last executing test programs: 12m50.055663445s ago: executing program 2 (id=3323): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x0, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="278ccad80010b15bf557e680f6a967e3687043908568789de8f39c7ca80b2ab5959ce9b24bd1d54ccc1b07ee08ebaf131b171f1fda0b51dc2c81bdbf8f3ccfc633928da35a369273a0c1534b103e6fb08e133f02d99a7a2e40e6b9c32be1881eb0d9046fb70e1d845657fd9fad455af067d5478c34cf9a757d4fcb9ebcc947a0cb87e890df4e35d249ae", @ANYRES64=r3, @ANYBLOB="010000f1ef3626000000030008000200"/26], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000005d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r7, 0xf0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)=r7}, 0x20) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r5, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10008000}, 0x48000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r11 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r11, 0x10d, 0xc7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x38, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4ff5677c1a"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x38}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r15, @ANYBLOB="2a003300d0d4fe00ffffffffffff080211000000505050505050"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r12, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r15}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xabd2, 0x3c}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r16}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x5}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x6}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x75}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000810}, 0x800) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @random="7f0a08024011", @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0x6}]}}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @private}}}}}}, 0x0) 12m48.683952114s ago: executing program 2 (id=3326): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x11, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x4d, 0x0, @opaque="cbe66f1099d3a415"}}}}}, 0x0) 12m48.58619252s ago: executing program 2 (id=3327): r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x357) 12m48.299525606s ago: executing program 2 (id=3330): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x298) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xe4}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x3f70, 0x0, 0x0, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) recvmmsg(r7, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000000c0)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x2c}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r11 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f00000004c0)="55295e3215f3", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0xbc, r10, 0x700, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0xa0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0x9}, {0x1, 0x6}, {0x5, 0x2}, {0x1, 0x9}, {0x5, 0x8}, {}, {0x6}, {0x6}, {0x3, 0xa}, {0x5, 0x2}, {0x5, 0x4}, {0x4, 0x3}, {0x0, 0x4}, {0x5, 0x6}, {0x3, 0x9}, {0x2, 0x6}, {0x3, 0x7}, {0x6, 0xa}, {0x1, 0xa}, {0x1, 0x4}, {0x0, 0x8}, {0x6, 0x9}, {0x7, 0xa}, {0x4, 0x7}, {0x7, 0x9}, {0x0, 0x1}, {0x0, 0x7}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x3}, {0x0, 0x2}, {0x7, 0xa}, {0x3, 0xd}, {0x1, 0x3}, {0x2, 0x4}, {0x6, 0x5}, {0x1, 0x1}, {0x6, 0x8}, {0x5, 0xa}, {0x3, 0x9}, {0x1, 0x5}, {0x2, 0x3}, {0x1, 0x6}, {0x5, 0x4}, {0x6, 0x6}, {0x1, 0x6}, {0x7, 0x6}, {0x0, 0x4}, {0x4, 0xa}, {0x2, 0x4}, {0x4, 0x1}, {0x3, 0x5}, {0x5, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x6, 0x40, 0x8000, 0xfffc, 0x9, 0x1800]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0x6c, 0x5, 0x1, 0x3, 0x1, 0x12, 0x4, 0x2, 0x2e, 0x24, 0xb, 0x2, 0xf, 0x36, 0x48, 0x48, 0x60, 0xb, 0x2, 0x4, 0xb, 0x30, 0x3, 0x2, 0x27, 0x16]}]}]}]}, 0xbc}}, 0x40005) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x40, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x3}]}, 0x10) pipe(&(0x7f0000000300)) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r13, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r13, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r14 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r14, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r14, 0x5201) 12m46.838831379s ago: executing program 2 (id=3333): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x400000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) 12m43.870246558s ago: executing program 2 (id=3334): socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB="070000001800000000000000", @ANYRES32, @ANYBLOB="01ba63ed79e2f7858eec210b3be4ba8bdc6d3fc039ae6e51f89f590a8157e89e1b4583affd5d87d70697b702a06bf323796f475067", @ANYRES64=0x0], 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000005000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000052f6a237c390429f6b3439000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000100"/28], 0x48) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x10000, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000600)="40df9379b232c2833fc4a24d03f9da52452f0bc3c6a70ef93fcc590c4a6cfc7e91c61ce62ed7186964816cc4b725cccb9849efdc1d14926aba45d23d3f50ce1004c06aefc1a9dd9f09704d0739b52386fce8420f6773d1e10a4062c048e5465aa01a44f958e25d8f7f1a767b807bca2eae182a724c9f882ca1fd2bdfaf863c311a76363f2e5ce4f815a357b71893d71a05e2", &(0x7f00000006c0)=""/159, &(0x7f0000000780)="12a29a915cccb4d9fdba38d3be4cdcaa03175830300b92d341f4452ecf81facb7a706e4b4ce120ece7bce2e3e6f60513937e6d46aca737cda1ec0379ae78c4bf67ab9bb073e6ece004b7c0a935a62221a8318711d8bf71e255437b5c42311acc52a32153b96d520d10d8c2dfa64bb466fec7a876af787946c2cef14e9104bd2f1b51b4ab", &(0x7f0000000180)="bf7f34e80eaef4dfbed22f827a1ccda88e5a0441881729a769e8711ae52c1b8dc58650d035ccaba78e53478c2b76a02109", 0x2, r1}, 0x38) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="74020000", @ANYRES16=r9, @ANYBLOB="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"], 0x274}}, 0x0) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="20050000", @ANYRES16=r9, @ANYBLOB="010000000000000000000f0000000c0007800800020001000000"], 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r9, @ANYBLOB="200025bd7000fddbdf2509000000100007800c00040009000000000000000c00078008000100070000000c00098008000100a1020000480004801c0007800800020000040000080004000700000008000200080000001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b0000"], 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioprio_set$pid(0x2, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = getpid() process_vm_readv(r10, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 7.801469038s ago: executing program 1 (id=5240): syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000003f80)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x1b, @void, [{0xdd, 0xff, "183efd568cbcc231858113542fba50052a07946605b80083228b2808107438a20a9b4bdd82e459b57608494478ec0eb8a01c3a760d4c3172b4233fb95739da67cebd5c9b95a0b7bcbf0b9cd2907911279615ebbb8ccecca3d02799721f0075f265791293f2743da8c62003eb4e16da85aaf92bf34be5800408c70fe34851abed366b43c53e0b724103f1f9cacaafa286126a1b8fdd5a21d2491431b0485824c64703442f2d77fdb3d3013f05055f66cf68e71ac908c6fa0207bac43c8a4d093549f8424345c04b468059d25bb21650c2e98e5dba8a819198f1a40521460a28481e1986e1faea3c79c597721c9684b2bf2c412a3e761047bfe47bb49cd7cb60"}, {0xdd, 0x64, "5fe1108450f34bf3633f6eb31f996fb4cf476a26cc5e456ff2eb55ca203f57a6db3f03ba9152473052344a870134bd55df3ae7cafc9a3f34748a5bbd2d26ade0c9c8b041d4f5b765b88dddfff7e75793614e39b5b27aa71db11db587d7dc47af08a39c07"}, {0xdd, 0xc9, "b64d544645a9cf871aff875d29d19185a08fb837121c86b4a7316f4df5ad033df66386b31fac49acff9ea432aa30534350c8e84a4d97b29c26ef2c16a6ba5603443ac06551d73b9cc46938e828eef1fe5a4cbdfeff51b63d989b74e2e9823be40be24725b67efd28cf661238e56edcef7860b75a7c440a0bcbb147bc4a186b0b1330996ef1cf9de5e55b8b084ce81ddbd29a26e548312f7fd53b32d3e896f32815c898d877a3a6743f06fa77766ae5a3481dbb1180bee879b456328f5dbf74a66c9623997392543907"}, {0xdd, 0xe7, "a9237510d4185fa5040698600ba3366782b2a6d0bfea0d42cedf33270b6a07416ddb86821eddaded2426f143b31f1aeecf7360b28470b4dd8ab4e032520d24b503c42e98316445ef847239ff353e18c55a7f5e4e47d2153a4a664c4005ad5b77e25cb2bb3d798511db27bdbee4a2a8407d88b2379c053ff09392109eaadf8f49501cc8a334b7efe4a40a2e74772b37f544c38491b6170bc99bd2e2304ec03189cda50e09b0aeb36ebe289dfd9dc1cb8c4b7860512d2027d85e689320e5515b40e83d64508b1739617ed417ee91d392f74c1127284d139e18de12fbdf225c4e9cef78744e49e8de"}, {0xdd, 0xe0, "55ef697a814442da0122ec5c4f6c59d8e2afc1b79b61bdd5bc6e176f9a18965f8624a1ef2d5487701d78188fdd9c305210cdaa04e67aad43fdec5018bd69f4a07e4d87ec7a8c9161267ae65e4c600cbd95a513fb8941ba2eb9cfa56fc57ffdca0c860e9211df46550c5feb65aecdf0b92f8fde6f25e2c2f5bf93c2d22dd26771142c0acd5e9d4bd7131874cb578509c37f502033db5ef3f830d0e9b9bbc6c76fdac0a74e7b9714cff17ff188fd348d74924874fe8860c7d64924216e4f1ee522878a61bd0d2736d0e2056d3761d21a07d59d9b42f376bc9ebbb119156b756f11"}, {0xdd, 0xd9, "116801fb3e41a98b4c7c8a38b971db58c9bbbae53d1081740b129e6a954f947a963e381f2a5c7f31910d946e150624567bb366b21fca7983a4b7cbb063e4ae600873e67928e0cf9fb1dd8be733456c802df8793ca44bf0133f7425cd60d1e609dcd7cf11a16b13b5e9f1340d9b15bd538163f1f776056f97a26fcc1ff53749fc458ae6002fd42566c8093912520313999911ba02bc66e0774a0bb3d4881a3b3215d7a79468c67f7dd014fcb29a981f96110ecc78d15931f621b87cacfb07326f3a21abd253aab4409e97467aa8a22ccecb037e5b436723e336"}, {0xdd, 0xcc, "c774c8868cc4e3e0252491f736a8998532638c37bd34ef84e98c207ff3493dfad7c6ba40448271ff6ed658b65906fe0780afaf999f5bb91dc3e176607a312195672ee9078fbeff7e6acfc69980d4ae714dc69d54ac200bde2e340d2ee4ffcbbd0c12a4e62207fedf1370f89aaa7c16334483c9ffbb485b24de796ce7d8125b60ff22d63f1224448b63cd9903b1585338c93ff3425879c74785efb5fc93d90912628b7e37d5c6a6ccf899f1cce70ec9a501a4f80097a647bcbc9eec9500e1a0989976a503c7ee992a20347f6f"}, {0xdd, 0xc5, "05e456c43f198f85eb925516973a3a099d30e8200c119ea02d9f4c40904282c53941a01a2ef87bdcd98c225024061d9510862eb0bfdfab4ad468a252889103683cd5575337ac6e87d9a0b8e6632409100b995e6d59965b7fc7970100ecd67852017928e6ed1ba375692f3ebf11711fce6ee14057fd15366f880f42d3ff5eafbf9627b0a2e790f085d5c78ff135e89ebad0f8d7285a62d456dcc033a14590b71ad392aaaee6da98c49d9bc48a0e0520ec2738fe93db68bd449a658805b864624b15d2db7a9f"}]}, 0x68b) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r3, @ANYBLOB="00000a00100000801c001a80080002"], 0x44}, 0x1, 0x10000000}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)=ANY=[@ANYBLOB="280000001e00010000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n'], 0x28}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)=ANY=[@ANYBLOB="280000001e00010000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n'], 0x28}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') r6 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000200)={0x1d, r7}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r7, @ANYRES64=r7, @ANYRES64=r6, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r8, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) r9 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_cmd={0x49}}) (async) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_cmd={0x49}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) fchdir(r5) (async) fchdir(r5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x7, 0x8, 0x8, 0x5, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) (async) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) gettid() (async) r10 = gettid() timer_create(0xb, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r10}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) readv(r11, &(0x7f0000000000)=[{&(0x7f0000002480)=""/231, 0xe7}], 0x1) 7.413086026s ago: executing program 0 (id=5241): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff8e, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0xc}) 7.247990131s ago: executing program 0 (id=5242): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000400)={{0x2, 0x0, @empty}, {0x20000010304, @dev}, 0x14, {0x2, 0x0, @multicast1=0xe000cc02}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="20007118eb0c000010000400000000000000100000000000", @ANYBLOB="0000000010080400"], 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f00000010c0), 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) readv(r3, &(0x7f0000001700)=[{&(0x7f0000000080)=""/216, 0xd8}], 0x1) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x800) lsetxattr$trusted_overlay_nlink(&(0x7f0000000640)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000700)={'U-', 0x100000001}, 0x16, 0x1) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$security_ima(0x0, &(0x7f00000007c0), &(0x7f0000000800)=@sha1={0x1, "92b6f64d26a0078300dd9fb43389bcde76b0939f"}, 0x15, 0x3) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xf3a, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f0000000500)=0xfffffffffffffcbe) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x25, &(0x7f00000000c0)={r6, @in6={{0xa, 0x81, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0xfffffffc, 0x0, 0x0, 0x0, 0x69}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000080)={r6, 0xfffffff3}, &(0x7f0000000300)=0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e1d, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40000002}, 0x1c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x2}, &(0x7f00000004c0)=0x8) syz_emit_ethernet(0x44e, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="5959f95dda61ad8ba10d1f6b1dcd284ba1061bdc5ba19bd6139177b81a0eee0d70f189f7f101e486e9be3e51f188f1f5fec0fca242a5785dd68f914056879d4fa4c0325fe76d1f31527fd602068f728f4884d1b27a3883a6358bfdbd9c7252a96eca503d69e04b4dc6d4eafd4d329bf5e4d935f2ea25fa77a4b2d21b404548158fe43d90f8829599677e93aff7f8633dc8bc391c3fd32b8d012c9dacc6e168064026e17d06568d6a92fc098a627b754f4674b237f6a96495f16dacc519d27cea50e6bbe8005d2794f092ca5eccc18af9b201ba66eaeeed54c0ffb41743416142c8166c25c52026e425ca5a", @ANYRESDEC=r0, @ANYRES64=r0], 0x0) 7.218872675s ago: executing program 0 (id=5243): syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x5, 0x60, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x89, 0x401, 0xc6}, {0x6, 0x24, 0x1a, 0x0, 0x1e}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x1, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x2, 0x1, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x12, 0x8, 0xad}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (fail_nth: 3) 7.135958931s ago: executing program 1 (id=5244): r0 = syz_usb_connect$cdc_ncm(0x1, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x8000, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000400)={0x1, @raw_data="30cfbf6acfb9483b10c2023b7dba5f68419c967141a5a220418efbb56ab63288252e7293ff26e6c5e262d1a598248289af0a71e0f2e7e8d9af670bff127e621e58052c146c97b17c0f313d93b6eb90da1841219003d0834b50c7362f35022bd65c47ea2e2bb82cd20a7da5ed6715d42069f8f0904f46ced39fcad0f22be5d13bd0d62da60e6586bd900cca06f049e401cb52fe82fe24c96450d1fc1c376a77bca7e5301c1589409288e1b1ed5bcab64920efe21f1a4652a85e0ffb7b114b06e1ca3db26bb7d134ad"}) ppoll(&(0x7f00000013c0)=[{r1, 0x100}], 0x1a, 0x0, 0x0, 0x51) syz_usb_disconnect(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 6.325164556s ago: executing program 0 (id=5249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x40}}, 0x2400c884) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendto$inet6(r3, &(0x7f0000000040)="66b0ccfcdde1980cdcddb500f10c480a345d4abff239229fe978792007d5c159c901813abe8baa6db7", 0x29, 0x20048082, &(0x7f0000000180)={0xa, 0x4e22, 0x6, @loopback, 0xfffffc00}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x40000}, 0x4000006) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x401, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x44) 6.292479397s ago: executing program 0 (id=5250): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101"], 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000180)={0x0, 0x158e, 0x80, 0x23}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000200), 0xc8, 0x2) syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x204440) r0 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="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"], 0x11a8}}], 0x1, 0x10) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x8, @local, 'veth1_vlan\x00'}}, 0x1e) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="7dbf230d00124c002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0) 6.045804069s ago: executing program 3 (id=5253): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000140)="03000300000000000000ab5d71aced", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @random="e131b6ac9c26"}, 0x14) recvmmsg(r1, &(0x7f0000000180), 0x1, 0x10022, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a817008848", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r4}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) mbind(&(0x7f0000528000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f00002a9000/0x1000)=nil, 0x1000, 0x0) syz_clone(0xa9080, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f00002ad000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e24, @local}}, 0x9, 0x4, 0x10000, 0x9, 0x2, 0x6, 0x1}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000280)={r7, 0x7, 0x30}, 0xc) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x26048050) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001c80)={{0x12, 0x1, 0x300, 0xc8, 0x5f, 0x62, 0x8, 0x423, 0xc, 0x2ebf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x0, 0x22, [{{0x9, 0x4, 0xff, 0x1, 0x0, 0x71, 0xc0, 0xd9, 0x8}}]}}]}}, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) 4.628206266s ago: executing program 3 (id=5261): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdd, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0xc}) 4.592077056s ago: executing program 3 (id=5262): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000400)={{0x2, 0x0, @empty}, {0x20000010304, @dev}, 0x14, {0x2, 0x0, @multicast1=0xe000cc02}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="20007118eb0c000010000400000000000000100000000000", @ANYBLOB="0000000010080400"], 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f00000010c0), 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) readv(r3, &(0x7f0000001700)=[{&(0x7f0000000080)=""/216, 0xd8}], 0x1) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x800) lsetxattr$trusted_overlay_nlink(&(0x7f0000000640)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000700)={'U-', 0x100000001}, 0x16, 0x1) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$security_ima(0x0, &(0x7f00000007c0), &(0x7f0000000800)=@sha1={0x1, "92b6f64d26a0078300dd9fb43389bcde76b0939f"}, 0x15, 0x3) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xf3a, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f0000000500)=0xfffffffffffffcbe) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x25, &(0x7f00000000c0)={r6, @in6={{0xa, 0x81, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0xfffffffc, 0x0, 0x0, 0x0, 0x69}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000080)={r6, 0xfffffff3}, &(0x7f0000000300)=0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e1d, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40000002}, 0x1c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x2}, &(0x7f00000004c0)=0x8) syz_emit_ethernet(0x44e, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="5959f95dda61ad8ba10d1f6b1dcd284ba1061bdc5ba19bd6139177b81a0eee0d70f189f7f101e486e9be3e51f188f1f5fec0fca242a5785dd68f914056879d4fa4c0325fe76d1f31527fd602068f728f4884d1b27a3883a6358bfdbd9c7252a96eca503d69e04b4dc6d4eafd4d329bf5e4d935f2ea25fa77a4b2d21b404548158fe43d90f8829599677e93aff7f8633dc8bc391c3fd32b8d012c9dacc6e168064026e17d06568d6a92fc098a627b754f4674b237f6a96495f16dacc519d27cea50e6bbe8005d2794f092ca5eccc18af9b201ba66eaeeed54c0ffb41743416142c8166c25c52026e425ca5a", @ANYRESDEC=r0, @ANYRES64=r0], 0x0) 4.485415401s ago: executing program 3 (id=5263): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x48) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) lremovexattr(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540)=@known='security.selinux\x00') syz_fuse_handle_req(r0, &(0x7f0000008300)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000e00)={0x50, 0x0, r1}, 0x50) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x48) (async) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) (async) lremovexattr(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540)=@known='security.selinux\x00') (async) syz_fuse_handle_req(r0, &(0x7f0000008300)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r0, &(0x7f0000000e00)={0x50, 0x0, r1}, 0x50) (async) 4.232096611s ago: executing program 3 (id=5264): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080003"], 0x3c}, 0x1, 0x0, 0x0, 0xc3}, 0x0) 4.029751549s ago: executing program 1 (id=5265): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0xd, 0x60803) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x1, 0x9, 0x300e, 0x5, 0xb, 0xb, 0x2, 0x5}}) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x4, 0x20}, &(0x7f0000000400)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={r3, 0x7}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000040a01040002000000002000020000000900030073797a32000000000900010073797a30"], 0x2c}}, 0x0) 3.946702808s ago: executing program 3 (id=5266): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010100, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 3.472565195s ago: executing program 1 (id=5268): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0xd, 0x60803) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x1, 0x9, 0x300e, 0x5, 0xb, 0xb, 0x2, 0x5}}) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = dup(r1) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f00000005c0)={0xd10, 0x5, @name="35dd95aec09269a88cf90de8aa31c507dd6fd6a271fd6090a5c36ab549d7ed55"}) readlink(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002200)=""/4096, 0x1000) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000000b14000829bd7000fedbdf2508000100010000000800010000000000ffff3e000200000008003f0001000000080003ff0300000000000000010000000800020000000000"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x24000041) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x4, 0x20}, &(0x7f0000000400)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={r7, 0x7}, 0x8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc66", 0x9) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x3, 0x2}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xaa, 0xbe, 0x1f, 0x20, 0x4e2, 0x1403, 0x1cb2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x78, 0x39}}]}}]}}, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 3.304160602s ago: executing program 4 (id=5269): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x8}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x20000000, 0x80000001, 0xfffffffd, 0x7, {0x2, 0x1, 0xff, 0x1, 0x2585, 0x8}, {0x3, 0x1, 0x61cf, 0x6, 0x81, 0xe}, 0x9, 0x8, 0x3}}]}]}}]}, 0x74}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async, rerun: 64) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r5, 0x4) (async, rerun: 64) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000440)='K', 0x1}], 0x1) (async, rerun: 32) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004d80), 0xffffffffffffffff) (async, rerun: 32) r9 = socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, 0x0, 0x290}}) (async) connect(r9, &(0x7f0000000480)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x80) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000a"], 0x30}}, 0x10) 3.086561494s ago: executing program 0 (id=5270): r0 = socket(0x28, 0x5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x28, 0x8, 0x0, 0x4) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x9}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000400)={0x4, 0x2, 0x5, 0x0, 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x726e) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000140)=[{0x0}], 0x1, 0xffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x22000, 0x1000, &(0x7f0000000000/0x1000)=nil}) sched_setscheduler(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() syz_usb_connect$uac1(0x0, 0xb4, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902a200030195b5b12504000000010100000a24010000000201020c240703000000ed129e8410eb23080000000009240300000003020009040100000102000009040101010102000008240201000000000905010900000003100725018001010109040200000103000009040201"], 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, 0x0, 0x0) 2.664132586s ago: executing program 4 (id=5271): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000010000000000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="0000000000000000300016802c00018028000300feffff7f00000000ffff000000000000000000000060000000000000000000000000000008000400ff"], 0x58}}, 0x0) 2.520375675s ago: executing program 4 (id=5272): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000400)={{0x2, 0x0, @empty}, {0x20000010304, @dev}, 0x14, {0x2, 0x0, @multicast1=0xe000cc02}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="20007118eb0c000010000400000000000000100000000000", @ANYBLOB="0000000010080400"], 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f00000010c0), 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) readv(r3, &(0x7f0000001700)=[{&(0x7f0000000080)=""/216, 0xd8}], 0x1) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x800) lsetxattr$trusted_overlay_nlink(&(0x7f0000000640)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000700)={'U-', 0x100000001}, 0x16, 0x1) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$security_ima(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000800)=@sha1={0x1, "92b6f64d26a0078300dd9fb43389bcde76b0939f"}, 0x15, 0x3) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xf3a, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f0000000500)=0xfffffffffffffcbe) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x25, &(0x7f00000000c0)={r6, @in6={{0xa, 0x81, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0xfffffffc, 0x0, 0x0, 0x0, 0x69}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000080)={r6, 0xfffffff3}, &(0x7f0000000300)=0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e1d, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40000002}, 0x1c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x2}, &(0x7f00000004c0)=0x8) syz_emit_ethernet(0x44e, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="5959f95dda61ad8ba10d1f6b1dcd284ba1061bdc5ba19bd6139177b81a0eee0d70f189f7f101e486e9be3e51f188f1f5fec0fca242a5785dd68f914056879d4fa4c0325fe76d1f31527fd602068f728f4884d1b27a3883a6358bfdbd9c7252a96eca503d69e04b4dc6d4eafd4d329bf5e4d935f2ea25fa77a4b2d21b404548158fe43d90f8829599677e93aff7f8633dc8bc391c3fd32b8d012c9dacc6e168064026e17d06568d6a92fc098a627b754f4674b237f6a96495f16dacc519d27cea50e6bbe8005d2794f092ca5eccc18af9b201ba66eaeeed54c0ffb41743416142c8166c25c52026e425ca5a", @ANYRESDEC=r0, @ANYRES64=r0], 0x0) 2.363555068s ago: executing program 4 (id=5273): syz_usb_connect$cdc_ncm(0xfffffdfb, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x5, 0x60, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x89, 0x401, 0xc6}, {0x6, 0x24, 0x1a, 0x0, 0x1e}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x1, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x2, 0x1, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x12, 0x8, 0xad}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 1.699911332s ago: executing program 4 (id=5274): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_int(r0, 0x1, 0x3a, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8cc}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFACCT_BYTES={0xc}, @NFACCT_FLAGS={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004000}, 0x400c880) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r2 = epoll_create1(0x0) epoll_pwait2(r2, &(0x7f0000000200)=[{}, {}, {}, {}], 0x4, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000280)={[0x8001]}, 0x8) r3 = openat$iommufd(0xffffff9c, &(0x7f00000002c0), 0xca400, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000300)={0xc, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000340)={0x18, r4, 0xffffffffffffffff, 0x1}) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xdc, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0xac, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4800}, 0x64010) r5 = dup3(r2, r3, 0x0) r6 = getpgrp(0xffffffffffffffff) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000540)={r6, 0x1, 0x3}) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) r7 = fcntl$dupfd(r3, 0x406, r2) r8 = openat$mice(0xffffff9c, &(0x7f0000000580), 0x20300) timer_create(0x3, &(0x7f0000000780)={0x0, 0xa, 0x2, @thr={&(0x7f00000005c0)="f39c097bfbc0fd38836450babd6cfa37bcb155b2dc4cf80544362f9f9529688300d5a0bfdf5cea0691819b13ee2c3cc774292c01cb34f059f3ac2185e40862850b7b7d6dfe7645ce15b7dad35a1903ac845af710d2fb602a3188110a80d3fcb8fb9b4e735e23bfa00900037cbb4778058985ae72311ed9849e9e6d553d9980afb080aacaed2aa2e44952f427ae3d84dc8e64e0ed9d03483f3410c6d21bffca9bbc2a83e2784726579f58aec6389b3bac2be8b34f1d214866edcfbae22e23e91521aa", &(0x7f00000006c0)="ced29be9bc6f36fd2d8ab5d74dc2cbcc3d2bc020b82639ebcff9fdba3167f5b295f844d72aa70e0feb736df00f2c378719eb31167836117de97d6090791d4fe4b5913edfad2121a3e8f509b07b5f19497041a62a0b5ab5ea86cd1728fd7889e375f4f4ec63bd1dcea1d38064ee4481e3c234c821bf3137bd88249653e3cb6a01e1a98176750b243659547a41892f1ba8e4ca80fe4b559c23fa094558257f8776ffb5db4fa5ebdedf7e005f7580"}}, &(0x7f00000007c0)) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x504001}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1f4, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0xd}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="3fb384cbc2c0"}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="f5f7d49a38a0"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x13d}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x7e, 0xfc, "72f1b8cac3513846b98ad77c3a1cf61b0ff665911f70f59b926178973ff17b5b2a0e67dfb8677dbcf6471776f76b542df44692671c47174a052bdba61c4ee44e0612091d31c6f6aed85cd36e05f9117e44800847010035153f6a221aef718a494500e703f35c20209092fc6ec29f2c4a70299e9f0c15edec825b"}, @NL80211_ATTR_FILS_ERP_REALM={0xa0, 0xfa, "e2f9be38f9cf2c625f3f81a4d5d1a64f639ea6ea82fc1e579ff8bd885d5f08e874a68b9589c323b9bd3369983af9c7b4f022309a74793b6498be54480e318dab6762c2509f4e9eeaebff601324ae6cd25bbc962ad8b122577cb1e8cfe5409876e35b1bef6449ba8e1824c1d33e39394af756b169b0da6e3c1c62a1123b3edc4e42d7e7e53854b2a558be97e511a75b73b45ec0b1c87d839f3c6c1fcf"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8000}, @NL80211_ATTR_FILS_ERP_REALM={0x68, 0xfa, "c9566ab16da8f7e53f48e19b0bdbfca9b4d618764f982f8771cdc376634f9c1d4c475a3f04f098d7345ac46e37bbd2c863f25dcf9b1322dcc866ef7997222d56e31031bb8103880b9a4740eb8b9173a5f03815376fa683f3194d9f1d072a40fa468f8d52"}]]}, 0x1f4}, 0x1, 0x0, 0x0, 0x8253567d745ef222}, 0x11) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r5, 0x0) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x11, r8, 0x10000000) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000ac0)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14, 0x1, {0x0, r11}}) r12 = openat$iommufd(0xffffff9c, &(0x7f0000000b00), 0x83, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r12, 0x3b72, &(0x7f0000000b40)={0x35, 0x1, 0xff, 0x485, "a023c099c2cd30bcbb5c286ca17ef80e370ce4590e6dc501a4414cbe01"}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000c00)={'ip_vti0\x00', &(0x7f0000000b80)={'syztnl1\x00', 0x0, 0x8, 0x8, 0x4, 0x9, {{0x9, 0x4, 0x0, 0x8, 0x24, 0x68, 0x0, 0x61, 0x2f, 0x0, @local, @local, {[@rr={0x7, 0x7, 0xcf, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @ssrr={0x89, 0x7, 0x56, [@empty]}]}}}}}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000c40)={r13, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000c80)={[0x4]}, &(0x7f0000000cc0), 0x8) syz_open_dev$vim2m(&(0x7f0000000d00), 0x4, 0x2) 1.542053029s ago: executing program 4 (id=5275): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sync() sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) mbind(&(0x7f0000528000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f00002a9000/0x1000)=nil, 0x1000, 0x0) syz_clone(0xa9080, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) readv(r2, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/217, 0xd9}], 0x1) signalfd4(r2, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0xd}, 0x8) mbind(&(0x7f00002ad000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0x5}}, 0x9, 0x4, 0x10000, 0x9, 0x0, 0x6, 0x1}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000280)={r4, 0x7, 0x30}, 0xc) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x26048050) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x22, 0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x80044942, 0xfffffffffffffffe) syz_usb_connect(0x5, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010003c85f620823020c00bf2e010203010902120001080600220904ff016ca87b7c0071c0d908"], &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 884.347872ms ago: executing program 1 (id=5276): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc0009001e0006990600000015600500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) (async) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x23, 0x0, 0x0) (async) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xe9, 0x400) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, &(0x7f0000000100)=0x8) 0s ago: executing program 1 (id=5277): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000000000000085ff000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000045090100000000001d00000000000000bf9800000000000056080000000000008500000007000000b700000000000000950000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): disabled state [ 1390.602035][ T5322] usb 5-1: USB disconnect, device number 118 [ 1391.403887][T22236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1391.432003][T22236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1391.455636][T22236] bond0 (unregistering): Released all slaves [ 1391.924104][T28215] netlink: 'syz.4.5089': attribute type 2 has an invalid length. [ 1391.931966][T28215] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5089'. [ 1392.085401][T28215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1392.146390][T22236] hsr_slave_0: left promiscuous mode [ 1392.183936][T22236] hsr_slave_1: left promiscuous mode [ 1392.242708][T22236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1392.250454][T22236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1392.265586][T22236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1392.273052][T22236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.300611][T22236] veth1_macvtap: left promiscuous mode [ 1392.314376][T22236] veth0_macvtap: left promiscuous mode [ 1392.320090][T22236] veth1_vlan: left promiscuous mode [ 1392.334403][T22236] veth0_vlan: left promiscuous mode [ 1392.374130][ T5229] Bluetooth: hci2: command tx timeout [ 1393.288820][T26397] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1393.300341][T26397] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1393.321202][T26397] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1393.357479][T26397] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1393.365545][T26397] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1393.373103][T26397] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1393.716446][T22236] team0 (unregistering): Port device team_slave_1 removed [ 1393.780713][T22236] team0 (unregistering): Port device team_slave_0 removed [ 1394.336816][T28140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1394.363252][T28240] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1394.550152][T28140] 8021q: adding VLAN 0 to HW filter on device team0 [ 1394.638072][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.645349][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1394.695556][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.702749][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1394.942085][T28252] chnl_net:caif_netlink_parms(): no params data found [ 1395.035147][T28154] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1395.083605][T28154] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1395.105390][T28154] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1395.147490][T28140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1395.221769][T22236] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.241326][T28154] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1395.321457][T28252] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.335117][T28252] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.342399][T28252] bridge_slave_0: entered allmulticast mode [ 1395.357494][T28252] bridge_slave_0: entered promiscuous mode [ 1395.396497][T22236] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.416926][T26397] Bluetooth: hci5: command tx timeout [ 1395.426616][T28252] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.433906][T28252] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.441249][T28252] bridge_slave_1: entered allmulticast mode [ 1395.448432][T28252] bridge_slave_1: entered promiscuous mode [ 1395.520207][T28154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1395.568846][T22236] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.608487][T28140] veth0_vlan: entered promiscuous mode [ 1395.622245][T28140] veth1_vlan: entered promiscuous mode [ 1395.689499][T22236] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.743123][T28154] 8021q: adding VLAN 0 to HW filter on device team0 [ 1395.757679][T28140] veth0_macvtap: entered promiscuous mode [ 1395.767372][T28140] veth1_macvtap: entered promiscuous mode [ 1395.787537][T28252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1395.819534][ T5351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.826753][ T5351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1395.898006][T28252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1395.929854][ T5351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.937148][ T5351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1396.130289][T28252] team0: Port device team_slave_0 added [ 1396.140113][T28252] team0: Port device team_slave_1 added [ 1396.166724][T28140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1396.177425][T28140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.187436][T28140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1396.198006][T28140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.207957][T28140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1396.219332][T28140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.231938][T28140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1396.278796][T28252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1396.286165][T28252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1396.312058][ C0] vkms_vblank_simulate: vblank timer overrun [ 1396.320150][T28252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1396.335460][T28252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.342496][T28252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1396.368621][T28252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1396.396679][T28154] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1396.407250][T28154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1396.492990][T28140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.504237][T28140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.514735][T28140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.525635][T28140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.536527][T28140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.547894][T28140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.560836][T28140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1396.571171][T28140] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.580006][T28140] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.589112][T28140] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.598019][T28140] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.697578][T28252] hsr_slave_0: entered promiscuous mode [ 1396.705732][T28252] hsr_slave_1: entered promiscuous mode [ 1396.713900][T28252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1396.721586][T28252] Cannot create hsr debugfs directory [ 1396.737058][T28154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1396.754574][T22236] bridge_slave_1: left allmulticast mode [ 1396.760305][T22236] bridge_slave_1: left promiscuous mode [ 1396.766183][T22236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.825115][T22236] bridge_slave_0: left allmulticast mode [ 1396.830840][T22236] bridge_slave_0: left promiscuous mode [ 1396.837156][T22236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.962554][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1396.988875][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1397.005567][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1397.091717][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1397.137529][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1397.158869][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1397.502047][ T5229] Bluetooth: hci5: command tx timeout [ 1397.632151][T22236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1397.648534][T22236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1397.669817][T22236] bond0 (unregistering): Released all slaves [ 1398.001177][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.023921][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.032268][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.039761][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.112817][T28154] veth0_vlan: entered promiscuous mode [ 1398.326204][T28154] veth1_vlan: entered promiscuous mode [ 1398.353255][T28154] veth0_macvtap: entered promiscuous mode [ 1398.362483][T28154] veth1_macvtap: entered promiscuous mode [ 1398.379778][T28154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1398.390389][T28154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.400349][T28154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1398.410922][T28154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.420847][T28154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1398.431396][T28154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.441359][T28154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1398.451860][T28154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.463106][T28154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1398.695266][T28154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1398.706506][T28154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.724128][T28154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1398.744115][T28154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.764169][T28154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1398.790893][T28154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.800895][T28154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1398.819274][T28154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.832833][T28154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1398.890943][T22236] hsr_slave_0: left promiscuous mode [ 1398.896473][ T5322] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1398.912642][T22236] hsr_slave_1: left promiscuous mode [ 1398.933006][T22236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1398.944060][T22236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1398.952066][T22236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1398.967622][T22236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1399.007521][T22236] veth1_macvtap: left promiscuous mode [ 1399.013210][T22236] veth0_macvtap: left promiscuous mode [ 1399.035392][T22236] veth1_vlan: left promiscuous mode [ 1399.040788][T22236] veth0_vlan: left promiscuous mode [ 1399.105144][ T5322] usb 4-1: Using ep0 maxpacket: 32 [ 1399.115236][ T5322] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1399.144237][ T5322] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1399.184179][ T5322] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1399.205900][ T5322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.216418][ T5322] usb 4-1: config 0 descriptor?? [ 1399.239168][ T5322] hub 4-1:0.0: bad descriptor, ignoring hub [ 1399.245324][ T5322] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1399.254504][ T5322] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1399.338664][ T5229] Bluetooth: hci0: command tx timeout [ 1399.575412][ T5229] Bluetooth: hci5: command tx timeout [ 1400.066368][T22236] team0 (unregistering): Port device team_slave_1 removed [ 1400.148412][T22236] team0 (unregistering): Port device team_slave_0 removed [ 1400.945430][T28154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.963116][T28154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.972024][T28154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.987845][T28154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.178720][T28266] chnl_net:caif_netlink_parms(): no params data found [ 1401.439484][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.450124][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.499202][ T5229] Bluetooth: hci0: command tx timeout [ 1401.601405][T28266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.644543][T28266] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.652459][T28266] bridge_slave_0: entered allmulticast mode [ 1401.660096][T26397] Bluetooth: hci5: command tx timeout [ 1401.723222][T28266] bridge_slave_0: entered promiscuous mode [ 1401.746435][T28266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.776867][T28266] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.789500][T28266] bridge_slave_1: entered allmulticast mode [ 1401.798394][ T5279] usb 4-1: USB disconnect, device number 86 [ 1401.800573][T28266] bridge_slave_1: entered promiscuous mode [ 1401.833696][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.863521][T28252] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1401.873406][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.899710][T28252] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1401.929735][T28252] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1401.948496][T28266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1401.977101][T28252] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1402.009552][T28266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1402.241767][T22236] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.481870][T22236] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.552654][T28266] team0: Port device team_slave_0 added [ 1402.577716][T28266] team0: Port device team_slave_1 added [ 1402.729376][T22236] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.858679][T28266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1402.876399][T28266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1402.910014][T28266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1402.997185][T22236] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.065828][T28266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1403.083247][T28266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1403.116659][T28266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1403.310911][T28266] hsr_slave_0: entered promiscuous mode [ 1403.322347][T28266] hsr_slave_1: entered promiscuous mode [ 1403.332321][T28266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1403.349486][T28266] Cannot create hsr debugfs directory [ 1403.584454][T26397] Bluetooth: hci0: command tx timeout [ 1403.936311][T28252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1403.963976][T22236] bridge_slave_1: left allmulticast mode [ 1403.969777][T22236] bridge_slave_1: left promiscuous mode [ 1403.994769][T22236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.013434][T22236] bridge_slave_0: left allmulticast mode [ 1404.043990][T22236] bridge_slave_0: left promiscuous mode [ 1404.060183][T22236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.685105][T26397] Bluetooth: hci0: command tx timeout [ 1405.824543][ T5229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1405.845442][ T5229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1405.869151][ T5229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1405.927205][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1405.960989][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1405.969254][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1405.992280][T22236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1406.025784][T22236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1406.053917][T22236] bond0 (unregistering): Released all slaves [ 1406.482770][T28252] 8021q: adding VLAN 0 to HW filter on device team0 [ 1406.610739][T28252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1406.621463][T28252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1406.653090][T28252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1406.689459][T28252] veth0_vlan: entered promiscuous mode [ 1406.702725][T28252] veth1_vlan: entered promiscuous mode [ 1406.710040][T28008] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.717219][T28008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1406.763270][T28008] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.770486][T28008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1407.027604][T28252] veth0_macvtap: entered promiscuous mode [ 1407.056699][T28349] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5102'. [ 1407.101564][ T29] audit: type=1326 audit(1728373166.494:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28348 comm="syz.0.5102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4692b7dff9 code=0x0 [ 1407.217130][T22236] hsr_slave_0: left promiscuous mode [ 1407.267126][T22236] hsr_slave_1: left promiscuous mode [ 1407.273456][T22236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1407.283492][T22236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1407.296857][T22236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1407.304511][T22236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1407.337820][T22236] veth1_macvtap: left promiscuous mode [ 1407.343425][T22236] veth0_macvtap: left promiscuous mode [ 1407.349302][T22236] veth1_vlan: left promiscuous mode [ 1407.354765][T22236] veth0_vlan: left promiscuous mode [ 1408.061981][ T5229] Bluetooth: hci3: command tx timeout [ 1408.532798][T22236] team0 (unregistering): Port device team_slave_1 removed [ 1408.593735][T22236] team0 (unregistering): Port device team_slave_0 removed [ 1409.486854][T28252] veth1_macvtap: entered promiscuous mode [ 1409.527257][T28345] chnl_net:caif_netlink_parms(): no params data found [ 1409.551147][T28367] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5103'. [ 1409.589088][T28252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1409.599973][T28252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.610272][T28252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1409.622526][T28252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.633039][T28252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1409.644294][T28252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.655727][T28252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1409.719782][T28266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1409.786388][T28252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1409.797150][T28252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.807138][T28252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1409.818046][T28252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.828080][T28252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1409.839356][T28252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.851133][T28252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1409.863405][T28266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1409.879462][T28266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1409.956352][T28252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.973646][T28252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.982714][T28252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.004171][T28252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.139066][ T5229] Bluetooth: hci3: command tx timeout [ 1410.152186][T28266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1410.399249][T28345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.434582][T28345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.470194][T28345] bridge_slave_0: entered allmulticast mode [ 1410.501116][T28345] bridge_slave_0: entered promiscuous mode [ 1410.516494][T28345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.535003][T28345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.551675][T28345] bridge_slave_1: entered allmulticast mode [ 1410.573504][T28345] bridge_slave_1: entered promiscuous mode [ 1410.669274][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.680195][T28345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.694423][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.746317][T28345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.916318][T28345] team0: Port device team_slave_0 added [ 1410.966540][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.974908][T28345] team0: Port device team_slave_1 added [ 1410.994887][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1411.299879][T22236] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1411.317497][T22236] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.453234][T28345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1411.471118][T28345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1411.590507][T28345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.845381][T22236] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1411.906584][T22236] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.141850][T22236] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1412.204235][T22236] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.215229][ T5229] Bluetooth: hci3: command tx timeout [ 1412.272922][T28345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1412.321165][T28345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1412.356894][ T5281] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1412.447134][T28345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1412.565881][ T5281] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1412.591032][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.606885][T22236] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1412.642078][ T5281] usb 2-1: config 0 descriptor?? [ 1412.648485][T22236] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.710651][T28266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1412.887226][ T5281] usb 2-1: string descriptor 0 read error: -71 [ 1412.917812][ T5281] pwc: Samsung MPC-C10 USB webcam detected. [ 1412.939160][T28345] hsr_slave_0: entered promiscuous mode [ 1412.974122][ T5281] pwc: send_video_command error -71 [ 1412.986089][ T5281] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1413.012001][T28345] hsr_slave_1: entered promiscuous mode [ 1413.019235][ T5281] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1413.044075][T28345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1413.072599][T28345] Cannot create hsr debugfs directory [ 1413.078359][ T5281] usb 2-1: USB disconnect, device number 111 [ 1413.210633][T28266] 8021q: adding VLAN 0 to HW filter on device team0 [ 1413.271905][T12323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.279121][T12323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1413.431648][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.438909][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1413.465419][ T5281] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1413.673179][T22236] bridge_slave_1: left allmulticast mode [ 1413.680733][T22236] bridge_slave_1: left promiscuous mode [ 1413.688096][ T5281] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1413.714143][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.722604][T22236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.756341][ T5281] usb 2-1: config 0 descriptor?? [ 1413.775101][T22236] bridge_slave_0: left allmulticast mode [ 1413.813090][T22236] bridge_slave_0: left promiscuous mode [ 1413.833711][T22236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.972299][ T5281] usb 2-1: string descriptor 0 read error: -32 [ 1414.003380][ T5281] pwc: Samsung MPC-C10 USB webcam detected. [ 1414.243798][ T5281] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1414.284567][ T5281] pwc: recv_control_msg error -32 req 02 val 2700 [ 1414.304995][ T5229] Bluetooth: hci3: command tx timeout [ 1414.512901][ T5281] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1414.531823][ T5281] pwc: recv_control_msg error -71 req 04 val 1000 [ 1414.729594][ T5281] pwc: recv_control_msg error -71 req 04 val 1300 [ 1414.756907][ T5281] pwc: recv_control_msg error -71 req 04 val 1400 [ 1414.764168][ T5281] pwc: recv_control_msg error -71 req 02 val 2000 [ 1414.771570][ T5281] pwc: recv_control_msg error -71 req 02 val 2100 [ 1414.771850][T26397] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1414.778395][ T5281] pwc: recv_control_msg error -71 req 02 val 2200 [ 1414.778767][ T5281] pwc: recv_control_msg error -71 req 06 val 0600 [ 1414.802936][T26397] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1414.819166][T26397] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1414.823571][ T5281] pwc: recv_control_msg error -71 req 04 val 1500 [ 1414.835954][T26397] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1414.850791][T26397] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1414.858505][ T5281] pwc: recv_control_msg error -71 req 02 val 2500 [ 1414.858918][ T5281] pwc: recv_control_msg error -71 req 02 val 2400 [ 1414.859232][ T5281] pwc: recv_control_msg error -71 req 02 val 2600 [ 1414.859535][ T5281] pwc: recv_control_msg error -71 req 02 val 2900 [ 1414.859888][ T5281] pwc: recv_control_msg error -71 req 02 val 2800 [ 1414.904375][T26397] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1414.934909][ T5281] pwc: recv_control_msg error -71 req 04 val 1100 [ 1414.941765][ T5281] pwc: recv_control_msg error -71 req 04 val 1200 [ 1414.976740][ T5281] pwc: Registered as video71. [ 1414.982748][ T5281] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input115 [ 1415.074180][ T5281] usb 2-1: USB disconnect, device number 112 [ 1415.671167][T22236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1415.683425][T22236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1415.695513][T22236] bond0 (unregistering): Released all slaves [ 1415.742959][T28468] FAULT_INJECTION: forcing a failure. [ 1415.742959][T28468] name failslab, interval 1, probability 0, space 0, times 0 [ 1415.772296][T28468] CPU: 0 UID: 0 PID: 28468 Comm: syz.0.5114 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 1415.783228][T28468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1415.793338][T28468] Call Trace: [ 1415.796656][T28468] [ 1415.799625][T28468] dump_stack_lvl+0x241/0x360 [ 1415.804352][T28468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1415.809596][T28468] ? __pfx__printk+0x10/0x10 [ 1415.814242][T28468] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1415.820272][T28468] ? __pfx___might_resched+0x10/0x10 [ 1415.825614][T28468] should_fail_ex+0x3b0/0x4e0 [ 1415.830353][T28468] should_failslab+0xac/0x100 [ 1415.835089][T28468] ? __alloc_skb+0x1c3/0x440 [ 1415.839725][T28468] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1415.845776][T28468] __alloc_skb+0x1c3/0x440 [ 1415.850259][T28468] ? __pfx___alloc_skb+0x10/0x10 [ 1415.855250][T28468] ? netlink_ack_tlv_len+0x6e/0x200 [ 1415.860510][T28468] netlink_ack+0x13f/0xa30 [ 1415.865118][T28468] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1415.870648][T28468] netlink_rcv_skb+0x262/0x430 [ 1415.875495][T28468] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1415.881006][T28468] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1415.886337][T28468] ? netlink_deliver_tap+0x2e/0x1b0 [ 1415.891562][T28468] netlink_unicast+0x7f6/0x990 [ 1415.896356][T28468] ? __pfx_netlink_unicast+0x10/0x10 [ 1415.901663][T28468] ? __virt_addr_valid+0x183/0x530 [ 1415.906795][T28468] ? __check_object_size+0x48e/0x900 [ 1415.912119][T28468] netlink_sendmsg+0x8e4/0xcb0 [ 1415.916945][T28468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1415.922264][T28468] ? aa_sock_msg_perm+0x91/0x160 [ 1415.927271][T28468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1415.932578][T28468] __sock_sendmsg+0x221/0x270 [ 1415.937301][T28468] ____sys_sendmsg+0x52a/0x7e0 [ 1415.942093][T28468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1415.947492][T28468] __sys_sendmsg+0x292/0x380 [ 1415.952103][T28468] ? __pfx___sys_sendmsg+0x10/0x10 [ 1415.957243][T28468] ? __pfx_vfs_write+0x10/0x10 [ 1415.962077][T28468] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1415.968439][T28468] ? do_syscall_64+0x100/0x230 [ 1415.973226][T28468] ? do_syscall_64+0xb6/0x230 [ 1415.977925][T28468] do_syscall_64+0xf3/0x230 [ 1415.982454][T28468] ? clear_bhb_loop+0x35/0x90 [ 1415.987160][T28468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.993102][T28468] RIP: 0033:0x7f4692b7dff9 [ 1415.997631][T28468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1416.017280][T28468] RSP: 002b:00007f469395a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1416.025840][T28468] RAX: ffffffffffffffda RBX: 00007f4692d35f80 RCX: 00007f4692b7dff9 [ 1416.033836][T28468] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 1416.041840][T28468] RBP: 00007f469395a090 R08: 0000000000000000 R09: 0000000000000000 [ 1416.049889][T28468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1416.057902][T28468] R13: 0000000000000000 R14: 00007f4692d35f80 R15: 00007f4692e5fa28 [ 1416.065913][T28468] [ 1416.069051][ C0] vkms_vblank_simulate: vblank timer overrun [ 1416.113903][ T5281] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1416.375167][ T5281] usb 2-1: Using ep0 maxpacket: 32 [ 1416.381883][ T5281] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1416.404115][ T5281] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1416.428330][ T5281] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1416.437829][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.456648][ T5281] usb 2-1: config 0 descriptor?? [ 1416.556551][ T5281] hub 2-1:0.0: bad descriptor, ignoring hub [ 1416.562634][ T5281] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1416.572027][ T5281] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1416.831878][T28449] chnl_net:caif_netlink_parms(): no params data found [ 1416.865249][T22236] hsr_slave_0: left promiscuous mode [ 1416.871392][T22236] hsr_slave_1: left promiscuous mode [ 1416.883312][T22236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1416.900110][T22236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1416.920623][T22236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1416.936018][T22236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1416.978094][T22236] veth1_macvtap: left promiscuous mode [ 1416.983696][T22236] veth0_macvtap: left promiscuous mode [ 1416.989541][T22236] veth1_vlan: left promiscuous mode [ 1416.994975][T22236] veth0_vlan: left promiscuous mode [ 1417.014125][ T5229] Bluetooth: hci4: command tx timeout [ 1417.680963][T22236] team0 (unregistering): Port device team_slave_1 removed [ 1417.742266][T22236] team0 (unregistering): Port device team_slave_0 removed [ 1418.615436][ T25] usb 2-1: USB disconnect, device number 113 [ 1418.681722][T28449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.700401][T28449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.708571][T28449] bridge_slave_0: entered allmulticast mode [ 1418.716228][T28449] bridge_slave_0: entered promiscuous mode [ 1418.747853][T28449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.756135][T28449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.763421][T28449] bridge_slave_1: entered allmulticast mode [ 1418.771221][T28449] bridge_slave_1: entered promiscuous mode [ 1418.809125][T28266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1418.867398][T28449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.898220][T28449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1418.979453][T28449] team0: Port device team_slave_0 added [ 1419.013152][T28449] team0: Port device team_slave_1 added [ 1419.086878][T28449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.094870][T28449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.104004][ T5229] Bluetooth: hci4: command tx timeout [ 1419.131679][T28449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1419.176014][T28449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1419.182978][T28449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.221720][T28449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1419.362538][T22236] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.466398][T28345] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1419.486800][T28345] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1419.497105][T28345] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1419.540689][T22236] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.567439][T28345] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1419.593859][T28449] hsr_slave_0: entered promiscuous mode [ 1419.626694][T28449] hsr_slave_1: entered promiscuous mode [ 1419.639438][T28449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1419.654141][T28449] Cannot create hsr debugfs directory [ 1419.749167][T22236] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.787400][T28266] veth0_vlan: entered promiscuous mode [ 1419.813816][T28266] veth1_vlan: entered promiscuous mode [ 1419.901611][T22236] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.123080][T28266] veth0_macvtap: entered promiscuous mode [ 1420.293238][T28530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5121'. [ 1420.321142][T28266] veth1_macvtap: entered promiscuous mode [ 1420.360820][T22236] bridge_slave_1: left allmulticast mode [ 1420.369224][T22236] bridge_slave_1: left promiscuous mode [ 1420.376489][T22236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.387155][T22236] bridge_slave_0: left allmulticast mode [ 1420.392844][T22236] bridge_slave_0: left promiscuous mode [ 1420.399405][T22236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.888081][T22236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1420.900751][T22236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1420.912659][T22236] bond0 (unregistering): Released all slaves [ 1421.140508][T28345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1421.177013][T28266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.195799][ T5229] Bluetooth: hci4: command tx timeout [ 1421.203218][T28266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.221799][T28266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.232883][T28266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.246749][T28266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.257427][T28266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.279069][T28266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1421.356478][T28266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.377576][T28266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.388527][T28266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.400744][T28266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.411448][T28266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.422170][T28266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.433443][T28544] [U]  [ 1421.436527][T28266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1421.450175][T28345] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.501646][T28266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.510702][T28266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.538318][T28266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.548871][T28266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.569541][T22236] hsr_slave_0: left promiscuous mode [ 1421.583777][T22236] hsr_slave_1: left promiscuous mode [ 1421.590495][T22236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1421.598305][T22236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1421.607926][T22236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1421.616528][T22236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1421.641207][T22236] veth1_macvtap: left promiscuous mode [ 1421.646879][T22236] veth0_macvtap: left promiscuous mode [ 1421.653052][T22236] veth1_vlan: left promiscuous mode [ 1421.660508][T22236] veth0_vlan: left promiscuous mode [ 1422.301581][T22236] team0 (unregistering): Port device team_slave_1 removed [ 1422.366325][T22236] team0 (unregistering): Port device team_slave_0 removed [ 1422.932820][T12323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.940006][T12323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1422.962015][T28548] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5126'. [ 1422.982470][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.989661][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1423.182253][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.189825][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.209102][T28449] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1423.254109][ T5229] Bluetooth: hci4: command tx timeout [ 1423.265757][T28449] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1423.357392][T28449] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1423.380620][T28449] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1423.399651][T28345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1423.420119][T28008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.430422][T28008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.497299][T28345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1423.508477][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.525016][ T5279] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1423.533775][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.604858][T28345] veth0_vlan: entered promiscuous mode [ 1423.623039][T28345] veth1_vlan: entered promiscuous mode [ 1423.636672][T28449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1423.672340][T28449] 8021q: adding VLAN 0 to HW filter on device team0 [ 1423.684597][ T5279] usb 2-1: Using ep0 maxpacket: 8 [ 1423.687082][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 1423.696882][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1423.702285][ T5279] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1423.717178][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1423.724384][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1423.737699][ T5279] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 1423.752638][T28345] veth0_macvtap: entered promiscuous mode [ 1423.758702][ T5279] usb 2-1: config 8 has no interface number 0 [ 1423.768735][ T5279] usb 2-1: config 8 interface 255 has no altsetting 0 [ 1423.780456][ T5279] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1423.781354][T28345] veth1_macvtap: entered promiscuous mode [ 1423.790409][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.813443][ T5279] usb 2-1: Product: syz [ 1423.824948][ T5279] usb 2-1: Manufacturer: syz [ 1423.829610][ T5279] usb 2-1: SerialNumber: syz [ 1423.859126][T28345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1423.878373][T28345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.889794][T28345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1423.901191][T28345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.911777][T28345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1423.922306][T28345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.936968][T28345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1423.954573][T28449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1423.963784][T28345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1423.976089][T28345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.987334][T28345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1423.998310][T28345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.008226][T28345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1424.019139][T28345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.030842][T28345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1424.061881][T28345] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.071421][T28345] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.082070][T28345] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.091157][T28345] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.112055][T28553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5128'. [ 1424.221673][ T5279] catc 2-1:8.255: Can't set altsetting 1. [ 1424.228266][T28449] veth0_vlan: entered promiscuous mode [ 1424.240962][ T5279] catc 2-1:8.255: probe with driver catc failed with error -5 [ 1424.247638][T28449] veth1_vlan: entered promiscuous mode [ 1424.263431][ T5279] usb 2-1: USB disconnect, device number 114 [ 1424.324236][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.332106][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.370241][T28449] veth0_macvtap: entered promiscuous mode [ 1424.383836][T22236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.396324][T28449] veth1_macvtap: entered promiscuous mode [ 1424.400731][T22236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.417452][T28449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1424.432506][T28449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.442564][T28449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1424.455524][T28449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.466062][T28449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1424.476647][T28449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.490802][T28449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1424.501376][T28449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.513088][T28449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1424.525788][T28449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1424.537266][T28449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.548477][T28449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1424.559223][T28449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.570007][T28449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1424.581723][T28449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.592701][T28449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1424.603464][T28449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.621594][T28449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1424.638276][T28449] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.658621][T28449] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.670034][T28449] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.681633][T28449] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.814946][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.844148][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.904182][ T5282] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1424.923222][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.946374][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.074224][ T5282] usb 5-1: Using ep0 maxpacket: 8 [ 1425.081397][ T5282] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1425.104189][ T5282] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1425.138947][ T5282] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1425.158643][ T5282] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1425.168247][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.183143][ T5282] usb 5-1: config 0 descriptor?? [ 1425.191685][T28576] FAULT_INJECTION: forcing a failure. [ 1425.191685][T28576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1425.206734][ T5279] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1425.214972][T28576] CPU: 1 UID: 0 PID: 28576 Comm: syz.3.5135 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 1425.225791][T28576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1425.235859][T28576] Call Trace: [ 1425.239152][T28576] [ 1425.242094][T28576] dump_stack_lvl+0x241/0x360 [ 1425.246800][T28576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1425.252013][T28576] ? __pfx__printk+0x10/0x10 [ 1425.256632][T28576] ? snprintf+0xda/0x120 [ 1425.260913][T28576] should_fail_ex+0x3b0/0x4e0 [ 1425.265618][T28576] _copy_to_user+0x2f/0xb0 [ 1425.270056][T28576] simple_read_from_buffer+0xca/0x150 [ 1425.275462][T28576] proc_fail_nth_read+0x1e9/0x250 [ 1425.280515][T28576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1425.286090][T28576] ? rw_verify_area+0x55e/0x6f0 [ 1425.290988][T28576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1425.296558][T28576] vfs_read+0x201/0xbc0 [ 1425.300743][T28576] ? __pfx_lock_release+0x10/0x10 [ 1425.305807][T28576] ? __pfx_vfs_read+0x10/0x10 [ 1425.310515][T28576] ? __fget_files+0x3f3/0x470 [ 1425.315214][T28576] ? fdget_pos+0x24e/0x320 [ 1425.319650][T28576] ksys_read+0x183/0x2b0 [ 1425.323907][T28576] ? __pfx_ksys_read+0x10/0x10 [ 1425.328694][T28576] ? do_syscall_64+0x100/0x230 [ 1425.333473][T28576] ? do_syscall_64+0xb6/0x230 [ 1425.338166][T28576] do_syscall_64+0xf3/0x230 [ 1425.342678][T28576] ? clear_bhb_loop+0x35/0x90 [ 1425.347369][T28576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.353300][T28576] RIP: 0033:0x7f1a05d7ca3c [ 1425.357729][T28576] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1425.377357][T28576] RSP: 002b:00007f1a06b67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1425.385791][T28576] RAX: ffffffffffffffda RBX: 00007f1a05f35f80 RCX: 00007f1a05d7ca3c [ 1425.393958][T28576] RDX: 000000000000000f RSI: 00007f1a06b670a0 RDI: 0000000000000004 [ 1425.401943][T28576] RBP: 00007f1a06b67090 R08: 0000000000000000 R09: 0000000000000000 [ 1425.409930][T28576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1425.417912][T28576] R13: 0000000000000000 R14: 00007f1a05f35f80 R15: 00007f1a0605fa28 [ 1425.425912][T28576] [ 1425.594727][ T5279] usb 2-1: Using ep0 maxpacket: 8 [ 1425.596878][ T5279] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1425.610354][ T5279] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 1425.610390][ T5279] usb 2-1: config 8 has no interface number 0 [ 1425.610420][ T5279] usb 2-1: config 8 interface 255 has no altsetting 0 [ 1425.612381][ T5279] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1425.642016][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.642061][ T5279] usb 2-1: Product: syz [ 1425.642081][ T5279] usb 2-1: Manufacturer: syz [ 1425.642101][ T5279] usb 2-1: SerialNumber: syz [ 1425.759172][ T5322] usb 5-1: USB disconnect, device number 119 [ 1425.764271][ T47] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1425.856622][T28561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5130'. [ 1425.868611][ T5279] catc 2-1:8.255: Can't set altsetting 1. [ 1425.880899][ T5279] catc 2-1:8.255: probe with driver catc failed with error -5 [ 1425.895366][ T5279] usb 2-1: USB disconnect, device number 115 [ 1425.926698][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 1425.933487][ T47] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1425.942384][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1425.953815][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1425.969791][ T47] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1425.982013][ T47] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1425.992433][ T47] usb 4-1: Product: syz [ 1425.996757][ T47] usb 4-1: Manufacturer: syz [ 1426.001409][ T47] usb 4-1: SerialNumber: syz [ 1426.008039][ T47] usb 4-1: config 0 descriptor?? [ 1426.020250][ T47] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1426.030880][ T47] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1426.233810][T28578] ldusb 4-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1426.259642][ T5322] usb 4-1: USB disconnect, device number 87 [ 1426.271723][ T5322] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1426.794209][ T5280] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1426.976261][ T5280] usb 2-1: Using ep0 maxpacket: 32 [ 1426.991689][ T5280] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1427.002201][ T5280] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1427.028918][ T5280] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1427.038880][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.073731][ T5280] usb 2-1: config 0 descriptor?? [ 1427.081214][ T5280] hub 2-1:0.0: bad descriptor, ignoring hub [ 1427.087524][ T5280] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1427.110432][ T5280] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1427.124327][ T47] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1427.284144][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 1427.292823][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1427.311041][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1427.321173][ T47] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1427.336422][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.358435][ T47] usb 4-1: config 0 descriptor?? [ 1427.989392][ T47] usbhid 4-1:0.0: can't add hid device: -71 [ 1427.997437][ T47] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1428.020089][ T47] usb 4-1: USB disconnect, device number 88 [ 1428.310647][T28604] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5145'. [ 1428.334428][T28604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5145'. [ 1428.354063][T28604] netlink: 'syz.0.5145': attribute type 1 has an invalid length. [ 1428.888665][ T5282] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1429.068998][ T5282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.079285][ T5282] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1429.088589][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.107686][ T5282] usb 4-1: config 0 descriptor?? [ 1429.120170][ T5282] pwc: Askey VC010 type 2 USB webcam detected. [ 1429.322225][ T5282] pwc: send_video_command error -71 [ 1429.329585][ T5282] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1429.338907][ T5282] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1429.359517][ T5282] usb 4-1: USB disconnect, device number 89 [ 1429.701791][T24511] usb 2-1: USB disconnect, device number 116 [ 1429.799297][ T5280] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1429.980512][ T5280] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1430.012734][ T5280] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1430.033635][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.048228][ T5280] usb 4-1: config 0 descriptor?? [ 1430.060113][ T5280] pwc: Askey VC010 type 2 USB webcam detected. [ 1430.071607][T24511] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1430.274399][T24511] usb 2-1: Using ep0 maxpacket: 16 [ 1430.279529][T28600] netlink: 'syz.4.5144': attribute type 9 has an invalid length. [ 1430.281556][T24511] usb 2-1: config 0 has no interfaces? [ 1430.292975][T28600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5144'. [ 1430.302345][T24511] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1430.311601][T24511] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.337080][T24511] usb 2-1: config 0 descriptor?? [ 1430.461767][ T5280] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1430.478861][T28614] netlink: 4072 bytes leftover after parsing attributes in process `syz.0.5149'. [ 1430.505106][T28614] openvswitch: netlink: Actions may not be safe on all matching packets [ 1430.623909][ T5280] pwc: recv_control_msg error -32 req 02 val 2700 [ 1430.634234][ T5280] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1430.643570][ T5280] pwc: recv_control_msg error -32 req 04 val 1000 [ 1430.650643][ T5280] pwc: recv_control_msg error -32 req 04 val 1300 [ 1430.654145][ T25] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1430.668421][ T5280] pwc: recv_control_msg error -32 req 04 val 1400 [ 1430.675790][ T5280] pwc: recv_control_msg error -32 req 02 val 2000 [ 1430.683156][ T5280] pwc: recv_control_msg error -32 req 02 val 2100 [ 1430.709294][ T5280] pwc: recv_control_msg error -32 req 04 val 1500 [ 1430.721379][T28607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.739138][ T5280] pwc: recv_control_msg error -32 req 02 val 2500 [ 1430.748124][T28607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.758005][ T5280] pwc: recv_control_msg error -32 req 02 val 2400 [ 1430.765970][ T5280] pwc: recv_control_msg error -32 req 02 val 2600 [ 1430.820098][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1430.840474][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1430.850675][ T25] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1430.867529][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.895612][ T25] usb 5-1: config 0 descriptor?? [ 1430.977100][ T5280] pwc: recv_control_msg error -71 req 02 val 2800 [ 1430.992101][ T5280] pwc: recv_control_msg error -71 req 04 val 1100 [ 1431.000235][ T5280] pwc: recv_control_msg error -71 req 04 val 1200 [ 1431.011020][ T5280] pwc: Registered as video71. [ 1431.044161][ T5280] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input116 [ 1431.077534][ T5280] usb 4-1: USB disconnect, device number 90 [ 1431.312654][T28612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.330645][T28612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.343497][T28612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.362043][T28612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.383815][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 1431.393000][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1431.409655][ T25] usb 5-1: USB disconnect, device number 120 [ 1431.821545][T28639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5154'. [ 1431.830891][T28639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5154'. [ 1432.022707][T28645] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1432.224075][ T25] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1432.344223][ T5322] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 1432.375982][ T25] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1432.388635][ T25] usb 4-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 1432.397952][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.406049][ T25] usb 4-1: Product: syz [ 1432.410326][ T25] usb 4-1: Manufacturer: syz [ 1432.415325][ T25] usb 4-1: SerialNumber: syz [ 1432.484093][ T5322] usb 5-1: device descriptor read/64, error -71 [ 1432.627511][ T25] qmi_wwan 4-1:1.0: skipping garbage [ 1432.642356][ T25] qmi_wwan 4-1:1.0: probe with driver qmi_wwan failed with error -22 [ 1432.648660][T24511] usb 2-1: USB disconnect, device number 117 [ 1432.665916][ T25] usb 4-1: USB disconnect, device number 91 [ 1432.717034][T28650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5159'. [ 1432.734249][ T5322] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 1432.916215][ T5322] usb 5-1: device descriptor read/64, error -71 [ 1433.010288][T28658] netlink: 'syz.1.5161': attribute type 1 has an invalid length. [ 1433.018584][T28658] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.5161'. [ 1433.035419][ T5322] usb usb5-port1: attempt power cycle [ 1433.384214][ T5322] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 1433.422901][ T5322] usb 5-1: device descriptor read/8, error -71 [ 1433.544222][ T5280] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 1433.699395][ T5322] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 1433.726115][ T5322] usb 5-1: device descriptor read/8, error -71 [ 1433.732523][ T5280] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.756131][ T5280] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1433.766642][ T5280] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1433.776210][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.786777][ T5280] usb 4-1: config 0 descriptor?? [ 1433.796947][ T5280] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1433.805423][ T5280] dvb-usb: bulk message failed: -22 (3/0) [ 1433.817885][ T5280] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1433.831341][ T5280] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1433.839911][ T5280] usb 4-1: media controller created [ 1433.847903][ T5280] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1433.857455][ T5322] usb usb5-port1: unable to enumerate USB device [ 1433.883594][ T5280] dvb-usb: bulk message failed: -22 (6/0) [ 1433.893147][ T5280] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1433.905196][ T5280] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input118 [ 1433.920146][ T5280] dvb-usb: schedule remote query interval to 150 msecs. [ 1433.927322][ T5280] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1433.994619][ T5280] usb 4-1: USB disconnect, device number 92 [ 1434.049309][ T5280] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1434.119911][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.243850][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.359302][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.370081][T26397] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1434.382134][T26397] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1434.391293][T26397] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1434.400840][T26397] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1434.408801][T26397] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1434.417600][T26397] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1434.463177][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.686650][T28666] chnl_net:caif_netlink_parms(): no params data found [ 1434.772146][ T11] bridge_slave_1: left allmulticast mode [ 1434.783569][ T11] bridge_slave_1: left promiscuous mode [ 1434.792197][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.811537][ T11] bridge_slave_0: left allmulticast mode [ 1434.826606][ T11] bridge_slave_0: left promiscuous mode [ 1434.856992][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.870702][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1435.887165][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1435.899711][ T11] bond0 (unregistering): Released all slaves [ 1436.027127][T28701] netlink: 'syz.3.5168': attribute type 2 has an invalid length. [ 1436.381455][T28666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.413609][T28666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.422705][T28666] bridge_slave_0: entered allmulticast mode [ 1436.443255][T28666] bridge_slave_0: entered promiscuous mode [ 1436.454050][T28666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.461206][T28666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.470359][T26397] Bluetooth: hci1: command tx timeout [ 1436.484342][T28666] bridge_slave_1: entered allmulticast mode [ 1436.499145][T28666] bridge_slave_1: entered promiscuous mode [ 1436.690979][T28666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1436.770975][ T11] hsr_slave_0: left promiscuous mode [ 1436.800476][ T11] hsr_slave_1: left promiscuous mode [ 1436.818972][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1436.844879][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1436.863066][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1436.870768][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1436.932209][ T11] veth1_macvtap: left promiscuous mode [ 1436.940092][ T11] veth0_macvtap: left promiscuous mode [ 1436.954877][ T11] veth1_vlan: left promiscuous mode [ 1436.960302][ T11] veth0_vlan: left promiscuous mode [ 1437.871210][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1437.938976][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1438.489734][T28666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1438.499451][T28737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5176'. [ 1438.538718][T26397] Bluetooth: hci1: command tx timeout [ 1438.559309][T28752] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1438.572201][T28752] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1438.592975][T28753] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5180'. [ 1438.705686][T28666] team0: Port device team_slave_0 added [ 1438.713450][T28666] team0: Port device team_slave_1 added [ 1438.767575][T28666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1438.775208][T28666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1438.811700][T28666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1438.854587][T28666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1438.861601][T28666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1438.934512][T28666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1439.150138][T28666] hsr_slave_0: entered promiscuous mode [ 1439.196333][T28666] hsr_slave_1: entered promiscuous mode [ 1439.575144][T28781] netlink: 'syz.4.5182': attribute type 2 has an invalid length. [ 1440.030040][ T81] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.320648][ T81] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.348358][T28794] netlink: 'syz.4.5189': attribute type 9 has an invalid length. [ 1440.364138][T28794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5189'. [ 1440.533339][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1440.552118][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1440.573243][ T81] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.574256][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1440.593445][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1440.617907][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1440.625276][ T5229] Bluetooth: hci1: command tx timeout [ 1440.632018][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1442.703299][T26397] Bluetooth: hci1: command tx timeout [ 1442.703335][ T5229] Bluetooth: hci2: command tx timeout [ 1444.168537][ T81] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.407200][T28666] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1444.425666][T28666] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1444.538504][T28666] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1444.584017][T28666] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1444.642885][T28802] chnl_net:caif_netlink_parms(): no params data found [ 1444.824549][ T5229] Bluetooth: hci2: command tx timeout [ 1445.115582][T28802] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.122742][T28802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.137449][T28802] bridge_slave_0: entered allmulticast mode [ 1445.149288][T28802] bridge_slave_0: entered promiscuous mode [ 1445.161285][ T81] bridge_slave_1: left allmulticast mode [ 1445.170308][ T81] bridge_slave_1: left promiscuous mode [ 1445.188215][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.203071][ T81] bridge_slave_0: left allmulticast mode [ 1445.238047][ T81] bridge_slave_0: left promiscuous mode [ 1445.243863][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.860643][ T5229] Bluetooth: hci2: command tx timeout [ 1447.511507][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1447.564493][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1447.604902][ T81] bond0 (unregistering): Released all slaves [ 1447.658063][T28802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.684284][T28802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.701881][T28802] bridge_slave_1: entered allmulticast mode [ 1447.723232][T28802] bridge_slave_1: entered promiscuous mode [ 1447.995337][T28802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1448.112274][T28802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1448.482588][T28802] team0: Port device team_slave_0 added [ 1448.796596][T28802] team0: Port device team_slave_1 added [ 1448.934614][ T5229] Bluetooth: hci2: command tx timeout [ 1449.013431][ T81] hsr_slave_0: left promiscuous mode [ 1449.065049][ T81] hsr_slave_1: left promiscuous mode [ 1449.084369][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1449.120258][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1449.145861][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1449.201828][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1449.307881][ T81] veth1_macvtap: left promiscuous mode [ 1449.313502][ T81] veth0_macvtap: left promiscuous mode [ 1449.361074][ T81] veth1_vlan: left promiscuous mode [ 1449.384750][ T81] veth0_vlan: left promiscuous mode [ 1451.048313][ T81] team0 (unregistering): Port device team_slave_1 removed [ 1451.133695][ T81] team0 (unregistering): Port device team_slave_0 removed [ 1451.955324][T28802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1451.962342][T28802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1452.009954][T28802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1452.031162][T28802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1452.042093][T28802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1452.074000][T28802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1452.092704][T28895] netlink: 'syz.3.5198': attribute type 2 has an invalid length. [ 1452.115820][T28666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1452.260870][T28802] hsr_slave_0: entered promiscuous mode [ 1452.295316][T28802] hsr_slave_1: entered promiscuous mode [ 1452.355049][T28802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1452.362683][T28802] Cannot create hsr debugfs directory [ 1452.468712][T28666] 8021q: adding VLAN 0 to HW filter on device team0 [ 1452.589212][T28008] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.596404][T28008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.660959][T28008] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.668163][T28008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1452.762899][T26397] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1452.804039][T26397] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1452.818110][T26397] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1452.837328][T26397] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1452.851607][T26397] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1452.864659][T26397] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1453.193174][T28926] netlink: 'syz.3.5200': attribute type 2 has an invalid length. [ 1453.361386][ T81] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.630385][ T81] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.713477][T28666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1453.786704][ T81] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.896298][ T81] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.996583][T28928] chnl_net:caif_netlink_parms(): no params data found [ 1454.098964][T28802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1454.178415][T28666] veth0_vlan: entered promiscuous mode [ 1454.200257][T28666] veth1_vlan: entered promiscuous mode [ 1454.223772][T28802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1454.289971][T28802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1454.305333][T28802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1454.363661][T28928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.386347][T28928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.402425][T28928] bridge_slave_0: entered allmulticast mode [ 1454.435489][T28928] bridge_slave_0: entered promiscuous mode [ 1454.462633][T28928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1454.502676][T28928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.558814][T28928] bridge_slave_1: entered allmulticast mode [ 1454.582380][T28928] bridge_slave_1: entered promiscuous mode [ 1454.823112][T28928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1454.896707][T28928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1454.935093][T26397] Bluetooth: hci5: command tx timeout [ 1454.998693][T28928] team0: Port device team_slave_0 added [ 1455.027406][ T81] bridge_slave_1: left allmulticast mode [ 1455.033114][ T81] bridge_slave_1: left promiscuous mode [ 1455.057756][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.105328][ T81] bridge_slave_0: left allmulticast mode [ 1455.111910][ T81] bridge_slave_0: left promiscuous mode [ 1455.124412][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.170726][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1456.200902][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1456.221793][ T81] bond0 (unregistering): Released all slaves [ 1456.282463][T28928] team0: Port device team_slave_1 added [ 1456.386835][T28928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1456.430399][T28928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1456.523998][T28928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1456.567653][T28928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1456.583632][T28928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1456.663319][T28928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1456.688752][T28666] veth0_macvtap: entered promiscuous mode [ 1456.897325][T28666] veth1_macvtap: entered promiscuous mode [ 1456.988669][T28928] hsr_slave_0: entered promiscuous mode [ 1457.004936][T28928] hsr_slave_1: entered promiscuous mode [ 1457.014277][T26397] Bluetooth: hci5: command tx timeout [ 1457.025387][T28928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1457.061489][T28928] Cannot create hsr debugfs directory [ 1457.430874][ T81] hsr_slave_0: left promiscuous mode [ 1457.439094][ T81] hsr_slave_1: left promiscuous mode [ 1457.474898][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1457.482352][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1457.509025][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1457.516581][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1457.577034][ T81] veth1_macvtap: left promiscuous mode [ 1457.583313][ T81] veth0_macvtap: left promiscuous mode [ 1457.594069][ T81] veth1_vlan: left promiscuous mode [ 1457.599433][ T81] veth0_vlan: left promiscuous mode [ 1458.283849][ T81] team0 (unregistering): Port device team_slave_1 removed [ 1458.344263][ T81] team0 (unregistering): Port device team_slave_0 removed [ 1459.014579][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1459.026221][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1459.039746][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1459.049488][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1459.064820][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1459.073602][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1459.094083][ T5229] Bluetooth: hci5: command tx timeout [ 1459.159305][T28666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1459.170363][T28666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1459.180423][T28666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1459.190944][T28666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1459.202867][T28666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1459.219336][T28802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1459.258007][ T25] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 1459.289005][T28666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1459.301155][T28666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1459.311641][T28666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1459.325025][T28666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1459.336479][T28666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1459.373553][T28666] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.382599][T28666] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.391810][T28666] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.401225][T28666] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.465526][T28802] 8021q: adding VLAN 0 to HW filter on device team0 [ 1459.473176][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1459.482708][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 1459.494049][ T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 1459.508670][ T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1459.518656][ T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 1459.528994][ T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1459.541773][ T25] usb 4-1: string descriptor 0 read error: -22 [ 1459.548799][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1459.558196][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.624836][T28979] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1459.651551][T22236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.658739][T22236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1459.727534][T22236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.734737][T22236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1459.849309][ T25] cdc_ncm 4-1:1.0: bind() failure [ 1459.881132][ T25] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1459.914113][ T25] cdc_ncm 4-1:1.1: bind() failure [ 1459.941249][ T25] usb 4-1: USB disconnect, device number 93 [ 1460.239483][ T81] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.283095][T22236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.307388][T22236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.370624][ T81] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.431286][ T5351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.437057][T29001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5204'. [ 1460.456477][ T5351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.482371][ T81] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.523706][T28981] chnl_net:caif_netlink_parms(): no params data found [ 1460.601552][ T81] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.649588][T28928] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1460.739435][T28928] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1460.781585][T28928] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1460.819849][T28928] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1460.877492][T28802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1461.094174][ T5229] Bluetooth: hci0: command tx timeout [ 1461.174198][ T5229] Bluetooth: hci5: command tx timeout [ 1461.195670][ T81] bridge_slave_1: left allmulticast mode [ 1461.210323][ T81] bridge_slave_1: left promiscuous mode [ 1461.238493][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.266341][ T81] bridge_slave_0: left allmulticast mode [ 1461.306268][ T81] bridge_slave_0: left promiscuous mode [ 1461.332087][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.360609][T29050] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1462.398436][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1462.411022][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1462.423014][ T81] bond0 (unregistering): Released all slaves [ 1462.448620][T28981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.456098][T28981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.463320][T28981] bridge_slave_0: entered allmulticast mode [ 1462.470782][T28981] bridge_slave_0: entered promiscuous mode [ 1462.486832][T28981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.503004][T28981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.524809][T28981] bridge_slave_1: entered allmulticast mode [ 1462.531911][T28981] bridge_slave_1: entered promiscuous mode [ 1462.670232][T28802] veth0_vlan: entered promiscuous mode [ 1462.693711][T28981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1462.748821][T28981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1462.928652][T28802] veth1_vlan: entered promiscuous mode [ 1462.996964][ T81] hsr_slave_0: left promiscuous mode [ 1463.013557][ T81] hsr_slave_1: left promiscuous mode [ 1463.023288][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1463.039869][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1463.052268][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1463.060728][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1463.115286][ T81] veth1_macvtap: left promiscuous mode [ 1463.132190][ T81] veth0_macvtap: left promiscuous mode [ 1463.139400][ T81] veth1_vlan: left promiscuous mode [ 1463.145767][ T81] veth0_vlan: left promiscuous mode [ 1463.174227][ T5229] Bluetooth: hci0: command tx timeout [ 1464.065458][ T81] team0 (unregistering): Port device team_slave_1 removed [ 1464.142099][ T81] team0 (unregistering): Port device team_slave_0 removed [ 1464.933232][T28981] team0: Port device team_slave_0 added [ 1464.943526][T28981] team0: Port device team_slave_1 added [ 1465.052882][T28981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1465.074090][T28981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1465.113271][T28981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1465.158303][T28981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1465.177171][T28981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1465.203737][T28981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1465.254320][ T5229] Bluetooth: hci0: command tx timeout [ 1465.384699][T28981] hsr_slave_0: entered promiscuous mode [ 1465.391897][T28981] hsr_slave_1: entered promiscuous mode [ 1465.405854][T28981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1465.413468][T28981] Cannot create hsr debugfs directory [ 1465.526804][T28928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1465.596244][T29093] netlink: 'syz.3.5214': attribute type 2 has an invalid length. [ 1465.631899][T28802] veth0_macvtap: entered promiscuous mode [ 1465.698216][T28802] veth1_macvtap: entered promiscuous mode [ 1465.826744][T28928] 8021q: adding VLAN 0 to HW filter on device team0 [ 1465.997330][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.004528][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1466.028215][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.035430][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1466.084961][T29105] netlink: 4072 bytes leftover after parsing attributes in process `syz.1.5216'. [ 1466.107125][T28802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.138281][T28802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.151205][T29105] openvswitch: netlink: Actions may not be safe on all matching packets [ 1466.170417][T28802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.182733][T28802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.206615][T28802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1466.297850][T28802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.354446][T28802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.374048][T28802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.414596][T28802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.435993][T28802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1466.594867][T28802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.609641][T28802] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.619383][T28802] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.629184][T28802] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.929037][T28928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1466.960162][T28981] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1467.001654][T28981] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1467.032327][T28981] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1467.067219][T28981] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1467.117674][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.145222][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.276335][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.304870][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.335729][ T5229] Bluetooth: hci0: command tx timeout [ 1467.434300][T28981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1467.455095][T28928] veth0_vlan: entered promiscuous mode [ 1467.498067][T28928] veth1_vlan: entered promiscuous mode [ 1467.615706][T28981] 8021q: adding VLAN 0 to HW filter on device team0 [ 1467.718277][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.725475][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1467.832910][T12323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.840117][T12323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1468.011290][T28928] veth0_macvtap: entered promiscuous mode [ 1468.064526][T28928] veth1_macvtap: entered promiscuous mode [ 1468.128883][T28928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1468.154101][T28928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1468.164071][T28928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1468.174680][T28928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1468.184702][T28928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1468.195523][T28928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1468.207433][T28928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1468.217923][T28928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1468.234017][T28928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1468.243883][T28928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1468.254548][T28928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1468.264555][T28928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1468.278644][T28928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1468.290190][T28928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1468.352535][T28928] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.374340][T28928] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.383132][T28928] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.407731][T28928] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.521779][T28981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1468.662247][T28008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1468.700724][T28008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1468.813440][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1468.822534][T28981] veth0_vlan: entered promiscuous mode [ 1468.852248][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1468.880651][T28981] veth1_vlan: entered promiscuous mode [ 1468.978928][T28981] veth0_macvtap: entered promiscuous mode [ 1469.006724][T29165] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1469.050333][T28981] veth1_macvtap: entered promiscuous mode [ 1469.106410][T28981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1469.134144][T28981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.154129][T28981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1469.168098][T28981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.178733][T28981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1469.190207][T28981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.201714][T28981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1469.218301][T28981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.232042][T28981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1469.291965][T28981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1469.307825][T28981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.320795][T28981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1469.335407][T28981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.345750][T28981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1469.357015][T28981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.367142][T28981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1469.378204][T28981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.405489][T28981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1469.428810][T28981] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.438952][T28981] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.449321][T28981] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.458528][T28981] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.572141][T12323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1469.590729][T12323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1469.627848][T12323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1469.638302][T12323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1469.652705][T29183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5226'. [ 1469.865227][T29189] FAULT_INJECTION: forcing a failure. [ 1469.865227][T29189] name failslab, interval 1, probability 0, space 0, times 0 [ 1469.894830][T29189] CPU: 1 UID: 0 PID: 29189 Comm: syz.3.5228 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 1469.905692][T29189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1469.915889][T29189] Call Trace: [ 1469.919313][T29189] [ 1469.922286][T29189] dump_stack_lvl+0x241/0x360 [ 1469.927012][T29189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1469.932236][T29189] ? __pfx__printk+0x10/0x10 [ 1469.936859][T29189] ? fs_reclaim_acquire+0x93/0x140 [ 1469.941995][T29189] ? __pfx___might_resched+0x10/0x10 [ 1469.947319][T29189] should_fail_ex+0x3b0/0x4e0 [ 1469.952031][T29189] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1469.957781][T29189] should_failslab+0xac/0x100 [ 1469.962494][T29189] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1469.968256][T29189] __kmalloc_noprof+0xd8/0x400 [ 1469.973051][T29189] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1469.978631][T29189] tomoyo_path_number_perm+0x23a/0x880 [ 1469.984127][T29189] ? tomoyo_path_number_perm+0x208/0x880 [ 1469.989792][T29189] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1469.995829][T29189] ? __fget_files+0x29/0x470 [ 1470.000441][T29189] ? __fget_files+0x3f3/0x470 [ 1470.005157][T29189] security_file_ioctl+0xc6/0x2a0 [ 1470.010212][T29189] __se_sys_ioctl+0x47/0x170 [ 1470.014832][T29189] do_syscall_64+0xf3/0x230 [ 1470.019353][T29189] ? clear_bhb_loop+0x35/0x90 [ 1470.024054][T29189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.029982][T29189] RIP: 0033:0x7f1a05d7dff9 [ 1470.034418][T29189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1470.054056][T29189] RSP: 002b:00007f1a06b67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1470.062513][T29189] RAX: ffffffffffffffda RBX: 00007f1a05f35f80 RCX: 00007f1a05d7dff9 [ 1470.070513][T29189] RDX: 0000000020000100 RSI: 0000000000004601 RDI: 0000000000000003 [ 1470.078519][T29189] RBP: 00007f1a06b67090 R08: 0000000000000000 R09: 0000000000000000 [ 1470.086516][T29189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1470.094505][T29189] R13: 0000000000000000 R14: 00007f1a05f35f80 R15: 00007f1a0605fa28 [ 1470.102516][T29189] [ 1470.129212][T29189] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1470.409542][T29194] netlink: 'syz.1.5227': attribute type 2 has an invalid length. [ 1470.514066][ T5322] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1470.644107][ T5322] usb 4-1: device descriptor read/64, error -71 [ 1470.771934][T29197] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5230'. [ 1470.784271][T29197] openvswitch: netlink: Tunnel attr 0 has unexpected len 20 expected 8 [ 1470.884158][ T5322] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1471.024024][ T5322] usb 4-1: device descriptor read/64, error -71 [ 1471.135582][ T5322] usb usb4-port1: attempt power cycle [ 1471.463770][T29206] netlink: 'syz.0.5234': attribute type 9 has an invalid length. [ 1471.472190][T29206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5234'. [ 1471.484025][ T5322] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1471.516330][ T5322] usb 4-1: device descriptor read/8, error -71 [ 1471.524089][T24944] usb 2-1: new low-speed USB device number 118 using dummy_hcd [ 1471.696078][T24944] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1471.716514][T24944] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 1471.735084][T24944] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 1471.749555][T24944] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1471.764230][T24944] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 1471.764241][ T5322] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1471.784681][ T5322] usb 4-1: device descriptor read/8, error -71 [ 1471.787775][T24944] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1471.810536][T24944] usb 2-1: string descriptor 0 read error: -22 [ 1471.819123][T24944] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1471.828471][T24944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.844682][T29202] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1471.914410][ T5322] usb usb4-port1: unable to enumerate USB device [ 1472.062751][T24944] cdc_ncm 2-1:1.0: bind() failure [ 1472.092968][T24944] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1472.116089][T24944] cdc_ncm 2-1:1.1: bind() failure [ 1472.163168][T24944] usb 2-1: USB disconnect, device number 118 [ 1472.172830][T29216] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1472.283423][T29218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5238'. [ 1472.697448][T29225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1473.135303][T29230] netlink: 'syz.4.5239': attribute type 2 has an invalid length. [ 1473.325113][T29235] FAULT_INJECTION: forcing a failure. [ 1473.325113][T29235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1473.347509][T29235] CPU: 1 UID: 0 PID: 29235 Comm: syz.0.5243 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 1473.358352][T29235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1473.368457][T29235] Call Trace: [ 1473.371775][T29235] [ 1473.374741][T29235] dump_stack_lvl+0x241/0x360 [ 1473.379466][T29235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1473.384709][T29235] ? __pfx__printk+0x10/0x10 [ 1473.389364][T29235] should_fail_ex+0x3b0/0x4e0 [ 1473.394104][T29235] strncpy_from_user+0x36/0x250 [ 1473.399018][T29235] getname_flags+0xf1/0x540 [ 1473.403573][T29235] do_sys_openat2+0xd2/0x1d0 [ 1473.408220][T29235] ? __pfx_do_sys_openat2+0x10/0x10 [ 1473.413477][T29235] __x64_sys_openat+0x247/0x2a0 [ 1473.418379][T29235] ? __pfx___x64_sys_openat+0x10/0x10 [ 1473.423799][T29235] ? exc_page_fault+0x590/0x8c0 [ 1473.428707][T29235] ? do_syscall_64+0xb6/0x230 [ 1473.433435][T29235] do_syscall_64+0xf3/0x230 [ 1473.437982][T29235] ? clear_bhb_loop+0x35/0x90 [ 1473.442701][T29235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.448648][T29235] RIP: 0033:0x7f6d85d7c990 [ 1473.453107][T29235] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 1473.472766][T29235] RSP: 002b:00007f6d86b4def0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1473.481234][T29235] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6d85d7c990 [ 1473.489337][T29235] RDX: 0000000000000002 RSI: 00007f6d85df002c RDI: 00000000ffffff9c [ 1473.497348][T29235] RBP: 00007f6d85df002c R08: 0000000000000000 R09: 0000000000000000 [ 1473.505371][T29235] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1473.513388][T29235] R13: 000000000000006e R14: 0000000020000000 R15: 00007f6d8605fa28 [ 1473.521425][T29235] [ 1473.784114][T24944] usb 2-1: new low-speed USB device number 119 using dummy_hcd [ 1473.954051][T24944] usb 2-1: Invalid ep0 maxpacket: 64 [ 1474.087502][T24944] usb 2-1: new low-speed USB device number 120 using dummy_hcd [ 1474.096773][T29246] netlink: 'syz.3.5248': attribute type 9 has an invalid length. [ 1474.105022][T29246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5248'. [ 1474.274026][T24944] usb 2-1: Invalid ep0 maxpacket: 64 [ 1474.284065][T24944] usb usb2-port1: attempt power cycle [ 1474.433542][T29264] netlink: 'syz.3.5253': attribute type 9 has an invalid length. [ 1474.442422][T29264] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.5253'. [ 1474.543456][T29244] delete_channel: no stack [ 1474.634122][T24944] usb 2-1: new low-speed USB device number 121 using dummy_hcd [ 1474.675655][T24944] usb 2-1: Invalid ep0 maxpacket: 64 [ 1474.681512][T29269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.694868][T29269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.704928][T29269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.715764][T29269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.725811][T29269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.736398][ T47] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1474.744159][T29269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.754354][T29269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.766841][T29269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.777237][T29269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.787815][T29269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.798643][T29269] batadv_slave_0: entered promiscuous mode [ 1474.808816][T29269] batadv_slave_1: entered promiscuous mode [ 1474.844056][T24944] usb 2-1: new low-speed USB device number 122 using dummy_hcd [ 1474.869891][T29271] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1474.887382][T24944] usb 2-1: Invalid ep0 maxpacket: 64 [ 1474.904384][T24944] usb usb2-port1: unable to enumerate USB device [ 1474.924166][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 1474.932249][ T47] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1474.945906][ T47] usb 4-1: config 8 has an invalid interface number: 255 but max is 0 [ 1474.952866][T29273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5257'. [ 1474.958683][ T47] usb 4-1: config 8 has no interface number 0 [ 1474.971313][ T47] usb 4-1: config 8 interface 255 has no altsetting 0 [ 1474.980399][ T47] usb 4-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1474.989833][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.997968][ T47] usb 4-1: Product: syz [ 1475.002308][ T47] usb 4-1: Manufacturer: syz [ 1475.007056][ T47] usb 4-1: SerialNumber: syz [ 1475.236988][ T47] catc 4-1:8.255: Can't set altsetting 1. [ 1475.242816][ T47] catc 4-1:8.255: probe with driver catc failed with error -5 [ 1475.258604][ T47] usb 4-1: USB disconnect, device number 98 [ 1476.636640][T12323] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.956724][T12323] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.167858][T12323] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.451972][T26397] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1477.463306][T26397] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1477.476583][T26397] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1477.485710][T26397] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1477.493759][T26397] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1477.503561][T26397] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1477.534098][ T937] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1477.684444][ T937] usb 2-1: Using ep0 maxpacket: 32 [ 1477.701279][ T937] usb 2-1: New USB device found, idVendor=04e2, idProduct=1403, bcdDevice=1c.b2 [ 1477.714853][ T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.743496][ T937] usb 2-1: Product: syz [ 1477.754377][ T937] usb 2-1: Manufacturer: syz [ 1477.759046][ T937] usb 2-1: SerialNumber: syz [ 1477.785405][ T937] usb 2-1: config 0 descriptor?? [ 1477.857090][T29323] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1478.004605][ T5322] usb 2-1: USB disconnect, device number 123 [ 1478.049109][T12323] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.171248][T29318] chnl_net:caif_netlink_parms(): no params data found [ 1478.350317][T29318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.360716][T29318] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.378850][T29318] bridge_slave_0: entered allmulticast mode [ 1478.391585][T29318] bridge_slave_0: entered promiscuous mode [ 1478.403172][T29318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.420111][T29318] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.429199][T29318] bridge_slave_1: entered allmulticast mode [ 1478.443439][T29318] bridge_slave_1: entered promiscuous mode [ 1478.521781][T29318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1478.546351][T29318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1478.621609][T29318] team0: Port device team_slave_0 added [ 1478.642657][T29318] team0: Port device team_slave_1 added [ 1478.765047][T29318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.781441][T29318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1478.807487][ C0] vkms_vblank_simulate: vblank timer overrun [ 1478.826197][T29318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1478.848175][T29318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1478.907375][T29318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1478.934678][T29318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1479.018035][T29318] hsr_slave_0: entered promiscuous mode [ 1479.027350][T29318] hsr_slave_1: entered promiscuous mode [ 1479.034472][T29318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1479.042650][T29318] Cannot create hsr debugfs directory [ 1479.581031][T26397] Bluetooth: hci3: command tx timeout [ 1479.664126][ T5322] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1479.845655][ T5322] usb 5-1: Using ep0 maxpacket: 8 [ 1479.881962][ T5322] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1479.911059][ T5322] usb 5-1: config 8 has an invalid interface number: 255 but max is 0 [ 1479.958128][ T5322] usb 5-1: config 8 has no interface number 0 [ 1479.987682][ T5322] usb 5-1: too many endpoints for config 8 interface 255 altsetting 1: 108, using maximum allowed: 30 [ 1480.049257][ T5322] usb 5-1: config 8 interface 255 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 108 [ 1480.123678][ T5322] usb 5-1: config 8 interface 255 has no altsetting 0 [ 1480.160433][ T5322] usb 5-1: New USB device found, idVendor=0223, idProduct=000c, bcdDevice=2e.bf [ 1480.209519][ T5322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.259045][ T5322] usb 5-1: Product: syz [ 1480.278450][ T5322] usb 5-1: Manufacturer: syz [ 1480.283131][ T5322] usb 5-1: SerialNumber: syz [ 1481.654245][T26397] Bluetooth: hci3: command tx timeout [ 1481.832291][T29339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5275'. [ 1483.734283][T26397] Bluetooth: hci3: command tx timeout [ 1484.617242][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.623649][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.814267][T26397] Bluetooth: hci3: command tx timeout [ 1493.883931][ C1] sched: DL replenish lagged too much [ 1497.186893][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1497.205862][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1497.216715][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1497.228123][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1497.235922][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1497.243299][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1497.396885][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1497.409295][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1497.419328][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1497.432032][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1497.440809][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1497.448744][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1497.530963][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1497.554648][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1497.572640][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1497.580983][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1497.590710][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1497.600290][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1499.334997][T26397] Bluetooth: hci1: command tx timeout [ 1499.574299][T26397] Bluetooth: hci2: command tx timeout [ 1499.654302][T26397] Bluetooth: hci4: command tx timeout [ 1501.421092][T26397] Bluetooth: hci1: command tx timeout [ 1501.654341][T26397] Bluetooth: hci2: command tx timeout [ 1501.734077][T26397] Bluetooth: hci4: command tx timeout [ 1503.494214][T26397] Bluetooth: hci1: command tx timeout [ 1503.734356][T26397] Bluetooth: hci2: command tx timeout [ 1503.814259][T26397] Bluetooth: hci4: command tx timeout [ 1505.574036][T26397] Bluetooth: hci1: command tx timeout [ 1505.814144][T26397] Bluetooth: hci2: command tx timeout [ 1505.894176][T26397] Bluetooth: hci4: command tx timeout [ 1521.650407][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1521.664668][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1521.674749][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1521.682691][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1521.694123][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1521.703040][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1523.734207][ T5229] Bluetooth: hci0: command tx timeout [ 1525.814193][ T5229] Bluetooth: hci0: command tx timeout [ 1527.894217][ T5229] Bluetooth: hci0: command tx timeout [ 1529.974152][ T5229] Bluetooth: hci0: command tx timeout [ 1534.638756][T12323] bridge_slave_1: left allmulticast mode [ 1534.662340][T12323] bridge_slave_1: left promiscuous mode [ 1534.684365][T12323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.722165][T12323] bridge_slave_0: left allmulticast mode [ 1534.766738][T12323] bridge_slave_0: left promiscuous mode [ 1534.772548][T12323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.399411][T12323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1536.437802][T12323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1536.474687][T12323] bond0 (unregistering): Released all slaves [ 1538.183833][T26397] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1538.204346][T26397] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1538.215160][T26397] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1538.224726][T26397] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1538.233005][T26397] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1538.240521][T26397] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1540.294238][T26397] Bluetooth: hci6: command tx timeout [ 1542.374195][T26397] Bluetooth: hci6: command tx timeout [ 1544.454213][T26397] Bluetooth: hci6: command tx timeout [ 1546.056937][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.063415][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.534111][T26397] Bluetooth: hci6: command tx timeout [ 1558.106152][ T5229] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1558.123166][ T5229] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1558.135671][ T5229] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1558.158601][ T5229] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1558.173810][T21012] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1558.181701][T21012] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1558.190178][T21012] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1558.227286][T21012] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1558.237892][T21012] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1558.264262][T21012] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1558.275490][T21012] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1558.282874][T21012] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1558.351876][ T5229] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1558.369418][ T5229] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1558.378507][ T5229] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1558.388534][ T5229] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1558.404756][ T5229] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1558.412177][ T5229] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1560.294287][ T5229] Bluetooth: hci7: command tx timeout [ 1560.374437][ T5229] Bluetooth: hci8: command tx timeout [ 1560.454976][ T5229] Bluetooth: hci9: command tx timeout [ 1562.374076][ T5229] Bluetooth: hci7: command tx timeout [ 1562.454457][ T5229] Bluetooth: hci8: command tx timeout [ 1562.534205][ T5229] Bluetooth: hci9: command tx timeout [ 1564.454172][ T5229] Bluetooth: hci7: command tx timeout [ 1564.534449][ T5229] Bluetooth: hci8: command tx timeout [ 1564.614377][ T5229] Bluetooth: hci9: command tx timeout [ 1566.534590][ T5229] Bluetooth: hci7: command tx timeout [ 1566.624567][ T5229] Bluetooth: hci8: command tx timeout [ 1566.694204][ T5229] Bluetooth: hci9: command tx timeout [ 1578.861602][ T5229] Bluetooth: hci5: command 0x0406 tx timeout [ 1583.699045][ T5229] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1583.711171][ T5229] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1583.720602][ T5229] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1583.730172][ T5229] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1583.744968][ T5229] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1583.755011][ T5229] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1585.814291][ T5229] Bluetooth: hci10: command tx timeout [ 1587.894196][ T5229] Bluetooth: hci10: command tx timeout [ 1589.974360][ T5229] Bluetooth: hci10: command tx timeout [ 1592.054186][ T5229] Bluetooth: hci10: command tx timeout [ 1599.891201][T21012] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1599.914515][T21012] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1599.924686][T21012] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1599.932789][T21012] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1599.940936][T21012] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1599.948586][T21012] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1602.054472][ T5229] Bluetooth: hci11: command tx timeout [ 1604.134232][T21012] Bluetooth: hci11: command tx timeout [ 1604.462329][T21012] Bluetooth: hci3: command 0x0406 tx timeout [ 1606.214091][ T5229] Bluetooth: hci11: command tx timeout [ 1607.503789][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.510251][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.294087][ T5229] Bluetooth: hci11: command tx timeout [ 1617.729328][T21012] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1617.766276][T29414] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1617.774836][T29414] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1617.782911][T29414] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1617.791170][T29414] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1617.799022][T29414] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1618.520728][T29414] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1618.534686][T29414] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1618.542855][T29414] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1618.566512][T29414] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1618.574342][T29414] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1618.592504][T29414] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1618.640118][T29413] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1618.651496][ T5229] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1618.660331][ T5229] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1618.668879][ T5229] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1618.679778][ T5229] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1618.687346][ T5229] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1619.837635][T29414] Bluetooth: hci2: command 0x0406 tx timeout [ 1619.843736][T29414] Bluetooth: hci4: command 0x0406 tx timeout [ 1619.849889][ T5229] Bluetooth: hci1: command 0x0406 tx timeout [ 1619.894246][ T5229] Bluetooth: hci12: command tx timeout [ 1620.694259][T28800] Bluetooth: hci13: command tx timeout [ 1620.774273][T28800] Bluetooth: hci14: command tx timeout [ 1621.974544][T28800] Bluetooth: hci12: command tx timeout [ 1622.781004][T28800] Bluetooth: hci13: command tx timeout [ 1622.854122][T28800] Bluetooth: hci14: command tx timeout [ 1622.862821][ T30] INFO: task syz.4.5275:29337 blocked for more than 143 seconds. [ 1622.879469][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1622.899566][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1622.939306][ T30] task:syz.4.5275 state:D stack:27392 pid:29337 tgid:29336 ppid:28928 flags:0x00004004 [ 1622.968066][ T30] Call Trace: [ 1622.971425][ T30] [ 1622.988514][ T30] __schedule+0x1895/0x4b30 [ 1622.993149][ T30] ? __pfx___schedule+0x10/0x10 [ 1623.034047][ T30] ? __pfx_lock_release+0x10/0x10 [ 1623.054081][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1623.064074][ T30] ? schedule+0x90/0x320 [ 1623.068601][ T30] schedule+0x14b/0x320 [ 1623.072816][ T30] jbd2_log_wait_commit+0x29f/0x4a0 [ 1623.120161][ T30] ? __pfx_lock_release+0x10/0x10 [ 1623.130139][ T30] ? __pfx_jbd2_log_wait_commit+0x10/0x10 [ 1623.151670][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1623.162780][ T30] ? __jbd2_log_start_commit+0x5e/0x320 [ 1623.181005][ T30] ? _raw_write_unlock+0x28/0x50 [ 1623.201414][ T30] ext4_sync_fs+0x45c/0x710 [ 1623.213894][ T30] ? __pfx_super_lock+0x10/0x10 [ 1623.218827][ T30] ? __pfx_ext4_sync_fs+0x10/0x10 [ 1623.240621][ T30] iterate_supers+0xc6/0x190 [ 1623.264491][ T30] ? __pfx_sync_fs_one_sb+0x10/0x10 [ 1623.269775][ T30] ksys_sync+0xdb/0x1c0 [ 1623.283901][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 1623.288729][ T30] ? __secure_computing+0x125/0x370 [ 1623.321342][ T30] __do_sys_sync+0xe/0x20 [ 1623.329808][ T30] do_syscall_64+0xf3/0x230 [ 1623.363445][ T30] ? clear_bhb_loop+0x35/0x90 [ 1623.369042][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.400907][ T30] RIP: 0033:0x7fcc42b7dff9 [ 1623.405707][ T30] RSP: 002b:00007fcc43934038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1623.434671][ T30] RAX: ffffffffffffffda RBX: 00007fcc42d35f80 RCX: 00007fcc42b7dff9 [ 1623.442718][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1623.475283][ T30] RBP: 00007fcc42bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 1623.483328][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1623.524053][ T30] R13: 0000000000000000 R14: 00007fcc42d35f80 R15: 00007fcc42e5fa28 [ 1623.532137][ T30] [ 1623.561633][ T30] [ 1623.561633][ T30] Showing all locks held in the system: [ 1623.601046][ T30] 1 lock held by khungtaskd/30: [ 1623.609359][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1623.687044][ T30] 5 locks held by kworker/1:1/47: [ 1623.692158][ T30] 3 locks held by kworker/u8:4/81: [ 1623.753047][ T30] #0: ffff88814b562148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1623.777319][ T30] #1: ffffc900020dfd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1623.801989][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1623.816161][ T30] 1 lock held by dhcpcd/4898: [ 1623.820892][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1aa0 [ 1623.837633][ T30] 2 locks held by getty/4984: [ 1623.842370][ T30] #0: ffff88802e67b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1623.856958][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1623.872390][ T30] 4 locks held by kworker/u8:8/12323: [ 1623.882499][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1623.898874][ T30] #1: ffffc90004927d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1623.912421][ T30] #2: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1623.927461][ T30] #3: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 1623.942601][ T30] 3 locks held by kworker/0:1/24511: [ 1623.951897][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1623.972187][ T30] #1: ffffc90003c07d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1623.984374][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1624.003564][ T30] 3 locks held by kworker/1:2/24944: [ 1624.009325][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1624.029407][ T30] #1: ffffc900031ffd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1624.042708][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 1624.061304][ T30] 3 locks held by kworker/u8:1/28008: [ 1624.067242][T28800] Bluetooth: hci12: command tx timeout [ 1624.081570][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1624.094024][ T30] #1: ffffc900035ffd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1624.114793][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1624.130481][ T30] 1 lock held by syz-executor/28666: [ 1624.144533][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1624.153691][ T30] 2 locks held by syz-executor/28802: [ 1624.169623][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1624.181554][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 1624.198627][ T30] 1 lock held by syz-executor/28981: [ 1624.206877][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1624.221287][ T30] 7 locks held by syz-executor/29318: [ 1624.229522][ T30] #0: ffff888032a4c420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 1624.248175][ T30] #1: ffff888028bcbc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1624.261333][ T30] #2: ffff8881443781e8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1624.278168][ T30] #3: ffffffff8f56fda8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1624.294848][ T30] #4: ffff8880710920e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1624.315779][ T30] #5: ffff888071093250 (&devlink->lock_key#106){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1624.331177][ T30] #6: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 1624.342871][ T30] 1 lock held by syz.4.5275/29337: [ 1624.353888][ T30] #0: ffff88814cda00e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_lock+0x27c/0x400 [ 1624.372564][ T30] 2 locks held by syz-executor/29354: [ 1624.378308][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1624.395756][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1624.412425][ T30] 2 locks held by syz-executor/29357: [ 1624.420891][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1624.434166][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1624.451066][ T30] 2 locks held by syz-executor/29358: [ 1624.457087][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1624.480376][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1624.491572][ T30] 2 locks held by syz-executor/29364: [ 1624.504956][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1624.522871][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1624.534659][ T30] 2 locks held by syz-executor/29385: [ 1624.540083][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1624.554327][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1624.573220][ T30] 2 locks held by syz-executor/29394: [ 1624.580836][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1624.594430][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1624.612226][ T30] 2 locks held by syz-executor/29395: [ 1624.620439][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1624.635412][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1624.653365][ T30] 2 locks held by syz-executor/29398: [ 1624.659171][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1624.674670][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1624.694685][ T30] 2 locks held by syz-executor/29403: [ 1624.700118][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1624.716291][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1624.730896][ T30] 2 locks held by syz-executor/29409: [ 1624.740278][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1624.755682][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1624.770922][ T30] 2 locks held by syz-executor/29417: [ 1624.783248][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1624.798245][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1624.814117][ T30] 2 locks held by syz-executor/29423: [ 1624.819546][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1624.834330][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1624.851555][ T30] 2 locks held by syz-executor/29424: [ 1624.857325][T28800] Bluetooth: hci13: command tx timeout [ 1624.863758][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1624.883569][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1624.901800][ T30] [ 1624.905577][ T30] ============================================= [ 1624.905577][ T30] [ 1624.921386][ T30] NMI backtrace for cpu 0 [ 1624.925760][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 1624.936298][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1624.946389][ T30] Call Trace: [ 1624.949705][ T30] [ 1624.952662][ T30] dump_stack_lvl+0x241/0x360 [ 1624.957391][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1624.962631][ T30] ? __pfx__printk+0x10/0x10 [ 1624.967289][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1624.972290][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1624.977796][ T30] ? _printk+0xd5/0x120 [ 1624.982000][ T30] ? __pfx__printk+0x10/0x10 [ 1624.986639][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1624.991545][ T30] ? __pfx__printk+0x10/0x10 [ 1624.996193][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1625.001271][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1625.007304][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1625.013333][ T30] watchdog+0xff4/0x1040 [ 1625.017635][ T30] ? watchdog+0x1ea/0x1040 [ 1625.022109][ T30] ? __pfx_watchdog+0x10/0x10 [ 1625.026845][ T30] kthread+0x2f0/0x390 [ 1625.030952][ T30] ? __pfx_watchdog+0x10/0x10 [ 1625.035683][ T30] ? __pfx_kthread+0x10/0x10 [ 1625.040313][ T30] ret_from_fork+0x4b/0x80 [ 1625.044780][ T30] ? __pfx_kthread+0x10/0x10 [ 1625.049498][ T30] ret_from_fork_asm+0x1a/0x30 [ 1625.054324][ T30] [ 1625.058372][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1625.063640][ C1] NMI backtrace for cpu 1 [ 1625.063656][ C1] CPU: 1 UID: 0 PID: 47 Comm: kworker/1:1 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 1625.063679][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1625.063692][ C1] Workqueue: events nsim_dev_trap_report_work [ 1625.063720][ C1] RIP: 0010:unwind_get_return_address+0x1d/0x90 [ 1625.063755][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 4b 83 3b 00 74 3a 48 83 c3 48 49 89 df 49 [ 1625.063772][ C1] RSP: 0018:ffffc90000a17d20 EFLAGS: 00000a02 [ 1625.063787][ C1] RAX: 1ffff92000142fa8 RBX: ffffc90000a17d40 RCX: 0000000080000102 [ 1625.063802][ C1] RDX: dffffc0000000000 RSI: ffffc90000a11000 RDI: ffffc90000a17d40 [ 1625.063817][ C1] RBP: ffffc90000a17dd0 R08: ffffc90000a18708 R09: 0000000000000000 [ 1625.063831][ C1] R10: ffffc90000a17d90 R11: fffff52000142fb4 R12: ffff888020e98000 [ 1625.063845][ C1] R13: ffffffff8180a000 R14: dffffc0000000000 R15: 0000000000000000 [ 1625.063864][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1625.063882][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1625.063897][ C1] CR2: 000000110c350111 CR3: 000000000e734000 CR4: 00000000003526f0 [ 1625.063915][ C1] Call Trace: [ 1625.063922][ C1] [ 1625.063930][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1625.063955][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1625.063988][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1625.064010][ C1] ? nmi_handle+0x2a/0x5a0 [ 1625.064041][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1625.064070][ C1] ? nmi_handle+0x14f/0x5a0 [ 1625.064092][ C1] ? nmi_handle+0x2a/0x5a0 [ 1625.064116][ C1] ? unwind_get_return_address+0x1d/0x90 [ 1625.064137][ C1] ? default_do_nmi+0x63/0x160 [ 1625.064164][ C1] ? exc_nmi+0x123/0x1f0 [ 1625.064189][ C1] ? end_repeat_nmi+0xf/0x53 [ 1625.064210][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1625.064242][ C1] ? unwind_get_return_address+0x1d/0x90 [ 1625.064264][ C1] ? unwind_get_return_address+0x1d/0x90 [ 1625.064287][ C1] ? unwind_get_return_address+0x1d/0x90 [ 1625.064309][ C1] [ 1625.064318][ C1] [ 1625.064326][ C1] arch_stack_walk+0xfd/0x150 [ 1625.064350][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1625.064377][ C1] ? nf_hook_slow+0xc3/0x220 [ 1625.064402][ C1] stack_trace_save+0x118/0x1d0 [ 1625.064450][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1625.064475][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1625.064507][ C1] kasan_save_track+0x3f/0x80 [ 1625.064526][ C1] ? kasan_save_track+0x3f/0x80 [ 1625.064544][ C1] ? kasan_save_free_info+0x40/0x50 [ 1625.064570][ C1] ? __kasan_slab_free+0x59/0x70 [ 1625.064590][ C1] ? kmem_cache_free+0x1a2/0x420 [ 1625.064615][ C1] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 1625.064642][ C1] ? nft_synproxy_do_eval+0x362/0xa60 [ 1625.064669][ C1] ? nft_do_chain+0x4ad/0x1da0 [ 1625.064696][ C1] ? nft_do_chain_inet+0x418/0x6b0 [ 1625.064744][ C1] ? skb_release_data+0x6a0/0x8a0 [ 1625.064765][ C1] kasan_save_free_info+0x40/0x50 [ 1625.064792][ C1] __kasan_slab_free+0x59/0x70 [ 1625.064812][ C1] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 1625.064839][ C1] kmem_cache_free+0x1a2/0x420 [ 1625.064864][ C1] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 1625.064893][ C1] nft_synproxy_eval_v4+0x3d2/0x610 [ 1625.064935][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1625.064961][ C1] ? sched_clock_cpu+0x76/0x490 [ 1625.064984][ C1] ? nf_ip_checksum+0x13a/0x500 [ 1625.065013][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 1625.065042][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1625.065068][ C1] ? validate_chain+0x11e/0x5920 [ 1625.065091][ C1] ? __pfx_validate_chain+0x10/0x10 [ 1625.065117][ C1] nft_do_chain+0x4ad/0x1da0 [ 1625.065150][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1625.065176][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 1625.065213][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 1625.065234][ C1] nft_do_chain_inet+0x418/0x6b0 [ 1625.065262][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1625.065287][ C1] ? ipt_do_table+0x312/0x1860 [ 1625.065322][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1625.065347][ C1] nf_hook_slow+0xc3/0x220 [ 1625.065371][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1625.065392][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1625.065414][ C1] NF_HOOK+0x29e/0x450 [ 1625.065440][ C1] ? NF_HOOK+0x9a/0x450 [ 1625.065460][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1625.065480][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1625.065505][ C1] ? ip_rcv_finish+0x406/0x560 [ 1625.065526][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1625.065546][ C1] NF_HOOK+0x3a4/0x450 [ 1625.065565][ C1] ? __lock_acquire+0x1384/0x2050 [ 1625.065611][ C1] ? NF_HOOK+0x9a/0x450 [ 1625.065631][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1625.065650][ C1] ? ip_rcv_core+0x801/0xd10 [ 1625.065672][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1625.065698][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1625.065719][ C1] __netif_receive_skb+0x2bf/0x650 [ 1625.065744][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1625.065772][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 1625.065795][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1625.065823][ C1] ? __pfx_lock_release+0x10/0x10 [ 1625.065852][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1625.065883][ C1] process_backlog+0x662/0x15b0 [ 1625.065911][ C1] ? process_backlog+0x33b/0x15b0 [ 1625.065939][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1625.065964][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1625.065993][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1625.066024][ C1] __napi_poll+0xcb/0x490 [ 1625.066048][ C1] net_rx_action+0x89b/0x1240 [ 1625.066083][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1625.066109][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 1625.066152][ C1] handle_softirqs+0x2c5/0x980 [ 1625.066180][ C1] ? do_softirq+0x11b/0x1e0 [ 1625.066206][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1625.066236][ C1] do_softirq+0x11b/0x1e0 [ 1625.066260][ C1] [ 1625.066266][ C1] [ 1625.066274][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1625.066298][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 1625.066329][ C1] ? rcu_is_watching+0x15/0xb0 [ 1625.066351][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 1625.066377][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 1625.066400][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1625.066431][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1625.066457][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 1625.066481][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 1625.066510][ C1] ? process_scheduled_works+0x976/0x1850 [ 1625.066537][ C1] process_scheduled_works+0xa63/0x1850 [ 1625.066577][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1625.066607][ C1] ? assign_work+0x364/0x3d0 [ 1625.066635][ C1] worker_thread+0x870/0xd30 [ 1625.066665][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1625.066695][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1625.066724][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1625.066751][ C1] kthread+0x2f0/0x390 [ 1625.066768][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1625.066795][ C1] ? __pfx_kthread+0x10/0x10 [ 1625.066813][ C1] ret_from_fork+0x4b/0x80 [ 1625.066841][ C1] ? __pfx_kthread+0x10/0x10 [ 1625.066860][ C1] ret_from_fork_asm+0x1a/0x30 [ 1625.066894][ C1] [ 1625.774469][T28800] Bluetooth: hci14: command tx timeout [ 1625.876602][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1625.883522][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 1625.894082][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1625.904172][ T30] Call Trace: [ 1625.907480][ T30] [ 1625.910442][ T30] dump_stack_lvl+0x241/0x360 [ 1625.915166][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1625.920400][ T30] ? __pfx__printk+0x10/0x10 [ 1625.925033][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1625.931066][ T30] ? vscnprintf+0x5d/0x90 [ 1625.935438][ T30] panic+0x349/0x880 [ 1625.939384][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1625.945578][ T30] ? __pfx_panic+0x10/0x10 [ 1625.950038][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1625.955449][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1625.961044][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1625.966453][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1625.972658][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1625.978857][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1625.985053][ T30] watchdog+0x1033/0x1040 [ 1625.989443][ T30] ? watchdog+0x1ea/0x1040 [ 1625.993909][ T30] ? __pfx_watchdog+0x10/0x10 [ 1625.998632][ T30] kthread+0x2f0/0x390 [ 1626.002737][ T30] ? __pfx_watchdog+0x10/0x10 [ 1626.007485][ T30] ? __pfx_kthread+0x10/0x10 [ 1626.012116][ T30] ret_from_fork+0x4b/0x80 [ 1626.016578][ T30] ? __pfx_kthread+0x10/0x10 [ 1626.021206][ T30] ret_from_fork_asm+0x1a/0x30 [ 1626.026061][ T30] [ 1626.029268][ T30] Kernel Offset: disabled [ 1626.033620][ T30] Rebooting in 86400 seconds..