last executing test programs: 1m11.171581643s ago: executing program 4 (id=1247): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@flat=@weak_binder={0x77622a85, 0x1001}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x20000000}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000280)="7084ecd74f23b1285a9cccd078e97caab1173b0c1faa50bff279cd27c47434aaad36a7c7af4135755e898f714bf422ae203097e022b79051d170a942adef82ba4b59d3f0bdfe78b909aead8d3073018a6d6aa6d50e274dc2f98055fa575ed81ac8d5c611159d14834a28d56d0ae88b4bb8fc2b3170bee8c8248c", 0x0}, 0x20) ioctl$int_in(r5, 0x5452, &(0x7f0000000780)) recvmmsg(r5, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/49, 0x31}], 0x1}}], 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m8.091549602s ago: executing program 4 (id=1250): r0 = socket(0xa, 0x2, 0x3a) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5}, 0x0) 1m6.779584192s ago: executing program 4 (id=1252): r0 = socket(0x200000000000011, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc", 0xe) accept4(r2, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f0000006cc0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000000000000290000000a00000000000000"], 0x10}}], 0x1, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 1m2.829771798s ago: executing program 4 (id=1263): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x100000]}}) 1m1.642289496s ago: executing program 0 (id=1266): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120104009d6fce202505882843d00000000109021b0001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1m0.728027519s ago: executing program 4 (id=1269): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@flat=@weak_binder={0x77622a85, 0x1001}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x20000000}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000280)="7084ecd74f23b1285a9cccd078e97caab1173b0c1faa50bff279cd27c47434aaad36a7c7af4135755e898f714bf422ae203097e022b79051d170a942adef82ba4b59d3f0bdfe78b909aead8d3073018a6d6aa6d50e274dc2f98055fa575ed81ac8d5c611159d14834a28d56d0ae88b4bb8fc2b3170bee8c8248c", 0x0}, 0x20) ioctl$int_in(r5, 0x5452, &(0x7f0000000780)) recvmmsg(r5, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/49, 0x31}], 0x1}}], 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 57.686241019s ago: executing program 4 (id=1272): r0 = socket(0x200000000000011, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc", 0xe) accept4(r2, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f0000006cc0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000000000000290000000a00000000000000"], 0x10}}], 0x1, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 57.631560391s ago: executing program 0 (id=1273): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000300)={0x7, @win={{0x2, 0x0, 0x0, 0xfffffffd}, 0x5, 0x0, &(0x7f0000000040)={{0x4, 0x0, 0x9, 0x1}}, 0x0, 0x0}}) 56.812626002s ago: executing program 0 (id=1276): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r4 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) renameat2(r5, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) renameat2(r7, &(0x7f0000000200)='./bus\x00', r7, &(0x7f0000000280)='./file0\x00', 0x1) prlimit64(r0, 0x5, &(0x7f00000001c0)={0x6, 0x1}, &(0x7f0000000280)) r8 = memfd_create(&(0x7f0000000000)='y\x105%\xa3\xd5\xfa\xd7\xfa\x17\xe9\x99\xa2\x89\x8e\xcd\xfd', 0x2) pwrite64(r8, 0x0, 0x0, 0x5b63) r9 = dup(r3) ioctl$UDMABUF_CREATE(r9, 0x40187542, 0x0) syz_io_uring_setup(0x6900, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, 0x0) r10 = syz_io_uring_setup(0x1e45, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000180)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x80000d, 0x10010, r10, 0x10000000) 55.289713436s ago: executing program 0 (id=1279): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[]}, 0x78) syz_emit_ethernet(0x8e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a370277e60ec90b9634b30e120ef200587300fe800016a9401cf9a0bb99bf0000000000000000000100", @ANYRES8], 0x0) chdir(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000103c0)={0x0}, 0xfffffffffffffeb9) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0xec01, 0x10, 0x5, 0x0, 0x0, r1}, &(0x7f0000010080), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}, {&(0x7f0000010100)=""/81, 0x51}, {&(0x7f0000010180)=""/72, 0x48}, {&(0x7f0000010200)=""/160, 0xa0}, {&(0x7f0000010380)=""/47, 0x2f}], 0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x37) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r4], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r6, r6], 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x141, r6, 0x0, '\x00', 0x0, r7, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 24.676522482s ago: executing program 3 (id=1361): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 24.290779022s ago: executing program 3 (id=1364): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000800), 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000280)="7084ecd74f23b1285a9cccd078e97caab1173b0c1faa50bff279cd27c47434aaad36a7c7af4135755e898f714bf422ae203097e022b79051d170a942adef82ba4b59d3f0bdfe78b909aead8d3073018a6d6aa6d50e274dc2f98055fa575ed81ac8d5c611159d14834a28d56d0ae88b4bb8fc2b3170bee8c8248cad7b1325", 0x0}, 0x20) ioctl$int_in(r5, 0x5452, &(0x7f0000000780)) recvmmsg(r5, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/49, 0x31}], 0x1}}], 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 23.459628997s ago: executing program 1 (id=1365): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) setrlimit(0x8, &(0x7f0000000380)) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 23.390341634s ago: executing program 3 (id=1366): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x10, 0x7f, 0x0, 0x80000001}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x1abf00, 0x10) syz_emit_ethernet(0x1e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r4}) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000040)={0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0xc, 0x0, &(0x7f0000000b80)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) setpgid(0x0, 0x0) 22.931548416s ago: executing program 1 (id=1368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$midi(0x0, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000300)=0x3f) r6 = socket$pppl2tp(0x18, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) 21.173564093s ago: executing program 1 (id=1370): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000100)="fa", 0x1}], 0x2, 0x19, 0x0) 21.039458234s ago: executing program 2 (id=1371): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000006801088054000780080005006e00008c"], 0x1a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) io_uring_setup(0x3e24, &(0x7f0000000080)={0x0, 0x6de, 0x1826, 0x0, 0x149}) write$P9_RSTATu(r9, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x20e) 20.674994594s ago: executing program 3 (id=1372): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={0x0}) 19.916400343s ago: executing program 1 (id=1373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}]}}}}}}}, 0x0) 19.767276989s ago: executing program 2 (id=1374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r1, 0x431, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x34}}, 0x0) 19.367017502s ago: executing program 1 (id=1375): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) 19.333517958s ago: executing program 3 (id=1376): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x40086602, &(0x7f0000000000)=ANY=[]) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001440)=""/146, 0x92}, {&(0x7f0000001340)=""/92, 0x5c}], 0x2, &(0x7f00000013c0)=""/111, 0x6f}, 0x9}, {{&(0x7f0000002640)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000002840)=[{&(0x7f00000026c0)=""/53, 0x35}, {&(0x7f0000002700)=""/58, 0x3a}, {0x0}, {&(0x7f0000002800)=""/56, 0x38}], 0x4, &(0x7f0000002880)=""/206, 0xce}, 0xfffffff9}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002c40)=""/188, 0xbc}, {&(0x7f0000002d00)=""/251, 0xfb}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/151, 0x97}, {&(0x7f0000003ec0)=""/242, 0xf2}, {&(0x7f0000001140)=""/103, 0x67}], 0x6, &(0x7f0000002ac0)=""/30, 0x1e}, 0x7}], 0x3, 0x0, &(0x7f0000002c00)={0x0, 0x989680}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x7, 0x40080, 0x0, 'queue1\x00'}) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r5, 0x84, 0x7c, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000001240)='/proc/asound/card0/oss_mixer\x00', 0x2b0083, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) write$proc_mixer(r6, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)={0x0, 0x0, 0x10000}) r7 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000f00)={0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000001040)=ANY=[@ANYRESOCT], 0x15) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f00000010c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001000)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[], [], 0x6b}}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000040c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="4be000000000000000000000000008000800000000000800090000000000080002000100000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=r8, @ANYBLOB="e16753fd69d62d4e84caa9b80c430144705497586a3af371a0c92d25cf75f443edceb6667a21079443c71e9d72f1c0551e8473f8cea584e34a3dc53de691889114d6be568f906a18fb3c3ebe6e5d15f24db1264c0927a394bea12006cf90569cf7d19452a8e8e79b9dbaa1ac9b7e715686ff6144753ebdaae970d04a62dd2c2d3174151bd9c91ad7dadc81206a1583c4c6fe8dcdb27085ec6fa62d712e9c71f13a72de46310a30583e1dda70c300"/186], 0x3c}}, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xb, 0x0, &(0x7f0000000000)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) 19.237457177s ago: executing program 2 (id=1377): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x800000, 0x35315258, 0xf00, 0x0, 0x0, @stepwise}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x3) 19.041515867s ago: executing program 1 (id=1378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$midi(0x0, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000300)=0x3f) r6 = socket$pppl2tp(0x18, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) 18.921068562s ago: executing program 2 (id=1379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "b958"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 17.973788203s ago: executing program 2 (id=1380): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x2e5f, 0x5f}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 17.563985331s ago: executing program 3 (id=1381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) r1 = socket(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x4, @remote}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, @in={0x2, 0xffff, @local}, @in={0x2, 0x4e20, @multicast2}], 0x6c) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) io_setup(0x20, &(0x7f0000000000)) unshare(0x6a040000) unshare(0x2000400) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000140)=0x98, 0x4) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000440)='binder\x00', 0x810481, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2800060, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000080)) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_submit(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) epoll_create1(0x0) 17.305296934s ago: executing program 2 (id=1382): r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000000300c1ff"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 435.717739ms ago: executing program 0 (id=1299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d3"}]}, @NFTA_RANGE_TO_DATA={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 0s ago: executing program 0 (id=1386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e008000000008000d"], 0x5c}}, 0x0) kernel console output (not intermixed with test programs): 5] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.042306][ T7735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.061805][T11753] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.074836][T11768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 907.104902][ T7737] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.112238][ T7737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.133885][T11768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 907.152807][T11768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 907.189080][ T7737] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.196551][ T7737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.207267][T11768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 907.832743][T11768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.891545][T11768] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.020613][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.027972][ T7735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.072560][ T7735] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.079833][ T7735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.047881][T11768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 909.058687][T11768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 909.261384][T11753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.549979][T11768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 910.882764][T11768] veth0_vlan: entered promiscuous mode [ 911.770923][T11768] veth1_vlan: entered promiscuous mode [ 911.843198][ T5223] Bluetooth: hci1: command tx timeout [ 911.851822][ T5223] Bluetooth: hci6: command 0x0405 tx timeout [ 911.903143][T11768] veth0_macvtap: entered promiscuous mode [ 912.022115][T11768] veth1_macvtap: entered promiscuous mode [ 912.031131][T12020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.971'. [ 912.174060][T11768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.208795][T11768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.224454][T11768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.243461][T11768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.265655][T11768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 912.312606][T11768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.330894][T11768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.342431][T11768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.358420][T11768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.372114][T11768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 912.388102][T11753] veth0_vlan: entered promiscuous mode [ 912.406120][T11768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.435252][T11768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.507879][T11768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.521552][T11768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.543725][T11753] veth1_vlan: entered promiscuous mode [ 912.707563][ T2563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.717705][T11753] veth0_macvtap: entered promiscuous mode [ 912.721133][ T2563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.784423][T11753] veth1_macvtap: entered promiscuous mode [ 912.864012][T11753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.886278][T11753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.901142][T11753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.920511][T11753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.949209][T11753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.975163][T11753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.170657][T11753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 913.186523][T11753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.213584][T11753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.557432][T11753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.573261][T11753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.615183][T11753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.638389][T11753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.685876][T11753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 913.717749][T11753] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.740881][T11753] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.765658][T11753] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.790131][T11753] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.820306][ T7737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.831658][ T7737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.840018][T12017] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 913.849302][T12017] Bluetooth: hci1: Injecting HCI hardware error event [ 913.859088][ T7938] Bluetooth: hci1: hardware error 0x00 [ 914.181703][ T1833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.210938][ T1833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.442532][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.482120][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.508274][T12062] block device autoloading is deprecated and will be removed. [ 914.521191][T12062] syz.3.938: attempt to access beyond end of device [ 914.521191][T12062] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 914.623403][T12061] Bluetooth: (null): Invalid header checksum [ 916.408667][ T7938] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 918.144822][T12075] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 918.444214][T12076] binder: 12069:12076 ioctl c0306201 0 returned -14 [ 918.895159][ T5271] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 919.072909][ T5271] usb 4-1: Using ep0 maxpacket: 32 [ 919.101621][ T5271] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 919.153479][T12017] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 919.164933][T12017] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 919.178830][T12017] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 919.194047][T12017] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 919.209357][ T5271] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 919.238027][T12017] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 919.246285][T12017] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 919.273752][ T5271] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 919.301156][ T5271] usb 4-1: Product: syz [ 919.306784][ T5271] usb 4-1: Manufacturer: syz [ 919.312095][ T5271] usb 4-1: SerialNumber: syz [ 919.317059][ T3248] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 919.355916][ T5271] usb 4-1: config 0 descriptor?? [ 919.367609][T12082] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 919.398235][T12093] netlink: 'syz.4.979': attribute type 1 has an invalid length. [ 919.476208][T12093] netlink: 224 bytes leftover after parsing attributes in process `syz.4.979'. [ 919.479721][ T3248] usb 1-1: Using ep0 maxpacket: 32 [ 919.522260][ T3248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 919.530023][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.979'. [ 919.549935][ T3248] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 919.583647][ T3248] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 919.595759][ T3248] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 919.652609][ T3248] usb 1-1: Product: syz [ 919.680370][ T3248] usb 1-1: Manufacturer: syz [ 919.695838][ T6977] usb 4-1: USB disconnect, device number 12 [ 919.706192][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.979'. [ 919.740664][ T3248] usb 1-1: SerialNumber: syz [ 919.761969][ T3248] usb 1-1: config 0 descriptor?? [ 919.986470][ T5294] usb 1-1: USB disconnect, device number 8 [ 920.288810][T12091] chnl_net:caif_netlink_parms(): no params data found [ 921.448120][T12017] Bluetooth: hci0: command tx timeout [ 922.687693][T12091] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.696004][T12091] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.702160][T12127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.982'. [ 922.703750][T12091] bridge_slave_0: entered allmulticast mode [ 922.720695][T12091] bridge_slave_0: entered promiscuous mode [ 922.730801][T12091] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.738308][T12091] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.745796][T12091] bridge_slave_1: entered allmulticast mode [ 922.752988][T12091] bridge_slave_1: entered promiscuous mode [ 922.915297][T12091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.937792][T12091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.401061][T12091] team0: Port device team_slave_0 added [ 923.515137][T12017] Bluetooth: hci0: command tx timeout [ 924.064647][T12091] team0: Port device team_slave_1 added [ 924.158250][T12091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 924.166684][T12091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 924.207426][T12091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 924.416868][T12091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 924.436148][T12091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 924.500773][T12091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.478357][T12091] hsr_slave_0: entered promiscuous mode [ 925.486208][T12091] hsr_slave_1: entered promiscuous mode [ 925.493285][T12091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 925.501227][T12091] Cannot create hsr debugfs directory [ 925.596024][T12017] Bluetooth: hci0: command tx timeout [ 926.565516][T12156] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 926.886586][T12162] binder: 12153:12162 ioctl c0306201 0 returned -14 [ 927.675151][T12017] Bluetooth: hci0: command tx timeout [ 928.593916][T12176] Process accounting resumed [ 928.604544][ T5271] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 928.612435][ T3248] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 928.715001][ C1] hrtimer: interrupt took 56382 ns [ 929.455776][ T3248] usb 4-1: Using ep0 maxpacket: 32 [ 929.462166][T12091] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 929.466649][ T3248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 929.486379][T12091] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 929.494059][ T3248] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 929.505145][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.508575][T12091] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 929.516426][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.533021][ T5271] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 929.543200][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.554642][T12091] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 929.592667][ T5271] usb 1-1: config 0 descriptor?? [ 929.631394][T12091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.652343][T12091] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.667807][ T1833] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.675115][ T1833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.707989][ T3248] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 929.717443][ T3248] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 929.719179][ T7720] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.725906][ T3248] usb 4-1: Product: syz [ 929.732899][ T7720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.737139][ T3248] usb 4-1: Manufacturer: syz [ 929.749956][ T3248] usb 4-1: SerialNumber: syz [ 929.772742][ T3248] usb 4-1: config 0 descriptor?? [ 929.779308][ T5271] usb 1-1: can't set config #0, error -71 [ 929.814556][ T5271] usb 1-1: USB disconnect, device number 9 [ 930.024815][ T5234] usb 4-1: USB disconnect, device number 13 [ 931.716173][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.863118][ T30] audit: type=1326 audit(1727192328.143:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12198 comm="syz.0.996" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59c537def9 code=0x0 [ 931.875822][T12091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.458406][T12091] veth0_vlan: entered promiscuous mode [ 932.470458][T12091] veth1_vlan: entered promiscuous mode [ 932.575203][T12091] veth0_macvtap: entered promiscuous mode [ 932.614458][T12091] veth1_macvtap: entered promiscuous mode [ 932.760520][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.875573][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.901872][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.951167][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.962163][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.186091][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.203050][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.224040][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.257820][T12091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.529356][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.604883][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.665362][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.706701][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.735090][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.787044][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.809742][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.850936][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.206707][T12091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.217454][T12091] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.239515][T12091] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.249473][T12091] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.259649][T12091] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.631742][T12066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.659013][T12066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.718630][T12066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.737270][T12066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.434279][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 936.453924][T12017] Bluetooth: hci0: unexpected cc 0x1004 length: 8 < 11 [ 936.478552][T12244] netlink: 'syz.0.1006': attribute type 7 has an invalid length. [ 936.628067][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1003'. [ 936.874135][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1008'. [ 937.006022][ T5270] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 937.705348][ T5270] usb 1-1: Using ep0 maxpacket: 32 [ 937.778652][ T5270] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 937.800220][ T5270] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 937.852103][ T5270] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 937.896590][ T5270] usb 1-1: Product: syz [ 937.910856][ T5270] usb 1-1: Manufacturer: syz [ 939.840199][ T5270] usb 1-1: SerialNumber: syz [ 939.862509][ T5270] usb 1-1: config 0 descriptor?? [ 939.899318][ T5270] usb 1-1: can't set config #0, error -71 [ 939.955847][ T5270] usb 1-1: USB disconnect, device number 10 [ 940.148545][T12281] netlink: 'syz.0.1015': attribute type 1 has an invalid length. [ 940.341387][T12287] tap0: tun_chr_ioctl cmd 1074025677 [ 940.358587][T12287] tap0: linktype set to 270 [ 941.529127][T12306] Process accounting resumed [ 942.530330][T12308] serio: Serial port pts0 [ 942.641238][T12310] sctp: [Deprecated]: syz.0.1018 (pid 12310) Use of struct sctp_assoc_value in delayed_ack socket option. [ 942.641238][T12310] Use struct sctp_sack_info instead [ 943.246384][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1022'. [ 943.549956][T12317] vivid-004: disconnect [ 943.956452][T12297] vivid-004: reconnect [ 945.070506][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.261603][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.282218][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.321067][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.522369][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.663731][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.678493][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.688108][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.697119][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.705133][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.712548][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.720621][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.728613][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.736159][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.743594][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.751666][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.764175][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.772009][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.780602][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.789279][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.797417][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.805234][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.815191][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.822928][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.830803][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.838279][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.845767][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.854758][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.862328][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.869848][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.877394][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.884799][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.893470][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.901025][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.908504][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.915982][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.924233][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.931806][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.939394][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.948535][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.956081][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.963546][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.971081][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.978837][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 945.986459][ T5330] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 946.014469][ T5330] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 946.255872][T12337] overlayfs: conflicting lowerdir path [ 946.335593][T12344] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1026'. [ 946.344967][T12344] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1026'. [ 946.354665][T12344] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1026'. [ 946.396328][ T5270] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 947.365252][ T5270] usb 4-1: Using ep0 maxpacket: 32 [ 947.406331][ T5270] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 947.460112][ T5270] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 947.638245][ T5270] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 947.878198][ T5270] usb 4-1: Product: syz [ 948.030526][ T5270] usb 4-1: Manufacturer: syz [ 948.051724][ T5270] usb 4-1: SerialNumber: syz [ 948.129722][ T5270] usb 4-1: config 0 descriptor?? [ 948.164677][T12336] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 948.922656][ T3248] usb 4-1: USB disconnect, device number 14 [ 952.528920][ T30] audit: type=1326 audit(1727192348.813:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12373 comm="syz.4.1036" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2957d7def9 code=0x0 [ 952.681519][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1037'. [ 952.805464][ T5330] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 952.985896][ T5330] usb 3-1: Using ep0 maxpacket: 32 [ 953.083655][ T5330] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 953.661522][ T5330] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 953.685569][ T5330] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 953.704615][ T5330] usb 3-1: Product: syz [ 953.709478][ T5330] usb 3-1: Manufacturer: syz [ 953.714726][ T5330] usb 3-1: SerialNumber: syz [ 954.163639][ T5330] usb 3-1: config 0 descriptor?? [ 954.170392][T12380] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 954.477124][ T5271] usb 3-1: USB disconnect, device number 13 [ 954.583487][T12401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1040'. [ 954.593040][T12401] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1040'. [ 954.602593][T12401] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1040'. [ 956.908739][ T30] audit: type=1326 audit(1727192352.813:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12410 comm="syz.1.1043" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f033777def9 code=0x0 [ 957.625327][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 958.535252][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 958.568722][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 958.817358][ T8] usb 4-1: string descriptor 0 read error: -71 [ 958.865428][ T8] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 958.905334][ T8] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 960.011842][ T8] usb 4-1: config 0 descriptor?? [ 960.025496][ T8] usb 4-1: can't set config #0, error -71 [ 960.033454][ T8] usb 4-1: USB disconnect, device number 15 [ 960.119028][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'. [ 963.797148][T12461] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1051'. [ 963.807057][T12461] openvswitch: netlink: Multiple metadata blocks provided [ 963.819372][T12469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1053'. [ 963.828573][T12469] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1053'. [ 963.838169][T12469] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1053'. [ 964.837252][ T6977] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 965.850600][T12483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 970.243281][T12501] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1062'. [ 974.934331][ T7938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 974.944320][ T7938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 974.953711][ T7938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 974.966496][ T7938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 974.974273][ T7938] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 974.985171][ T7938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 975.223618][ T7938] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 975.234729][ T7938] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 975.243855][ T7938] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 975.253219][ T7938] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 975.261351][ T7938] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 975.268857][ T7938] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 975.726394][ T5270] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 975.754962][T12506] chnl_net:caif_netlink_parms(): no params data found [ 975.911665][ T5270] usb 4-1: Using ep0 maxpacket: 8 [ 975.929189][ T5270] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 975.992178][ T5270] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 976.044686][ T5270] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 976.066097][ T5270] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 976.112387][ T5270] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 976.122625][ T5270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.164035][ T5270] hub 4-1:1.0: bad descriptor, ignoring hub [ 976.173577][ T5270] hub 4-1:1.0: probe with driver hub failed with error -5 [ 976.190539][ T5270] cdc_wdm 4-1:1.0: skipping garbage [ 976.199070][ T5270] cdc_wdm 4-1:1.0: skipping garbage [ 976.224446][ T5270] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 976.231463][ T5270] cdc_wdm 4-1:1.0: Unknown control protocol [ 976.303655][ T5772] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.237071][ T7938] Bluetooth: hci3: command tx timeout [ 977.435446][ T7938] Bluetooth: hci8: command tx timeout [ 977.594433][ T5772] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.738209][ T9222] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 978.834228][ T25] usb 4-1: USB disconnect, device number 16 [ 979.087694][T12017] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 979.104323][T12017] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 979.121351][T12017] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 979.130435][T12017] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 979.144599][T12017] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 979.152509][T12017] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 979.230665][T12506] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.242539][T12506] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.255989][T12506] bridge_slave_0: entered allmulticast mode [ 979.263488][T12506] bridge_slave_0: entered promiscuous mode [ 979.274450][T12506] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.281896][T12017] Bluetooth: hci3: command tx timeout [ 979.292048][T12506] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.300098][T12506] bridge_slave_1: entered allmulticast mode [ 979.308767][T12506] bridge_slave_1: entered promiscuous mode [ 979.378035][ T9222] usb 2-1: Using ep0 maxpacket: 32 [ 979.412045][ T5772] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.515403][T12017] Bluetooth: hci8: command tx timeout [ 979.537650][T12509] chnl_net:caif_netlink_parms(): no params data found [ 979.562284][T12506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.579786][T12506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.667437][T12506] team0: Port device team_slave_0 added [ 979.778259][ T5772] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.938380][T12506] team0: Port device team_slave_1 added [ 980.016909][T12506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.035279][ T9222] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 980.053681][T12506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.080315][T12506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.158129][T12506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 980.176876][T12506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.217436][T12506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.262951][T12509] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.274329][T12509] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.292712][T12509] bridge_slave_0: entered allmulticast mode [ 980.301849][T12509] bridge_slave_0: entered promiscuous mode [ 981.108848][T12509] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.117790][T12509] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.147219][ T9222] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 981.196026][T12017] Bluetooth: hci1: command tx timeout [ 981.213169][ T9222] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 981.221513][ T9222] usb 2-1: Product: syz [ 981.225592][T12509] bridge_slave_1: entered allmulticast mode [ 981.226193][ T9222] usb 2-1: Manufacturer: syz [ 981.238085][T12509] bridge_slave_1: entered promiscuous mode [ 981.240332][ T9222] usb 2-1: config 0 descriptor?? [ 981.295136][ T9222] usb 2-1: can't set config #0, error -71 [ 981.355152][T12017] Bluetooth: hci3: command tx timeout [ 981.412699][ T9222] usb 2-1: USB disconnect, device number 20 [ 981.481587][T12506] hsr_slave_0: entered promiscuous mode [ 981.503446][T12506] hsr_slave_1: entered promiscuous mode [ 981.522413][T12506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 981.547206][T12506] Cannot create hsr debugfs directory [ 981.565212][ T5270] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 981.601496][T12017] Bluetooth: hci8: command tx timeout [ 981.715288][ T5270] usb 4-1: Using ep0 maxpacket: 32 [ 981.727636][ T5772] bridge_slave_1: left allmulticast mode [ 981.728186][ T5270] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 981.757513][ T5270] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 981.778424][ T5772] bridge_slave_1: left promiscuous mode [ 981.784184][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.800341][ T5270] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 981.810761][ T5772] bridge_slave_0: left allmulticast mode [ 981.816862][ T5772] bridge_slave_0: left promiscuous mode [ 981.850040][ T5270] usb 4-1: Product: syz [ 981.852247][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.871262][ T5270] usb 4-1: Manufacturer: syz [ 981.902395][ T5270] usb 4-1: SerialNumber: syz [ 981.917812][ T5270] usb 4-1: config 0 descriptor?? [ 981.925834][T12582] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 982.161608][ T5234] usb 4-1: USB disconnect, device number 17 [ 982.820621][ T5772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.842079][ T5772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.868511][ T5772] bond0 (unregistering): Released all slaves [ 982.968473][T12509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 982.980234][T12509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.275170][ T7938] Bluetooth: hci1: command tx timeout [ 983.457798][ T7938] Bluetooth: hci3: command tx timeout [ 983.675533][ T7938] Bluetooth: hci8: command tx timeout [ 984.129289][ T30] audit: type=1326 audit(1727192380.413:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12592 comm="syz.1.1076" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f033777def9 code=0x0 [ 984.757298][T12553] chnl_net:caif_netlink_parms(): no params data found [ 985.530795][ T7938] Bluetooth: hci1: command tx timeout [ 985.713131][T12509] team0: Port device team_slave_0 added [ 985.736355][T12509] team0: Port device team_slave_1 added [ 985.986397][T12611] netlink: 'syz.1.1078': attribute type 7 has an invalid length. [ 987.188306][T12509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.206360][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.299774][T12509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.363161][ T5772] hsr_slave_0: left promiscuous mode [ 987.380432][ T5772] hsr_slave_1: left promiscuous mode [ 987.397446][ T5772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.407445][ T5772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.424113][ T5772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.432951][ T5772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 988.318382][ T7938] Bluetooth: hci1: command tx timeout [ 988.500057][ T5772] veth1_macvtap: left promiscuous mode [ 988.506331][ T5772] veth0_macvtap: left promiscuous mode [ 988.512241][ T5772] veth1_vlan: left promiscuous mode [ 988.518177][ T5772] veth0_vlan: left promiscuous mode [ 990.806020][ T3248] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 992.366716][ T5772] team0 (unregistering): Port device team_slave_1 removed [ 992.448902][ T5772] team0 (unregistering): Port device team_slave_0 removed [ 993.125632][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.215948][T12509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.233713][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.273803][T12509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.369692][T12654] netlink: 'syz.1.1086': attribute type 10 has an invalid length. [ 993.395129][T12654] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1086'. [ 993.407029][T12654] ipvlan1: entered promiscuous mode [ 993.412291][T12654] ipvlan1: entered allmulticast mode [ 993.430965][T12654] veth0_vlan: entered allmulticast mode [ 993.477407][T12654] bridge0: port 3(ipvlan1) entered blocking state [ 993.484116][T12654] bridge0: port 3(ipvlan1) entered disabled state [ 993.492816][T12654] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 993.618221][T12660] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1087'. [ 993.711749][ T5234] IPVS: starting estimator thread 0... [ 993.830432][T12668] IPVS: using max 17 ests per chain, 40800 per kthread [ 993.847454][T12509] hsr_slave_0: entered promiscuous mode [ 993.898312][T12509] hsr_slave_1: entered promiscuous mode [ 993.962997][T12509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 993.996636][T12509] Cannot create hsr debugfs directory [ 994.658814][T12678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'. [ 994.794884][T12506] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.830255][T12553] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.837827][T12553] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.849292][T12553] bridge_slave_0: entered allmulticast mode [ 994.870093][T12553] bridge_slave_0: entered promiscuous mode [ 995.081016][T12506] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.346446][T12553] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.425820][ T5330] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 995.474707][T12553] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.582365][T12553] bridge_slave_1: entered allmulticast mode [ 995.695680][ T5330] usb 2-1: Using ep0 maxpacket: 32 [ 995.712093][ T5330] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 995.748080][T12553] bridge_slave_1: entered promiscuous mode [ 995.847168][ T5330] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 995.917760][ T5330] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 995.935130][ T5330] usb 2-1: Product: syz [ 995.948689][ T5330] usb 2-1: Manufacturer: syz [ 995.965271][ T5330] usb 2-1: SerialNumber: syz [ 995.980985][ T5330] usb 2-1: config 0 descriptor?? [ 995.993946][T12696] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 995.995569][T12506] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.180063][T12553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.497793][ T3248] usb 2-1: USB disconnect, device number 21 [ 996.855273][T12506] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.994721][T12553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.388554][T12553] team0: Port device team_slave_0 added [ 997.446805][T12553] team0: Port device team_slave_1 added [ 997.558820][T12553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.566668][T12553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.592925][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.602202][T12553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.627556][T12553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.634577][T12553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.660573][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.669669][T12553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.936895][T12713] xt_hashlimit: overflow, rate too high: 0 [ 998.379153][ T5772] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.706153][ T3248] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 998.793686][ T5772] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.842509][ T3248] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.853128][ T3248] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1000.302376][ T3248] usb 4-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.00 [ 1000.312178][ T3248] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.328217][ T3248] usb 4-1: config 0 descriptor?? [ 1000.347854][ T3248] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1000.374017][T12553] hsr_slave_0: entered promiscuous mode [ 1000.396500][T12553] hsr_slave_1: entered promiscuous mode [ 1000.412150][T12553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1000.430616][T12553] Cannot create hsr debugfs directory [ 1000.482786][ T5772] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.583338][ T5772] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.646548][T12506] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1000.728811][T12506] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1000.759206][T12506] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1000.869403][T12506] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1001.238555][ T5772] bridge_slave_1: left allmulticast mode [ 1001.246233][ T5772] bridge_slave_1: left promiscuous mode [ 1001.252230][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.262958][ T5772] bridge_slave_0: left allmulticast mode [ 1001.269093][ T5772] bridge_slave_0: left promiscuous mode [ 1001.276379][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.617287][ T5271] usb 4-1: USB disconnect, device number 19 [ 1001.895235][ T5330] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1002.055375][ T5330] usb 2-1: Using ep0 maxpacket: 32 [ 1002.104893][ T5330] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1002.124080][ T5330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1002.155340][ T5772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1002.172677][ T5330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1002.192802][ T5772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1002.211545][ T5330] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1002.224942][ T5330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1002.239722][ T5330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1002.248959][ T5772] bond0 (unregistering): Released all slaves [ 1002.267436][ T5330] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1002.277397][ T5330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.286540][ T5330] usb 2-1: Product: syz [ 1002.290862][ T5330] usb 2-1: Manufacturer: syz [ 1002.295684][ T5330] usb 2-1: SerialNumber: syz [ 1002.316835][ T5330] usb 2-1: config 0 descriptor?? [ 1002.547719][ T5270] usb 2-1: USB disconnect, device number 22 [ 1002.800516][ T5772] hsr_slave_0: left promiscuous mode [ 1002.817716][ T5772] hsr_slave_1: left promiscuous mode [ 1002.831063][ T5772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.838839][ T5772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.849930][ T5772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.858072][ T5772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.882707][ T5772] veth1_macvtap: left promiscuous mode [ 1002.890775][ T5772] veth0_macvtap: left promiscuous mode [ 1002.896653][ T5772] veth1_vlan: left promiscuous mode [ 1002.902112][ T5772] veth0_vlan: left promiscuous mode [ 1003.468514][T12742] xt_hashlimit: size too large, truncated to 1048576 [ 1004.802600][ T5772] team0 (unregistering): Port device team_slave_1 removed [ 1004.944286][ T5772] team0 (unregistering): Port device team_slave_0 removed [ 1005.441798][ T7938] Bluetooth: hci6: command 0x0405 tx timeout [ 1007.112828][T12506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.243035][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1098'. [ 1008.016357][T12506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1008.077409][T12066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.084687][T12066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1008.655367][T12506] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1008.666338][T12506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1010.439415][T12066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.446610][T12066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.679260][T12553] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1011.667261][T12553] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1011.687699][T12553] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1012.035124][ T3248] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1012.321720][T12506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1012.383099][T12017] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1012.390863][ T3248] usb 2-1: Using ep0 maxpacket: 32 [ 1012.404515][ T3248] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1012.419555][ T3248] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1012.431290][T12017] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1012.441644][ T3248] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1012.453841][T12017] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1012.497503][T12553] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1012.504789][ T3248] usb 2-1: Product: syz [ 1012.509111][ T3248] usb 2-1: Manufacturer: syz [ 1012.514181][ T3248] usb 2-1: SerialNumber: syz [ 1012.523036][T12017] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1012.534508][T12017] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1012.550071][T12017] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1012.574858][ T3248] usb 2-1: config 0 descriptor?? [ 1012.581126][T12766] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1012.773091][T12509] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1012.853244][ T3248] usb 2-1: USB disconnect, device number 23 [ 1012.866966][T12509] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1012.990219][ T5772] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.009974][T12509] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1013.024315][T12509] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1013.077983][ T5772] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.187704][ T5772] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.328167][ T5772] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.410822][T12553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.493950][T12506] veth0_vlan: entered promiscuous mode [ 1013.582192][T12506] veth1_vlan: entered promiscuous mode [ 1013.678160][T12553] 8021q: adding VLAN 0 to HW filter on device team0 [ 1013.740416][T12768] chnl_net:caif_netlink_parms(): no params data found [ 1013.762315][ T5772] bridge_slave_1: left allmulticast mode [ 1013.769893][ T5772] bridge_slave_1: left promiscuous mode [ 1013.776065][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.799100][ T5772] bridge_slave_0: left allmulticast mode [ 1013.804935][ T5772] bridge_slave_0: left promiscuous mode [ 1013.825817][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.849194][ T5772] bridge_slave_1: left allmulticast mode [ 1013.854924][ T5772] bridge_slave_1: left promiscuous mode [ 1013.861349][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.874506][ T5772] bridge_slave_0: left allmulticast mode [ 1013.881827][ T5772] bridge_slave_0: left promiscuous mode [ 1013.888222][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.636846][ T7938] Bluetooth: hci4: command tx timeout [ 1014.879301][ T5772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.891583][ T5772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.903425][ T5772] bond0 (unregistering): Released all slaves [ 1014.952478][ T5271] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1015.074514][ T5772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.087639][ T5772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.099228][ T5772] bond0 (unregistering): Released all slaves [ 1015.125403][ T5271] usb 2-1: Using ep0 maxpacket: 8 [ 1015.134062][ T5271] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 1015.153571][ T5271] usb 2-1: config 0 has no interface number 0 [ 1015.160804][ T7720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.165305][ T5271] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1015.168022][ T7720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1015.201086][ T5271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.215486][ T5271] usb 2-1: Product: syz [ 1015.219794][ T5271] usb 2-1: Manufacturer: syz [ 1015.224461][ T5271] usb 2-1: SerialNumber: syz [ 1015.236476][ T7720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.237556][ T5271] usb 2-1: config 0 descriptor?? [ 1015.243665][ T7720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.412278][ T5271] msi2500 2-1:0.246: Registered as swradio16 [ 1015.425310][ T5271] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 1015.442456][T12509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1015.471859][ T5271] usb 2-1: USB disconnect, device number 24 [ 1015.726692][T12509] 8021q: adding VLAN 0 to HW filter on device team0 [ 1015.733948][T12768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.744110][T12768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.764946][T12768] bridge_slave_0: entered allmulticast mode [ 1015.772319][T12768] bridge_slave_0: entered promiscuous mode [ 1015.783164][T12506] veth0_macvtap: entered promiscuous mode [ 1015.804306][T12768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.825288][T12768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.832648][T12768] bridge_slave_1: entered allmulticast mode [ 1015.841999][T12768] bridge_slave_1: entered promiscuous mode [ 1015.853538][T12506] veth1_macvtap: entered promiscuous mode [ 1015.951073][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.958324][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.121486][T12768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.141090][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.148330][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.172741][T12824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1104'. [ 1016.220841][T12824] veth3: entered allmulticast mode [ 1016.253694][T12768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.441836][T12768] team0: Port device team_slave_0 added [ 1016.465940][ T5772] hsr_slave_0: left promiscuous mode [ 1016.535428][ T5772] hsr_slave_1: left promiscuous mode [ 1016.544055][ T5772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.556681][ T5772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.579038][ T5772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.596620][ T5772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.619340][ T5772] hsr_slave_0: left promiscuous mode [ 1016.636917][ T5772] hsr_slave_1: left promiscuous mode [ 1016.645978][ T5772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.653470][ T5772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.675517][ T5772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.683096][ T5772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.722022][ T7938] Bluetooth: hci4: command tx timeout [ 1016.738967][ T5772] veth1_macvtap: left promiscuous mode [ 1016.744537][ T5772] veth0_macvtap: left promiscuous mode [ 1016.819005][T12839] xt_hashlimit: size too large, truncated to 1048576 [ 1017.575568][ T5772] veth1_vlan: left promiscuous mode [ 1017.581066][ T5772] veth0_vlan: left promiscuous mode [ 1017.619099][ T5772] veth1_macvtap: left promiscuous mode [ 1017.624695][ T5772] veth0_macvtap: left promiscuous mode [ 1017.635822][ T5772] veth1_vlan: left promiscuous mode [ 1017.641291][ T5772] veth0_vlan: left promiscuous mode [ 1018.759988][ T5772] team0 (unregistering): Port device team_slave_1 removed [ 1018.797867][ T7938] Bluetooth: hci4: command tx timeout [ 1018.905790][ T5772] team0 (unregistering): Port device team_slave_0 removed [ 1020.652981][ T5772] team0 (unregistering): Port device team_slave_1 removed [ 1020.791683][ T5772] team0 (unregistering): Port device team_slave_0 removed [ 1020.882405][ T7938] Bluetooth: hci4: command tx timeout [ 1021.497317][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'. [ 1022.463121][T12768] team0: Port device team_slave_1 added [ 1022.593894][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.613059][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.678313][T12506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1022.693095][T12851] loop7: detected capacity change from 0 to 16384 [ 1022.773170][T12768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.795128][T12768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.871734][T12768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.905588][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.926685][T12864] loop7: detected capacity change from 16384 to 16320 [ 1022.947468][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.009969][T12506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1023.050355][T12768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.098681][T12768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.176211][T12768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.279617][T12506] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.303143][T12506] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.335081][T12506] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.344538][T12506] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.479086][T12768] hsr_slave_0: entered promiscuous mode [ 1023.521422][T12768] hsr_slave_1: entered promiscuous mode [ 1023.573887][T12553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.741652][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1110'. [ 1023.937720][T12553] veth0_vlan: entered promiscuous mode [ 1024.072204][T12553] veth1_vlan: entered promiscuous mode [ 1024.279346][ T7728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.291004][T12509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.297976][ T7728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.581811][T12553] veth0_macvtap: entered promiscuous mode [ 1024.666089][T12553] veth1_macvtap: entered promiscuous mode [ 1024.699674][ T7712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.723478][ T7712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.806510][T12509] veth0_vlan: entered promiscuous mode [ 1024.910082][T12553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.923950][T12553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.935893][T12553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.946544][T12553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.958034][T12553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.982589][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1064'. [ 1025.026877][T12509] veth1_vlan: entered promiscuous mode [ 1025.073092][T12553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.117427][T12553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.153026][T12553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.185110][T12553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.221056][T12553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1025.270389][T12553] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.289443][T12553] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.307760][T12553] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.341365][T12553] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.441182][T12509] veth0_macvtap: entered promiscuous mode [ 1025.549471][T12509] veth1_macvtap: entered promiscuous mode [ 1025.555434][ T3248] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1025.690237][T12768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1025.717801][ T3248] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1025.732358][T12768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1025.739714][ T3248] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.765611][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.778021][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.788884][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.802811][ T3248] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 1025.814402][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.825769][ T3248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.833822][ T3248] usb 2-1: Product: syz [ 1025.838940][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.850507][ T3248] usb 2-1: Manufacturer: syz [ 1025.858682][ T3248] usb 2-1: SerialNumber: syz [ 1025.863436][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.876996][T12509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.885740][ T3248] usb 2-1: config 0 descriptor?? [ 1025.901662][ T3248] ims_pcu 2-1:0.0: Missing CDC union descriptor [ 1025.919264][ T5772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1025.936761][T12768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1025.948671][ T5772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.957763][ T3248] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 1025.979153][T12768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1026.019418][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.375734][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.641124][ T25] usb 2-1: USB disconnect, device number 25 [ 1026.670179][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.810425][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.835099][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.851971][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.919102][T12509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.961741][T12509] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.972164][T12509] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.981957][T12509] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.991107][T12509] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.015129][ T7712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.023491][ T7712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.087209][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1113'. [ 1028.029812][ T7728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.061110][ T7728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.617686][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.681720][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.826643][T12768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.320902][T12768] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.349136][ T1833] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.356369][ T1833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.370660][ T7737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.377837][ T7737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.483673][T12957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1031.089121][ T30] audit: type=1326 audit(1727192427.373:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12960 comm="syz.0.1065" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3eaa97def9 code=0x0 [ 1031.380280][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1119'. [ 1031.504513][T12768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.622709][T12768] veth0_vlan: entered promiscuous mode [ 1031.645124][ T5271] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1031.663488][T12768] veth1_vlan: entered promiscuous mode [ 1031.752986][T12768] veth0_macvtap: entered promiscuous mode [ 1031.774570][T12768] veth1_macvtap: entered promiscuous mode [ 1031.807547][ T5271] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1031.828020][ T5271] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1031.829322][T12768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.857853][ T5271] usb 2-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 1031.869362][ T5271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.881645][T12768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.889206][T12974] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1031.919862][T12768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.945107][T12768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.953234][ T5271] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1032.014070][T12768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.063314][T12768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.102903][T12768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.135552][T12768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.160481][T12768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.182175][T12768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.199757][ T5330] usb 2-1: USB disconnect, device number 26 [ 1032.247729][T12768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.279441][T12768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.294459][T12768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.304880][T12768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.317859][T12768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.327827][T12768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.338438][T12768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.350376][T12768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.379285][T12768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.390027][ T5271] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1032.403535][T12768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.513297][T12768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.532494][T12768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.651611][ T5271] usb 1-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1032.693016][ T5271] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.766078][ T5271] usb 1-1: config 16 has no interfaces? [ 1033.027862][ T5271] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1033.181566][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.504319][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.676591][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.919886][ T5294] usb 1-1: USB disconnect, device number 11 [ 1035.135361][ T5772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.171034][ T5772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.409420][ T5294] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1038.100995][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1038.164043][ T5294] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1038.173992][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1038.183981][ T5294] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1038.194522][ T5294] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1038.205669][ T5294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.265862][ T5294] usb 2-1: config 0 descriptor?? [ 1038.297878][ T5294] usb 2-1: can't set config #0, error -71 [ 1038.326898][ T5294] usb 2-1: USB disconnect, device number 27 [ 1038.589384][T13029] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1038.712919][T13032] binder: 13025:13032 ioctl c0306201 0 returned -14 [ 1038.945334][ T3248] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1039.031501][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1132'. [ 1039.235356][ T3248] usb 2-1: Using ep0 maxpacket: 16 [ 1039.247773][ T3248] usb 2-1: config 1 has an invalid interface descriptor of length 7, skipping [ 1039.261529][ T3248] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1039.328863][T13037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1134'. [ 1039.338280][T13037] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1134'. [ 1039.347885][T13037] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1134'. [ 1039.609015][ T3248] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1039.620448][ T3248] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1040.015254][ T3248] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1040.024470][ T3248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.043510][ T3248] usb 2-1: Product: syz [ 1040.116553][ T3248] usb 2-1: Manufacturer: syz [ 1040.121230][ T3248] usb 2-1: SerialNumber: syz [ 1041.485802][ T5294] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1043.158237][ T5294] usb 1-1: Using ep0 maxpacket: 16 [ 1043.189282][ T5294] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1043.336556][ T5294] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1043.474926][ T5294] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1043.778409][ T3248] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1043.815586][ T3248] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1043.827052][ T3248] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 1043.912356][ T5294] usb 1-1: string descriptor 0 read error: -71 [ 1043.919070][ T5294] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1043.926192][ T3248] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1043.928766][ T5294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.157522][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'. [ 1044.165494][ T3248] usb 2-1: USB disconnect, device number 28 [ 1044.228417][T13002] udevd[13002]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1044.268658][T13069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1144'. [ 1044.278088][T13069] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1144'. [ 1044.287502][T13069] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1144'. [ 1045.080804][ T5294] usb 1-1: can't set config #1, error -71 [ 1045.092013][ T5294] usb 1-1: USB disconnect, device number 12 [ 1045.265293][T13073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1045.786488][ T5294] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1046.648058][T12017] Bluetooth: hci0: command 0x0406 tx timeout [ 1046.793355][T13086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1148'. [ 1046.803124][T13086] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1148'. [ 1046.812370][T13086] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1148'. [ 1047.553076][ T30] audit: type=1326 audit(1727192443.823:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13083 comm="syz.4.1149" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa22097def9 code=0x0 [ 1049.345288][ T3248] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1049.776584][ T5294] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1050.026868][ T3248] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.044456][ T3248] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1050.055492][ T3248] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1050.068835][ T3248] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1050.079983][ T3248] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 1050.092386][ T3248] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 1050.155553][ T3248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.186060][ T3248] usb 2-1: Product: syz [ 1050.205635][ T3248] usb 2-1: Manufacturer: syz [ 1050.210299][ T3248] usb 2-1: SerialNumber: syz [ 1050.243672][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'. [ 1050.266891][ T3248] usb 2-1: config 0 descriptor?? [ 1050.283924][ T5294] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.295123][ T5294] usb 1-1: New USB device found, idVendor=093a, idProduct=2620, bcdDevice=7e.68 [ 1050.304859][ T5294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.319389][ T5294] usb 1-1: config 0 descriptor?? [ 1050.330222][ T3248] usb 2-1: ucan: probing device on interface #0 [ 1050.344750][ T5294] gspca_main: gspca_pac7302-2.14.0 probing 093a:2620 [ 1051.322794][ T3248] usb 2-1: ucan: invalid endpoint configuration [ 1051.331542][ T3248] usb 2-1: ucan: probe failed; try to update the device firmware [ 1051.352504][ T3248] usb 2-1: USB disconnect, device number 29 [ 1051.755209][ T5294] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1051.762136][ T5294] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1051.780262][ T5294] usb 1-1: USB disconnect, device number 14 [ 1051.938199][T13130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1052.712592][T13137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1163'. [ 1052.722005][T13137] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1163'. [ 1052.732449][T13137] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1163'. [ 1054.588273][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.037587][T13167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'. [ 1057.089435][T13164] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1057.716210][T13177] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1058.377039][T13191] @ÿ: renamed from veth0_vlan (while UP) [ 1060.697574][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1191'. [ 1061.353298][T13236] netlink: 'syz.3.1201': attribute type 7 has an invalid length. [ 1063.571138][T13268] netlink: 'syz.3.1210': attribute type 4 has an invalid length. [ 1063.695121][T13272] vlan0: entered promiscuous mode [ 1063.877772][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1216'. [ 1066.123200][ T30] audit: type=1326 audit(1727192462.403:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13290 comm="syz.2.1219" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8f257def9 code=0x0 [ 1066.336567][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1066.353943][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1066.394362][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1066.412654][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1066.433734][T13306] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1066.481222][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1066.500230][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1066.515052][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1066.522607][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1066.540388][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1066.671515][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1066.800416][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1066.808097][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1066.915219][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1066.944513][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1066.952145][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1066.959908][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1066.969062][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1066.979177][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1066.986925][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1066.994581][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.035434][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.043273][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.051071][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.059641][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.068008][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.076077][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.086974][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.094707][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.102414][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.235373][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.243113][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.250837][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.258508][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.266250][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.275434][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.285539][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.293269][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.300976][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.315391][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.323111][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.330822][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.341528][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.349274][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.356967][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.364648][ T5272] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1067.447314][ T5272] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1067.493938][T13307] overlayfs: conflicting lowerdir path [ 1072.163800][T13344] netlink: 'syz.3.1237': attribute type 2 has an invalid length. [ 1072.202327][T13344] netlink: 'syz.3.1237': attribute type 1 has an invalid length. [ 1072.485227][T13358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1072.567978][ T7938] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1072.569808][ T7938] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1072.570613][ T7938] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1072.571920][ T7938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1072.572373][ T7938] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1072.572605][ T7938] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1072.779274][T13359] erofs: Unknown parameter '/dev/vga_arbiter' [ 1073.525394][ T5294] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1073.839443][ T5294] usb 1-1: Using ep0 maxpacket: 8 [ 1073.860314][T13355] chnl_net:caif_netlink_parms(): no params data found [ 1073.875210][ T8] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1073.971303][ T30] audit: type=1326 audit(1727192470.263:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13373 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f257def9 code=0x7ffc0000 [ 1074.037397][ T5294] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1074.046774][ T5294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.054924][ T5294] usb 1-1: Product: syz [ 1074.060611][ T5294] usb 1-1: Manufacturer: syz [ 1074.065381][ T5294] usb 1-1: SerialNumber: syz [ 1074.090607][ T30] audit: type=1326 audit(1727192470.373:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13373 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f257def9 code=0x7ffc0000 [ 1074.165346][ T30] audit: type=1326 audit(1727192470.403:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13373 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc8f257def9 code=0x7ffc0000 [ 1074.195456][ T30] audit: type=1326 audit(1727192470.403:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13373 comm="syz.2.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f257def9 code=0x7ffc0000 [ 1074.245600][ T8] usb 4-1: config 4 has an invalid interface number: 231 but max is 0 [ 1074.266500][ T8] usb 4-1: config 4 has no interface number 0 [ 1074.284062][ T8] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1074.293489][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.302355][ T8] usb 4-1: Product: syz [ 1074.307207][ T8] usb 4-1: Manufacturer: syz [ 1074.345236][ T8] usb 4-1: SerialNumber: syz [ 1074.389119][ T8] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1074.445687][T13346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.468913][T13355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.494990][T13346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.507417][ T5294] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1074.576074][T13355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.610641][T13355] bridge_slave_0: entered allmulticast mode [ 1074.636916][ T7938] Bluetooth: hci5: command tx timeout [ 1074.969110][T13386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.003645][T13355] bridge_slave_0: entered promiscuous mode [ 1075.022520][T13355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.030331][T13355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.043363][T13355] bridge_slave_1: entered allmulticast mode [ 1075.095963][T13386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.867637][T13355] bridge_slave_1: entered promiscuous mode [ 1076.738342][ T8] vp7045: USB control message 'out' went wrong. [ 1076.750121][ T8] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1076.760925][ T8] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1076.789266][ T7938] Bluetooth: hci5: command tx timeout [ 1076.806771][ T5271] usb 1-1: USB disconnect, device number 15 [ 1076.816447][ T5271] usblp0: removed [ 1076.901379][T13355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1077.140303][ T2563] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.564834][T13355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.876342][ T7938] Bluetooth: hci5: command tx timeout [ 1078.897920][ T5294] usb 4-1: USB disconnect, device number 20 [ 1079.028367][ T2563] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.095142][ T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1079.112401][T13355] team0: Port device team_slave_0 added [ 1079.365360][T13355] team0: Port device team_slave_1 added [ 1079.725787][ T2563] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.747605][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.761771][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1079.796229][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.844757][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1079.924396][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.934894][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1079.949659][T13355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.956927][T13355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.983476][T13355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1080.000228][T13355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1080.007323][T13355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1080.033513][T13355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1080.057621][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.069197][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1080.079662][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.090585][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1080.101191][ T8] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1080.135454][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1080.143960][ T8] usb 1-1: SerialNumber: syz [ 1080.188066][ T2563] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.289517][T13355] hsr_slave_0: entered promiscuous mode [ 1080.301868][T13355] hsr_slave_1: entered promiscuous mode [ 1080.320386][T13355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1080.329323][T13355] Cannot create hsr debugfs directory [ 1080.961716][ T7938] Bluetooth: hci5: command tx timeout [ 1080.977115][ T8] usb 1-1: USB disconnect, device number 16 [ 1081.193519][ T2563] bridge_slave_1: left allmulticast mode [ 1081.216990][ T2563] bridge_slave_1: left promiscuous mode [ 1081.222841][ T2563] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.246499][ T2563] bridge_slave_0: left promiscuous mode [ 1081.252300][ T2563] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.062716][T11949] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1083.550385][T11949] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1083.566028][T11949] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.696601][T11949] usb 3-1: config 0 has no interface number 0 [ 1083.726561][T11949] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1083.791639][T11949] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1083.869635][T11949] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1083.878978][T11949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.891453][T11949] usb 3-1: Product: syz [ 1083.901226][T11949] usb 3-1: Manufacturer: syz [ 1083.911412][T11949] usb 3-1: SerialNumber: syz [ 1083.951753][T11949] usb 3-1: config 0 descriptor?? [ 1084.395105][T11949] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1084.405395][ T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1084.426021][T11949] usb 3-1: USB disconnect, device number 15 [ 1084.487673][ T2563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.504370][ T2563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1084.516356][ T2563] bond0 (unregistering): Released all slaves [ 1084.899191][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 1084.939810][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.956660][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 1084.966809][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.013416][ T8] usb 1-1: config 0 descriptor?? [ 1085.383650][ T8] cdc_subset 1-1:0.0: probe with driver cdc_subset failed with error -22 [ 1085.736694][ T8] usb 1-1: USB disconnect, device number 17 [ 1090.141349][ T2563] hsr_slave_0: left promiscuous mode [ 1090.147340][ T2563] hsr_slave_1: left promiscuous mode [ 1090.153269][ T2563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.160844][ T2563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.437116][ T2563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.444592][ T2563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.548904][ T2563] veth1_macvtap: left promiscuous mode [ 1090.637943][ T2563] veth0_macvtap: left promiscuous mode [ 1090.654047][ T2563] veth1_vlan: left promiscuous mode [ 1090.697211][T13501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1090.700753][ T2563] veth0_vlan: left promiscuous mode [ 1094.921969][T13522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 1095.903058][ T2563] team0 (unregistering): Port device team_slave_1 removed [ 1096.022258][ T2563] team0 (unregistering): Port device team_slave_0 removed [ 1096.524120][ T2563] bridge_slave_0 (unregistering): left allmulticast mode [ 1097.601386][T13530] netlink: 'syz.2.1288': attribute type 7 has an invalid length. [ 1097.612146][ T5223] Bluetooth: hci8: command 0x0406 tx timeout [ 1097.618429][ T5223] Bluetooth: hci3: command 0x0406 tx timeout [ 1097.890997][T13550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1098.061615][T13355] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1098.500930][T13355] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1099.688505][T13355] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1099.768465][T13355] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1099.847948][ T5222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1099.862332][ T5222] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1099.871052][ T5222] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1099.884023][ T5222] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1099.891835][ T5222] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1099.899328][ T5222] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1100.349687][ T2563] IPVS: stop unused estimator thread 0... [ 1100.942997][T13355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1101.154176][T13355] 8021q: adding VLAN 0 to HW filter on device team0 [ 1101.223219][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.230387][ T5772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1101.327826][T13558] chnl_net:caif_netlink_parms(): no params data found [ 1101.357011][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.364114][ T5772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1102.020303][ T5222] Bluetooth: hci0: command tx timeout [ 1102.176898][T13355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1102.210879][T12017] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1102.219706][T13355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1102.222406][T12017] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1102.242471][T12017] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1102.251877][T12017] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1102.259743][T12017] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1102.267243][T12017] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1103.223593][T12017] Bluetooth: hci1: command 0x0406 tx timeout [ 1103.818129][T13558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.831840][T13558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.840874][T13558] bridge_slave_0: entered allmulticast mode [ 1103.871429][T13558] bridge_slave_0: entered promiscuous mode [ 1103.976373][T13558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.990277][T13558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.021496][T13558] bridge_slave_1: entered allmulticast mode [ 1104.076289][T13558] bridge_slave_1: entered promiscuous mode [ 1104.095582][ T7938] Bluetooth: hci0: command tx timeout [ 1104.283899][T13558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.475385][ T7938] Bluetooth: hci6: command tx timeout [ 1104.563018][T12066] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.306269][T12066] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.423388][T13558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.568608][T12066] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.152308][T12066] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.175249][T12017] Bluetooth: hci0: command tx timeout [ 1106.350467][T13558] team0: Port device team_slave_0 added [ 1106.372143][T13558] team0: Port device team_slave_1 added [ 1106.432279][T13558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.439552][T13558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.466699][T13558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.490494][T13558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.498073][T13558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.525104][T13558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.543719][T13355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1106.554239][T13598] chnl_net:caif_netlink_parms(): no params data found [ 1106.561475][T12017] Bluetooth: hci6: command tx timeout [ 1106.713107][T12066] bridge_slave_1: left allmulticast mode [ 1106.719445][T12066] bridge_slave_1: left promiscuous mode [ 1106.733875][T12066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.743688][T12066] bridge_slave_0: left allmulticast mode [ 1106.756713][T12066] bridge_slave_0: left promiscuous mode [ 1106.762507][T12066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.381384][T12066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1107.393743][T12066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1107.405872][T12066] bond0 (unregistering): Released all slaves [ 1107.421842][T13558] hsr_slave_0: entered promiscuous mode [ 1107.428560][T13558] hsr_slave_1: entered promiscuous mode [ 1107.434803][T13558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1107.449418][T13558] Cannot create hsr debugfs directory [ 1107.501773][T13598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.511686][T13598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.537418][T13598] bridge_slave_0: entered allmulticast mode [ 1107.555723][T13598] bridge_slave_0: entered promiscuous mode [ 1107.629590][T13598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.640319][T13598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.650985][T13598] bridge_slave_1: entered allmulticast mode [ 1107.661111][T13598] bridge_slave_1: entered promiscuous mode [ 1107.726528][T13598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.740327][T13598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.818920][T13598] team0: Port device team_slave_0 added [ 1107.841814][T13598] team0: Port device team_slave_1 added [ 1107.874537][T13598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.881883][T13598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.908921][T13598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.938692][T13355] veth0_vlan: entered promiscuous mode [ 1107.959542][T13598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.969060][T13598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.996079][T13598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1108.049055][T13598] hsr_slave_0: entered promiscuous mode [ 1108.063944][T13598] hsr_slave_1: entered promiscuous mode [ 1108.074640][T13598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1108.090433][T13598] Cannot create hsr debugfs directory [ 1108.151522][T12066] hsr_slave_0: left promiscuous mode [ 1108.161225][T12066] hsr_slave_1: left promiscuous mode [ 1108.169780][T12066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1108.178581][T12066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.186990][T12066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1108.194594][T12066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1108.236047][T12017] Bluetooth: hci0: command tx timeout [ 1108.245600][T12066] veth1_macvtap: left promiscuous mode [ 1108.252632][T12066] veth0_macvtap: left promiscuous mode [ 1108.258972][T12066] veth1_vlan: left promiscuous mode [ 1108.264429][T12066] @ÿ: left promiscuous mode [ 1108.645365][T12017] Bluetooth: hci6: command tx timeout [ 1110.209389][T12066] team0 (unregistering): Port device team_slave_1 removed [ 1110.331200][T12066] team0 (unregistering): Port device team_slave_0 removed [ 1110.727417][T12017] Bluetooth: hci6: command tx timeout [ 1112.274518][T13355] veth1_vlan: entered promiscuous mode [ 1112.571554][T13558] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.773230][T13558] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.905927][T13355] veth0_macvtap: entered promiscuous mode [ 1113.072454][T13558] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.169472][T13355] veth1_macvtap: entered promiscuous mode [ 1113.226604][T13558] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.250775][T13739] usb usb5: usbfs: process 13739 (syz.2.1334) did not claim interface 0 before use [ 1113.286032][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1113.305269][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.327130][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1113.343493][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.354477][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1113.375048][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.396520][T13355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1113.437043][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.473283][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.495086][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.516737][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.529219][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.540032][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.560657][T13355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1113.623189][T13355] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.636375][T13355] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.645264][T13355] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.654005][T13355] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.790494][T12066] bridge_slave_1: left allmulticast mode [ 1113.810795][T12066] bridge_slave_1: left promiscuous mode [ 1113.834650][T12066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.856910][T12066] bridge_slave_0: left allmulticast mode [ 1113.884730][T12066] bridge_slave_0: left promiscuous mode [ 1113.895655][T12066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.144371][T13774] usb usb8: usbfs: process 13774 (syz.2.1341) did not claim interface 0 before use [ 1115.369273][T12066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1115.382089][T12066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1115.394188][T12066] bond0 (unregistering): Released all slaves [ 1115.454614][T13759] pim6reg: entered allmulticast mode [ 1115.695823][T13784] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1115.998822][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.330977][T13558] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1116.485649][ T5772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.504831][ T5772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.536720][T13558] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1116.566519][T13558] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1116.708911][T13795] openvswitch: netlink: Actions may not be safe on all matching packets [ 1116.862886][T13558] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1116.935127][ T5270] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1116.993602][T12066] hsr_slave_0: left promiscuous mode [ 1117.000919][T12066] hsr_slave_1: left promiscuous mode [ 1117.030989][T12066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1117.043737][T12066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1117.061345][T12066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1117.069170][T12066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1117.097598][T12066] veth1_macvtap: left promiscuous mode [ 1117.103292][T12066] veth0_macvtap: left promiscuous mode [ 1117.109403][T12066] veth1_vlan: left promiscuous mode [ 1117.114854][T12066] veth0_vlan: left promiscuous mode [ 1117.126825][ T5270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.145775][ T5270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.165308][ T5270] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1117.184714][ T5270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.208616][ T5270] usb 3-1: config 0 descriptor?? [ 1117.644426][ T5270] magicmouse 0003:05AC:0265.0006: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 1117.844314][ T6977] usb 3-1: USB disconnect, device number 16 [ 1117.923082][T12066] team0 (unregistering): Port device team_slave_1 removed [ 1117.986627][T12066] team0 (unregistering): Port device team_slave_0 removed [ 1118.716285][ T1300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.732267][ T1300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1119.691408][T13598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1119.893784][T13598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1119.970112][T13598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1120.394533][T13598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1120.784085][T13558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.804238][T13558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.843899][T13558] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1120.854424][T13558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1120.867432][ T2563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.874661][ T2563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1120.917054][ T2563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.924263][ T2563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1121.040091][T13598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1121.057577][T13598] 8021q: adding VLAN 0 to HW filter on device team0 [ 1121.077291][ T7737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.084521][ T7737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.170053][ T7737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.177355][ T7737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1121.303143][T13598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1121.323927][T13598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1121.372110][T13845] Bluetooth: MGMT ver 1.23 [ 1121.476050][T13558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1122.291278][T13598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1122.326551][T13598] veth0_vlan: entered promiscuous mode [ 1122.432279][T13598] veth1_vlan: entered promiscuous mode [ 1123.202608][T13598] veth0_macvtap: entered promiscuous mode [ 1123.249292][T13598] veth1_macvtap: entered promiscuous mode [ 1123.435502][T12017] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1123.446207][ T7938] Bluetooth: hci0: command 0x0401 tx timeout [ 1123.856983][T13878] coredump: 254(syz.2.1367): written to core: VMAs: 45, size 99909632; core: 65504954 bytes, pos 99917824 [ 1124.395566][T13598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.442986][T13891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1124.643816][T13598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.783887][T13598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.806001][T13598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.005117][T13598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1125.027195][T13598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.111380][T13899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1371'. [ 1125.120925][T13899] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1371'. [ 1125.131100][T13899] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1371'. [ 1125.717211][T13598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1125.839356][T13598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.010080][T13598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.047680][T13598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.078230][T13598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.153445][T13598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.190127][T13598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.246954][T13598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1126.446801][T13598] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.506574][T13598] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.550235][T13598] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.593221][T13598] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.652336][T13558] veth0_vlan: entered promiscuous mode [ 1126.829388][T13558] veth1_vlan: entered promiscuous mode [ 1127.662057][T13558] veth0_macvtap: entered promiscuous mode [ 1127.729536][T13558] veth1_macvtap: entered promiscuous mode [ 1127.842848][ T5772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1127.892789][ T5772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1127.927419][T13558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1127.968574][T13558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.987076][T13558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.008595][T13558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.023201][T13558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.067382][T13558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.112108][T13558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.166371][T13558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.211742][T13558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.353833][ T5772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.365082][T13558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1128.412073][ T5772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.495100][T13558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.644948][ C0] sched: DL replenish lagged too much [ 1139.095112][T13558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.506424][T13558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.645193][T13558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.785287][T13558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.907891][T13558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.985203][T13558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.066650][T13558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1140.354175][T13558] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.404523][ T7938] Bluetooth: hci4: command 0x0406 tx timeout [ 1140.451748][T13558] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.523018][T13558] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.580309][T13558] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.464455][ T5222] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1141.490150][ T5222] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1141.499083][ T5222] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1141.509325][ T5222] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1141.517427][ T5222] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1141.524797][ T5222] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1141.673030][ T5223] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1141.689102][ T5223] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1141.697585][ T5223] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1141.705717][ T5223] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1141.714805][ T5223] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1141.722334][ T5223] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1141.783844][T13968] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1141.805245][T13968] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1141.814269][T13968] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1141.824314][T13968] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1141.834689][T13968] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1141.844051][T13968] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1145.021453][ T5223] Bluetooth: hci8: command tx timeout [ 1147.035722][T12017] Bluetooth: hci8: command tx timeout [ 1147.044020][ T5223] Bluetooth: hci9: command tx timeout [ 1147.050202][ T7938] Bluetooth: hci3: command tx timeout [ 1149.122825][T12017] Bluetooth: hci8: command tx timeout [ 1149.128468][ T7938] Bluetooth: hci3: command tx timeout [ 1149.133928][ T7938] Bluetooth: hci9: command tx timeout [ 1151.196242][ T7938] Bluetooth: hci9: command tx timeout [ 1151.201786][ T7938] Bluetooth: hci8: command tx timeout [ 1151.207582][T12017] Bluetooth: hci3: command tx timeout [ 1153.275155][T12017] Bluetooth: hci9: command tx timeout [ 1153.280671][ T7938] Bluetooth: hci3: command tx timeout [ 1156.605837][T12017] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1156.619888][T12017] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1156.628535][T12017] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1156.643195][T12017] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1156.655556][T12017] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1156.664175][T12017] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1158.715070][T12017] Bluetooth: hci1: command tx timeout [ 1159.010770][ T7938] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1159.022696][ T7938] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1159.031101][ T7938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1159.039317][ T7938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1159.049377][ T7938] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1159.056942][ T7938] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1160.795490][ T7938] Bluetooth: hci1: command tx timeout [ 1161.117515][ T7938] Bluetooth: hci4: command tx timeout [ 1162.875132][ T7938] Bluetooth: hci1: command tx timeout [ 1163.195050][ T7938] Bluetooth: hci4: command tx timeout [ 1164.955218][ T7938] Bluetooth: hci1: command tx timeout [ 1165.275351][ T7938] Bluetooth: hci4: command tx timeout [ 1167.355021][ T7938] Bluetooth: hci4: command tx timeout [ 1177.438713][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 1202.965814][T12017] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1202.999736][T12017] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1203.010635][T12017] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1203.021937][T12017] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1203.030311][T12017] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1203.045442][T12017] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1203.295891][T12017] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1203.306864][T12017] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1203.315500][T12017] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1203.327729][T12017] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1203.342390][T12017] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1203.352911][T12017] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1203.412987][ T7938] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1203.423975][ T7938] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1203.433055][ T7938] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1203.450395][ T7938] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1203.458255][ T7938] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1203.468780][ T7938] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1205.115165][ T7938] Bluetooth: hci5: command tx timeout [ 1205.435343][ T7938] Bluetooth: hci10: command tx timeout [ 1205.515251][ T7938] Bluetooth: hci11: command tx timeout [ 1207.195184][ T7938] Bluetooth: hci5: command tx timeout [ 1207.516418][ T7938] Bluetooth: hci10: command tx timeout [ 1207.595155][ T7938] Bluetooth: hci11: command tx timeout [ 1209.275111][ T7938] Bluetooth: hci5: command tx timeout [ 1209.595831][ T7938] Bluetooth: hci10: command tx timeout [ 1209.675126][ T7938] Bluetooth: hci11: command tx timeout [ 1211.355895][ T7938] Bluetooth: hci5: command tx timeout [ 1211.675033][ T7938] Bluetooth: hci10: command tx timeout [ 1211.755693][ T7938] Bluetooth: hci11: command tx timeout [ 1217.323262][T12017] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1217.344425][T12017] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1217.366220][T12017] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1217.379533][T12017] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1217.388493][T12017] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1217.396664][T12017] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1219.440893][T12017] Bluetooth: hci12: command tx timeout [ 1219.538142][ T7938] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1219.548724][ T7938] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1219.561186][ T7938] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1219.578243][ T7938] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1219.586359][ T7938] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1219.594023][ T7938] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1221.515127][ T7938] Bluetooth: hci12: command tx timeout [ 1221.675445][ T7938] Bluetooth: hci13: command tx timeout [ 1223.595191][ T7938] Bluetooth: hci12: command tx timeout [ 1223.755715][ T7938] Bluetooth: hci13: command tx timeout [ 1225.611643][ T7938] Bluetooth: hci6: command 0x0406 tx timeout [ 1225.617812][T12017] Bluetooth: hci0: command 0x0401 tx timeout [ 1225.675144][ T7938] Bluetooth: hci12: command tx timeout [ 1225.838434][ T7938] Bluetooth: hci13: command tx timeout [ 1227.915359][ T7938] Bluetooth: hci13: command tx timeout [ 1238.877516][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 1262.990668][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1263.018041][ T5223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1263.048059][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1263.059936][ T5223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1263.072129][ T5223] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1263.080002][ T5223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1263.285912][ T5222] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1263.298896][ T5222] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1263.315971][ T5222] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1263.328985][ T5222] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1263.336884][ T5222] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1263.344281][ T5222] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1263.422950][ T5222] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1263.434808][ T5222] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1263.453596][ T5222] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1263.462733][ T5222] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1263.473533][ T5222] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1263.481159][ T5222] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1265.116785][ T5222] Bluetooth: hci0: command tx timeout [ 1265.435068][ T5222] Bluetooth: hci6: command tx timeout [ 1265.515151][ T5222] Bluetooth: hci14: command tx timeout [ 1267.195119][ T5222] Bluetooth: hci0: command tx timeout [ 1267.515001][ T5222] Bluetooth: hci6: command tx timeout [ 1267.603416][ T5222] Bluetooth: hci14: command tx timeout [ 1269.279737][ T5222] Bluetooth: hci0: command tx timeout [ 1269.613390][ T5223] Bluetooth: hci6: command tx timeout [ 1269.682101][ T5222] Bluetooth: hci14: command tx timeout [ 1271.355036][ T5222] Bluetooth: hci0: command tx timeout [ 1271.688114][T13966] Bluetooth: hci6: command tx timeout [ 1271.693690][T13966] Bluetooth: hci8: command 0x0406 tx timeout [ 1271.704935][ T5222] Bluetooth: hci3: command 0x0406 tx timeout [ 1271.714951][ T5222] Bluetooth: hci9: command 0x0406 tx timeout [ 1271.775022][T13966] Bluetooth: hci14: command tx timeout [ 1277.545760][T12017] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1277.557306][T12017] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1277.568170][T12017] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1277.576365][T12017] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1277.589201][T12017] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1277.598015][T12017] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1279.681788][T12017] Bluetooth: hci7: command tx timeout [ 1280.109531][T13968] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1280.120821][T13968] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1280.132205][T13968] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1280.140448][T13968] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1280.149508][T13968] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 1280.165316][T13968] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1281.755188][T13968] Bluetooth: hci7: command tx timeout [ 1281.922462][T13968] Bluetooth: hci4: command 0x0406 tx timeout [ 1281.928837][T14062] Bluetooth: hci1: command 0x0406 tx timeout [ 1282.235110][T12017] Bluetooth: hci15: command tx timeout [ 1283.835117][T12017] Bluetooth: hci7: command tx timeout [ 1284.315270][T12017] Bluetooth: hci15: command tx timeout [ 1285.915063][T12017] Bluetooth: hci7: command tx timeout [ 1286.395250][T12017] Bluetooth: hci15: command tx timeout [ 1288.478558][T12017] Bluetooth: hci15: command tx timeout [ 1300.320733][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.595377][ T31] INFO: task kworker/u8:0:12066 blocked for more than 143 seconds. [ 1301.603368][ T31] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1301.650224][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1301.712277][ T31] task:kworker/u8:0 state:D stack:19664 pid:12066 tgid:12066 ppid:2 flags:0x00004000 [ 1301.755162][ T31] Workqueue: netns cleanup_net [ 1301.760037][ T31] Call Trace: [ 1301.865006][ T31] [ 1301.889441][ T31] __schedule+0x1843/0x4ae0 [ 1301.894077][ T31] ? __pfx___schedule+0x10/0x10 [ 1301.974909][ T31] ? __pfx_lock_release+0x10/0x10 [ 1301.980046][ T31] ? __mutex_trylock_common+0x92/0x2e0 [ 1302.024988][ T31] ? kthread_data+0x52/0xd0 [ 1302.029591][ T31] ? schedule+0x90/0x320 [ 1302.033885][ T31] ? wq_worker_sleeping+0x66/0x240 [ 1302.125016][ T31] ? schedule+0x90/0x320 [ 1302.129455][ T31] schedule+0x14b/0x320 [ 1302.133686][ T31] schedule_preempt_disabled+0x13/0x30 [ 1302.187865][ T31] __mutex_lock+0x6a7/0xd70 [ 1302.192566][ T31] ? __mutex_lock+0x52a/0xd70 [ 1302.245035][ T31] ? wg_netns_pre_exit+0x1f/0x1e0 [ 1302.250170][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1302.291324][ T31] wg_netns_pre_exit+0x1f/0x1e0 [ 1302.317458][ T31] cleanup_net+0x615/0xcc0 [ 1302.321989][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1302.364991][ T31] ? process_scheduled_works+0x976/0x1850 [ 1302.370840][ T31] process_scheduled_works+0xa63/0x1850 [ 1302.421387][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1302.440179][ T31] ? assign_work+0x364/0x3d0 [ 1302.462946][ T31] worker_thread+0x870/0xd30 [ 1302.468093][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1302.474075][ T31] ? __kthread_parkme+0x169/0x1d0 [ 1302.491933][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1302.497563][ T31] kthread+0x2f0/0x390 [ 1302.501699][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1302.515035][ T31] ? __pfx_kthread+0x10/0x10 [ 1302.519731][ T31] ret_from_fork+0x4b/0x80 [ 1302.524212][ T31] ? __pfx_kthread+0x10/0x10 [ 1302.539605][ T31] ret_from_fork_asm+0x1a/0x30 [ 1302.544566][ T31] [ 1302.553004][ T31] INFO: task syz-executor:14016 blocked for more than 144 seconds. [ 1302.563865][ T31] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1302.576508][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1302.594034][ T31] task:syz-executor state:D stack:24128 pid:14016 tgid:14016 ppid:1 flags:0x00000004 [ 1302.607240][ T31] Call Trace: [ 1302.610583][ T31] [ 1302.613752][ T31] __schedule+0x1843/0x4ae0 [ 1302.623725][ T31] ? __pfx___schedule+0x10/0x10 [ 1302.631450][ T31] ? __pfx_lock_release+0x10/0x10 [ 1302.645005][ T31] ? __mutex_trylock_common+0x92/0x2e0 [ 1302.650574][ T31] ? schedule+0x90/0x320 [ 1302.663621][ T31] schedule+0x14b/0x320 [ 1302.668287][ T31] schedule_preempt_disabled+0x13/0x30 [ 1302.673822][ T31] __mutex_lock+0x6a7/0xd70 [ 1302.686348][ T31] ? __mutex_lock+0x52a/0xd70 [ 1302.691128][ T31] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1302.709252][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1302.714400][ T31] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1302.727714][ T31] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 1302.732927][ T31] ? __lock_acquire+0x1384/0x2050 [ 1302.743516][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1302.752846][ T31] netlink_rcv_skb+0x1e3/0x430 [ 1302.764800][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1302.770550][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1302.783877][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1302.791145][ T31] netlink_unicast+0x7f6/0x990 [ 1302.803645][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1302.809572][ T31] ? __virt_addr_valid+0x183/0x530 [ 1302.814762][ T31] ? __check_object_size+0x48e/0x900 [ 1302.829511][ T31] netlink_sendmsg+0x8e4/0xcb0 [ 1302.834383][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1302.843899][ T31] ? __might_fault+0xaa/0x120 [ 1302.852612][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1302.861970][ T31] __sock_sendmsg+0x221/0x270 [ 1302.870865][ T31] __sys_sendto+0x39b/0x4f0 [ 1302.881906][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1302.891056][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1302.903203][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1302.911458][ T31] ? exc_page_fault+0x590/0x8c0 [ 1302.922805][ T31] __x64_sys_sendto+0xde/0x100 [ 1302.929261][ T31] do_syscall_64+0xf3/0x230 [ 1302.933933][ T31] ? clear_bhb_loop+0x35/0x90 [ 1302.948818][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.957847][ T31] RIP: 0033:0x7f285c37fd8c [ 1302.962334][ T31] RSP: 002b:00007ffdc58906e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1302.978554][ T31] RAX: ffffffffffffffda RBX: 00007f285d064620 RCX: 00007f285c37fd8c [ 1302.989317][ T31] RDX: 0000000000000028 RSI: 00007f285d064670 RDI: 0000000000000003 [ 1303.005014][ T31] RBP: 0000000000000000 R08: 00007ffdc5890734 R09: 000000000000000c [ 1303.019694][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1303.030508][ T31] R13: 0000000000000000 R14: 00007f285d064670 R15: 0000000000000000 [ 1303.043931][ T31] [ 1303.047247][ T31] [ 1303.047247][ T31] Showing all locks held in the system: [ 1303.063766][ T31] 1 lock held by khungtaskd/31: [ 1303.069162][ T31] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1303.084971][ T31] 3 locks held by kworker/u8:5/1300: [ 1303.090326][ T31] #0: ffff88802e72b148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1303.114335][ T31] #1: ffffc9000445fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1303.143599][ T31] #2: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1303.160756][ T31] 2 locks held by getty/4977: [ 1303.168871][ T31] #0: ffff88814b7ef0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1303.185329][ T31] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1303.203781][ T31] 3 locks held by kworker/1:4/5272: [ 1303.209480][ T31] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1303.228828][ T31] #1: ffffc900042b7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1303.249836][ T31] #2: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1303.262526][ T31] 6 locks held by kworker/0:8/5330: [ 1303.274221][ T31] 3 locks held by kworker/1:6/6977: [ 1303.281064][ T31] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1303.300600][ T31] #1: ffffc90002edfd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1303.318367][ T31] #2: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 1303.332644][ T31] 3 locks held by kworker/u8:19/7737: [ 1303.342184][ T31] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1303.359417][ T31] #1: ffffc900037afd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1303.379771][ T31] #2: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1303.390740][ T31] 1 lock held by syz.1.964/11941: [ 1303.402703][ T31] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1303.421347][ T31] 3 locks held by kworker/0:3/11949: [ 1303.427193][ T31] 4 locks held by kworker/u8:0/12066: [ 1303.432795][ T31] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1303.453870][ T31] #1: ffffc90000bc7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1303.473736][ T31] #2: ffffffff8fcaec50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1303.483681][ T31] #3: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 1303.500651][ T31] 1 lock held by syz-executor/13558: [ 1303.508010][ T31] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1303.525262][ T31] 2 locks held by syz.1.1378/13928: [ 1303.530718][ T31] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1303.548751][ T31] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 1303.564695][ T31] 2 locks held by syz-executor/13959: [ 1303.574259][ T31] #0: ffffffff8fcaec50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1303.586669][ T31] #1: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 1303.603813][ T31] 2 locks held by syz-executor/13963: [ 1303.613634][ T31] #0: ffffffff8fcaec50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1303.628585][ T31] #1: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 1303.642309][ T31] 2 locks held by syz-executor/13965: [ 1303.652964][ T31] #0: ffffffff8fcaec50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1303.670422][ T31] #1: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 1303.684496][ T31] 1 lock held by syz.0.1386/13991: [ 1303.694975][ T31] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1303.704086][ T31] 1 lock held by syz-executor/14016: [ 1303.719977][ T31] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1303.734355][ T31] 1 lock held by syz-executor/14022: [ 1303.743652][ T31] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1303.761742][ T31] 1 lock held by syz-executor/14031: [ 1303.768279][ T31] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1303.784980][ T31] 1 lock held by syz-executor/14036: [ 1303.792813][ T31] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1303.805359][ T31] 1 lock held by syz-executor/14038: [ 1303.810706][ T31] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1303.828453][ T31] 1 lock held by syz-executor/14041: [ 1303.833994][ T31] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1303.850125][ T31] 1 lock held by syz-executor/14046: [ 1303.859700][ T31] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1303.873835][ T31] 1 lock held by syz-executor/14053: [ 1303.883146][ T31] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1303.898529][ T31] 1 lock held by syz-executor/14058: [ 1303.904068][ T31] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1303.919620][ T31] 1 lock held by syz-executor/14060: [ 1303.928981][ T31] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1303.942721][ T31] 1 lock held by syz-executor/14065: [ 1303.953434][ T31] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1303.970659][ T31] 1 lock held by syz-executor/14068: [ 1303.977813][ T31] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1303.993831][ T31] [ 1303.998091][ T31] ============================================= [ 1303.998091][ T31] [ 1304.017435][ T31] NMI backtrace for cpu 1 [ 1304.022019][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1304.032227][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1304.042330][ T31] Call Trace: [ 1304.045641][ T31] [ 1304.048607][ T31] dump_stack_lvl+0x241/0x360 [ 1304.053344][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1304.058724][ T31] ? __pfx__printk+0x10/0x10 [ 1304.063382][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 1304.068382][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1304.073887][ T31] ? _printk+0xd5/0x120 [ 1304.078111][ T31] ? __pfx__printk+0x10/0x10 [ 1304.082754][ T31] ? __wake_up_klogd+0xcc/0x110 [ 1304.087670][ T31] ? __pfx__printk+0x10/0x10 [ 1304.092311][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 1304.097384][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1304.103418][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1304.109453][ T31] watchdog+0xff4/0x1040 [ 1304.113833][ T31] ? watchdog+0x1ea/0x1040 [ 1304.118390][ T31] ? __pfx_watchdog+0x10/0x10 [ 1304.123118][ T31] kthread+0x2f0/0x390 [ 1304.127321][ T31] ? __pfx_watchdog+0x10/0x10 [ 1304.132049][ T31] ? __pfx_kthread+0x10/0x10 [ 1304.136775][ T31] ret_from_fork+0x4b/0x80 [ 1304.141331][ T31] ? __pfx_kthread+0x10/0x10 [ 1304.146052][ T31] ret_from_fork_asm+0x1a/0x30 [ 1304.150992][ T31] [ 1304.154992][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1304.160282][ C0] NMI backtrace for cpu 0 [ 1304.160300][ C0] CPU: 0 UID: 0 PID: 5330 Comm: kworker/0:8 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1304.160322][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1304.160336][ C0] Workqueue: wg-crypt-wg1 wg_packet_tx_worker [ 1304.160361][ C0] RIP: 0010:unwind_next_frame+0x81/0x22d0 [ 1304.160394][ C0] Code: 44 24 58 42 80 3c 20 00 74 08 48 89 ef e8 a7 1d ba 00 49 8b 4d 38 4c 89 eb 48 c1 eb 03 42 0f b6 04 23 84 c0 0f 85 e1 19 00 00 <41> 8b 45 00 85 c0 0f 84 d7 18 00 00 89 84 24 84 00 00 00 48 89 6c [ 1304.160410][ C0] RSP: 0000:ffffc90000006b50 EFLAGS: 00000246 [ 1304.160426][ C0] RAX: 0000000000000000 RBX: 1ffff92000000d84 RCX: ffffc90000007760 [ 1304.160441][ C0] RDX: dffffc0000000000 RSI: ffffffff8a15a79e RDI: ffffc90000006c20 [ 1304.160455][ C0] RBP: ffffc90000006c58 R08: 000000000000000a R09: ffffc90000006d10 [ 1304.160468][ C0] R10: ffffc90000006c70 R11: ffffffff818066f0 R12: dffffc0000000000 [ 1304.160482][ C0] R13: ffffc90000006c20 R14: ffffffff8a15a79e R15: 0000000000000000 [ 1304.160496][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1304.160511][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1304.160524][ C0] CR2: 00007f1bdc727bc8 CR3: 000000000e734000 CR4: 00000000003506f0 [ 1304.160541][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1304.160552][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1304.160565][ C0] Call Trace: [ 1304.160572][ C0] [ 1304.160580][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1304.160604][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1304.160633][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1304.160654][ C0] ? nmi_handle+0x2a/0x5a0 [ 1304.160679][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1304.160703][ C0] ? nmi_handle+0x14f/0x5a0 [ 1304.160721][ C0] ? nmi_handle+0x2a/0x5a0 [ 1304.160739][ C0] ? unwind_next_frame+0x81/0x22d0 [ 1304.160766][ C0] ? default_do_nmi+0x63/0x160 [ 1304.160788][ C0] ? exc_nmi+0x123/0x1f0 [ 1304.160808][ C0] ? end_repeat_nmi+0xf/0x53 [ 1304.160835][ C0] ? NF_HOOK+0x29e/0x450 [ 1304.160855][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1304.160879][ C0] ? NF_HOOK+0x29e/0x450 [ 1304.160897][ C0] ? unwind_next_frame+0x81/0x22d0 [ 1304.160925][ C0] ? unwind_next_frame+0x81/0x22d0 [ 1304.160952][ C0] ? unwind_next_frame+0x81/0x22d0 [ 1304.160979][ C0] [ 1304.160985][ C0] [ 1304.160997][ C0] ? nf_hook_slow+0xc3/0x220 [ 1304.161032][ C0] ? NF_HOOK+0x29e/0x450 [ 1304.161052][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1304.161073][ C0] arch_stack_walk+0x11c/0x150 [ 1304.161095][ C0] ? NF_HOOK+0x29e/0x450 [ 1304.161121][ C0] stack_trace_save+0x118/0x1d0 [ 1304.161143][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1304.161165][ C0] ? __lock_acquire+0x1384/0x2050 [ 1304.161193][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 1304.161211][ C0] kasan_save_stack+0x3f/0x60 [ 1304.161234][ C0] ? kasan_save_stack+0x3f/0x60 [ 1304.161256][ C0] ? __kasan_record_aux_stack+0xac/0xc0 [ 1304.161275][ C0] ? call_rcu+0x167/0xa70 [ 1304.161293][ C0] ? skb_release_head_state+0x73/0x250 [ 1304.161311][ C0] ? consume_skb+0x60/0xf0 [ 1304.161327][ C0] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 1304.161352][ C0] ? nft_synproxy_do_eval+0x362/0xa60 [ 1304.161378][ C0] ? nft_do_chain+0x4ad/0x1da0 [ 1304.161403][ C0] ? nft_do_chain_inet+0x418/0x6b0 [ 1304.161429][ C0] ? nf_hook_slow+0xc3/0x220 [ 1304.161450][ C0] ? NF_HOOK+0x29e/0x450 [ 1304.161488][ C0] ? __phys_addr+0xba/0x170 [ 1304.161506][ C0] __kasan_record_aux_stack+0xac/0xc0 [ 1304.161527][ C0] call_rcu+0x167/0xa70 [ 1304.161551][ C0] ? __pfx_call_rcu+0x10/0x10 [ 1304.161569][ C0] ? rcuref_put+0x1e3/0x240 [ 1304.161585][ C0] ? __pfx_rcuref_put+0x10/0x10 [ 1304.161608][ C0] skb_release_head_state+0x73/0x250 [ 1304.161628][ C0] consume_skb+0x60/0xf0 [ 1304.161645][ C0] nft_synproxy_eval_v4+0x3d2/0x610 [ 1304.161674][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1304.161707][ C0] ? nf_ip_checksum+0x13a/0x500 [ 1304.161736][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 1304.161765][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1304.161792][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1304.161817][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1304.161835][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1304.161863][ C0] nft_do_chain+0x4ad/0x1da0 [ 1304.161889][ C0] ? wg_packet_receive+0x11f3/0x2570 [ 1304.161914][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1304.161939][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1304.161976][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 1304.161997][ C0] nft_do_chain_inet+0x418/0x6b0 [ 1304.162024][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1304.162049][ C0] ? ipt_do_table+0x312/0x1860 [ 1304.162083][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1304.162114][ C0] nf_hook_slow+0xc3/0x220 [ 1304.162137][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1304.162158][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1304.162178][ C0] NF_HOOK+0x29e/0x450 [ 1304.162198][ C0] ? NF_HOOK+0x9a/0x450 [ 1304.162217][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1304.162238][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1304.162261][ C0] ? ip_rcv_finish+0x406/0x560 [ 1304.162282][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1304.162302][ C0] NF_HOOK+0x3a4/0x450 [ 1304.162320][ C0] ? __lock_acquire+0x1384/0x2050 [ 1304.162347][ C0] ? NF_HOOK+0x9a/0x450 [ 1304.162366][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1304.162384][ C0] ? ip_rcv_core+0x801/0xd10 [ 1304.162404][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1304.162428][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1304.162447][ C0] __netif_receive_skb+0x2bf/0x650 [ 1304.162471][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1304.162497][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 1304.162518][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1304.162545][ C0] ? __pfx_lock_release+0x10/0x10 [ 1304.162571][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 1304.162600][ C0] process_backlog+0x662/0x15b0 [ 1304.162626][ C0] ? process_backlog+0x33b/0x15b0 [ 1304.162653][ C0] ? __pfx_process_backlog+0x10/0x10 [ 1304.162676][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1304.162704][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1304.162732][ C0] __napi_poll+0xcb/0x490 [ 1304.162755][ C0] net_rx_action+0x89b/0x1240 [ 1304.162790][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1304.162816][ C0] ? sched_clock+0x4a/0x70 [ 1304.162846][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1304.162878][ C0] handle_softirqs+0x2c5/0x980 [ 1304.162903][ C0] ? do_softirq+0x11b/0x1e0 [ 1304.162927][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1304.162955][ C0] do_softirq+0x11b/0x1e0 [ 1304.162977][ C0] [ 1304.162983][ C0] [ 1304.162991][ C0] ? __pfx_do_softirq+0x10/0x10 [ 1304.163013][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 1304.163041][ C0] ? rcu_is_watching+0x15/0xb0 [ 1304.163061][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 1304.163085][ C0] ? wg_socket_send_skb_to_peer+0x176/0x1d0 [ 1304.163110][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1304.163134][ C0] ? mod_peer_timer+0x21/0x260 [ 1304.163163][ C0] wg_socket_send_skb_to_peer+0x176/0x1d0 [ 1304.163185][ C0] wg_packet_tx_worker+0x1bf/0x810 [ 1304.163206][ C0] ? process_scheduled_works+0x976/0x1850 [ 1304.163231][ C0] process_scheduled_works+0xa63/0x1850 [ 1304.163268][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1304.163296][ C0] ? assign_work+0x364/0x3d0 [ 1304.163322][ C0] worker_thread+0x870/0xd30 [ 1304.163351][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1304.163376][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1304.163404][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1304.163428][ C0] kthread+0x2f0/0x390 [ 1304.163444][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1304.163469][ C0] ? __pfx_kthread+0x10/0x10 [ 1304.163486][ C0] ret_from_fork+0x4b/0x80 [ 1304.163511][ C0] ? __pfx_kthread+0x10/0x10 [ 1304.163528][ C0] ret_from_fork_asm+0x1a/0x30 [ 1304.163561][ C0] [ 1304.995676][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1305.002603][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1305.012811][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1305.022914][ T31] Call Trace: [ 1305.026241][ T31] [ 1305.029207][ T31] dump_stack_lvl+0x241/0x360 [ 1305.033949][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1305.039205][ T31] ? __pfx__printk+0x10/0x10 [ 1305.043853][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1305.049913][ T31] ? vscnprintf+0x5d/0x90 [ 1305.054304][ T31] panic+0x349/0x880 [ 1305.058260][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1305.064467][ T31] ? __pfx_panic+0x10/0x10 [ 1305.068939][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1305.074357][ T31] ? __irq_work_queue_local+0x137/0x410 [ 1305.079957][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 1305.085377][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1305.091576][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1305.097786][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1305.103992][ T31] watchdog+0x1033/0x1040 [ 1305.108383][ T31] ? watchdog+0x1ea/0x1040 [ 1305.112871][ T31] ? __pfx_watchdog+0x10/0x10 [ 1305.117601][ T31] kthread+0x2f0/0x390 [ 1305.121718][ T31] ? __pfx_watchdog+0x10/0x10 [ 1305.126446][ T31] ? __pfx_kthread+0x10/0x10 [ 1305.131078][ T31] ret_from_fork+0x4b/0x80 [ 1305.135545][ T31] ? __pfx_kthread+0x10/0x10 [ 1305.140182][ T31] ret_from_fork_asm+0x1a/0x30 [ 1305.145026][ T31] [ 1305.148383][ T31] Kernel Offset: disabled [ 1305.152728][ T31] Rebooting in 86400 seconds..