last executing test programs: 7.11682161s ago: executing program 3 (id=277): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/protocols\x00') (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000006c0)={0x13, 0xff56, 0xfa00, {&(0x7f0000000b40), r2, 0x1}}, 0x18) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000500), r2, 0x7}}, 0x18) (async) pread64(r0, &(0x7f0000000400)=""/255, 0xff, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x42081, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (rerun: 64) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async, rerun: 64) r7 = eventfd(0x0) (rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) (async, rerun: 64) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r7) (rerun: 64) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r7}) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000600)=""/81}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001ec0)={0x1, 0x0, [{0xffff1000, 0x1000, &(0x7f0000000d40)=""/4093}, {0x1000, 0xe0, &(0x7f0000000880)=""/224}, {0xdddd1000, 0x1b, &(0x7f0000000700)=""/27}, {0x1000, 0x2b, &(0x7f00000005c0)=""/33}, {0x100000, 0xe3, &(0x7f0000001d40)=""/227}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x24, '\x00', r3, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)=[{0x5, 0x4, 0x3, 0x2}], 0x10, 0x100, @void, @value}, 0x94) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x1, r7}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000840)=[@acquire, @acquire_done, @request_death], 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001e80)={0x1, 0x0, [{0x0, 0x70, &(0x7f00000009c0)=""/112}]}) (rerun: 64) 6.831526122s ago: executing program 4 (id=282): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x28}}, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 6.704402701s ago: executing program 0 (id=284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0xc00e0000) 6.604957456s ago: executing program 3 (id=285): r0 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) 6.604735423s ago: executing program 4 (id=286): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x30a, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x3}, {0x4}}}, 0x24}}, 0x0) 6.29662834s ago: executing program 4 (id=290): syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020da010000001010f50501020f0109022c00010000000009040000016f2bae000824030100000000092402020000000000090585"], 0x0) 6.172709691s ago: executing program 3 (id=292): syz_emit_ethernet(0x0, 0x0, 0x0) 6.084759269s ago: executing program 0 (id=293): r0 = creat(0x0, 0x0) close(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x56, &(0x7f0000003f80)='\x00\x00\x04\x00\x00\x00\x00\xa9\xe6\t\x93k\xe3l\xf3\xe6\xd3jW\xf6\v\xa8\xfc\x19g\x02gpp\x19\xae\xa6\xb6\xe4\xf6\xf9\xc6-a\xf7\xa2{l5\xa1\xb4s\x8e 9)\xd80$\x98\xbb\xff\x13e\x99\v\xbb\x15\xa3\xbf\xf44\xc0\xeb\xcc\xc1\xf7a\xe8\v\xee\x10\x86AKC\xa7Z88\xb1'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x11fb, &(0x7f00000029c0)={0x0, 0xc82c, 0x0, 0x20000000, 0x161}, &(0x7f0000002940)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x66, 0x0, @fd=r3}) io_uring_enter(r4, 0x2dee, 0x0, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000700)={0x2020}, 0x2020) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) r7 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r8, &(0x7f00000067c0)=[{{&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000004480)=[{&(0x7f00000001c0)=""/228, 0xe4}, {&(0x7f00000002c0)=""/79, 0x4f}, {&(0x7f0000000340)=""/129, 0x81}, {&(0x7f0000000400)=""/129, 0xffffffffffffff66}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000004000)=""/179, 0xb3}, {&(0x7f00000040c0)=""/251, 0xfb}, {&(0x7f0000000180)=""/61, 0x3d}, {&(0x7f00000041c0)=""/4, 0x4}, {&(0x7f0000004200)=""/186, 0xba}, {&(0x7f0000004500)=""/194, 0xc2}, {&(0x7f00000088c0)=""/4096, 0x1000}, {&(0x7f0000004380)=""/187, 0xbb}, {&(0x7f0000004440)}], 0xe, &(0x7f0000000500)=""/192, 0xc0}, 0xe79d}, {{&(0x7f00000005c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000002cc0)=""/161, 0x95}, {&(0x7f0000000700)=""/138, 0x8a}, {&(0x7f00000007c0)=""/4081, 0xff1}, {&(0x7f00000017c0)=""/77, 0x4d}, {&(0x7f0000001840)=""/249, 0xf9}, {&(0x7f0000002d80)=""/151, 0x8e}], 0x6, &(0x7f0000006880)=""/4103, 0x1007}, 0x7f}, {{&(0x7f0000002a40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002ac0)=""/242, 0xf2}, {&(0x7f00000042c0)=""/74, 0x4a}, {&(0x7f0000002c40)=""/110, 0x6e}, {&(0x7f00000098c0)=""/4097, 0x1001}, {&(0x7f0000003cc0)=""/126, 0x7e}, {&(0x7f0000003d40)=""/224, 0xe0}], 0x6, &(0x7f0000003e80)=""/115, 0x73}, 0x390e}, {{&(0x7f0000003f00)=@sco, 0x80, &(0x7f0000005100)=[{&(0x7f00000078c0)=""/4096, 0x1000}, {&(0x7f0000004f80)=""/221, 0xdd}, {&(0x7f0000005080)=""/85, 0x55}], 0x3, &(0x7f0000005140)=""/89, 0x59}, 0x3a60b81d}, {{&(0x7f00000051c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000006740)=[{&(0x7f0000002980)=""/41, 0x29}, {&(0x7f0000005280)=""/23, 0x17}, {&(0x7f00000052c0)=""/238, 0xee}, {&(0x7f00000053c0)=""/175, 0xaf}, {&(0x7f0000005480)=""/83, 0x53}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/92, 0x5c}, {&(0x7f0000006580)=""/229, 0xe5}, {&(0x7f0000002880)=""/185, 0xb9}], 0x9}, 0x3}], 0x5, 0x40000101, 0x0) write$cgroup_pressure(r7, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) bpf$MAP_CREATE(0x0, &(0x7f0000002740)=ANY=[@ANYBLOB="1100000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000d36b4d39d8fb0797d1a7f12b8bba4821e9f28391aab591aa57921d71f1705ef6ab0d2394de36016287f0dc70e2d38ab1162d019cd7c4d4db16ffdc19476a15082f0f498f60364ceba649fc7ee2d363e265436dee70b25c3c4e1d19fc52d6cb9abaf35404f10d8724526396f4edb3787d87e1ccbb5b1b38e519a02ab624d2badbc58567765b039bf6a0b615a4e4b0493c7ea09736105044092405d1920380a14336638f56fa54deb80a6c7d17f1c7ac6f8c0c0719f96fe5d10c65ea248d61ca027a5de436cfe9bc86714febcc93d10f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000), 0xffffffffffffff82) r12 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000000), 0x8) openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r7}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r7, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r13 = socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r13, 0x10e, 0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r13, 0x10e, 0x1, 0x0, 0x0) close(r7) 5.987414406s ago: executing program 3 (id=296): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2cf1389d, 0x402000) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x5}}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000780)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000003000000000000"], 0x38}}, 0x0) r3 = syz_io_uring_setup(0x6723, &(0x7f0000000080)={0x0, 0x35b5, 0x80, 0x0, 0x184}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x22, 0x0, @fd=r7, 0x1, {0x0, r3}, 0x7fffffff, 0x2, 0x355b9ba5d1635a5, {0x0, 0x0, r8}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x4c}}, 0x2) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5.332409184s ago: executing program 1 (id=314): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000200)=0x3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000001c0)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) 5.180793588s ago: executing program 0 (id=304): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000005b00)={{0x12, 0x1, 0x0, 0x91, 0xd1, 0x7e, 0x10, 0x742, 0x2009, 0xec06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xc7, 0xcf, 0xe8, 0x0, [], [{{0x9, 0x5, 0xf}}]}}]}}]}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0xec9, "ff0f00000000000021a82d8600000b00000009000000000000000800"}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_buf(r2, 0x0, 0x5, 0x0, 0x0) openat$dma_heap(0xffffff9c, &(0x7f00000000c0), 0x101a01, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x22020400) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0xea, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0x0, 0x0) 5.18021422s ago: executing program 1 (id=305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_io_uring_setup(0x239, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="016f0800010000000000200000004500002800000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ad46bf1d470b9354d028742532068d0018"], 0x36) 4.956799661s ago: executing program 1 (id=308): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000ecffffff000500"/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000010000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000004808500000005000000bf0900000000000045090100ef0000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = landlock_create_ruleset(&(0x7f0000000380)={0x0, 0x2}, 0x10, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x7, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x4000000, @dev={0xfe, 0x80, '\x00', 0xe}, 0x804}, 0x1c) setsockopt$sock_int(r0, 0x6, 0x2c, 0x0, 0x0) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x0) getpeername$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) 4.840602584s ago: executing program 1 (id=310): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$uhid(0xffffff9c, &(0x7f0000002200), 0x802, 0x0) write$UHID_DESTROY(r1, &(0x7f0000002240), 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/33, @ANYRES32], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000014000100"/36], 0xb8}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000004200)=@known='system.sockprotoname\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f00000063c0)={0x10, 0xffffffffffffffda, r4}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x80}, 0x8) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000340)={r7, r5, r6}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000021c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000002480)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8, 0x3f00}}, 0x1c}}, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64, 0x0, 0xffffffffffffffff, 0xffffffe1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f00000000c0)=0x469b, 0x4) 4.732052899s ago: executing program 2 (id=311): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = getpgrp(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x12) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000400)=""/223, 0xdf}], 0x1) r6 = dup2(r4, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) sendmsg$netlink(r6, &(0x7f0000000340)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)=[{&(0x7f000001bcc0)=ANY=[@ANYBLOB="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"], 0xfc}, {&(0x7f0000019bc0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\'\x00', @ANYRES32=r3, @ANYBLOB="08006a0041a1a7cf68e95e5ee18afab47a3df909520bf86f3bce051831a381132ad5a426f21dbf126051f522603c3e5bd264cf63cb322fddba080e398fe72ca680a31c2d78a7c89599fcff6bf50548be43ddb0d90a06878fc047feb180646c17c6599bd5c207d2f92e1c111b95e0c91a8d61eb4d314408e79cd6e9c3d1e05426f6bb82ac09b2446c5399a53a15", @ANYBLOB="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"/268], 0x2c0}, {&(0x7f000001be00)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="d25dee289a690d369614aa215889eb3838b57175255d383a8d6bc29677d11a85ce4f61933723f56d9a9f8f3c2a256dd044bd8e3b2a3fc472575027c35d949e10f72f293b0b129d5c688c3b38543b7d3729a77b1617fd8253d116c791cca40f7f0da8f42af1c2f46fe3f45e5b4fcb3a40d4fc50e51a74a79d787cf28415aa7d70cfb17941a94f76827c9c55369cd6f404bea210948b0eb0bae7dd75e53f5097d30d0aaf4fb8cef005ec39f10e35c1d6c2c8a9f3a23c9668316e6e5b70e0776b1fe51400e000fe8000000000000000000000000000bbd9e2b26242452143f2ab43d6aab04a3e700aec1e79d4b6515da3f46664334408038a0e22952a60f95d355dce65f54cbd9aedcd3ba82ee3fe0d8c21b4bd38c0ad2b1275662aeeb4aebd37abf49001a664b39ba9c38aa813722852e62fc9325fd0059e55b34e6efcf236a950249c08c6dedb92b2bb56fd33641a888045527d07119eef97af7cdd2eddc210a484392587481774791dca681a1ea57034de5795378d4b380c805adca15985901fc8b511b774e307dd454dc6b4a6198ce4d85ce198ceddc7f5dac8f7a73fb66b604b62abfcd85ec7249e55e6b8785f0a83c5bb200ac1da31cc0a26feea4d9a4a91f3c073b93f87868d25a466ce140c26472d26b35e8b94a09e77943e72e7efdc8e9e32868c374e38d865ca84e2552c7ce69fe64ae2e96f39e7d6ed93ab239e70b8795cbefcb1f85931fe23130a24d26043388614aacdfa5828433deff72e2dcc6e27299d95533b29c7cabad8547b3c4dd1493db6d0dc5658a25e6f4b6f076c8f9df234737536ab17c421caf812f9f1c1518355cf8c932084f03b9c6f5e9b59b3db52a241a6a27bab262dc426ff8666ae49dd3aab9bada650af07888cff91f0c0f6022eb9286fb140a5a720ea19cc7ef2616485444de1b3a87a3596748a123bb79cdc07851da3e07a235e670430fc7b33a289f2bea86b5375de2120a8b8ce3ff0d727d43b2eb2b504228efe96e1dfabf69a5d2e0148b5906da002cc42df4b06913cf2ab97821004d54aeeed17ba0f3d2578649336442f47e3c4e615846bc0cb12bb3736ba58ed99bff1b6c7f280e514ada67a4f1f86a5a59b96c8675581797f4341bba4a6f9d568f8ddac385a6997170afecf20765f6e35ee8c090fdb1b462680237cf988f440e743771b33259ccdab61f60126787c79c0ba39594c2bf2702f4f8fb779a28c2780eec099697f6e6c287b67998a62eed1b4f011501c79d4bcbd12a2d9dee00f4e4950133ab09cfe27e3d6efbf348d892e0e07f4f4151cdc4f75cf17fd6c4c2228736663d133cad9a49bbbfdef5a0f97bb93782a9f3c95e1f30c20b8dcaf7a07bfe0cd92a88a3ac75d3f73cf2ebc0cc97aeac2857d6a9fef6670cbbe4f6fe6752bbd6eb3eec981e9f8d8eb6998d3436560d7fab013e59556717b9e70da108f0fa3f76c811acccefdcacb4ed77758407b321f66c917b4b1401b30a5a067ed085e0e2c32c03a2e36698e9fc770686e02318d76076f72eaab425974a6a93055adadaea70e53568df23048c20d1f0ac7dc71647acf1965afde493b3d63da53c0222a74d3f2b95c6d564fc5d0738816cb236f867fa831fe8861ae9b3897a2913620b62afb7bbbcc2970f4110a8f5be090aebd66a6ebaf838520a36bb781c92433aac33545d229bfed2816cd10c7536cccf9df43ad64a1004091653358760e9f3000b11267baa6efc63b1b48a156fdf2874a27ae1090d51b3589ccb71e3576fde8e57c7abb9069a567836c6e59d12f4494bcc728d337a34962539424b075c7711ef0e746dbfa5817171591d1a51d286399b9fb6319d58da2c2849c3dbba276abb286f3303742f4c7ae9690ec12ca02cf6835beef7ccd348c7c0d81701fdcb91cfff1123563c0f55d89a4ba807eec0b3c679adcf5916cf469dbf8b3fc5a7e4455c41fc90b236c85e1582fc45ee8e4de297246c8cf0f69ba20b2efcfcf08122e2cbcc4f8d87f5c546a58f2f9c5a63766c207968eeb188784cba745b61a912d0c546885efa4a91e07e2a922ed4fccad82ef9caf2483ef7f2b75eadf98451da07fcc0f59205f316efd0a7faffe8eaec00f98021fd26603790bc2689bf7d95a432fdbd3979971fe24ca85b834b1af8d0ef5ab8a71148a82b0847ec243d3e13d70ce9b90b6e53b8e3708d6133cf72fe0ad642180b6ac7abe069a94acf9089ef25df9d8dda079dc30ac7e18dd8ae2dcb18ad133b77b01def3bdbf5f679dfd00b7d11a71b5de617b5d2fbbfd0e6506595c89748c5f6552e92f13d3daf2df16351eefc61ccc773dd3621286c137d8c37e4a32f59c964052e871ed833992984bf403894ccb32d155f501cfa4e9561c7d6f96797a9d2eee526edfeecf3e159a4b6d6c4f68bb70b54436fa6cde12bdd88d7928b038d331dae96974c383b6c1f25e2bb3a6004212c724f775a9dc98cc39a569b8a5b74aef7ee09f08636c856c2d4a3725515146b8b849cde2be4534335cac0269b524c08a90fd3f5caea74fa55b9f6830573228564da7595cab6f72a6d811e4a990dd9b946ff993a030374968796f50a5ee4c952232c8133464f561cfc841aaf4ef508123054e896c05c7b3a1a94101112788b91933f6bc6e5c6227e3d30b56d2e615ae2e7d0735b300791e51a28ab6ce23fa937d46ac2de4882bebf083b1bb5347525fd5c7da56a9efb44946d4167f20c1dda8238970892b65b531d023855dbe0658b501f0c0d1c2365c21f7d88c9d4b4f957a8f4123b52fd44c58e3d01bca59788bcf554cabd5a2efd5b90b71d4e8f76d06fdf2fae50dd5f9a4dce68550470f91d07389db96346130ca8e889c09ad7be7d1740fe8575ffc5ccdc47865f3f16e8c1458dd47a461556789ec79e9773e2f750a8d457935a65e6391507293aa6b16b347cfd87ad197d9872159523f1e2e84285decf4b4cf2a019d3bb7f866081d10b5874eb4f599cc8c3f275efdc7a29bed23cb2318bc764dad368b7fe75359cf1006d3122a2dbd786cf3db256ab6b549c7a082a56414b8956cbcd78d5a49d26a6333457b4929c16b337f1cd8e4f921a3194d1f2f004ea40a03280791d329b1c70af1f5952424676446eac51ccfcd243c2ed8780e93626c1d007d346b87fd32e826c0dcf5e0e12b53c903af3e38fa0639b92094584693200de829b00d92cfef1f1bed0a9c3d44e357fa59333775317a54d05c5d0244dfd09804051921aa050ba026f68400626157364dcb9be35fc3d26040d647840e217d9ecd337947c50763a0ee68483b672ee3a96ae21a5242d0be5d1217f65996fc714740b520ed93f7a8d6d43c734c6bd454d78d6d23a7e5439d2e6e61fc4006fec37b8ad1745abbaac90b5012e355b415fcd2fb548631db87bb8a26432f2960d2861a23db6582fe7c9a5fd9a53b16155da759c6a3053f06c9997859b0c868ae123cf6d029e0eca125a3159369ce42354fd81010cadca93b142bc2ef92ab0ec91ae1d6c0a911a8f0da24f6234486a78b9a971f1e799c860e11b4010c21535a3b8c0e0fdbf4eea0c2e9b559810c80692021eac9fd9d72f7e2a84e10e0f9962d26adce0ebdaf8b035afa8f385b29115ef204b092cf602611f937a357f0bc7013428616860b99237fb47a8d2cd8cca69dd0b9f7208da3ed85b899ef5a0df5653b364d3cb8a30ebe00d89317ceefe28a80342d30d2770a43a8899ca424bda6b08235c23350345b329b0cd9340cba82bad987aa6018e213beed4433e8f9815b9f29cee9bc5a368ca5f9c486f3d23e6d1207a3316960a24534b8c11cab1f87369230cbe488a9f6015afea50fe7a92de0ff7d5d47dec936f787deb443c091395e8de6feab9d85479c4ac4fc94e43bc9c2a4d53b87934dca9ccf7c5ea623eb97a6eaebbb443004dcf506f6cfe07c1834529d9d83fdf7428ff8cdd399e38dcfa7a03b81b8c42bedf1042f4621936f5802d58eba528d1215f882cc5bd17e37be11d437a4c15e22b11004ccae0e2b20ca17cdb150f56dd9df8abbd85b79bab4474c6d24ed30f0c6df493db17f54a8b80a481791a28019a43612d745333252e8e82a4ce4ce5f05c634d8912beeae953ccb1a42a712e38cf9811bcf3f915fdf3974e20206c8fb05492e4c5c5a83f4a7d3d762ca970658b193273c50dfe7c982e405e934c7a9041478a915c232c7af6af27f5cfa83fd051fbc16161aa83f41433d560b2a21067b20c2699aaa5242887e4f11a31db341fcfa7e98dacecd264bb81f0b7ef8eb04a8c2a1b729301fcdf8f905fd91d2bcff48639df6a7e1350dc06858d6c8fdba4cafc0f4c76b6fe56ef83df9203975e270d091d43cb8cdae6a5b4c565eebade458d53364d3bf0a2abd35f5755b02977bc33e597e412bac8adabfc32c2dec6a27eddc047cb5d4785b9a452f143553cdd7440e1abac37cbc359327a3b89903de45b7504f2862e69edba02ec18b43123babd7d310979695fea2252552ec2d888a56e999fa13051b3f4ff30ced0b1241899fd782f225d6d139e1131ce402e1ccc705cd54946a3735fb51b87be151d4e774b4fcd734e7f0b4596bbc64548fb0260c7db8c0"], 0x123c}], 0x3, 0x0, 0x0, 0x4cddb3268952b3d4}, 0xa0c0) r8 = socket(0x2c, 0x3, 0x7) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, &(0x7f0000000340), &(0x7f0000000380)=0x30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa0, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "020000000631f4e200000000001000"}}}]}, 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0xffff7fff, 0x6, {{0x2a, 0x4, 0x0, 0x3, 0xa8, 0x85, 0x0, 0x6e, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xb, 0x73, [@broadcast, @local]}, @generic={0x7, 0xf, "1371398eecc00688b592b98a8a"}, @ssrr={0x89, 0x13, 0xf6, [@dev={0xac, 0x14, 0x14, 0x2e}, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_addr={0x44, 0x24, 0x8d, 0x1, 0x2, [{@rand_addr=0x64010100, 0x3}, {@remote, 0xe}, {@multicast1, 0x7fff}, {@empty, 0xd7ca}]}, @lsrr={0x83, 0xb, 0xa9, [@local, @local]}, @timestamp_addr={0x44, 0x34, 0x4f, 0x1, 0x6, [{@empty, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x8}, {@remote, 0xcfa}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x9}, {@rand_addr=0x64010101, 0x7fffffff}, {@local, 0x1}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@can_delroute={0x60, 0x19, 0x10, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_MOD_UID={0x8, 0xe, r7}, @CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "6188d2982d14a644"}, 0x1}}, @CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8, 0xa, r10}, @CGW_DST_IF={0x8, 0xa, r11}, @CGW_FILTER={0xc, 0xb, {{0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}}, @CGW_SRC_IF={0x8, 0x9, r12}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c4}, 0x4000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r13}]}}}]}, 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r13, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 4.565557521s ago: executing program 1 (id=313): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x78}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) 4.502020182s ago: executing program 3 (id=315): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000002e24001280090001007866726d0000084214000280040003"], 0x44}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000140)="21a2bbe9db5d582e272a219e01b6227b381af2d66009bd0a77b12e0960239443cf", 0x21, 0x8000, &(0x7f0000000180)={0xa, 0x4e23, 0x4, @mcast1, 0x4}, 0x1c) r2 = openat$nvram(0xffffff9c, &(0x7f00000000c0), 0x40003, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback=r0, r1, 0x12, 0x4, 0x0, @void, @value=r2}, 0x20) 4.340872982s ago: executing program 3 (id=316): r0 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "f1a1173fb9462d358997f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f89384aa52dd8d39af14c31ed56ad59300", 0x15}, 0x48, 0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f00000002c0)="be", 0x1) write$char_usb(r2, &(0x7f0000000140)='D', 0x1) r3 = io_uring_setup(0x378e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x14, &(0x7f0000000000)={0x0, 0x30, 0x26, {0x26, 0x21, "c6b19f3ece7ebf1de0de9f30983b178fe7845083be29f56d998c93cd5b3f244fcc329098"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @string={0x4, 0x3, "f8fe"}}, &(0x7f0000000200)={0x0, 0x22, 0xb, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x1, 0x2, 0x1, 'Q'}, @local=@item_012={0x2, 0x2, 0x3, "bcfd"}, @local=@item_4={0x3, 0x2, 0x3, "71e32864"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x8, 0x1, {0x22, 0x6ce}}}}, &(0x7f0000000580)={0x18, &(0x7f0000000300)={0x0, 0x6, 0x60, "30246d6eaf299f007011751865a15b6ff247b1a25a7a20a2e43dce68f0dab09acdf2d4e53af48398aaee090703848e2e26f80b7ba924a547f38669fdb2abc563bc7f31685b1a615235430700e0866e3d51b415e188bb59a83f05a924d6cdfe7a"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000440)={0x20, 0x1, 0xeb, "c9ebace1f813c37388bc270bc814af4969c1e4b2b736c02e711b0efe16e1bd640ccb1b8d087940aa9781d038b95f40c48f5653a3af4e07100033e6871f8c2704971bf95c0b0b68e72c46ab0b6fb388288b21c1cdf5ad770a0be92684a6c5ae4facd11cf0c74a3f769589ed4ceca84bc1347aa5b27d46049d8f1a3207923f07080bebd60561186b417efcfd392e29a0e811a0be536158bab0ebcae91130ca77376760d7c5b7e53db3882ecbf6e602548a98948ddd9c8e2ccec99cf791cbbbe275229434e9a811772fa7cb39705253401bc57d74a30fb92cbfe381c56553e319ce0d0a917cd8b0ba969b8d0f"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x2}}) keyctl$set_timeout(0xf, r0, 0x1) 4.283133019s ago: executing program 1 (id=317): r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000040)={@multicast1, @multicast2, 0x0}, &(0x7f0000000080)=0xc) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000100)=""/12, 0xc}], 0x2, 0x6, 0x8) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000180)=0x4) epoll_create1(0x0) (async) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f00000001c0)=0x3) (async) r3 = dup(r1) sendmsg$can_bcm(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000240)={0x7, 0x840, 0x9d5, {0x0, 0x2710}, {0x0, 0x2710}, {0x1, 0x1}, 0x1, @can={{0x3, 0x1, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "5008aa4121ef6694"}}, 0x34}, 0x1, 0x0, 0x0, 0x14000}, 0x20000080) openat$6lowpan_control(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x2}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000003c0)={r4, 0x5}, 0x8) (async) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000400)={0x10, 0x3, 0xf3, 0x6, 0x4, 0x3, 0x7, 0x7a, 0x34, 0x9, 0x6, 0x5, 0x9, 0xb}, 0xe) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x7) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000440)={0x5, 0xb2b8, 0x1, 0x9, 0x80000001, 0x9, 0xfffffff7, 0x1c, r4}, 0x20) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000480), &(0x7f00000004c0)=0x4) (async) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000500)={'security\x00', 0xcb, "bbc26b43e087a287ddf7f51746549686131b69fc3e67e9fa54a81cc2c9784e4488db39fabb6ed58101c265dcd959b1395998e037ed173efccb98532295e758f9f7fb5f88b935265905530cb6906d27f7dc5a8ecc0937ab6748c5fcde0068e96c1aff3ceb1397f8a7185a705b2d29948d79924f4df9c0a7e0c31512dd3396641c25b04df05f43def5bed3e6de076f0818d4dc61236c7d051387282d074cd3c6e93c7144785a1e25c5af51bf3db23819b44ce6e665749af6dc889f33f4611fadf400bae40a16eca1825112fd"}, &(0x7f0000000600)=0xef) (async) write$binfmt_script(r3, &(0x7f0000000640)={'#! ', './file0', [{0x20, '{'}, {0x20, '/sys/kernel/debug/bluetooth/6lowpan_control\x00'}, {0x20, '/dev/ttyS3\x00'}, {0x20, 'security\x00'}, {0x20, '*'}, {0x20, '/dev/ttyS3\x00'}, {}, {0x20, '/sys/kernel/debug/bluetooth/6lowpan_control\x00'}, {}, {0x20, 'security\x00'}], 0xa, "59160f5abd8a8701a0b066141b5e8785d2d3001b8e64bdf3ccc63dae468116ae4b8d2ffb2f14965afb84a9c18a2c94681276c43a8b9dab2e046615de608897"}, 0xd6) (async, rerun: 32) getsockname$inet6(r3, &(0x7f0000000740), &(0x7f0000000780)=0x1c) (async, rerun: 32) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f00000007c0)={0xa4, 0x0, 0x1}) (async) syz_open_dev$loop(&(0x7f0000000840), 0x4, 0x101440) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000880)) openat$vimc1(0xffffff9c, &(0x7f0000000940), 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=@getaddr={0x14, 0x16, 0x100, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000a80)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000ac0)) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000b00)) openat$sysfs(0xffffff9c, &(0x7f0000000b40)='/sys/power/sync_on_suspend', 0x10042, 0x40) (async) futimesat(r3, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000c00)) 3.779641332s ago: executing program 2 (id=319): syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 3.694146172s ago: executing program 0 (id=320): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) (fail_nth: 5) 3.656802156s ago: executing program 2 (id=321): ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, @in={0x2, 0x4e20, @multicast2}, @vsock={0x28, 0x0, 0x0, @hyper}, @l2={0x1f, 0xc0c, @none}, 0xccd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0xe339, 0x6dd2}) 3.602797276s ago: executing program 2 (id=322): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000200000000000000ac14140000002300000000000000000000000000000000000a"], 0xb8}}, 0x4040080) syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x220c0) add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000021fd01000000000000000000ac1ee100000000002000000000000000403403f438bd9e28000000000000000000000000000000000a0000edffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}}, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 2.956517724s ago: executing program 2 (id=323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f00000011c0)="e6", 0x1}], 0x2, &(0x7f0000000300)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/78, 0x4e}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000007c0), 0x10, 0x0, @void, @value}, 0x90) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000340), 0x584, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r5, r6, r6}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r8, @ANYBLOB="08000600", @ANYRES32=r2], 0x24}}, 0x0) socket(0x10, 0x3, 0x0) r9 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_012={0x2, 0x0, 0xa, "da97"}, @global=@item_012={0x1, 0x1, 0x2, "8d"}]}}, 0x0}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendfile(r11, r9, 0x0, 0x80) r12 = socket$packet(0x11, 0x2, 0x300) r13 = syz_clone3(&(0x7f0000000400)={0x140000, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000200), {0x19}, &(0x7f0000000240)=""/46, 0x2e, &(0x7f00000002c0)=""/253, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r9}}, 0x58) syz_pidfd_open(r13, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) syz_usb_connect$cdc_ecm(0x6, 0x80, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x1, 0x1, 0xff, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x3, {{0xb, 0x24, 0x6, 0x0, 0x0, "481189c66324"}, {0x5, 0x24, 0x0, 0x82}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x8001, 0x400, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0xa12, 0x4, 0x8001}, @dmm={0x7, 0x24, 0x14, 0x2, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x37}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x1, 0xff}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x10, 0x3, 0x87}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0xfa, 0xc}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x110, 0x0, 0x8, 0xc7, 0x8, 0x9}, 0xf8, &(0x7f0000000a40)={0x5, 0xf, 0xf8, 0x3, [@generic={0xd5, 0x10, 0xa, "029f2479514c738132aa6e8d9c2f2f7339aae1711d75703e1623d6f223103bebf14495eb3743e9d0c3a89b80f4fb6bab9f428338c259fbd4c6aa91c10c39b8a076d94c402b440c08209f26b33242b56df26f914b88e071e0e0dee536b91375eae61f331535758473b448e1d93157dd09e27fc4736a229166eb826d715a5e8065adb8f71a4de1e51cdbc19fa4c2d8b72ff5dcf8990f049c44833399f36ed7adf7fa7f548f3a9716f2ed7be6792f4c96f4813586bc42b0a135bb2d0b9fea3b441c3461afe1d074a02ee7e56def4f9393dc9699"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x5, 0x1, 0x2}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0xe, 0x0, 0x200, [0x3f, 0x18000]}]}, 0x2, [{0x10, &(0x7f0000000640)=@string={0x10, 0x3, "391c4c448bb5c443d66026999d53"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x83e}}]}) r14 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x40200, 0x0) fcntl$lock(r14, 0x24, &(0x7f0000000200)={0x87adc4572fb16783, 0x0, 0x6f912d400, 0x88, 0xffffffffffffffff}) 2.918611158s ago: executing program 4 (id=324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x32658aeb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0xcc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x38, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c20000000180c200000008004900002a004000000000907800000000ffffffff000000000100081d8d"], 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x1008, 0x8}}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffc, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875797bdb22d0000b420a1a93c5240f45f819e01177d3d458dd49928610700001000", "90be8b1c551265406c7f306003d8a00000000000000000000000eec09f93f500"}}) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 2.816192748s ago: executing program 0 (id=325): r0 = socket$can_bcm(0x1d, 0x2, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x2, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) fcntl$setpipe(r1, 0x407, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000140)={0x9, 0x101, "d48ec803771f10cfcaadc1a5cfca2be30267c58d2d466f2b53ca7243f0d04c76", 0x1, 0x7, 0xfffffff5, 0x9}) r3 = socket$packet(0x11, 0x0, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) fchmod(0xffffffffffffffff, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000200)={0x4c, 0x3, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x4c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r6, &(0x7f0000000100)=ANY=[], 0xc1) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000040)=0x2900, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r6, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0x80045519, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$packet_int(r3, 0x107, 0x11, 0x0, &(0x7f0000000040)) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7", 0x27}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) 2.377918566s ago: executing program 4 (id=326): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) statx(r1, &(0x7f0000000240)='.\x00', 0x0, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x10001, 0x103382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r4, @ANYBLOB="0a0006000802110000010000080011"], 0x30}}, 0x40000) 1.777816716s ago: executing program 4 (id=328): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x57}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000100000000000000000000000000000005362899b913e066eca42bba67123e822697451b7fdc73afd2ce0540fd23d8cc56a336bb86798c5973f53b1e2105b33a4df23d384a422d214397d14d1e6520f62574c20209c707773b75c3fc4f6fb801d6794a7472cbf4f75cec458c18275c0066fad99f5a4dd87ca20a4b5f4681e2323632afe740db265327b7b1e94d1e80000000000f3ffffffffffffff0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfffffd5a}, 0x1, 0x0, 0x0, 0x48040}, 0x40) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x3e, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x200, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r10, {0x0, 0x2}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000425bd7000fddbdf000005002a000000000008000600", @ANYRES32=r7, @ANYBLOB="00002f000000000000002c00b301000008000300", @ANYRES32=r10, @ANYBLOB="080031000800000000003500000000000500350077000000"], 0x54}, 0x1, 0x0, 0x0, 0x2c0d0}, 0x2400c081) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x21, 0xed75, 0xd, 0x9, 0x29d2a, r3, 0x80000000, '\x00', r10, r5, 0x2, 0x5, 0x0, 0x0, @value=r3, @void, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r11, &(0x7f0000000440)="b02b61bdaf398ec64450605d306d77b63f1cda100edc01fc1103c078dac2b98fb8e8f0e53d45a7bbadfee54ddf0396d9701fcb73682f632fb11510b0cee43cbcaeca8cc1737572413fe491b344824b2de88bca583a73dc70ecf015b753ca79e80493712aeec947c84209ce3a7fb59efa2a7a4ae1e5164890a09bbb2744335be7e3794276697059d2a06dc53a963d6602db104874f3527cb13911b070781b019c326b6792f242d30726edb1398e062281", &(0x7f0000000500)=""/37, 0x4}, 0x1c) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r2, 0x400c744d, 0x20000000) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000009a00)={0x0, 0x0, &(0x7f00000099c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000009f00000000e00100000028000180040004"], 0x3c}, 0x1, 0x0, 0x0, 0x4048805}, 0x0) 0s ago: executing program 2 (id=329): socket$unix(0x1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x49e6, 0x10100, 0x0, 0x3de}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0xfffff000, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 4655][ T6194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.845910][ T6197] team0: Port device team_slave_1 added [ 154.882172][ T6194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.938352][ T5278] usb 1-1: USB disconnect, device number 12 [ 154.973754][ T5278] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 155.010547][ T5278] cp210x 1-1:0.0: device disconnected [ 155.024877][ T6197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.032939][ T6197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.060441][ T6197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.076281][ T6197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.084071][ T6197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.110605][ T6197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.139139][ T6220] chnl_net:caif_netlink_parms(): no params data found [ 155.156125][ T6194] team0: Port device team_slave_0 added [ 155.167457][ T6194] team0: Port device team_slave_1 added [ 155.174302][ T11] bridge_slave_1: left allmulticast mode [ 155.179999][ T11] bridge_slave_1: left promiscuous mode [ 155.186378][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.195299][ T11] bridge_slave_0: left allmulticast mode [ 155.201064][ T11] bridge_slave_0: left promiscuous mode [ 155.207560][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.538802][ T4619] Bluetooth: hci5: command tx timeout [ 155.622608][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.636816][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.648742][ T11] bond0 (unregistering): Released all slaves [ 155.732309][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 155.732330][ T29] audit: type=1800 audit(1727211469.727:28): pid=6239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.159" name="/" dev="fuse" ino=1 res=0 errno=0 [ 155.773253][ T4619] Bluetooth: hci2: command tx timeout [ 155.832785][ T6194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.840194][ T6194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.866384][ T6194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.930608][ T6197] hsr_slave_0: entered promiscuous mode [ 155.938919][ T6197] hsr_slave_1: entered promiscuous mode [ 155.947349][ T6197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.959581][ T6197] Cannot create hsr debugfs directory [ 155.977787][ T6194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.985131][ T6194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.011317][ T6194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.097877][ T6220] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.105244][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.112549][ T6220] bridge_slave_0: entered allmulticast mode [ 156.120087][ T6220] bridge_slave_0: entered promiscuous mode [ 156.189820][ T6220] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.197427][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.204988][ T6220] bridge_slave_1: entered allmulticast mode [ 156.211885][ T6220] bridge_slave_1: entered promiscuous mode [ 156.249943][ T6194] hsr_slave_0: entered promiscuous mode [ 156.262789][ T6194] hsr_slave_1: entered promiscuous mode [ 156.271130][ T6194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.281212][ T6194] Cannot create hsr debugfs directory [ 156.311849][ T6220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.333163][ T11] hsr_slave_0: left promiscuous mode [ 156.341169][ T11] hsr_slave_1: left promiscuous mode [ 156.348604][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.356343][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.365255][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.372712][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.395222][ T11] veth1_macvtap: left promiscuous mode [ 156.400960][ T11] veth0_macvtap: left promiscuous mode [ 156.406706][ T11] veth1_vlan: left promiscuous mode [ 156.412118][ T11] veth0_vlan: left promiscuous mode [ 156.883869][ T11] team0 (unregistering): Port device team_slave_1 removed [ 156.934298][ T11] team0 (unregistering): Port device team_slave_0 removed [ 157.399243][ T6220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.467956][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.590519][ T6220] team0: Port device team_slave_0 added [ 157.613937][ T4619] Bluetooth: hci5: command tx timeout [ 157.625184][ T6220] team0: Port device team_slave_1 added [ 157.698694][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.706952][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.737298][ T6220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.779908][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.804339][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.835036][ T6220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.853300][ T4619] Bluetooth: hci2: command tx timeout [ 157.893375][ T6197] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.931119][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.026325][ T6197] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.049952][ T2917] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.057236][ T2917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.130214][ T6197] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.150281][ T2917] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.157506][ T2917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.175785][ T6220] hsr_slave_0: entered promiscuous mode [ 158.186403][ T6220] hsr_slave_1: entered promiscuous mode [ 158.195180][ T6220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.203262][ T6220] Cannot create hsr debugfs directory [ 158.247589][ T6197] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.393510][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.522926][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.632667][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.772057][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.926891][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.132727][ T5950] veth0_vlan: entered promiscuous mode [ 159.144889][ T11] bridge_slave_1: left allmulticast mode [ 159.150615][ T11] bridge_slave_1: left promiscuous mode [ 159.162551][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.173790][ T11] bridge_slave_0: left allmulticast mode [ 159.179509][ T11] bridge_slave_0: left promiscuous mode [ 159.194292][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.218706][ T11] bridge_slave_1: left allmulticast mode [ 159.237167][ T11] bridge_slave_1: left promiscuous mode [ 159.243055][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.276048][ T11] bridge_slave_0: left allmulticast mode [ 159.281782][ T11] bridge_slave_0: left promiscuous mode [ 159.303755][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.836191][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.860295][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.881002][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.891585][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.919342][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.927024][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.933665][ T54] Bluetooth: hci2: command tx timeout [ 160.251755][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.263987][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.275820][ T11] bond0 (unregistering): Released all slaves [ 160.389031][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.401266][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.412362][ T11] bond0 (unregistering): Released all slaves [ 160.509760][ T5950] veth1_vlan: entered promiscuous mode [ 160.591766][ T11] tipc: Left network mode [ 160.655368][ T6197] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 160.676541][ T6197] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 160.775402][ T6197] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 160.798146][ T6197] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 160.941326][ T6297] chnl_net:caif_netlink_parms(): no params data found [ 161.017035][ T5950] veth0_macvtap: entered promiscuous mode [ 161.115214][ T5950] veth1_macvtap: entered promiscuous mode [ 161.159707][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.170651][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.181400][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.192501][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.211292][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.224508][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.248926][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.346002][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.372118][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.383157][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.394174][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.404165][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.414725][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.430962][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.482570][ T11] hsr_slave_0: left promiscuous mode [ 161.491317][ T11] hsr_slave_1: left promiscuous mode [ 161.505016][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.512608][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.530555][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.540715][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.562660][ T11] hsr_slave_0: left promiscuous mode [ 161.571363][ T11] hsr_slave_1: left promiscuous mode [ 161.597073][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.613258][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.622526][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.633179][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.699547][ T11] veth1_macvtap: left promiscuous mode [ 161.713170][ T11] veth0_macvtap: left promiscuous mode [ 161.718869][ T11] veth1_vlan: left promiscuous mode [ 161.733234][ T11] veth0_vlan: left promiscuous mode [ 161.740187][ T11] dummy0: left promiscuous mode [ 161.753326][ T11] veth1_macvtap: left promiscuous mode [ 161.759247][ T11] veth0_macvtap: left promiscuous mode [ 161.773457][ T11] veth1_vlan: left promiscuous mode [ 161.778865][ T11] veth0_vlan: left promiscuous mode [ 162.013388][ T54] Bluetooth: hci2: command tx timeout [ 162.019050][ T4619] Bluetooth: hci0: command tx timeout [ 162.416493][ T11] team0 (unregistering): Port device team_slave_1 removed [ 162.461006][ T11] team0 (unregistering): Port device team_slave_0 removed [ 163.311523][ T11] team0 (unregistering): Port device team_slave_1 removed [ 163.352839][ T11] team0 (unregistering): Port device team_slave_0 removed [ 163.799802][ T6297] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.807799][ T6297] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.815724][ T6297] bridge_slave_0: entered allmulticast mode [ 163.822535][ T6297] bridge_slave_0: entered promiscuous mode [ 163.865977][ T6297] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.874661][ T6297] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.881966][ T6297] bridge_slave_1: entered allmulticast mode [ 163.890822][ T6297] bridge_slave_1: entered promiscuous mode [ 163.944906][ T6194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.965641][ T5950] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.975406][ T5950] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.984353][ T5950] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.993289][ T5950] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.042839][ T6297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.055392][ T6297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.069049][ T6194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 164.093495][ T4619] Bluetooth: hci0: command tx timeout [ 164.144746][ T6194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 164.160154][ T6194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 164.203958][ T6297] team0: Port device team_slave_0 added [ 164.248059][ T6297] team0: Port device team_slave_1 added [ 164.327690][ T6220] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 164.376303][ T6297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.383770][ T6297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.411491][ T6297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.435670][ T6220] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 164.452355][ T6220] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 164.469336][ T6220] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 164.490819][ T6297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.499574][ T6297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.528195][ T6297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.589018][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.606960][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.685785][ T6297] hsr_slave_0: entered promiscuous mode [ 164.692426][ T6297] hsr_slave_1: entered promiscuous mode [ 164.730248][ T6197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.745639][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.754827][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.918748][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.948002][ T6197] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.978878][ T2917] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.986071][ T2917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.007839][ T6220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.050102][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.075417][ T2917] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.082683][ T2917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.143712][ T5291] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 165.154388][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.190995][ T6220] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.243971][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.260182][ T1597] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.267383][ T1597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.292544][ T1597] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.299799][ T1597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.319007][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.322112][ T6194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.330438][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.349822][ T5291] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 165.359884][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.374812][ T5291] usb 4-1: config 0 descriptor?? [ 165.450557][ T6194] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.511794][ T2917] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.519293][ T2917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.535497][ T2917] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.542837][ T2917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.631168][ T11] bridge_slave_1: left allmulticast mode [ 165.638464][ T11] bridge_slave_1: left promiscuous mode [ 165.645381][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.659699][ T11] bridge_slave_0: left allmulticast mode [ 165.665764][ T11] bridge_slave_0: left promiscuous mode [ 165.671865][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.835562][ T5291] stadia 0003:18D1:9400.0003: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.3-1/input0 [ 165.847203][ T5291] stadia 0003:18D1:9400.0003: no inputs found [ 165.866485][ T5291] stadia 0003:18D1:9400.0003: force feedback init failed [ 166.011091][ T6332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.033525][ T6332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.073850][ T8] usb 4-1: USB disconnect, device number 4 [ 166.173478][ T4619] Bluetooth: hci0: command tx timeout [ 166.207993][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.226728][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.240038][ T11] bond0 (unregistering): Released all slaves [ 166.365907][ T6340] wg2: entered promiscuous mode [ 166.380937][ T6340] wg2: entered allmulticast mode [ 166.436185][ T6197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.689160][ T11] hsr_slave_0: left promiscuous mode [ 166.707254][ T11] hsr_slave_1: left promiscuous mode [ 166.724712][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.732200][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.740905][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.749608][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.772056][ T11] veth1_macvtap: left promiscuous mode [ 166.778424][ T11] veth0_macvtap: left promiscuous mode [ 166.785071][ T11] veth1_vlan: left promiscuous mode [ 166.790715][ T11] veth0_vlan: left promiscuous mode [ 167.385603][ T11] team0 (unregistering): Port device team_slave_1 removed [ 167.428863][ T11] team0 (unregistering): Port device team_slave_0 removed [ 167.925940][ T6220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.992533][ T6197] veth0_vlan: entered promiscuous mode [ 168.045576][ T6194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.090937][ T6197] veth1_vlan: entered promiscuous mode [ 168.114405][ T6297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 168.135806][ T6297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 168.148795][ T6297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 168.228117][ T6297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 168.239656][ T6197] veth0_macvtap: entered promiscuous mode [ 168.253544][ T4619] Bluetooth: hci0: command tx timeout [ 168.280761][ T6220] veth0_vlan: entered promiscuous mode [ 168.312336][ T6197] veth1_macvtap: entered promiscuous mode [ 168.355096][ T6194] veth0_vlan: entered promiscuous mode [ 168.387181][ T6220] veth1_vlan: entered promiscuous mode [ 168.422035][ T6194] veth1_vlan: entered promiscuous mode [ 168.486915][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.513560][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.538833][ T6197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.558087][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.597934][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.611176][ T6197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.676964][ T6197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.688015][ T6197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.697897][ T6197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.732587][ T6197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.770998][ T6220] veth0_macvtap: entered promiscuous mode [ 168.831785][ T6220] veth1_macvtap: entered promiscuous mode [ 168.855949][ T6194] veth0_macvtap: entered promiscuous mode [ 168.917032][ T6194] veth1_macvtap: entered promiscuous mode [ 168.962261][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.984471][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.000708][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.011294][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.024525][ T6220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.033416][ T5277] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 169.055556][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.078683][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.088775][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.099520][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.110769][ T6220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.152446][ T6220] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.162714][ T6220] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.172878][ T6220] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.182296][ T6220] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.219359][ T6297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.227629][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.239805][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.241114][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.258695][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.270911][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.281682][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.293279][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.303903][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.314364][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.325687][ T5277] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 169.335594][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.345770][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.355004][ T6194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.367449][ T5277] usb 4-1: config 0 descriptor?? [ 169.379588][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.390670][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.401958][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.412911][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.426004][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.437465][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.449655][ T6194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.485952][ T6194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.498764][ T6194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.508271][ T6194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.517213][ T6194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.564858][ T6297] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.574109][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.591627][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.628558][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.635780][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.651223][ T6369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.690449][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.697680][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.739783][ T6369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.761441][ T2917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.823163][ T2917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.838622][ T6369] bond_slave_0: entered promiscuous mode [ 169.844840][ T6369] bond_slave_1: entered promiscuous mode [ 169.852154][ T6369] vlan2: entered promiscuous mode [ 169.859167][ T6369] bond0: entered promiscuous mode [ 169.866891][ T6369] vlan2: entered allmulticast mode [ 169.872278][ T6369] bond0: entered allmulticast mode [ 169.878401][ T6369] bond_slave_0: entered allmulticast mode [ 169.885671][ T6369] bond_slave_1: entered allmulticast mode [ 169.895045][ T6369] bond0: left allmulticast mode [ 169.899999][ T6369] bond_slave_0: left allmulticast mode [ 169.906706][ T6369] bond_slave_1: left allmulticast mode [ 169.912589][ T6369] bond0: left promiscuous mode [ 169.924519][ T6369] bond_slave_0: left promiscuous mode [ 169.930074][ T6369] bond_slave_1: left promiscuous mode [ 169.990451][ T1597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.010306][ T1597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.075025][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.077368][ T6297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.095879][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.113338][ T5277] usbhid 4-1:0.0: can't add hid device: -71 [ 170.119406][ T5277] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 170.155786][ T5277] usb 4-1: USB disconnect, device number 5 [ 170.205362][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.229591][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.291846][ T6297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.498168][ T6297] veth0_vlan: entered promiscuous mode [ 170.548766][ T6297] veth1_vlan: entered promiscuous mode [ 170.573549][ T4643] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 170.678313][ T6374] Zero length message leads to an empty skb [ 170.687269][ T6297] veth0_macvtap: entered promiscuous mode [ 170.744171][ T4643] usb 3-1: Using ep0 maxpacket: 32 [ 170.751155][ T6297] veth1_macvtap: entered promiscuous mode [ 170.801483][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.812619][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.823565][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.834448][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.844463][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.856760][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.868066][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.880633][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.896068][ T6297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.906225][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.916824][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.926767][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.937361][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.950367][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.960979][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.970967][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.982760][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.994414][ T6297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.012800][ T4643] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 171.021195][ T4643] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 171.038880][ T6380] vlan2: entered allmulticast mode [ 171.044486][ T6380] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 171.051925][ T4643] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 171.064273][ T6384] cgroup: fork rejected by pids controller in /syz3 [ 171.065492][ T4643] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 171.157419][ T4643] usb 3-1: config 0 interface 0 has no altsetting 0 [ 171.169913][ T6297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.203572][ T4643] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 171.210998][ T6297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.220683][ T4643] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 171.223908][ T6297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.249239][ T6297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.253713][ T4643] usb 3-1: Product: syz [ 171.262911][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 171.272911][ T4643] usb 3-1: Manufacturer: syz [ 171.288617][ T4643] usb 3-1: SerialNumber: syz [ 171.293625][ T6388] netlink: 36 bytes leftover after parsing attributes in process `syz.4.167'. [ 171.304655][ T6388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.167'. [ 171.316612][ T4643] usb 3-1: config 0 descriptor?? [ 171.322673][ T6388] netlink: 36 bytes leftover after parsing attributes in process `syz.4.167'. [ 171.343390][ T4643] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 171.358331][ T6388] netlink: 36 bytes leftover after parsing attributes in process `syz.4.167'. [ 171.385169][ T4643] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 171.463346][ T5276] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 171.476382][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.519663][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.580832][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.594816][ T4643] usb 3-1: USB disconnect, device number 8 [ 171.594868][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 171.602387][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.616508][ T4643] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 171.628943][ T5276] usb 4-1: too many endpoints for config 0 interface 0 altsetting 224: 92, using maximum allowed: 30 [ 171.651592][ T5276] usb 4-1: config 0 interface 0 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 92 [ 171.686180][ T5276] usb 4-1: config 0 interface 0 has no altsetting 0 [ 171.707743][ T5276] usb 4-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 171.717613][ T5276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.731485][ T5276] usb 4-1: Product: syz [ 171.738144][ T5276] usb 4-1: Manufacturer: syz [ 171.745452][ T5276] usb 4-1: SerialNumber: syz [ 171.761289][ T5276] usb 4-1: config 0 descriptor?? [ 171.823150][ T29] audit: type=1326 audit(1727211485.817:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 171.859105][ T29] audit: type=1326 audit(1727211485.817:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 171.910155][ T29] audit: type=1326 audit(1727211485.817:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 171.975319][ T29] audit: type=1326 audit(1727211485.817:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 171.998655][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 172.014122][ T29] audit: type=1326 audit(1727211485.817:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 172.049522][ T29] audit: type=1326 audit(1727211485.817:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 172.056933][ T6397] dummy0: entered promiscuous mode [ 172.192088][ T5276] usb 4-1: USB disconnect, device number 6 [ 172.245143][ T5273] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 172.417553][ T5273] usb 2-1: Using ep0 maxpacket: 8 [ 172.451513][ T5273] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 172.463253][ T5273] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 172.501189][ T5273] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 172.534439][ T5273] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 172.556271][ T5273] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 172.590583][ T5273] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 172.606891][ T5273] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 172.649480][ T5273] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 172.694077][ T5273] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 172.726951][ T5273] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 172.754326][ T5273] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 172.762167][ T5273] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 172.795632][ T5273] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 172.810684][ T6417] netlink: 56 bytes leftover after parsing attributes in process `syz.0.175'. [ 172.822876][ T5273] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 172.859626][ T5273] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 172.908853][ T5273] usb 2-1: string descriptor 0 read error: -22 [ 172.933477][ T5273] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 172.942660][ T5273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.057904][ T5273] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 173.175104][ T5262] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 173.273155][ T4643] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 173.375262][ T6433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.393157][ T5262] usb 1-1: unable to get BOS descriptor or descriptor too short [ 173.422503][ T5262] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.436667][ T6433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.466111][ T4643] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 173.480457][ T5262] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 173.500190][ T6433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.500832][ T4643] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 173.521616][ T5262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 173.553060][ T5262] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 173.573573][ T4643] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.587527][ T6433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.588606][ T4643] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 173.609092][ T5262] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 173.619716][ T5262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.628818][ T5262] usb 1-1: Product: syz [ 173.634438][ T4643] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.645755][ T4643] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.654294][ T5262] usb 1-1: Manufacturer: syz [ 173.659167][ T5262] usb 1-1: SerialNumber: syz [ 173.664739][ T4643] usb 3-1: Product: syz [ 173.671112][ T4643] usb 3-1: Manufacturer: syz [ 173.684305][ T5262] usb 1-1: config 0 descriptor?? [ 173.690313][ T6422] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 173.699505][ T4643] usb 3-1: SerialNumber: syz [ 173.714712][ C1] usb 1-1: NFC: Urb failure (status -71) [ 173.715469][ T6433] fuse: Unknown parameter 'use00000000000000000000' [ 173.724979][ T5262] usb 1-1: NFC: Unable to get FW version [ 173.766379][ T5262] pn533_usb 1-1:0.0: probe with driver pn533_usb failed with error -90 [ 173.831303][ T2917] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.988562][ T2917] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.033517][ T6441] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.176' sets config #0 [ 174.197215][ T2917] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.260514][ T5274] usb 1-1: USB disconnect, device number 13 [ 174.357475][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.364941][ T5273] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 174.402300][ T2917] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.446835][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.472047][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.525829][ T5273] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 174.535688][ T5273] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 174.563308][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.583137][ T5273] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.600483][ T4643] usb 3-1: USB disconnect, device number 9 [ 174.611364][ T5273] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.621640][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.621811][ T2917] bridge_slave_1: left allmulticast mode [ 174.629886][ T5273] usb 5-1: Product: syz [ 174.640579][ T2917] bridge_slave_1: left promiscuous mode [ 174.643862][ T5273] usb 5-1: Manufacturer: syz [ 174.648081][ T2917] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.650988][ T5273] usb 5-1: SerialNumber: syz [ 174.671755][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 174.701341][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.739409][ T5332] udevd[5332]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.835930][ T2917] bridge_slave_0: left allmulticast mode [ 174.841866][ T2917] bridge_slave_0: left promiscuous mode [ 174.877211][ T2917] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.083613][ T5272] usb 2-1: USB disconnect, device number 9 [ 175.107779][ T5273] usb 5-1: 0:2 : does not exist [ 175.268533][ T6458] trusted_key: encrypted_key: keylen parameter is missing [ 175.299724][ T5274] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 175.405847][ T6443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.443736][ T6443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.467676][ T5274] usb 3-1: device descriptor read/64, error -71 [ 175.529855][ T5272] usb 5-1: USB disconnect, device number 10 [ 175.660735][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'. [ 175.713292][ T5274] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 175.814967][ T2917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.840306][ T2917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.854019][ T5274] usb 3-1: device descriptor read/64, error -71 [ 175.869705][ T2917] bond0 (unregistering): Released all slaves [ 175.883920][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 175.894439][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 175.973668][ T5274] usb usb3-port1: attempt power cycle [ 176.333470][ T5274] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 176.451197][ T5274] usb 3-1: device descriptor read/8, error -71 [ 176.515449][ T937] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 176.529398][ T2917] hsr_slave_0: left promiscuous mode [ 176.537210][ T2917] hsr_slave_1: left promiscuous mode [ 176.543371][ T2917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.551125][ T2917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.559804][ T2917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.582899][ T29] audit: type=1326 audit(1727211490.577:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 176.583159][ T2917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.623389][ T29] audit: type=1326 audit(1727211490.577:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 176.656256][ T29] audit: type=1326 audit(1727211490.617:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 176.678404][ T937] usb 2-1: device descriptor read/64, error -71 [ 176.691450][ T29] audit: type=1326 audit(1727211490.617:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 176.705848][ T2917] veth1_macvtap: left promiscuous mode [ 176.713898][ T5274] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 176.736385][ T2917] veth0_macvtap: left promiscuous mode [ 176.742139][ T2917] veth1_vlan: left promiscuous mode [ 176.743959][ T5274] usb 3-1: device descriptor read/8, error -71 [ 176.752921][ T2917] veth0_vlan: left promiscuous mode [ 176.815236][ T54] Bluetooth: hci3: command tx timeout [ 176.865562][ T5274] usb usb3-port1: unable to enumerate USB device [ 176.923145][ T937] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 177.053319][ T937] usb 2-1: device descriptor read/64, error -71 [ 177.171566][ T937] usb usb2-port1: attempt power cycle [ 177.323733][ T2917] team0 (unregistering): Port device team_slave_1 removed [ 177.369783][ T2917] team0 (unregistering): Port device team_slave_0 removed [ 177.513257][ T937] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 177.543963][ T937] usb 2-1: device descriptor read/8, error -71 [ 177.783895][ T937] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 177.803807][ T937] usb 2-1: device descriptor read/8, error -71 [ 177.924823][ T6450] chnl_net:caif_netlink_parms(): no params data found [ 177.961953][ T937] usb usb2-port1: unable to enumerate USB device [ 178.285323][ T6450] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.295315][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.302647][ T6450] bridge_slave_0: entered allmulticast mode [ 178.317814][ T6450] bridge_slave_0: entered promiscuous mode [ 178.343560][ T6450] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.352607][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.369884][ T6450] bridge_slave_1: entered allmulticast mode [ 178.395862][ T6450] bridge_slave_1: entered promiscuous mode [ 178.497962][ T6450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.507267][ T5273] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 178.548187][ T6450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.673207][ T5273] usb 5-1: Using ep0 maxpacket: 16 [ 178.690631][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.702381][ T5273] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 178.717413][ T6450] team0: Port device team_slave_0 added [ 178.724557][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.746974][ T6450] team0: Port device team_slave_1 added [ 178.769008][ T5273] usb 5-1: config 0 descriptor?? [ 178.893531][ T54] Bluetooth: hci3: command tx timeout [ 178.917365][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.943090][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.969035][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.015827][ T6450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.048439][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.055822][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.081864][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.089778][ T6450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.162713][ T6450] hsr_slave_0: entered promiscuous mode [ 179.178720][ T6450] hsr_slave_1: entered promiscuous mode [ 179.201320][ T6450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.228990][ T6450] Cannot create hsr debugfs directory [ 179.253123][ T5262] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 179.303903][ T6512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.348367][ T6512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.404089][ T5262] usb 3-1: Using ep0 maxpacket: 8 [ 179.418021][ T5262] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 179.426185][ T5262] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 179.437698][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.191'. [ 179.490316][ T5262] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 179.507573][ T5262] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 179.526983][ T5262] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 179.548123][ T5273] lenovo 0003:17EF:60A3.0004: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.4-1/input0 [ 179.569484][ T5262] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 179.579888][ T5262] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 179.636044][ T5262] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 179.715600][ T5262] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 179.757901][ T5262] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 179.830716][ T5262] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 179.842960][ T5262] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 179.856572][ T5262] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 179.869046][ T5262] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 179.880597][ T5262] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 179.897684][ T5262] usb 3-1: string descriptor 0 read error: -22 [ 179.905133][ T5262] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 179.914533][ T5262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.977017][ T5262] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 180.328919][ T6563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.374336][ T6563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.390708][ T6563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.420747][ T6563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.487245][ T6563] fuse: Unknown parameter 'use00000000000000000000' [ 180.711531][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 180.711628][ T29] audit: type=1326 audit(1727211494.707:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 180.826102][ T29] audit: type=1326 audit(1727211494.707:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 180.855233][ T6450] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 180.885089][ T6450] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 180.916752][ T29] audit: type=1326 audit(1727211494.707:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 180.944841][ T6450] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 180.974127][ T54] Bluetooth: hci3: command tx timeout [ 180.988742][ T6450] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 181.003904][ T29] audit: type=1326 audit(1727211494.707:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 181.146373][ T29] audit: type=1326 audit(1727211494.707:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 181.168375][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.218992][ T29] audit: type=1326 audit(1727211494.737:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 181.310829][ T29] audit: type=1326 audit(1727211494.747:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 181.332704][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.380618][ T29] audit: type=1326 audit(1727211494.747:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 181.402461][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.409312][ T5276] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 181.455627][ T937] usb 5-1: USB disconnect, device number 11 [ 181.597090][ T5276] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 181.613236][ T5276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.630149][ T6450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.667921][ T5276] usb 1-1: Product: syz [ 181.695067][ T5276] usb 1-1: Manufacturer: syz [ 181.726338][ T5276] usb 1-1: SerialNumber: syz [ 181.730396][ T6450] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.766094][ T1597] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.773353][ T1597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.806108][ T5276] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 181.822956][ T5291] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 181.844172][ T1597] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.851468][ T1597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.923772][ T5274] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 181.967965][ T5276] usb 3-1: USB disconnect, device number 14 [ 182.105873][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.135285][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.150405][ T5274] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 182.173843][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.188695][ T5274] usb 2-1: config 0 descriptor?? [ 182.369230][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.445502][ T6589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.456093][ T6450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.464624][ T6589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.569569][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.622355][ T6589] team_slave_0: entered promiscuous mode [ 182.628322][ T6589] team_slave_1: entered promiscuous mode [ 182.635958][ T6589] vlan3: entered promiscuous mode [ 182.641287][ T6589] team0: entered promiscuous mode [ 182.652059][ T6589] vlan3: entered allmulticast mode [ 182.658690][ T6589] team0: entered allmulticast mode [ 182.689317][ T6589] team_slave_0: entered allmulticast mode [ 182.703943][ T6589] team_slave_1: entered allmulticast mode [ 182.741191][ T6589] team0: left allmulticast mode [ 182.746678][ T6589] team_slave_0: left allmulticast mode [ 182.763695][ T6589] team_slave_1: left allmulticast mode [ 182.779798][ T6589] team0: left promiscuous mode [ 182.795937][ T6589] team_slave_0: left promiscuous mode [ 182.801877][ T6589] team_slave_1: left promiscuous mode [ 182.893581][ T5291] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 182.934166][ T5291] ath9k_htc: Failed to initialize the device [ 182.967503][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.996501][ T5291] usb 1-1: ath9k_htc: USB layer deinitialized [ 183.053826][ T54] Bluetooth: hci3: command tx timeout [ 183.111607][ T5274] usbhid 2-1:0.0: can't add hid device: -71 [ 183.136864][ T5274] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 183.154815][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.183283][ T5274] usb 2-1: USB disconnect, device number 14 [ 183.216535][ T5276] usb 1-1: USB disconnect, device number 14 [ 183.242516][ T4619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 183.269031][ T4619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.282704][ T4619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.294255][ T4619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 183.307369][ T4619] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 183.315541][ T4619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.357032][ T6450] veth0_vlan: entered promiscuous mode [ 183.375482][ T6450] veth1_vlan: entered promiscuous mode [ 183.436456][ T6450] veth0_macvtap: entered promiscuous mode [ 183.471679][ T6450] veth1_macvtap: entered promiscuous mode [ 183.621780][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.639577][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.653299][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.693166][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.729163][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.781134][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.803171][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.816430][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.834711][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.856580][ T12] bridge_slave_1: left allmulticast mode [ 183.862566][ T12] bridge_slave_1: left promiscuous mode [ 183.894667][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.924533][ T12] bridge_slave_0: left allmulticast mode [ 183.930330][ T12] bridge_slave_0: left promiscuous mode [ 183.973371][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.243241][ T4643] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 184.277292][ T4619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.292106][ T4619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.304702][ T4619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.328408][ T4619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.343326][ T4619] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 184.350773][ T4619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.416508][ T4643] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.430541][ T4643] usb 1-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 184.449704][ T4643] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.457884][ T4643] usb 1-1: Product: syz [ 184.462144][ T4643] usb 1-1: Manufacturer: syz [ 184.467389][ T4643] usb 1-1: SerialNumber: syz [ 184.481182][ T4643] usb 1-1: config 0 descriptor?? [ 184.502788][ T4643] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 184.553089][ T4643] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 184.559611][ T4643] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 184.593105][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.604545][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.615670][ T12] bond0 (unregistering): Released all slaves [ 184.646269][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 184.687608][ T4643] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 184.703464][ T4643] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 184.717962][ T6622] dummy0: entered promiscuous mode [ 184.738835][ T6622] dummy0: left promiscuous mode [ 184.764605][ T4643] usb 1-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 184.830891][ T4643] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 184.885374][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.920004][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.930871][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.954739][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.972148][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.987451][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.002500][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.019520][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.031531][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.069304][ T6631] netlink: 'syz.1.212': attribute type 1 has an invalid length. [ 185.156947][ T6450] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.166454][ T6450] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.175581][ T6450] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.184810][ T6450] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.319328][ T6631] bond0: (slave bond_slave_1): Releasing backup interface [ 185.374338][ T4619] Bluetooth: hci1: command tx timeout [ 185.430684][ T12] hsr_slave_0: left promiscuous mode [ 185.463806][ T12] hsr_slave_1: left promiscuous mode [ 185.491788][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.499944][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.510214][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.518746][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.555276][ T12] veth1_macvtap: left promiscuous mode [ 185.562212][ T12] veth0_macvtap: left promiscuous mode [ 185.568482][ T12] veth1_vlan: left promiscuous mode [ 185.574400][ T12] veth0_vlan: left promiscuous mode [ 186.359551][ T12] team0 (unregistering): Port device team_slave_1 removed [ 186.412913][ T12] team0 (unregistering): Port device team_slave_0 removed [ 186.423417][ T4619] Bluetooth: hci2: command tx timeout [ 187.066445][ T5278] usb 1-1: USB disconnect, device number 15 [ 187.208325][ T6604] chnl_net:caif_netlink_parms(): no params data found [ 187.269287][ T6668] netlink: 'syz.0.214': attribute type 9 has an invalid length. [ 187.279874][ T6668] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.214'. [ 187.442135][ T3027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.463903][ T4619] Bluetooth: hci1: command tx timeout [ 187.478199][ T3027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.564730][ T2917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.569280][ T6625] chnl_net:caif_netlink_parms(): no params data found [ 187.601435][ T2917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.832522][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 187.847410][ T6687] netlink: 36 bytes leftover after parsing attributes in process `syz.3.178'. [ 187.859022][ T6687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.178'. [ 187.874384][ T6687] netlink: 36 bytes leftover after parsing attributes in process `syz.3.178'. [ 187.883519][ T6687] netlink: 36 bytes leftover after parsing attributes in process `syz.3.178'. [ 187.932709][ T6604] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.969993][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.000477][ T6604] bridge_slave_0: entered allmulticast mode [ 188.021826][ T6604] bridge_slave_0: entered promiscuous mode [ 188.061678][ T6604] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.070231][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.088977][ T6604] bridge_slave_1: entered allmulticast mode [ 188.099765][ T6604] bridge_slave_1: entered promiscuous mode [ 188.143276][ T5274] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 188.186588][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.232780][ T6604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.264325][ T5278] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 188.293809][ T5274] usb 1-1: Using ep0 maxpacket: 8 [ 188.296116][ T6625] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.312512][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.317534][ T5274] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 188.343561][ T5274] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 188.368050][ T5274] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.383459][ T6625] bridge_slave_0: entered allmulticast mode [ 188.390665][ T6625] bridge_slave_0: entered promiscuous mode [ 188.394165][ T5274] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 188.413412][ T5274] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 188.436147][ T5274] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 188.453239][ T5278] usb 4-1: Using ep0 maxpacket: 32 [ 188.458445][ T6604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.479974][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 188.481651][ T5274] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 188.503613][ T4619] Bluetooth: hci2: command tx timeout [ 188.518133][ T5278] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 188.527627][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.535941][ T5278] usb 4-1: Product: syz [ 188.540144][ T5278] usb 4-1: Manufacturer: syz [ 188.545020][ T5278] usb 4-1: SerialNumber: syz [ 188.567987][ T5278] usb 4-1: config 0 descriptor?? [ 188.592560][ T5278] usb 4-1: no audio or video endpoints found [ 188.612012][ T5274] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.675994][ T5274] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 188.713202][ T5274] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 188.747910][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.770063][ T5274] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 188.778258][ T5274] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 188.795046][ T6625] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.800187][ T5274] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.826945][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.842501][ T6625] bridge_slave_1: entered allmulticast mode [ 188.858870][ T5274] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 188.864028][ T6625] bridge_slave_1: entered promiscuous mode [ 188.888812][ T5274] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 188.930030][ T5274] usb 1-1: string descriptor 0 read error: -22 [ 188.941386][ T5274] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 188.989555][ T5274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.050440][ T6604] team0: Port device team_slave_0 added [ 189.067752][ T5274] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 189.136590][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.190217][ T6715] wireguard0: entered promiscuous mode [ 189.196056][ T6715] wireguard0: entered allmulticast mode [ 189.201159][ T6717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.253874][ T6717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.367218][ T6727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.421432][ T6727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.449217][ T6604] team0: Port device team_slave_1 added [ 189.482397][ T6727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.505871][ T6727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.534199][ T4619] Bluetooth: hci1: command tx timeout [ 189.545073][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.551692][ T6727] fuse: Unknown parameter 'use00000000000000000000' [ 189.567429][ T6625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.614417][ T6625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.680357][ T5274] usb 4-1: USB disconnect, device number 7 [ 189.694674][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 189.720883][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.735405][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.770028][ T6604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.800005][ T6625] team0: Port device team_slave_0 added [ 189.812799][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.835767][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.869046][ T8] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 189.886746][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.900041][ T6604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.919744][ T6625] team0: Port device team_slave_1 added [ 189.930969][ T8] usb 2-1: Product: syz [ 189.965286][ T8] usb 2-1: Manufacturer: syz [ 189.978353][ T8] usb 2-1: SerialNumber: syz [ 190.009932][ T8] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 190.056007][ T5274] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 190.111589][ T6625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.154449][ T6625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.250125][ T6625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.380600][ T6625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.411823][ T6625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.501070][ T6625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.567402][ T6604] hsr_slave_0: entered promiscuous mode [ 190.573712][ T4619] Bluetooth: hci2: command tx timeout [ 190.597258][ T6604] hsr_slave_1: entered promiscuous mode [ 190.612412][ T6604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.641617][ T6604] Cannot create hsr debugfs directory [ 190.690939][ T12] bridge_slave_1: left allmulticast mode [ 190.700191][ T29] audit: type=1326 audit(1727211504.697:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.3.221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 190.702150][ T12] bridge_slave_1: left promiscuous mode [ 190.730949][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.756243][ T12] bridge_slave_0: left allmulticast mode [ 190.762642][ T29] audit: type=1326 audit(1727211504.727:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.3.221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 190.762904][ T12] bridge_slave_0: left promiscuous mode [ 190.820635][ T29] audit: type=1326 audit(1727211504.727:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.3.221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 190.852128][ T29] audit: type=1326 audit(1727211504.727:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.3.221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 190.860558][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.882708][ T29] audit: type=1326 audit(1727211504.727:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.3.221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 190.933056][ T29] audit: type=1326 audit(1727211504.727:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.3.221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 190.992785][ T8] usb 1-1: USB disconnect, device number 16 [ 190.995949][ T29] audit: type=1326 audit(1727211504.727:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.3.221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 191.133902][ T5274] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 191.141437][ T5274] ath9k_htc: Failed to initialize the device [ 191.193474][ T5274] usb 2-1: ath9k_htc: USB layer deinitialized [ 191.416250][ T4643] usb 2-1: USB disconnect, device number 15 [ 191.518287][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.527028][ T5276] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 191.541215][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.552623][ T12] bond0 (unregistering): Released all slaves [ 191.568452][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 191.577573][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 191.592384][ T6748] dummy0: entered promiscuous mode [ 191.613131][ T4619] Bluetooth: hci1: command tx timeout [ 191.713094][ T5276] usb 1-1: Using ep0 maxpacket: 32 [ 191.730796][ T5276] usb 1-1: unable to get BOS descriptor or descriptor too short [ 191.741406][ T5276] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 191.763108][ T5276] usb 1-1: can't read configurations, error -71 [ 191.798496][ T6625] hsr_slave_0: entered promiscuous mode [ 191.806154][ T6625] hsr_slave_1: entered promiscuous mode [ 191.812319][ T6625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.820186][ T6625] Cannot create hsr debugfs directory [ 192.007093][ T6755] netlink: 'syz.1.225': attribute type 9 has an invalid length. [ 192.016038][ T6755] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.225'. [ 192.031654][ T12] hsr_slave_0: left promiscuous mode [ 192.037191][ T5262] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 192.051647][ T12] hsr_slave_1: left promiscuous mode [ 192.068255][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.077589][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.088682][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.100136][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.119158][ T12] veth1_macvtap: left promiscuous mode [ 192.125032][ T12] veth0_macvtap: left promiscuous mode [ 192.130639][ T12] veth1_vlan: left promiscuous mode [ 192.136497][ T12] veth0_vlan: left promiscuous mode [ 192.196587][ T5262] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.210324][ T5262] usb 4-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 192.220368][ T5262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.229140][ T5262] usb 4-1: Product: syz [ 192.233817][ T5262] usb 4-1: Manufacturer: syz [ 192.238606][ T5262] usb 4-1: SerialNumber: syz [ 192.265744][ T5262] usb 4-1: config 0 descriptor?? [ 192.282145][ T5262] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 192.343237][ T5262] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 192.350172][ T5262] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 192.473142][ T5262] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 192.488143][ T5262] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 192.564504][ T5262] usb 4-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 192.618679][ T5262] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 192.638005][ T5262] usb 4-1: USB disconnect, device number 8 [ 192.653424][ T4619] Bluetooth: hci2: command tx timeout [ 192.977283][ T6769] netlink: 772 bytes leftover after parsing attributes in process `syz.0.230'. [ 193.013502][ T12] team0 (unregistering): Port device team_slave_1 removed [ 193.111241][ T12] team0 (unregistering): Port device team_slave_0 removed [ 193.657135][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 193.945424][ T6778] netlink: 56 bytes leftover after parsing attributes in process `syz.3.233'. [ 194.266676][ T29] audit: type=1326 audit(1727211508.257:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 194.306466][ T29] audit: type=1326 audit(1727211508.257:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 194.339672][ T29] audit: type=1326 audit(1727211508.257:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 194.656103][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.662515][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.788933][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'. [ 194.818417][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.240'. [ 194.839796][ T6812] dummy0: entered promiscuous mode [ 194.878910][ T6817] netlink: 'syz.0.242': attribute type 17 has an invalid length. [ 194.900241][ T6817] netlink: 'syz.0.242': attribute type 27 has an invalid length. [ 195.138355][ T6822] netlink: 56 bytes leftover after parsing attributes in process `syz.3.244'. [ 195.164205][ T6604] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 195.185096][ T5273] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 195.186350][ T6604] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 195.228150][ T6604] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 195.277642][ T6604] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 195.373560][ T5273] usb 1-1: Using ep0 maxpacket: 8 [ 195.394631][ T5273] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 195.424950][ T5273] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 195.443713][ T5273] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 195.481644][ T5273] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 195.505359][ T5273] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 195.519861][ T5273] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 195.535389][ T5273] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 195.546093][ T5273] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 195.563086][ T5273] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 195.602913][ T6625] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 195.607929][ T5273] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 195.629322][ T5273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.638209][ T6625] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 195.644163][ T5273] usb 1-1: Product: syz [ 195.649199][ T5273] usb 1-1: Manufacturer: syz [ 195.670943][ T6625] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 195.693221][ T5273] usb 1-1: SerialNumber: syz [ 195.757616][ T6625] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 195.847941][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 195.847962][ T29] audit: type=1326 audit(1727211509.847:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 195.924770][ T5273] adutux 1-1:246.0: interrupt endpoints not found [ 195.931797][ T6604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.940949][ T29] audit: type=1326 audit(1727211509.847:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 195.983298][ T29] audit: type=1326 audit(1727211509.877:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 195.997935][ T5273] usb 1-1: USB disconnect, device number 19 [ 196.061920][ T6604] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.087741][ T29] audit: type=1326 audit(1727211509.877:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 196.131509][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.138725][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.171732][ T6625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.178744][ T29] audit: type=1326 audit(1727211509.877:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 196.214974][ T29] audit: type=1326 audit(1727211509.877:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 196.275418][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.282709][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.327477][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 196.354987][ T6625] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.368058][ T2917] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.375328][ T2917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.441128][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.448413][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.668447][ T6604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.682712][ T6625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.762786][ T6864] netlink: 'syz.3.255': attribute type 2 has an invalid length. [ 196.771874][ T6864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.255'. [ 196.784393][ T6864] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 196.824373][ T6625] veth0_vlan: entered promiscuous mode [ 196.841662][ T6604] veth0_vlan: entered promiscuous mode [ 196.861821][ T6625] veth1_vlan: entered promiscuous mode [ 196.898777][ T6625] veth0_macvtap: entered promiscuous mode [ 196.907275][ T6604] veth1_vlan: entered promiscuous mode [ 196.949428][ T6625] veth1_macvtap: entered promiscuous mode [ 196.964287][ T5276] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 197.116966][ T6604] veth0_macvtap: entered promiscuous mode [ 197.150793][ T5276] usb 1-1: Using ep0 maxpacket: 16 [ 197.165557][ T5276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.190122][ T5276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.204218][ T6625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.237183][ T5276] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 197.246552][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.246819][ T6625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.256738][ T5276] usb 1-1: config 0 descriptor?? [ 197.275596][ T6625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.288312][ T6625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.299486][ T6625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.310323][ T6625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.322771][ T6625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.355706][ T6604] veth1_macvtap: entered promiscuous mode [ 197.363726][ T6625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.378693][ T6625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.390418][ T6625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.403131][ T6625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.413192][ T6625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.424785][ T6625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.444519][ T29] audit: type=1326 audit(1727211511.447:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7fc00000 [ 197.475253][ T6625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.497821][ T29] audit: type=1326 audit(1727211511.467:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ed579 code=0x7fc00000 [ 197.521004][ T6875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.259'. [ 197.521774][ T29] audit: type=1326 audit(1727211511.467:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7fc00000 [ 197.563388][ T6625] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.572250][ T6625] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.587868][ T6625] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.597970][ T6625] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.660615][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.680545][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.696306][ T5276] corsair 0003:1B1C:1B02.0005: unbalanced collection at end of report description [ 197.706698][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.713615][ T5276] corsair 0003:1B1C:1B02.0005: parse failed [ 197.727257][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.733635][ T5276] corsair 0003:1B1C:1B02.0005: probe with driver corsair failed with error -22 [ 197.765190][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.785958][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.796145][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.807635][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.819509][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.862644][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.875009][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.886054][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.897807][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.918683][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.939776][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.950782][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.962811][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.975636][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.998019][ T5273] usb 1-1: USB disconnect, device number 20 [ 198.002718][ T6604] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.035596][ T6604] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.053246][ T6604] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.062174][ T6604] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.140343][ T2917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.203069][ T2917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.262773][ T2888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.273367][ T2888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.287513][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'. [ 198.322737][ T2917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.363412][ T2917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.448635][ T3027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.456906][ T3027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.833234][ T5278] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 198.873306][ T5272] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 198.983303][ T5278] usb 3-1: Using ep0 maxpacket: 32 [ 198.991667][ T5278] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.995569][ T6909] loop2: detected capacity change from 0 to 7 [ 199.003788][ T5262] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 199.019200][ T6909] Dev loop2: unable to read RDB block 7 [ 199.023280][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 199.041291][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 199.043319][ T5272] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 199.052788][ T6909] loop2: unable to read partition table [ 199.067256][ T5272] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 199.073105][ T5278] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 199.079950][ T5272] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 199.096187][ T6909] loop2: partition table beyond EOD, truncated [ 199.099510][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.112111][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.123653][ T6909] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 199.136212][ T29] audit: type=1326 audit(1727211513.127:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.0.270" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x0 [ 199.138514][ T6892] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 199.160032][ T5278] usb 3-1: config 0 descriptor?? [ 199.164704][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.181098][ T6885] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 199.201026][ T5272] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 199.222417][ T5278] hub 3-1:0.0: USB hub found [ 199.227612][ T5262] usb 4-1: config 0 has no interfaces? [ 199.234397][ T5262] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 199.261681][ T5262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.291727][ T5262] usb 4-1: config 0 descriptor?? [ 199.423202][ T5278] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 199.553412][ T5276] usb 4-1: USB disconnect, device number 9 [ 199.604359][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.265'. [ 199.651684][ T6892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.689587][ T6892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.733432][ T6892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.761956][ T6892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.816295][ T5272] usb 5-1: USB disconnect, device number 12 [ 199.851358][ T5278] hid-generic 0003:046D:C314.0006: item fetching failed at offset 0/1 [ 199.900205][ T5278] hid-generic 0003:046D:C314.0006: probe with driver hid-generic failed with error -22 [ 200.017802][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 200.173885][ T6885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.221644][ T6885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.334052][ T5278] usb 3-1: USB disconnect, device number 15 [ 200.574997][ T6928] netlink: 20 bytes leftover after parsing attributes in process `syz.4.276'. [ 200.912261][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'. [ 200.926705][ T6944] dummy0: entered promiscuous mode [ 201.467320][ T6965] fuse: Unknown parameter './file0' [ 201.643370][ T5272] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 201.704349][ T6973] trusted_key: syz.2.295 sent an empty control message without MSG_MORE. [ 201.774369][ T5272] usb 5-1: device descriptor read/64, error -71 [ 201.995120][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 202.023224][ T5272] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 202.167236][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 202.190267][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.201148][ T5272] usb 5-1: device descriptor read/64, error -71 [ 202.226826][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 202.240160][ T8] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 202.270780][ T8] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 202.280706][ T8] usb 4-1: Product: syz [ 202.290785][ T8] usb 4-1: Manufacturer: syz [ 202.297843][ T8] usb 4-1: SerialNumber: syz [ 202.318506][ T8] usb 4-1: config 0 descriptor?? [ 202.324106][ T5272] usb usb5-port1: attempt power cycle [ 202.569571][ T5274] usb 4-1: USB disconnect, device number 10 [ 202.675779][ T5272] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 202.723260][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 202.731951][ T5272] usb 5-1: device descriptor read/8, error -71 [ 202.868243][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 202.903964][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 202.912836][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 202.927597][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 202.935030][ T7010] netlink: 104 bytes leftover after parsing attributes in process `syz.1.310'. [ 202.946543][ T7010] netlink: 104 bytes leftover after parsing attributes in process `syz.1.310'. [ 202.947530][ T8] usb 1-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=ec.06 [ 202.970918][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.981757][ T8] usb 1-1: Product: syz [ 202.986265][ T8] usb 1-1: Manufacturer: syz [ 202.993183][ T5272] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 203.000895][ T8] usb 1-1: SerialNumber: syz [ 203.020371][ T8] usb 1-1: config 0 descriptor?? [ 203.032185][ T5272] usb 5-1: device descriptor read/8, error -71 [ 203.042862][ T8] HFC-S_USB 1-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 203.151758][ T5272] usb usb5-port1: unable to enumerate USB device [ 203.216498][ T7016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.315'. [ 203.454905][ T2917] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.550297][ T5276] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 203.560570][ T2917] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.682498][ T2917] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.748101][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.753183][ T5276] usb 4-1: Using ep0 maxpacket: 32 [ 203.766662][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.778669][ T5276] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 203.778713][ T5276] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 203.778749][ T5276] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 203.778779][ T5276] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 203.778809][ T5276] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.780818][ T5276] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 203.845314][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.871507][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.880454][ T4643] usb 1-1: USB disconnect, device number 21 [ 203.889139][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 203.900146][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 203.979458][ T2917] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.042049][ T5276] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 204.057783][ T5276] usb 4-1: Product: syz [ 204.062219][ T5276] usb 4-1: Manufacturer: syz [ 204.069666][ T5276] usb 4-1: SerialNumber: syz [ 204.087216][ T5276] usb 4-1: config 0 descriptor?? [ 204.102165][ T5276] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 204.119877][ T5276] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 204.142260][ T7026] FAULT_INJECTION: forcing a failure. [ 204.142260][ T7026] name failslab, interval 1, probability 0, space 0, times 0 [ 204.158223][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 204.189276][ T7026] CPU: 0 UID: 0 PID: 7026 Comm: syz.0.320 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 204.199591][ T7026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 204.209680][ T7026] Call Trace: [ 204.213000][ T7026] [ 204.215976][ T7026] dump_stack_lvl+0x241/0x360 [ 204.220727][ T7026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.226004][ T7026] ? __pfx__printk+0x10/0x10 [ 204.230813][ T7026] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 204.236330][ T7026] ? __pfx___might_resched+0x10/0x10 [ 204.241647][ T7026] should_fail_ex+0x3b0/0x4e0 [ 204.246399][ T7026] should_failslab+0xac/0x100 [ 204.251144][ T7026] ? allocate_cgrp_cset_links+0xc5/0x320 [ 204.256814][ T7026] __kmalloc_cache_noprof+0x6c/0x2c0 [ 204.262298][ T7026] allocate_cgrp_cset_links+0xc5/0x320 [ 204.267787][ T7026] find_css_set+0xb29/0x1720 [ 204.272409][ T7026] ? __pfx_find_css_set+0x10/0x10 [ 204.277503][ T7026] cgroup_migrate_prepare_dst+0x124/0x690 [ 204.283358][ T7026] ? lockdep_hardirqs_on+0x99/0x150 [ 204.288604][ T7026] cgroup_attach_task+0x697/0xaf0 [ 204.293671][ T7026] ? cgroup_attach_task+0x2b5/0xaf0 [ 204.298919][ T7026] ? __pfx_cgroup_attach_task+0x10/0x10 [ 204.304500][ T7026] ? get_task_cred+0x26/0x330 [ 204.309222][ T7026] ? __pfx_lock_release+0x10/0x10 [ 204.314301][ T7026] ? get_task_cred+0x26/0x330 [ 204.319015][ T7026] ? get_task_cred+0x312/0x330 [ 204.323812][ T7026] ? get_task_cred+0x26/0x330 [ 204.328597][ T7026] __cgroup1_procs_write+0x2e3/0x430 [ 204.333908][ T7026] ? __pfx___cgroup1_procs_write+0x10/0x10 [ 204.339746][ T7026] ? __pfx_lock_acquire+0x10/0x10 [ 204.344807][ T7026] ? __pfx_cgroup1_procs_write+0x10/0x10 [ 204.350477][ T7026] cgroup_file_write+0x2ce/0x6d0 [ 204.355441][ T7026] ? kernfs_fop_write_iter+0x1ea/0x500 [ 204.360923][ T7026] ? __pfx_cgroup_file_write+0x10/0x10 [ 204.366412][ T7026] ? __virt_addr_valid+0x183/0x530 [ 204.371557][ T7026] ? __pfx_cgroup_file_write+0x10/0x10 [ 204.377043][ T7026] kernfs_fop_write_iter+0x3a0/0x500 [ 204.382359][ T7026] vfs_write+0xa6d/0xc90 [ 204.386637][ T7026] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 204.392470][ T7026] ? __pfx_vfs_write+0x10/0x10 [ 204.397276][ T7026] ? fdget_pos+0x24e/0x320 [ 204.401810][ T7026] ksys_write+0x183/0x2b0 [ 204.406175][ T7026] ? __pfx_ksys_write+0x10/0x10 [ 204.411055][ T7026] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 204.417675][ T7026] ? lockdep_hardirqs_on+0x99/0x150 [ 204.422902][ T7026] __do_fast_syscall_32+0xb4/0x110 [ 204.428246][ T7026] ? exc_page_fault+0x590/0x8c0 [ 204.433132][ T7026] do_fast_syscall_32+0x34/0x80 [ 204.438012][ T7026] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.444373][ T7026] RIP: 0023:0xf7ff5579 [ 204.448458][ T7026] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 204.468094][ T7026] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 204.476540][ T7026] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200001c0 [ 204.484619][ T7026] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.492615][ T7026] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.500723][ T7026] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 204.508980][ T7026] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.516989][ T7026] [ 204.520151][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.701300][ T2917] bridge_slave_1: left allmulticast mode [ 204.707261][ T2917] bridge_slave_1: left promiscuous mode [ 204.713385][ T2917] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.774301][ T2917] bridge_slave_0: left allmulticast mode [ 204.780092][ T2917] bridge_slave_0: left promiscuous mode [ 204.803346][ T2917] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.393657][ T5278] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 205.508974][ T7051] loop7: detected capacity change from 0 to 16384 [ 205.653305][ T5278] usb 3-1: Using ep0 maxpacket: 16 [ 205.683124][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.783087][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.872065][ T5278] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 205.956185][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.014848][ T54] Bluetooth: hci4: command tx timeout [ 206.089697][ T5278] usb 3-1: config 0 descriptor?? [ 206.547876][ T5278] corsair 0003:1B1C:1B02.0007: unbalanced collection at end of report description [ 206.630280][ T5278] corsair 0003:1B1C:1B02.0007: parse failed [ 206.666107][ T5278] corsair 0003:1B1C:1B02.0007: probe with driver corsair failed with error -22 [ 206.891494][ T5278] usb 3-1: USB disconnect, device number 16 [ 208.094126][ T54] Bluetooth: hci4: command tx timeout [ 210.173224][ T54] Bluetooth: hci4: command tx timeout [ 218.352860][ T54] Bluetooth: hci4: command tx timeout [ 218.773010][ C0] sched: DL replenish lagged too much [ 219.937051][ T2917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.036502][ T2917] bond0 (unregistering): Released all slaves [ 220.179264][ T7027] chnl_net:caif_netlink_parms(): no params data found [ 220.633204][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.327'. [ 221.688671][ T5278] usb 4-1: USB disconnect, device number 11 [ 221.764090][ T5278] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 222.164310][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 222.184272][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 222.195354][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 222.207648][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 222.224731][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 222.232179][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 222.505129][ T7027] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.512390][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.593891][ T4619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 222.608665][ T4619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 222.617293][ T4619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 222.628755][ T4619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 222.636945][ T4619] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 222.644742][ T4619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 222.833983][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 222.856339][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 222.865343][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 222.903379][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 222.920801][ T7027] bridge_slave_0: entered allmulticast mode [ 222.927007][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 222.935285][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 223.025217][ T7027] bridge_slave_0: entered promiscuous mode [ 223.239488][ T4619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 223.250253][ T4619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 223.259380][ T4619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 223.267856][ T4619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 223.277323][ T4619] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 223.285143][ T4619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 223.904805][ T7027] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.912008][ T7027] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.947728][ T7027] bridge_slave_1: entered allmulticast mode [ 223.962258][ T7027] bridge_slave_1: entered promiscuous mode [ 224.253406][ T4619] Bluetooth: hci5: command tx timeout [ 224.734241][ T4619] Bluetooth: hci3: command tx timeout [ 225.053258][ T4619] Bluetooth: hci6: command tx timeout [ 225.453357][ T4619] Bluetooth: hci2: command tx timeout [ 226.333176][ T4619] Bluetooth: hci5: command tx timeout [ 226.813190][ T4619] Bluetooth: hci3: command tx timeout [ 227.133371][ T4619] Bluetooth: hci6: command tx timeout [ 227.533402][ T4619] Bluetooth: hci2: command tx timeout [ 228.414869][ T4619] Bluetooth: hci5: command tx timeout [ 228.893242][ T4619] Bluetooth: hci3: command tx timeout [ 229.216909][ T4619] Bluetooth: hci6: command tx timeout [ 229.613240][ T4619] Bluetooth: hci2: command tx timeout [ 230.493742][ T4619] Bluetooth: hci5: command tx timeout [ 230.973210][ T4619] Bluetooth: hci3: command tx timeout [ 231.293255][ T4619] Bluetooth: hci6: command tx timeout [ 231.693281][ T4619] Bluetooth: hci2: command tx timeout [ 256.099904][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.106670][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.366257][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 266.385998][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 266.410854][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 266.508010][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 266.540512][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 266.570263][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 268.733194][ T4619] Bluetooth: hci0: command tx timeout [ 270.813298][ T4619] Bluetooth: hci0: command tx timeout [ 272.893190][ T4619] Bluetooth: hci0: command tx timeout [ 274.973196][ T4619] Bluetooth: hci0: command tx timeout [ 281.673741][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.684222][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.703677][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.724020][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.753147][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 281.765253][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 281.897485][ T4619] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 281.914866][ T4619] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 281.926507][ T4619] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 281.934965][ T4619] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 281.945206][ T4619] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 281.965259][ T4619] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.123944][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 282.136219][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 282.144916][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 282.169633][ T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 282.177839][ T54] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 282.191029][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 282.252577][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 282.264097][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 282.274154][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 282.287780][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 282.300540][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 282.313824][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 283.853393][ T4619] Bluetooth: hci1: command tx timeout [ 284.013190][ T4619] Bluetooth: hci7: command tx timeout [ 284.253326][ T4619] Bluetooth: hci8: command tx timeout [ 284.413283][ T4619] Bluetooth: hci9: command tx timeout [ 285.933333][ T4619] Bluetooth: hci1: command tx timeout [ 286.093231][ T4619] Bluetooth: hci7: command tx timeout [ 286.333129][ T4619] Bluetooth: hci8: command tx timeout [ 286.493218][ T4619] Bluetooth: hci9: command tx timeout [ 288.013220][ T4619] Bluetooth: hci1: command tx timeout [ 288.173111][ T4619] Bluetooth: hci7: command tx timeout [ 288.416877][ T4619] Bluetooth: hci8: command tx timeout [ 288.573262][ T4619] Bluetooth: hci9: command tx timeout [ 290.093207][ T4619] Bluetooth: hci1: command tx timeout [ 290.253268][ T4619] Bluetooth: hci7: command tx timeout [ 290.493148][ T4619] Bluetooth: hci8: command tx timeout [ 290.653430][ T4619] Bluetooth: hci9: command tx timeout [ 317.541086][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.553109][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.165000][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 327.200174][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 327.268617][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 327.330609][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 327.389614][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 327.426297][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 329.613338][ T54] Bluetooth: hci10: command tx timeout [ 329.855941][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 331.693284][ T4619] Bluetooth: hci10: command tx timeout [ 333.773201][ T4619] Bluetooth: hci10: command tx timeout [ 335.853108][ T4619] Bluetooth: hci10: command tx timeout [ 341.200906][ T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 341.212710][ T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 341.222109][ T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 341.230393][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 341.238673][ T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 341.248441][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 342.523809][ T4619] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 342.538037][ T4619] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 342.547086][ T4619] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 342.556390][ T4619] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 342.566198][ T4619] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 342.574526][ T4619] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 342.633883][ T5234] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 342.644744][ T5234] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 342.664404][ T5234] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 342.676389][ T5234] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 342.700962][ T5234] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 342.714049][ T5234] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 342.803570][ T54] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 342.817190][ T54] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 342.829007][ T54] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 342.837734][ T54] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 342.846137][ T54] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 342.854268][ T54] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 343.293334][ T5232] Bluetooth: hci11: command tx timeout [ 344.653400][ T5232] Bluetooth: hci12: command tx timeout [ 344.813524][ T5232] Bluetooth: hci13: command tx timeout [ 344.893336][ T5232] Bluetooth: hci14: command tx timeout [ 345.240928][ T5231] Bluetooth: hci5: command 0x0406 tx timeout [ 345.247260][ T5235] Bluetooth: hci3: command 0x0406 tx timeout [ 345.257771][ T5232] Bluetooth: hci6: command 0x0406 tx timeout [ 345.373256][ T54] Bluetooth: hci11: command tx timeout [ 346.733249][ T54] Bluetooth: hci12: command tx timeout [ 346.893574][ T54] Bluetooth: hci13: command tx timeout [ 346.973366][ T54] Bluetooth: hci14: command tx timeout [ 347.453117][ T54] Bluetooth: hci11: command tx timeout [ 348.813127][ T54] Bluetooth: hci12: command tx timeout [ 348.973378][ T54] Bluetooth: hci13: command tx timeout [ 349.053596][ T54] Bluetooth: hci14: command tx timeout [ 349.533112][ T54] Bluetooth: hci11: command tx timeout [ 350.338356][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 350.893129][ T4619] Bluetooth: hci12: command tx timeout [ 351.053360][ T4619] Bluetooth: hci13: command tx timeout [ 351.133362][ T4619] Bluetooth: hci14: command tx timeout [ 358.197157][ T2917] mac80211_hwsim hwsim27 wlan1 (unregistering): left allmulticast mode [ 378.975546][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.981931][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.954978][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 387.991899][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 388.009791][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 388.125889][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 388.159101][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 388.188364][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 390.334669][ T54] Bluetooth: hci0: command tx timeout [ 392.413155][ T54] Bluetooth: hci0: command tx timeout [ 394.493134][ T54] Bluetooth: hci0: command tx timeout [ 396.573068][ T54] Bluetooth: hci0: command tx timeout [ 402.499851][ T4619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 402.509640][ T4619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 402.520914][ T4619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 402.534463][ T4619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 402.542260][ T4619] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 402.550249][ T4619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 403.553877][ T4619] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 403.565155][ T4619] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 403.575489][ T4619] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 403.583799][ T4619] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 403.598953][ T4619] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 403.633459][ T4619] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 403.721643][ T54] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 403.735751][ T54] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 403.745231][ T54] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 403.753938][ T54] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 403.761769][ T54] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 403.769789][ T54] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 403.845162][ T54] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 403.857023][ T54] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 403.872500][ T54] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 403.881311][ T54] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 403.903157][ T54] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 403.912243][ T54] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 404.653275][ T7177] Bluetooth: hci4: command tx timeout [ 405.694391][ T7177] Bluetooth: hci15: command tx timeout [ 405.853326][ T7177] Bluetooth: hci16: command tx timeout [ 406.013137][ T7177] Bluetooth: hci17: command tx timeout [ 406.674533][ T5235] Bluetooth: hci1: command 0x0406 tx timeout [ 406.690488][ T5235] Bluetooth: hci7: command 0x0406 tx timeout [ 406.696737][ T7177] Bluetooth: hci8: command 0x0406 tx timeout [ 406.703504][ T5235] Bluetooth: hci9: command 0x0406 tx timeout [ 406.733152][ T7178] Bluetooth: hci4: command tx timeout [ 407.773305][ T5231] Bluetooth: hci15: command tx timeout [ 407.934258][ T5231] Bluetooth: hci16: command tx timeout [ 408.093193][ T5231] Bluetooth: hci17: command tx timeout [ 408.813161][ T5231] Bluetooth: hci4: command tx timeout [ 409.853318][ T5231] Bluetooth: hci15: command tx timeout [ 410.013551][ T5231] Bluetooth: hci16: command tx timeout [ 410.173092][ T5231] Bluetooth: hci17: command tx timeout [ 410.893215][ T5231] Bluetooth: hci4: command tx timeout [ 411.933213][ T5231] Bluetooth: hci15: command tx timeout [ 412.093141][ T5231] Bluetooth: hci16: command tx timeout [ 412.253296][ T5231] Bluetooth: hci17: command tx timeout [ 435.294802][ T30] INFO: task syz-executor:7096 blocked for more than 143 seconds. [ 435.302713][ T30] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 435.340100][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.403045][ T30] task:syz-executor state:D stack:26480 pid:7096 tgid:7096 ppid:1 flags:0x20004004 [ 435.481039][ T30] Call Trace: [ 435.491574][ T30] [ 435.542970][ T30] __schedule+0x1895/0x4b30 [ 435.547613][ T30] ? __pfx___schedule+0x10/0x10 [ 435.552528][ T30] ? __pfx_lock_release+0x10/0x10 [ 435.619779][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 435.653010][ T30] ? schedule+0x90/0x320 [ 435.657374][ T30] schedule+0x14b/0x320 [ 435.661622][ T30] schedule_preempt_disabled+0x13/0x30 [ 435.727484][ T30] __mutex_lock+0x6a7/0xd70 [ 435.732219][ T30] ? __mutex_lock+0x52a/0xd70 [ 435.783135][ T30] ? setup_net+0x602/0x9e0 [ 435.787670][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 435.792759][ T30] ? synchronize_rcu+0x11b/0x360 [ 435.848106][ T30] ? bpf_prog_array_free+0x34/0x40 [ 435.877743][ T30] setup_net+0x602/0x9e0 [ 435.890826][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 435.918142][ T30] ? __pfx_setup_net+0x10/0x10 [ 435.941521][ T30] copy_net_ns+0x33f/0x570 [ 435.967873][ T30] create_new_namespaces+0x425/0x7b0 [ 435.983036][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 436.013287][ T30] ksys_unshare+0x619/0xc10 [ 436.017925][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 436.063196][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 436.069303][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 436.116939][ T30] __ia32_sys_unshare+0x37/0x40 [ 436.121892][ T30] __do_fast_syscall_32+0xb4/0x110 [ 436.163279][ T30] ? exc_page_fault+0x590/0x8c0 [ 436.168338][ T30] do_fast_syscall_32+0x34/0x80 [ 436.192968][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 436.199416][ T30] RIP: 0023:0xf73fd579 [ 436.222993][ T30] RSP: 002b:00000000f754ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 436.231520][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 436.269336][ T30] RDX: 00000000f73ebff4 RSI: 00000000f72c2a6a RDI: 0000000030000000 [ 436.300258][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 436.312947][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 436.321017][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 436.362595][ T30] [ 436.370373][ T30] INFO: task syz-executor:7117 blocked for more than 144 seconds. [ 436.400746][ T30] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 436.423043][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 436.431975][ T30] task:syz-executor state:D stack:25400 pid:7117 tgid:7117 ppid:1 flags:0x20004004 [ 436.467539][ T30] Call Trace: [ 436.470917][ T30] [ 436.483013][ T30] __schedule+0x1895/0x4b30 [ 436.487644][ T30] ? __pfx___schedule+0x10/0x10 [ 436.492579][ T30] ? __pfx_lock_release+0x10/0x10 [ 436.527583][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 436.543037][ T30] ? schedule+0x90/0x320 [ 436.547390][ T30] schedule+0x14b/0x320 [ 436.551656][ T30] schedule_preempt_disabled+0x13/0x30 [ 436.590110][ T30] __mutex_lock+0x6a7/0xd70 [ 436.598561][ T30] ? __mutex_lock+0x52a/0xd70 [ 436.620265][ T30] ? register_nexthop_notifier+0x84/0x290 [ 436.626220][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 436.631353][ T30] ? __asan_memset+0x23/0x50 [ 436.658934][ T30] register_nexthop_notifier+0x84/0x290 [ 436.672187][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 436.692942][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 436.699303][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 436.732940][ T30] ? __asan_memset+0x23/0x50 [ 436.737650][ T30] ops_init+0x31e/0x590 [ 436.741869][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 436.771617][ T30] setup_net+0x287/0x9e0 [ 436.787348][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 436.807987][ T30] ? __pfx_setup_net+0x10/0x10 [ 436.823014][ T30] copy_net_ns+0x33f/0x570 [ 436.827679][ T30] create_new_namespaces+0x425/0x7b0 [ 436.853038][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 436.858874][ T30] ksys_unshare+0x619/0xc10 [ 436.880021][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 436.893131][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 436.899230][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 436.932352][ T30] __ia32_sys_unshare+0x37/0x40 [ 436.948873][ T30] __do_fast_syscall_32+0xb4/0x110 [ 436.961674][ T30] ? exc_page_fault+0x590/0x8c0 [ 436.981408][ T30] do_fast_syscall_32+0x34/0x80 [ 437.000438][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 437.033020][ T30] RIP: 0023:0xf7ff1579 [ 437.037187][ T30] RSP: 002b:00000000f75dff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 437.072153][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 437.093186][ T30] RDX: 00000000f747bff4 RSI: 00000000f7352a6a RDI: 0000000030000000 [ 437.101257][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 437.132218][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 437.160639][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 437.182503][ T30] [ 437.192302][ T30] INFO: task syz-executor:7119 blocked for more than 145 seconds. [ 437.214362][ T30] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 437.221731][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 437.253755][ T30] task:syz-executor state:D stack:26528 pid:7119 tgid:7119 ppid:1 flags:0x20004006 [ 437.278617][ T30] Call Trace: [ 437.281978][ T30] [ 437.296415][ T30] __schedule+0x1895/0x4b30 [ 437.301040][ T30] ? __pfx___schedule+0x10/0x10 [ 437.325384][ T30] ? __pfx_lock_release+0x10/0x10 [ 437.338316][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 437.351789][ T30] ? schedule+0x90/0x320 [ 437.363012][ T30] schedule+0x14b/0x320 [ 437.367263][ T30] schedule_preempt_disabled+0x13/0x30 [ 437.372775][ T30] __mutex_lock+0x6a7/0xd70 [ 437.410120][ T30] ? __mutex_lock+0x52a/0xd70 [ 437.422849][ T30] ? register_nexthop_notifier+0x84/0x290 [ 437.440206][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 437.461121][ T30] ? __asan_memset+0x23/0x50 [ 437.477300][ T30] register_nexthop_notifier+0x84/0x290 [ 437.492971][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 437.498879][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 437.525504][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 437.531958][ T30] ? __asan_memset+0x23/0x50 [ 437.570368][ T30] ops_init+0x31e/0x590 [ 437.576415][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 437.581890][ T30] setup_net+0x287/0x9e0 [ 437.606483][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 437.612144][ T30] ? __pfx_setup_net+0x10/0x10 [ 437.643119][ T30] copy_net_ns+0x33f/0x570 [ 437.647657][ T30] create_new_namespaces+0x425/0x7b0 [ 437.680356][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 437.686308][ T30] ksys_unshare+0x619/0xc10 [ 437.690892][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 437.718913][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 437.740893][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 437.752978][ T30] __ia32_sys_unshare+0x37/0x40 [ 437.757928][ T30] __do_fast_syscall_32+0xb4/0x110 [ 437.780577][ T30] ? exc_page_fault+0x590/0x8c0 [ 437.791066][ T30] do_fast_syscall_32+0x34/0x80 [ 437.807702][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 437.829934][ T30] RIP: 0023:0xf7f56579 [ 437.846512][ T30] RSP: 002b:00000000f753ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 437.871118][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 437.893049][ T30] RDX: 00000000f73dbff4 RSI: 00000000f72b2a6a RDI: 0000000030000000 [ 437.901174][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 437.942839][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 437.971477][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 437.991431][ T30] [ 438.001412][ T30] INFO: task syz-executor:7123 blocked for more than 146 seconds. [ 438.052266][ T30] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 438.083112][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.091877][ T30] task:syz-executor state:D stack:26224 pid:7123 tgid:7123 ppid:1 flags:0x20004004 [ 438.129975][ T30] Call Trace: [ 438.139897][ T30] [ 438.150866][ T30] __schedule+0x1895/0x4b30 [ 438.170024][ T30] ? __pfx___schedule+0x10/0x10 [ 438.180178][ T30] ? __pfx_lock_release+0x10/0x10 [ 438.192978][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 438.198606][ T30] ? schedule+0x90/0x320 [ 438.230164][ T30] schedule+0x14b/0x320 [ 438.234555][ T30] schedule_preempt_disabled+0x13/0x30 [ 438.256677][ T30] __mutex_lock+0x6a7/0xd70 [ 438.261314][ T30] ? __mutex_lock+0x52a/0xd70 [ 438.283046][ T30] ? register_nexthop_notifier+0x84/0x290 [ 438.288872][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 438.312819][ T30] ? __asan_memset+0x23/0x50 [ 438.317785][ T30] register_nexthop_notifier+0x84/0x290 [ 438.349894][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 438.361853][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 438.382935][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 438.389203][ T30] ? __asan_memset+0x23/0x50 [ 438.413555][ T30] ops_init+0x31e/0x590 [ 438.417835][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 438.448641][ T30] setup_net+0x287/0x9e0 [ 438.461620][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 438.477384][ T30] ? __pfx_setup_net+0x10/0x10 [ 438.482280][ T30] copy_net_ns+0x33f/0x570 [ 438.512279][ T30] create_new_namespaces+0x425/0x7b0 [ 438.522938][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 438.550690][ T30] ksys_unshare+0x619/0xc10 [ 438.562461][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 438.570334][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 438.587218][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 438.597173][ T30] __ia32_sys_unshare+0x37/0x40 [ 438.602116][ T30] __do_fast_syscall_32+0xb4/0x110 [ 438.616378][ T30] ? exc_page_fault+0x590/0x8c0 [ 438.621381][ T30] do_fast_syscall_32+0x34/0x80 [ 438.631679][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 438.640998][ T30] RIP: 0023:0xf73cd579 [ 438.653113][ T30] RSP: 002b:00000000f751ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 438.661654][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 438.678111][ T30] RDX: 00000000f73bbff4 RSI: 00000000f7292a6a RDI: 0000000030000000 [ 438.690221][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 438.703442][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 438.711514][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 438.728152][ T30] [ 438.731440][ T30] INFO: task syz-executor:7124 blocked for more than 146 seconds. [ 438.742412][ T30] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 438.758662][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.778863][ T30] task:syz-executor state:D stack:26624 pid:7124 tgid:7124 ppid:1 flags:0x20004004 [ 438.790909][ T30] Call Trace: [ 438.801761][ T30] [ 438.806299][ T30] __schedule+0x1895/0x4b30 [ 438.810905][ T30] ? __pfx___schedule+0x10/0x10 [ 438.822538][ T30] ? __pfx_lock_release+0x10/0x10 [ 438.829276][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 438.842229][ T30] ? schedule+0x90/0x320 [ 438.848224][ T30] schedule+0x14b/0x320 [ 438.860508][ T30] schedule_preempt_disabled+0x13/0x30 [ 438.868273][ T30] __mutex_lock+0x6a7/0xd70 [ 438.880316][ T30] ? __mutex_lock+0x52a/0xd70 [ 438.886699][ T30] ? register_nexthop_notifier+0x84/0x290 [ 438.892509][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 438.903015][ T30] ? __asan_memset+0x23/0x50 [ 438.907739][ T30] register_nexthop_notifier+0x84/0x290 [ 438.921338][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 438.928122][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 438.941863][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 438.948552][ T30] ? __asan_memset+0x23/0x50 [ 438.962995][ T30] ops_init+0x31e/0x590 [ 438.967270][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 438.980077][ T30] setup_net+0x287/0x9e0 [ 438.984813][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 438.990439][ T30] ? __pfx_setup_net+0x10/0x10 [ 439.003475][ T30] copy_net_ns+0x33f/0x570 [ 439.008009][ T30] create_new_namespaces+0x425/0x7b0 [ 439.020766][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 439.027104][ T30] ksys_unshare+0x619/0xc10 [ 439.031724][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 439.042945][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 439.049064][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 439.073998][ T30] __ia32_sys_unshare+0x37/0x40 [ 439.078957][ T30] __do_fast_syscall_32+0xb4/0x110 [ 439.091709][ T30] ? exc_page_fault+0x590/0x8c0 [ 439.097745][ T30] do_fast_syscall_32+0x34/0x80 [ 439.102693][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 439.118142][ T30] RIP: 0023:0xf7f35579 [ 439.122297][ T30] RSP: 002b:00000000f751ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 439.134837][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 439.150043][ T30] RDX: 00000000f73bbff4 RSI: 00000000f7292a6a RDI: 0000000030000000 [ 439.168236][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 439.179623][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 439.196509][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 439.209793][ T30] [ 439.216095][ T30] [ 439.216095][ T30] Showing all locks held in the system: [ 439.230798][ T30] 3 locks held by kworker/0:0/8: [ 439.238683][ T30] 3 locks held by kworker/u8:0/11: [ 439.248977][ T30] #0: ffff8881452a9948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 439.272983][ T30] #1: ffffc90000107d00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 439.295088][ T30] #2: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbf/0x610 [ 439.312222][ T30] 3 locks held by kworker/u8:1/12: [ 439.320291][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 439.337351][ T30] #1: ffffc90000117d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 439.352475][ T30] #2: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 439.370472][ T30] 1 lock held by khungtaskd/30: [ 439.375569][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 439.395314][ T30] 3 locks held by kworker/u8:6/2888: [ 439.400710][ T30] #0: ffff88802e28b148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 439.417735][ T30] #1: ffffc90009d27d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 439.435712][ T30] #2: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 439.450530][ T30] 4 locks held by kworker/u8:7/2917: [ 439.460897][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 439.481081][ T30] #1: ffffc90009e57d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 439.495331][ T30] #2: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 439.511974][ T30] #3: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: wiphy_unregister+0x236/0xb00 [ 439.524350][ T30] 2 locks held by dhcpcd/4896: [ 439.529364][ T30] #0: ffff8880310c16c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 439.542966][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 439.551910][ T30] 2 locks held by getty/4986: [ 439.569102][ T30] #0: ffff88802efa60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 439.587006][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 439.601443][ T30] 6 locks held by kworker/0:4/5273: [ 439.612164][ T30] 3 locks held by kworker/0:5/5274: [ 439.622929][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 439.642765][ T30] #1: ffffc90003cdfd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 439.662014][ T30] #2: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 439.675604][ T30] 2 locks held by syz.4.328/7062: [ 439.680735][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: ppp_release+0x87/0x1f0 [ 439.698887][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 439.714867][ T30] 2 locks held by syz-executor/7086: [ 439.720231][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 439.737242][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 439.751146][ T30] 2 locks held by syz-executor/7090: [ 439.761568][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 439.775397][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 439.790874][ T30] 2 locks held by syz-executor/7092: [ 439.800438][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 439.812989][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 439.822625][ T30] 2 locks held by syz-executor/7096: [ 439.836000][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 439.851956][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 439.862454][ T30] 2 locks held by syz-executor/7117: [ 439.875950][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 439.893414][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 439.911018][ T30] 2 locks held by syz-executor/7119: [ 439.917955][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 439.933062][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 439.951382][ T30] 2 locks held by syz-executor/7123: [ 439.958323][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 439.972922][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 439.991127][ T30] 2 locks held by syz-executor/7124: [ 439.997392][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 440.016579][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 440.031839][ T30] 2 locks held by syz-executor/7129: [ 440.041264][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 440.058989][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 440.070857][ T30] 2 locks held by syz-executor/7134: [ 440.083030][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 440.092597][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 440.120038][ T30] 2 locks held by syz-executor/7141: [ 440.134302][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 440.151352][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 440.162007][ T30] 2 locks held by syz-executor/7143: [ 440.178539][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 440.192535][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 440.208351][ T30] 2 locks held by syz-executor/7144: [ 440.217672][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 440.232488][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 440.245504][ T30] 2 locks held by syz-executor/7159: [ 440.250869][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 440.264518][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 440.282523][ T30] 2 locks held by syz-executor/7166: [ 440.291060][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 440.308983][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 440.320938][ T30] 2 locks held by syz-executor/7173: [ 440.335247][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 440.351011][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 440.362799][ T30] 2 locks held by syz-executor/7175: [ 440.374539][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 440.392494][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 440.410792][ T30] 2 locks held by syz-executor/7176: [ 440.419917][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.426560][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.445698][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 440.463960][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 440.481689][ T30] [ 440.484185][ T30] ============================================= [ 440.484185][ T30] [ 440.502987][ T30] NMI backtrace for cpu 1 [ 440.507410][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 440.517727][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 440.527839][ T30] Call Trace: [ 440.531354][ T30] [ 440.534359][ T30] dump_stack_lvl+0x241/0x360 [ 440.539109][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.544375][ T30] ? __pfx__printk+0x10/0x10 [ 440.549038][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 440.554038][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 440.559555][ T30] ? _printk+0xd5/0x120 [ 440.563771][ T30] ? __pfx__printk+0x10/0x10 [ 440.568422][ T30] ? __wake_up_klogd+0xcc/0x110 [ 440.573331][ T30] ? __pfx__printk+0x10/0x10 [ 440.577990][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 440.583078][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 440.589129][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 440.595174][ T30] watchdog+0xff4/0x1040 [ 440.599492][ T30] ? watchdog+0x1ea/0x1040 [ 440.603975][ T30] ? __pfx_watchdog+0x10/0x10 [ 440.608806][ T30] kthread+0x2f0/0x390 [ 440.612917][ T30] ? __pfx_watchdog+0x10/0x10 [ 440.617651][ T30] ? __pfx_kthread+0x10/0x10 [ 440.622292][ T30] ret_from_fork+0x4b/0x80 [ 440.626775][ T30] ? __pfx_kthread+0x10/0x10 [ 440.631490][ T30] ret_from_fork_asm+0x1a/0x30 [ 440.636572][ T30] [ 440.640551][ T30] Sending NMI from CPU 1 to CPUs 0: [ 440.646289][ C0] NMI backtrace for cpu 0 [ 440.646305][ C0] CPU: 0 UID: 0 PID: 5273 Comm: kworker/0:4 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 440.646327][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 440.646339][ C0] Workqueue: events nsim_dev_trap_report_work [ 440.646371][ C0] RIP: 0010:__asan_memset+0x31/0x50 [ 440.646399][ C0] Code: 53 48 89 d3 41 89 f6 48 89 fd 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 fd e5 ff ff 84 c0 74 12 48 89 ef 44 89 f6 48 89 da 5b <41> 5e 5d e9 27 22 c5 09 31 c0 5b 41 5e 5d c3 cc cc cc cc 66 2e 0f [ 440.646415][ C0] RSP: 0018:ffffc90000006c58 EFLAGS: 00000202 [ 440.646430][ C0] RAX: ffffc90003ccfa01 RBX: ffffc90000006d78 RCX: ffffffff8141332b [ 440.646450][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90000006d90 [ 440.646463][ C0] RBP: ffffc90000006d90 R08: ffffc90000006d9f R09: 1ffff92000000db3 [ 440.646476][ C0] R10: dffffc0000000000 R11: fffff52000000db4 R12: ffffc90003cd0000 [ 440.646490][ C0] R13: ffffc90000006d40 R14: 0000000000000000 R15: ffffc90000006d90 [ 440.646503][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 440.646519][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 440.646532][ C0] CR2: 00000000f56a5538 CR3: 000000000e734000 CR4: 00000000003506f0 [ 440.646548][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 440.646558][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 440.646570][ C0] Call Trace: [ 440.646576][ C0] [ 440.646585][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 440.646606][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 440.646633][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 440.646653][ C0] ? nmi_handle+0x2a/0x5a0 [ 440.646678][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 440.646702][ C0] ? nmi_handle+0x14f/0x5a0 [ 440.646718][ C0] ? nmi_handle+0x2a/0x5a0 [ 440.646736][ C0] ? __asan_memset+0x31/0x50 [ 440.646761][ C0] ? default_do_nmi+0x63/0x160 [ 440.646781][ C0] ? exc_nmi+0x123/0x1f0 [ 440.646800][ C0] ? end_repeat_nmi+0xf/0x53 [ 440.646830][ C0] ? unwind_next_frame+0xcfb/0x22d0 [ 440.646857][ C0] ? __asan_memset+0x31/0x50 [ 440.646882][ C0] ? __asan_memset+0x31/0x50 [ 440.646909][ C0] ? __asan_memset+0x31/0x50 [ 440.646934][ C0] [ 440.646940][ C0] [ 440.646945][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 440.646969][ C0] unwind_next_frame+0xcfb/0x22d0 [ 440.647000][ C0] ? __local_bh_enable_ip+0x1bb/0x200 [ 440.647025][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 440.647046][ C0] arch_stack_walk+0x11c/0x150 [ 440.647068][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 440.647094][ C0] stack_trace_save+0x118/0x1d0 [ 440.647115][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 440.647137][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 440.647165][ C0] kasan_save_track+0x3f/0x80 [ 440.647181][ C0] ? kasan_save_track+0x3f/0x80 [ 440.647197][ C0] ? kasan_save_free_info+0x40/0x50 [ 440.647220][ C0] ? __kasan_slab_free+0x59/0x70 [ 440.647237][ C0] ? kmem_cache_free+0x1a2/0x420 [ 440.647259][ C0] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 440.647283][ C0] ? nft_synproxy_do_eval+0x362/0xa60 [ 440.647307][ C0] ? nft_do_chain+0x4ad/0x1da0 [ 440.647331][ C0] ? nft_do_chain_inet+0x418/0x6b0 [ 440.647354][ C0] ? nf_hook_slow+0xc3/0x220 [ 440.647375][ C0] ? NF_HOOK+0x29e/0x450 [ 440.647392][ C0] ? NF_HOOK+0x3a4/0x450 [ 440.647408][ C0] ? __netif_receive_skb+0x2bf/0x650 [ 440.647429][ C0] ? process_backlog+0x662/0x15b0 [ 440.647455][ C0] ? __napi_poll+0xcb/0x490 [ 440.647474][ C0] ? net_rx_action+0x89b/0x1240 [ 440.647494][ C0] ? handle_softirqs+0x2c5/0x980 [ 440.647515][ C0] ? do_softirq+0x11b/0x1e0 [ 440.647536][ C0] ? __local_bh_enable_ip+0x1bb/0x200 [ 440.647575][ C0] ? skb_release_data+0x6a0/0x8a0 [ 440.647593][ C0] kasan_save_free_info+0x40/0x50 [ 440.647617][ C0] __kasan_slab_free+0x59/0x70 [ 440.647634][ C0] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 440.647657][ C0] kmem_cache_free+0x1a2/0x420 [ 440.647680][ C0] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 440.647706][ C0] nft_synproxy_eval_v4+0x3d2/0x610 [ 440.647734][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 440.647760][ C0] ? nf_ip_checksum+0x13a/0x500 [ 440.647787][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 440.647814][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 440.647838][ C0] ? validate_chain+0x11e/0x5920 [ 440.647859][ C0] ? __pfx_validate_chain+0x10/0x10 [ 440.647882][ C0] nft_do_chain+0x4ad/0x1da0 [ 440.647914][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 440.647938][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 440.647974][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 440.648004][ C0] nft_do_chain_inet+0x418/0x6b0 [ 440.648029][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 440.648088][ C0] ? ipt_do_table+0x312/0x1860 [ 440.648122][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 440.648145][ C0] nf_hook_slow+0xc3/0x220 [ 440.648167][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 440.648186][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 440.648205][ C0] NF_HOOK+0x29e/0x450 [ 440.648225][ C0] ? NF_HOOK+0x9a/0x450 [ 440.648241][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 440.648260][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 440.648282][ C0] ? ip_rcv_finish+0x406/0x560 [ 440.648302][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 440.648319][ C0] NF_HOOK+0x3a4/0x450 [ 440.648336][ C0] ? __lock_acquire+0x1384/0x2050 [ 440.648363][ C0] ? NF_HOOK+0x9a/0x450 [ 440.648380][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 440.648396][ C0] ? ip_rcv_core+0x801/0xd10 [ 440.648415][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 440.648442][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 440.648461][ C0] __netif_receive_skb+0x2bf/0x650 [ 440.648483][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 440.648508][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 440.648528][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 440.648554][ C0] ? __pfx_lock_release+0x10/0x10 [ 440.648579][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 440.648609][ C0] process_backlog+0x662/0x15b0 [ 440.648634][ C0] ? process_backlog+0x33b/0x15b0 [ 440.648660][ C0] ? __pfx_process_backlog+0x10/0x10 [ 440.648682][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 440.648709][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 440.648736][ C0] __napi_poll+0xcb/0x490 [ 440.648758][ C0] net_rx_action+0x89b/0x1240 [ 440.648790][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 440.648813][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 440.648855][ C0] handle_softirqs+0x2c5/0x980 [ 440.648879][ C0] ? do_softirq+0x11b/0x1e0 [ 440.648903][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 440.648930][ C0] do_softirq+0x11b/0x1e0 [ 440.648952][ C0] [ 440.648957][ C0] [ 440.648964][ C0] ? __pfx_do_softirq+0x10/0x10 [ 440.648986][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 440.649013][ C0] ? rcu_is_watching+0x15/0xb0 [ 440.649033][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 440.649056][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 440.649080][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 440.649103][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 440.649126][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 440.649153][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 440.649184][ C0] ? process_scheduled_works+0x976/0x1850 [ 440.649209][ C0] process_scheduled_works+0xa63/0x1850 [ 440.649246][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 440.649275][ C0] ? assign_work+0x364/0x3d0 [ 440.649300][ C0] worker_thread+0x870/0xd30 [ 440.649332][ C0] ? __kthread_parkme+0x169/0x1d0 [ 440.649358][ C0] ? __pfx_worker_thread+0x10/0x10 [ 440.649382][ C0] kthread+0x2f0/0x390 [ 440.649398][ C0] ? __pfx_worker_thread+0x10/0x10 [ 440.649421][ C0] ? __pfx_kthread+0x10/0x10 [ 440.649443][ C0] ret_from_fork+0x4b/0x80 [ 440.649468][ C0] ? __pfx_kthread+0x10/0x10 [ 440.649484][ C0] ret_from_fork_asm+0x1a/0x30 [ 440.649516][ C0] [ 441.480474][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 441.487422][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 441.497628][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 441.507737][ T30] Call Trace: [ 441.511058][ T30] [ 441.514031][ T30] dump_stack_lvl+0x241/0x360 [ 441.518776][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.524077][ T30] ? __pfx__printk+0x10/0x10 [ 441.528726][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 441.534778][ T30] ? vscnprintf+0x5d/0x90 [ 441.539162][ T30] panic+0x349/0x880 [ 441.543279][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 441.549485][ T30] ? __pfx_panic+0x10/0x10 [ 441.553958][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 441.559465][ T30] ? __irq_work_queue_local+0x137/0x410 [ 441.565145][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 441.570665][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 441.577016][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 441.583239][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 441.589452][ T30] watchdog+0x1033/0x1040 [ 441.593836][ T30] ? watchdog+0x1ea/0x1040 [ 441.598307][ T30] ? __pfx_watchdog+0x10/0x10 [ 441.603037][ T30] kthread+0x2f0/0x390 [ 441.607153][ T30] ? __pfx_watchdog+0x10/0x10 [ 441.611892][ T30] ? __pfx_kthread+0x10/0x10 [ 441.616525][ T30] ret_from_fork+0x4b/0x80 [ 441.620993][ T30] ? __pfx_kthread+0x10/0x10 [ 441.625624][ T30] ret_from_fork_asm+0x1a/0x30 [ 441.630458][ T30] [ 441.633821][ T30] Kernel Offset: disabled [ 441.638175][ T30] Rebooting in 86400 seconds..