthread+0x10/0x10 [ 611.173155][ T30] ret_from_fork+0x4b/0x80 [ 611.177556][ T30] ? __pfx_kthread+0x10/0x10 [ 611.182129][ T30] ret_from_fork_asm+0x1a/0x30 [ 611.186888][ T30] [ 611.190118][ T30] Kernel Offset: disabled [ 611.194437][ T30] Rebooting in 86400 seconds..