last executing test programs: 44.481515865s ago: executing program 3 (id=1388): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r1) creat(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x40049366, 0x0) 44.001216685s ago: executing program 3 (id=1389): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x0, 0x5, 0x2, 0x800, 0x0, "f759e100edc710000000d9fc6300", '\x00', "0300", "e8cc1304", ["8bada11e96d0e585cbec4110", "c2fed6e2ffffff6806528640", "000000ff0000000000000020", "0000000000000000000100"]}) 23.534875425s ago: executing program 2 (id=1432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x8, 0x2, 0x1, 0x0, 'log\x00'}, @NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14}}, 0x78}}, 0x0) 23.197586346s ago: executing program 2 (id=1433): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @mcast1, 0x4}}, 0x24) 22.986356391s ago: executing program 2 (id=1436): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x2000000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000180)) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x69, 0x77, 0xdf, 0x8, 0x5ac, 0x217, 0xcfdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0xfa, 0x2, 0x0, [], [{{0x9, 0x5, 0x3}}, {{0x9, 0x5, 0xb}}]}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000b05000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x27c97000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) 21.651261663s ago: executing program 4 (id=1439): syz_usb_connect(0x0, 0x0, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') getdents64(r5, &(0x7f00000000c0)=""/44, 0x2c) r6 = syz_io_uring_setup(0x5169, &(0x7f0000000600)={0x0, 0x4000, 0x10100, 0x7fffffe, 0x0, 0x0, r5}, &(0x7f0000000100), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x360b, &(0x7f0000001040), &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r6, 0xb15, 0x0, 0x0, 0x0, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x80040, 0x0) dup(r9) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a010200000000001b0b052b8f53fa000000010000000900010073797a30000000000900030073797a3100000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030000001f00080002400000000608000140000000110900010073797a300000000014000000110001000000000000"], 0xe0}}, 0x20000000) 21.017698472s ago: executing program 4 (id=1442): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x765, {"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", 0x1000}}, 0x1006) 20.64007988s ago: executing program 4 (id=1445): syz_usb_connect(0x0, 0x0, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbb34f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') getdents64(r4, &(0x7f00000000c0)=""/44, 0x2c) r5 = syz_io_uring_setup(0x5169, &(0x7f0000000600)={0x0, 0x4000, 0x10100, 0x7fffffe, 0x0, 0x0, r4}, &(0x7f0000000100), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x360b, &(0x7f0000001040), &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0xb15, 0x0, 0x0, 0x0, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x80040, 0x0) dup(r8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a010200000000001b0b052b8f53fa000000010000000900010073797a30000000000900030073797a3100000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030000001f00080002400000000608000140000000110900010073797a300000000014000000110001000000000000"], 0xe0}}, 0x20000000) 20.204024615s ago: executing program 2 (id=1446): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x336, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) 15.426816834s ago: executing program 2 (id=1452): r0 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90524fc600d0003000a740100ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 14.126775754s ago: executing program 2 (id=1455): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x2000000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x69, 0x77, 0xdf, 0x8, 0x5ac, 0x217, 0xcfdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0xfa, 0x2, 0x0, [], [{{0x9, 0x5, 0x3}}, {{0x9, 0x5, 0xb}}]}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = getpid() sched_setscheduler(r9, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000b05000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x27c97000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) 12.806302099s ago: executing program 4 (id=1456): r0 = socket$rxrpc(0x21, 0x2, 0xa) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @dev}}, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2d) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 11.363650458s ago: executing program 3 (id=1390): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) mount$afs(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000400)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000300)={{@local}, @host, 0x0, 0x0, 0x6}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, 0x0) 10.76394423s ago: executing program 0 (id=1462): r0 = socket$rxrpc(0x21, 0x2, 0xa) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @dev}}, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2d) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 9.98882189s ago: executing program 4 (id=1464): iopl(0x3) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f00000002c0)=[0x0]) 9.231932926s ago: executing program 4 (id=1465): r0 = socket$rxrpc(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @dev}}, 0x24) 7.024043633s ago: executing program 3 (id=1470): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x50, r1, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}]}, 0x50}}, 0x0) 6.205011314s ago: executing program 3 (id=1471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 6.064099744s ago: executing program 0 (id=1472): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0xc, {"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", 0x1000}}, 0x1006) 5.838605286s ago: executing program 3 (id=1473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x45, 0x0, 0x3}]}) 5.391701393s ago: executing program 0 (id=1474): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)={0x14, r1, 0x1, 0x70bd29}, 0x14}}, 0x0) 5.147819875s ago: executing program 0 (id=1475): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) 4.866402522s ago: executing program 0 (id=1476): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000540)={0x20, 0x1, 0x5, "fcb7715372"}, 0x0, &(0x7f0000000640)={0x0, 0x8, 0x1}}) 1.69679205s ago: executing program 0 (id=1482): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a40)={0x38, r0, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) 721.774717ms ago: executing program 1 (id=1485): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfff00002}, {0x16, 0x0, 0x0, 0x1}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[], 0x0) 576.774635ms ago: executing program 1 (id=1486): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) 445.370942ms ago: executing program 1 (id=1487): r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x50071, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000001e80)=""/96, 0x60) 304.890363ms ago: executing program 1 (id=1488): r0 = syz_open_dev$vim2m(&(0x7f0000000400), 0x8000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0x2, 0x0, 0x0, "5d4a03c0d6b1f7891dd5efb410ad15591ada81da3c2f10483741a6bd19dd2c23"}) 195.557509ms ago: executing program 1 (id=1489): r0 = memfd_create(&(0x7f0000000500)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\xae\x00\x00\x00\x00\x00\xff\xff\x10\x04\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfa\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\xbdB\x96\x88\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xd2\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8fC\x91W\xadi\x00\xf2k\xd5v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\xe3\xe3dJ\xd6&\xe9f,\xfb\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x1a\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\xf0V\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xf2\xb5K\x03\x85\x92k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KT2\x1b\x16=\x10\xd3\x9a\xf0\xb7\x00\x00\x00\x00\x00\x00\x00s\x939}eUn\n\xde\x94\xe1\r\xad9/ \xf6\xb7zre\xd6\x9e~\xef\xaf\xf1\xa6{\x15\xce\x19\xc5Ho2\xdb\xd4?x\xa2\xda\x85\x12\x9fMK\xf0\x8a\x9e\xf9\x06?\x8a\x13\x9aM\xd1|H\xda\xfd\x98\x82W5\xbf\frl\f\x9c\x11Y\xf8}Rf\x92\xfd\xcf\x92ck@\x81G\xff\xae*3X\xcc-\xd2\xa2X\xcc)\vJ', 0x6) fcntl$addseals(r0, 0x409, 0x12) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x30053, r0, 0x0) 0s ago: executing program 1 (id=1490): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000140)="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", 0x148) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) r3 = dup2(r2, r2) rseq(&(0x7f0000000200), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000240)='./control\x00', 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001000010400000000000000bdf5d5822e", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00 \x00'], 0x28}, 0x1, 0x8}, 0x0) close(0xffffffffffffffff) inotify_init1(0x0) fcntl$setstatus(r5, 0x4, 0x2c00) r7 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r7) kernel console output (not intermixed with test programs): ] usb 5-1: Product: syz [ 1361.473022][ T8441] usb 5-1: Manufacturer: syz [ 1361.492118][ T8441] usb 5-1: SerialNumber: syz [ 1361.499218][ T8441] usb 5-1: config 0 descriptor?? [ 1361.510864][ T8441] ipheth 5-1:0.0: Unable to find endpoints [ 1361.668841][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.675197][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.759470][ T8441] usb 5-1: USB disconnect, device number 17 [ 1362.098068][ T8891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1362.122752][ T8891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1362.144213][ T8891] bond0 (unregistering): Released all slaves [ 1362.586208][T14044] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1173'. [ 1362.858801][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1362.868515][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1362.876694][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1362.898216][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1362.952863][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1362.960802][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1363.019415][T14045] lo speed is unknown, defaulting to 1000 [ 1363.246925][T14006] chnl_net:caif_netlink_parms(): no params data found [ 1363.336023][ T51] vhci_hcd: vhci_device speed not set [ 1363.442311][ T5225] Bluetooth: hci4: command tx timeout [ 1363.471551][ T8891] hsr_slave_0: left promiscuous mode [ 1363.488318][ T8891] hsr_slave_1: left promiscuous mode [ 1363.556328][ T8891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1363.575596][ T8891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1363.588314][ T8891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1363.606324][ T8891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1363.710437][ T8891] veth1_macvtap: left promiscuous mode [ 1363.725921][ T8891] veth0_macvtap: left promiscuous mode [ 1363.735957][ T8891] veth1_vlan: left promiscuous mode [ 1363.745006][ T8891] veth0_vlan: left promiscuous mode [ 1363.806054][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1363.827506][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1363.846905][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1363.854958][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1363.862969][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1363.873145][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1365.031155][ T5225] Bluetooth: hci1: command tx timeout [ 1365.099434][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1183'. [ 1365.450097][T14094] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1185'. [ 1365.517724][ T5225] Bluetooth: hci4: command tx timeout [ 1365.840879][T14100] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1187'. [ 1365.995685][ T5225] Bluetooth: hci2: command tx timeout [ 1366.368134][ T8891] team0 (unregistering): Port device team_slave_1 removed [ 1366.434932][ T8891] team0 (unregistering): Port device team_slave_0 removed [ 1367.105586][ T5225] Bluetooth: hci1: command tx timeout [ 1367.360454][T14074] lo speed is unknown, defaulting to 1000 [ 1367.373389][T14006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.410417][T14006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.426474][T14006] bridge_slave_0: entered allmulticast mode [ 1367.434112][T14006] bridge_slave_0: entered promiscuous mode [ 1367.478761][T14006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.510090][T14006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.524354][T14006] bridge_slave_1: entered allmulticast mode [ 1367.539843][T14006] bridge_slave_1: entered promiscuous mode [ 1367.756478][T14006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1367.787742][T14006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1367.930251][T14006] team0: Port device team_slave_0 added [ 1367.973614][T14006] team0: Port device team_slave_1 added [ 1367.986710][T14045] chnl_net:caif_netlink_parms(): no params data found [ 1368.157975][ T5225] Bluetooth: hci2: command tx timeout [ 1368.212309][T14006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1368.227426][T14006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1368.306645][T14006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1368.337678][T14006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1368.344673][T14006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1368.436610][T14006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1368.552913][T14133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1192'. [ 1368.733632][T14006] hsr_slave_0: entered promiscuous mode [ 1368.753231][T14006] hsr_slave_1: entered promiscuous mode [ 1368.771157][T14006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1368.779397][T14006] Cannot create hsr debugfs directory [ 1368.870495][T14144] binder: 14135:14144 ioctl c0306201 0 returned -14 [ 1368.997089][T14045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.004195][T14045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.037287][T14045] bridge_slave_0: entered allmulticast mode [ 1369.145999][T14045] bridge_slave_0: entered promiscuous mode [ 1369.207915][ T5225] Bluetooth: hci1: command tx timeout [ 1369.275785][T14150] ALSA: seq fatal error: cannot create timer (-22) [ 1369.595654][ T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1369.643972][T14045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.666391][T14045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.680043][T14045] bridge_slave_1: entered allmulticast mode [ 1369.694028][T14045] bridge_slave_1: entered promiscuous mode [ 1369.792311][T14074] chnl_net:caif_netlink_parms(): no params data found [ 1369.811084][T14045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1369.820925][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 1369.827922][T14152] netlink: 'syz.4.1196': attribute type 1 has an invalid length. [ 1369.838084][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1369.849078][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1369.859943][ T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc [ 1369.906939][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.934775][ T8] usb 2-1: config 0 descriptor?? [ 1369.948090][ T8] appletouch 2-1:0.0: Could not find int-in endpoint [ 1369.955169][ T8] appletouch 2-1:0.0: probe with driver appletouch failed with error -5 [ 1369.965344][ T8] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1370.019913][ T8891] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.063124][T14045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1370.171380][ T8] usb 2-1: USB disconnect, device number 16 [ 1370.225977][ T5225] Bluetooth: hci2: command tx timeout [ 1370.274972][ T8891] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.452291][T14045] team0: Port device team_slave_0 added [ 1370.523318][ T8891] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.552015][T14045] team0: Port device team_slave_1 added [ 1370.723625][T14074] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.739571][T14074] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.748660][T14074] bridge_slave_0: entered allmulticast mode [ 1370.756606][T14074] bridge_slave_0: entered promiscuous mode [ 1370.768691][T14074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.776102][T14074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.783475][T14074] bridge_slave_1: entered allmulticast mode [ 1370.809806][T14074] bridge_slave_1: entered promiscuous mode [ 1370.917995][ T8891] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.735528][ T5225] Bluetooth: hci1: command tx timeout [ 1371.871392][T14045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1371.882332][T14045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1371.912103][T14045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1371.924801][T14045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1371.931905][T14045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1371.958321][T14045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1372.078726][T14187] overlayfs: workdir and upperdir must reside under the same mount [ 1372.235581][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1372.305651][ T5225] Bluetooth: hci2: command tx timeout [ 1372.407355][ T8] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1372.418879][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1372.429259][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1372.461235][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1372.561249][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1372.583460][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1372.601966][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1372.693995][T14074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1372.772191][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1372.808276][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1372.870009][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1372.921864][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1372.939032][T14074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1373.010007][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1373.027149][T14045] hsr_slave_0: entered promiscuous mode [ 1373.045953][T14045] hsr_slave_1: entered promiscuous mode [ 1373.056165][T14045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1373.069241][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1373.091178][T14045] Cannot create hsr debugfs directory [ 1373.098475][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1373.123481][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1373.156667][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1373.176160][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1373.204576][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1373.249435][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1373.304370][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1373.332303][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1373.343478][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1373.352698][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1373.378140][T14074] team0: Port device team_slave_0 added [ 1373.384440][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1373.421117][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1373.452470][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1373.502396][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1373.522295][T14074] team0: Port device team_slave_1 added [ 1373.532214][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1373.543331][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1373.551835][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1373.561531][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1373.572914][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1373.589040][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1373.598489][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1373.608202][ T8] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1373.617129][ T8] usb 2-1: Product: syz [ 1373.621338][ T8] usb 2-1: Manufacturer: syz [ 1373.637693][T14074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1373.645169][T14074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1373.654123][ T8] usb 2-1: SerialNumber: syz [ 1373.676371][T14074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1373.690358][ T8] usb 2-1: config 0 descriptor?? [ 1373.722254][ T8] yurex 2-1:0.0: Could not submitting URB [ 1373.735856][ T51] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1373.739050][ T8] yurex 2-1:0.0: probe with driver yurex failed with error -5 [ 1373.778635][ T8891] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.804517][T14006] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1373.819571][T14074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1373.829266][T14074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1373.856662][T14074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1373.888228][ T51] usb 5-1: Using ep0 maxpacket: 16 [ 1373.896254][ T51] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.906187][ T8891] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.910233][ T51] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 1373.926916][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.935228][ T51] usb 5-1: Product: syz [ 1373.941619][ T51] usb 5-1: Manufacturer: syz [ 1373.946917][ T51] usb 5-1: SerialNumber: syz [ 1373.966738][ T51] usb 5-1: config 0 descriptor?? [ 1373.977160][T14006] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1373.988622][ T51] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1374.014042][T14006] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1374.037459][ T5772] usb 2-1: USB disconnect, device number 17 [ 1374.093149][ T8891] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.127294][T14006] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1374.191137][ T51] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1374.204471][ T51] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1374.223641][ T51] usb 5-1: USB disconnect, device number 18 [ 1374.276813][ T8891] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.303804][T14074] hsr_slave_0: entered promiscuous mode [ 1374.313901][T14074] hsr_slave_1: entered promiscuous mode [ 1374.321055][T14074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1374.329113][T14074] Cannot create hsr debugfs directory [ 1374.630638][ T8891] bridge_slave_1: left allmulticast mode [ 1374.636833][ T8891] bridge_slave_1: left promiscuous mode [ 1374.642988][ T8891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.653972][ T8891] bridge_slave_0: left allmulticast mode [ 1374.661205][ T8891] bridge_slave_0: left promiscuous mode [ 1374.667639][ T8891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.679004][ T8891] bridge_slave_1: left allmulticast mode [ 1374.684682][ T8891] bridge_slave_1: left promiscuous mode [ 1374.690985][ T8891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.699927][ T8891] bridge_slave_0: left allmulticast mode [ 1374.706084][ T8891] bridge_slave_0: left promiscuous mode [ 1374.711847][ T8891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.897075][ T8891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1375.909229][ T8891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1375.921742][ T8891] bond0 (unregistering): Released all slaves [ 1376.083764][ T8891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1376.098704][ T8891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1376.110030][ T8891] bond0 (unregistering): Released all slaves [ 1377.033684][T14229] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1215'. [ 1377.111394][ T5225] Bluetooth: hci6: command 0x0406 tx timeout [ 1378.611069][T14006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1378.856020][T14006] 8021q: adding VLAN 0 to HW filter on device team0 [ 1378.901576][ T8895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.908905][ T8895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1378.980760][T14045] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1378.986767][ T8499] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1378.998672][T14045] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1379.026564][ T5225] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1379.037751][ T5225] Bluetooth: hci6: Injecting HCI hardware error event [ 1379.047930][ T4611] Bluetooth: hci6: hardware error 0x00 [ 1379.187118][ T8499] usb 2-1: Using ep0 maxpacket: 8 [ 1379.191583][T14045] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1379.202452][T14045] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1379.209040][ T8499] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 1379.266073][ T5225] Bluetooth: hci0: command 0x0406 tx timeout [ 1379.275710][ T8499] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.292001][ T8499] usb 2-1: config 135 has no interface number 0 [ 1379.303358][ T8499] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1379.311571][ T8887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.322985][ T8499] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1379.323774][ T8887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1379.333329][ T8499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.348827][ T8499] usb 2-1: Product: syz [ 1379.354176][ T8499] usb 2-1: Manufacturer: syz [ 1379.359218][ T8499] usb 2-1: SerialNumber: syz [ 1379.437920][ T8891] hsr_slave_0: left promiscuous mode [ 1379.453957][ T8891] hsr_slave_1: left promiscuous mode [ 1379.468839][ T8891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1379.483173][ T8891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1379.505648][ T8891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1379.523577][ T8891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1379.546867][ T8891] hsr_slave_0: left promiscuous mode [ 1379.557710][ T8891] hsr_slave_1: left promiscuous mode [ 1379.572420][ T8891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1379.587845][ T8891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1379.607611][ T8891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1379.611420][ T8499] usb 2-1: USB disconnect, device number 18 [ 1379.615040][ T8891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1379.918532][ T8891] veth1_macvtap: left promiscuous mode [ 1379.924128][ T8891] veth0_macvtap: left promiscuous mode [ 1379.955031][ T8891] veth1_vlan: left promiscuous mode [ 1379.971729][ T8891] veth0_vlan: left promiscuous mode [ 1379.987371][ T8891] veth1_macvtap: left promiscuous mode [ 1379.992952][ T8891] veth0_macvtap: left promiscuous mode [ 1380.002197][ T8891] veth1_vlan: left promiscuous mode [ 1380.016194][ T8891] veth0_vlan: left promiscuous mode [ 1380.215232][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1380.215252][ T29] audit: type=1326 audit(1728529249.196:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14264 comm="syz.4.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaab77dff9 code=0x7ffc0000 [ 1380.258566][ T29] audit: type=1326 audit(1728529249.196:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14264 comm="syz.4.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaab77dff9 code=0x7ffc0000 [ 1380.293930][ T29] audit: type=1326 audit(1728529249.236:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14264 comm="syz.4.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fdaab77dff9 code=0x7ffc0000 [ 1380.412388][ T29] audit: type=1326 audit(1728529249.236:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14264 comm="syz.4.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaab77dff9 code=0x7ffc0000 [ 1380.628835][ T29] audit: type=1326 audit(1728529249.236:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14264 comm="syz.4.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaab77dff9 code=0x7ffc0000 [ 1380.710006][T14274] ALSA: seq fatal error: cannot create timer (-22) [ 1381.065891][ T8441] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1381.122579][ T4611] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1381.256938][ T8441] usb 5-1: Using ep0 maxpacket: 8 [ 1381.265517][ T4611] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1381.274341][ T4611] Bluetooth: hci0: Injecting HCI hardware error event [ 1381.280305][ T8441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1381.285439][ T54] Bluetooth: hci0: hardware error 0x00 [ 1381.335633][ T8441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1381.356658][ T8441] usb 5-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc [ 1381.392695][ T8441] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.415030][ T8441] usb 5-1: config 0 descriptor?? [ 1381.472572][ T8441] appletouch 5-1:0.0: Could not find int-in endpoint [ 1381.486219][ T8441] appletouch 5-1:0.0: probe with driver appletouch failed with error -5 [ 1381.508220][ T8441] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1381.698584][ T8] usb 5-1: USB disconnect, device number 19 [ 1382.056157][ T8891] team0 (unregistering): Port device team_slave_1 removed [ 1382.114624][ T8891] team0 (unregistering): Port device team_slave_0 removed [ 1383.351160][ T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1383.929269][ T8891] team0 (unregistering): Port device team_slave_1 removed [ 1383.989598][ T8891] team0 (unregistering): Port device team_slave_0 removed [ 1384.581290][T14278] netlink: 'syz.1.1224': attribute type 10 has an invalid length. [ 1384.590932][T14278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1224'. [ 1384.602958][T14278] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1384.609714][T14278] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1384.636456][T14278] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1385.596817][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1385.662794][T14074] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1385.704747][T14074] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1385.771146][T14074] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1385.786492][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 1385.797439][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1385.810025][T14074] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1385.825636][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1385.845932][ T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc [ 1385.855015][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.888244][ T8] usb 2-1: config 0 descriptor?? [ 1385.917476][ T8] appletouch 2-1:0.0: Could not find int-in endpoint [ 1385.924819][ T8] appletouch 2-1:0.0: probe with driver appletouch failed with error -5 [ 1385.953237][ T8] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1386.024496][T14045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1386.048252][T14006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1386.111025][ T936] usb 2-1: USB disconnect, device number 19 [ 1386.125369][T14045] 8021q: adding VLAN 0 to HW filter on device team0 [ 1386.154866][ T4611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1386.173118][ T4611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1386.185939][ T4611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1386.187278][ T8903] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.200104][ T8903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1386.213730][ T8903] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.220858][ T8903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1386.229635][ T4611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1386.240077][ T4611] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1386.256029][ T4611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1386.342126][T14313] lo speed is unknown, defaulting to 1000 [ 1386.382369][T14006] veth0_vlan: entered promiscuous mode [ 1386.449130][T14006] veth1_vlan: entered promiscuous mode [ 1386.549057][ T8891] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.717175][ T8891] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.761498][T14074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1386.805061][ T8891] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.851152][T14313] chnl_net:caif_netlink_parms(): no params data found [ 1386.894933][T14045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1386.924362][ T8891] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.942372][T14074] 8021q: adding VLAN 0 to HW filter on device team0 [ 1386.990297][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.997540][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1387.019861][T14006] veth0_macvtap: entered promiscuous mode [ 1387.062047][ T8895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.069189][ T8895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1387.103000][T14006] veth1_macvtap: entered promiscuous mode [ 1387.145533][ T5270] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1387.157847][T14074] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1387.169188][T14074] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1387.181171][T14313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.195922][T14313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.203102][T14313] bridge_slave_0: entered allmulticast mode [ 1387.216863][T14313] bridge_slave_0: entered promiscuous mode [ 1387.224523][T14313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.232440][T14313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.240026][T14313] bridge_slave_1: entered allmulticast mode [ 1387.247274][T14313] bridge_slave_1: entered promiscuous mode [ 1387.341517][ T5270] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.369119][ T5270] usb 2-1: New USB device found, idVendor=093a, idProduct=2620, bcdDevice=7e.68 [ 1387.387839][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.414566][ T5270] usb 2-1: config 0 descriptor?? [ 1387.427030][T14313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.430799][ T5270] gspca_main: gspca_pac7302-2.14.0 probing 093a:2620 [ 1387.445112][ T8891] bridge_slave_1: left allmulticast mode [ 1387.462413][ T8891] bridge_slave_1: left promiscuous mode [ 1387.472377][ T8891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.493067][ T8891] bridge_slave_0: left allmulticast mode [ 1387.506611][ T8891] bridge_slave_0: left promiscuous mode [ 1387.512361][ T8891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.853026][ T5270] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1387.860022][ T5270] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1387.876865][ T5270] usb 2-1: USB disconnect, device number 20 [ 1388.018142][ T8891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1388.031770][ T8891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1388.042977][ T8891] bond0 (unregistering): Released all slaves [ 1388.057899][T14313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1388.086102][T14006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1388.122383][T14006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.140907][T14006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1388.153781][T14006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.164339][T14006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1388.179617][T14006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.189797][T14006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1388.200863][T14006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.223024][T14006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1388.240523][T14006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.264408][T14006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1388.287591][T14045] veth0_vlan: entered promiscuous mode [ 1388.312857][ T54] Bluetooth: hci5: command tx timeout [ 1388.326758][T14006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1388.350369][T14006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.365535][T14006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1388.376521][T14006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.387605][T14006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1388.398415][T14006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.408713][T14006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1388.419497][T14006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.430017][T14006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1388.440880][T14006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.486849][T14006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1388.723481][T14313] team0: Port device team_slave_0 added [ 1388.745090][T14074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1388.776746][T14313] team0: Port device team_slave_1 added [ 1388.783505][T14006] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.805939][T14006] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.814678][T14006] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.834019][T14006] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.871420][T14045] veth1_vlan: entered promiscuous mode [ 1389.502581][T14313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1389.523846][T14313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1389.561094][T14313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1389.628184][T14313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1389.635169][T14313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1389.680989][T14313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1389.777061][T14313] hsr_slave_0: entered promiscuous mode [ 1389.783556][T14313] hsr_slave_1: entered promiscuous mode [ 1389.796141][T14313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1389.813986][T14313] Cannot create hsr debugfs directory [ 1389.888272][ T8891] hsr_slave_0: left promiscuous mode [ 1389.918834][ T8891] hsr_slave_1: left promiscuous mode [ 1389.925048][ T8891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1389.934595][ T8891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1389.944442][ T8891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1389.952190][ T8891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1390.031166][ T8891] veth1_macvtap: left promiscuous mode [ 1390.039819][ T8891] veth0_macvtap: left promiscuous mode [ 1390.049981][ T8891] veth1_vlan: left promiscuous mode [ 1390.061746][ T8891] veth0_vlan: left promiscuous mode [ 1390.385556][ T54] Bluetooth: hci5: command tx timeout [ 1390.686589][ T29] audit: type=1400 audit(1728529259.666:4328): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=14358 comm="syz.1.1237" saddr=172.30.0.2 daddr=172.20.20.170 netif=wpan0 [ 1390.958862][T14363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1391.131753][ T8891] team0 (unregistering): Port device team_slave_1 removed [ 1391.192428][T14370] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1241'. [ 1391.213097][T14370] openvswitch: netlink: Flow key attribute not present in set flow. [ 1391.228605][ T8891] team0 (unregistering): Port device team_slave_0 removed [ 1391.791133][T14377] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1243'. [ 1392.554500][ T54] Bluetooth: hci5: command tx timeout [ 1393.671327][T14045] veth0_macvtap: entered promiscuous mode [ 1393.690361][ T8898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1393.705966][ T8898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.724910][T14074] veth0_vlan: entered promiscuous mode [ 1393.879119][T14045] veth1_macvtap: entered promiscuous mode [ 1393.945628][ T8895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1393.966387][ T8895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.977982][T14074] veth1_vlan: entered promiscuous mode [ 1394.052151][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.085856][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.111459][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.132159][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.144985][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.164059][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.184131][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.203755][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.220662][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.243756][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.279867][T14045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1394.367906][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.431270][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.453930][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.474641][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.520756][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.573553][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.615506][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.626623][ T54] Bluetooth: hci5: command tx timeout [ 1394.638117][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.648732][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.659559][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.672730][T14045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1394.688636][T14045] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.700837][T14045] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.711620][T14045] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.724254][T14045] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.229370][T14074] veth0_macvtap: entered promiscuous mode [ 1395.242311][T14074] veth1_macvtap: entered promiscuous mode [ 1395.326809][ T8891] bridge_slave_1: left allmulticast mode [ 1395.332778][ T8891] bridge_slave_1: left promiscuous mode [ 1395.352940][ T8891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.400708][ T8891] bridge_slave_0: left allmulticast mode [ 1395.410266][ T8891] bridge_slave_0: left promiscuous mode [ 1395.430297][ T8891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.920000][ T2637] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1396.143218][ T2637] usb 2-1: Using ep0 maxpacket: 8 [ 1396.167991][ T2637] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1396.176189][T14415] fuse: Bad value for 'rootmode' [ 1396.177997][ T2637] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1396.193505][ T2637] usb 2-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc [ 1396.218010][ T2637] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.236495][ T2637] usb 2-1: config 0 descriptor?? [ 1396.257824][ T2637] appletouch 2-1:0.0: Could not find int-in endpoint [ 1396.265167][ T2637] appletouch 2-1:0.0: probe with driver appletouch failed with error -5 [ 1396.280114][ T2637] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1396.590105][ T8891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1396.603470][ T8891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1396.615212][ T8891] bond0 (unregistering): Released all slaves [ 1396.738145][ T5270] usb 2-1: USB disconnect, device number 21 [ 1396.811653][ T8903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1396.837271][ T8903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.049906][T14074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1397.078658][T14074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.089422][T14074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1397.104301][T14074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.120522][T14074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1397.279864][T14074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.291123][T14074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1397.314022][T14074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.326935][T14074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1397.338720][T14074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.359414][T14074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1397.375213][T14074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.390310][T14074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1397.401814][T14430] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1252'. [ 1397.476662][ T8903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.479668][T14074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1397.491696][ T8903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.555815][T14074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.580106][T14074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1397.601343][T14074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.626900][T14074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1397.667837][T14074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.687539][T14074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1397.713053][T14074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.744177][T14074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1397.781759][T14074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.810074][T14074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1397.838420][T14074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.877391][T14074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1397.952917][ T8891] hsr_slave_0: left promiscuous mode [ 1397.978795][ T8891] hsr_slave_1: left promiscuous mode [ 1397.994217][ T8891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1398.013528][ T8891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1398.031566][ T8891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1398.047958][ T8891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1398.112660][ T8891] veth0_macvtap: left promiscuous mode [ 1398.125151][ T8891] veth1_vlan: left promiscuous mode [ 1398.131488][ T8891] veth0_vlan: left promiscuous mode [ 1400.109583][ T8891] team0 (unregistering): Port device team_slave_1 removed [ 1400.248270][ T8891] team0 (unregistering): Port device team_slave_0 removed [ 1400.268143][T14457] fuse: Bad value for 'rootmode' [ 1400.850006][T14074] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.859937][T14074] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.877842][T14074] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.892303][T14074] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.917890][ T2637] lo speed is unknown, defaulting to 1000 [ 1400.924565][T14455] netlink: 'syz.1.1258': attribute type 30 has an invalid length. [ 1401.119590][T14466] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1401.126240][T14466] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1401.134049][T14466] vhci_hcd vhci_hcd.0: Device attached [ 1403.323475][ T5270] vhci_hcd: vhci_device speed not set [ 1403.334112][T14467] vhci_hcd: connection closed [ 1403.517801][T14473] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1260'. [ 1403.734704][ T6603] vhci_hcd: stop threads [ 1403.800924][ T6603] vhci_hcd: release socket [ 1403.891566][ T6603] vhci_hcd: disconnect device [ 1404.535183][ T8898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1404.543388][ T8898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1404.551735][ T8898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1404.566999][ T8898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1404.880500][T14313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1404.949078][ T5270] usb 13-1: new full-speed USB device number 4 using vhci_hcd [ 1405.029871][T14313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1405.846326][T14313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1405.882502][T14313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1406.527466][T14313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1407.315311][T14313] 8021q: adding VLAN 0 to HW filter on device team0 [ 1407.430907][ T8898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.438101][ T8898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1407.507136][ T6603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.514284][ T6603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1407.566642][T14512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1407.593965][T14313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1407.594600][T14521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'. [ 1407.613165][T14313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1408.034548][T14528] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1274'. [ 1409.456569][ T4611] Bluetooth: hci4: command 0x0406 tx timeout [ 1409.503231][T14313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1409.715065][ T6603] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.024716][ T6603] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.076455][ T5270] vhci_hcd: vhci_device speed not set [ 1410.721428][ T6603] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.158483][ T4611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1411.181287][ T4611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1411.187050][ T6603] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.209029][ T4611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1411.241713][ T4611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1411.251335][ T4611] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1411.261691][ T4611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1411.430870][ T54] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1411.443383][ T54] Bluetooth: hci4: Injecting HCI hardware error event [ 1411.459001][ T54] Bluetooth: hci4: hardware error 0x00 [ 1412.188816][T14313] veth0_vlan: entered promiscuous mode [ 1412.378610][T14582] fuse: Bad value for 'rootmode' [ 1412.384872][T14313] veth1_vlan: entered promiscuous mode [ 1412.704470][ T6603] bridge_slave_1: left allmulticast mode [ 1412.719820][ T6603] bridge_slave_1: left promiscuous mode [ 1412.732537][ T6603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.769534][ T6603] bridge_slave_0: left allmulticast mode [ 1412.811390][ T6603] bridge_slave_0: left promiscuous mode [ 1412.829466][ T6603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.877254][T14593] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1413.352371][ T5225] Bluetooth: hci2: command tx timeout [ 1413.578119][T14617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1413.587880][ T54] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1413.599417][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1413.622906][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1413.644461][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1413.653888][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1413.662344][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1413.870499][ T6603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1413.891873][ T6603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1413.912567][ T6603] bond0 (unregistering): Released all slaves [ 1413.950132][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 1413.963584][T14614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1291'. [ 1413.999500][T14614] bridge1: entered promiscuous mode [ 1414.026084][T14614] bridge1: entered allmulticast mode [ 1414.865374][T14313] veth0_macvtap: entered promiscuous mode [ 1414.876192][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 1415.022293][T14313] veth1_macvtap: entered promiscuous mode [ 1415.411999][T14560] chnl_net:caif_netlink_parms(): no params data found [ 1415.430715][ T4611] Bluetooth: hci2: command tx timeout [ 1415.471010][T14313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1415.501920][T14313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.542785][T14313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1415.575417][T14313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.605434][T14313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1415.634661][T14313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.654901][T14313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1415.693477][T14313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.713859][T14313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1415.735203][T14313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.755242][ T4611] Bluetooth: hci0: command tx timeout [ 1415.786346][T14313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1415.797147][T14313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.811628][T14313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1415.884051][ T6603] hsr_slave_0: left promiscuous mode [ 1415.908863][ T6603] hsr_slave_1: left promiscuous mode [ 1415.926224][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1415.933667][ T6603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.966655][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1415.974226][ T6603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1416.022485][ T6603] veth1_macvtap: left promiscuous mode [ 1416.045540][ T6603] veth0_macvtap: left promiscuous mode [ 1416.055866][ T6603] veth1_vlan: left promiscuous mode [ 1416.066525][ T6603] veth0_vlan: left promiscuous mode [ 1416.171863][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1416.194363][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1416.204416][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1416.215758][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1416.224873][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1416.232936][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1416.316963][T14662] fuse: Bad value for 'rootmode' [ 1416.763002][ T6603] team0 (unregistering): Port device team_slave_1 removed [ 1416.822443][ T6603] team0 (unregistering): Port device team_slave_0 removed [ 1417.518766][T14670] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1298'. [ 1417.559520][ T4611] Bluetooth: hci2: command tx timeout [ 1417.829953][ T4611] Bluetooth: hci0: command tx timeout [ 1418.163177][T14313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1418.176408][T14313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.187937][T14313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1418.198742][T14313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.211287][T14313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1418.222270][T14313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.232492][T14313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1418.243059][T14313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.253165][T14313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1418.263856][T14313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.276806][T14313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1418.305969][ T4611] Bluetooth: hci1: command tx timeout [ 1418.309124][T14616] chnl_net:caif_netlink_parms(): no params data found [ 1418.347104][T14313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.366036][T14313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.374799][T14313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.397919][T14313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.650687][T14560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.659904][T14560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.667875][T14560] bridge_slave_0: entered allmulticast mode [ 1418.675008][T14560] bridge_slave_0: entered promiscuous mode [ 1418.719419][T14560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.727462][T14560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.735066][T14560] bridge_slave_1: entered allmulticast mode [ 1418.742515][T14560] bridge_slave_1: entered promiscuous mode [ 1418.928539][T14560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.952870][T14560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1419.023223][T14616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.051746][T14616] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.075936][T14616] bridge_slave_0: entered allmulticast mode [ 1419.111701][T14616] bridge_slave_0: entered promiscuous mode [ 1419.203807][T14560] team0: Port device team_slave_0 added [ 1419.269375][T14616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.282777][T14616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.305853][T14616] bridge_slave_1: entered allmulticast mode [ 1419.323204][T14616] bridge_slave_1: entered promiscuous mode [ 1419.355350][T14560] team0: Port device team_slave_1 added [ 1419.449799][T14560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.475596][T14560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.542159][T14560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1419.586305][ T4611] Bluetooth: hci2: command tx timeout [ 1419.678379][T14560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1419.694720][T14560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.735823][T14560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1419.796897][ T8891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.804764][ T8891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.827933][T14616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1419.856793][T14616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1419.902226][T14560] hsr_slave_0: entered promiscuous mode [ 1419.908845][ T4611] Bluetooth: hci0: command tx timeout [ 1419.940367][T14560] hsr_slave_1: entered promiscuous mode [ 1419.959634][ T8898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1420.005185][ T8898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1420.081900][T14616] team0: Port device team_slave_0 added [ 1420.242513][ T6603] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.263553][T14708] tmpfs: Bad value for 'mpol' [ 1420.337593][T14616] team0: Port device team_slave_1 added [ 1420.389856][ T4611] Bluetooth: hci1: command tx timeout [ 1420.473067][T14713] fuse: Bad value for 'rootmode' [ 1420.513619][ T6603] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.641824][ T6603] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.697878][T14616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1420.704875][T14616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1420.814941][T14616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1420.839151][T14616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1420.847787][T14616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1420.875242][T14616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.939236][ T6603] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.991427][T14735] netlink: 'syz.3.1308': attribute type 3 has an invalid length. [ 1421.112244][T14616] hsr_slave_0: entered promiscuous mode [ 1421.123081][T14616] hsr_slave_1: entered promiscuous mode [ 1421.341622][T14616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1421.367665][T14616] Cannot create hsr debugfs directory [ 1421.612176][T14659] chnl_net:caif_netlink_parms(): no params data found [ 1421.995532][ T4611] Bluetooth: hci0: command tx timeout [ 1422.271424][T14754] overlayfs: workdir and upperdir must reside under the same mount [ 1422.320947][T14755] netlink: 'syz.4.1313': attribute type 16 has an invalid length. [ 1422.360742][T14755] netlink: 'syz.4.1313': attribute type 3 has an invalid length. [ 1422.489157][ T54] Bluetooth: hci1: command tx timeout [ 1422.507441][T14755] netlink: 'syz.4.1313': attribute type 1 has an invalid length. [ 1422.665833][T14755] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1313'. [ 1423.117635][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.124003][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.445544][ T29] audit: type=1400 audit(1728529292.426:4329): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=14772 comm="syz.3.1315" saddr=172.30.0.4 daddr=172.20.20.170 netif=wpan0 [ 1423.644947][T14783] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.724940][ T6603] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.780411][T14786] fuse: Bad value for 'rootmode' [ 1424.545705][ T4611] Bluetooth: hci1: command tx timeout [ 1424.558120][T14659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1424.565211][T14659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.595661][T14659] bridge_slave_0: entered allmulticast mode [ 1424.624007][T14659] bridge_slave_0: entered promiscuous mode [ 1424.646202][T14659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.653322][T14659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.692566][T14659] bridge_slave_1: entered allmulticast mode [ 1424.706799][T14659] bridge_slave_1: entered promiscuous mode [ 1424.724820][T14795] netlink: 'syz.4.1322': attribute type 16 has an invalid length. [ 1424.735290][T14795] netlink: 'syz.4.1322': attribute type 3 has an invalid length. [ 1424.762771][ T6603] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.774454][T14795] netlink: 'syz.4.1322': attribute type 1 has an invalid length. [ 1424.784108][T14795] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1322'. [ 1424.806530][T14797] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1424.995190][ T6603] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.013880][T14659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1425.029024][T14659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1425.177843][T14804] overlayfs: workdir and upperdir must reside under the same mount [ 1425.321051][T14659] team0: Port device team_slave_0 added [ 1425.601657][ T6603] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.673905][T14659] team0: Port device team_slave_1 added [ 1426.255129][T14659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1426.272616][T14659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1426.361563][T14659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1426.407491][T14813] fuse: Bad value for 'rootmode' [ 1426.413888][T14659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1426.435586][T14659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1426.505679][T14659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1426.544708][T14560] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1426.604799][T14820] netlink: 'syz.4.1330': attribute type 16 has an invalid length. [ 1426.612969][T14820] netlink: 'syz.4.1330': attribute type 3 has an invalid length. [ 1426.624659][T14820] netlink: 'syz.4.1330': attribute type 1 has an invalid length. [ 1426.650447][T14820] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1330'. [ 1426.651413][T14560] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1426.910184][T14560] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1426.980217][T14826] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1329'. [ 1427.370763][T14560] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1427.731316][T14659] hsr_slave_0: entered promiscuous mode [ 1427.797688][T14659] hsr_slave_1: entered promiscuous mode [ 1427.841198][T14659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1427.920980][T14659] Cannot create hsr debugfs directory [ 1428.468477][T14833] netlink: 'syz.4.1331': attribute type 21 has an invalid length. [ 1428.486291][T14833] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1331'. [ 1428.503682][T14833] netlink: 'syz.4.1331': attribute type 5 has an invalid length. [ 1428.511985][T14833] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1331'. [ 1428.694364][ T6603] bridge_slave_1: left allmulticast mode [ 1428.708059][ T6603] bridge_slave_1: left promiscuous mode [ 1428.716998][ T6603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.737255][ T6603] bridge_slave_0: left allmulticast mode [ 1428.743061][ T6603] bridge_slave_0: left promiscuous mode [ 1428.778192][ T6603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.790249][ T6603] bridge_slave_1: left allmulticast mode [ 1428.802249][ T6603] bridge_slave_1: left promiscuous mode [ 1428.817417][ T6603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.841186][ T6603] bridge_slave_0: left allmulticast mode [ 1428.866144][ T6603] bridge_slave_0: left promiscuous mode [ 1428.871925][ T6603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.495670][ T8499] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1430.652926][ T8499] usb 4-1: Using ep0 maxpacket: 8 [ 1430.678364][ T8499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1430.696539][ T8499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1430.709032][ T8499] usb 4-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc [ 1430.718349][ T8499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.728773][ T8499] usb 4-1: config 0 descriptor?? [ 1430.849396][T14855] overlayfs: workdir and upperdir must reside under the same mount [ 1431.917789][ T8499] appletouch 4-1:0.0: Could not find int-in endpoint [ 1431.924646][ T8499] appletouch 4-1:0.0: probe with driver appletouch failed with error -5 [ 1431.933945][ T8499] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1432.327997][ T6603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1432.340567][ T6603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1432.352204][ T6603] bond0 (unregistering): Released all slaves [ 1432.547335][ T6603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1432.562470][ T6603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1432.573860][ T6603] bond0 (unregistering): Released all slaves [ 1432.640707][ T8] usb 4-1: USB disconnect, device number 21 [ 1432.830287][T14858] fuse: Bad value for 'rootmode' [ 1433.134911][T14868] netlink: 'syz.4.1338': attribute type 16 has an invalid length. [ 1433.190635][T14868] netlink: 'syz.4.1338': attribute type 3 has an invalid length. [ 1433.224310][T14868] netlink: 'syz.4.1338': attribute type 1 has an invalid length. [ 1433.246646][T14868] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1338'. [ 1433.294952][T14560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1433.374204][T14560] 8021q: adding VLAN 0 to HW filter on device team0 [ 1433.488133][ T8898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.495302][ T8898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1433.544330][ T8898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.551558][ T8898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1433.705469][T14886] overlayfs: failed to resolve './file1': -2 [ 1435.101393][T14560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1435.135640][T14560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1435.438963][T14616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1435.469295][T14616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1435.626707][T14899] overlayfs: workdir and upperdir must reside under the same mount [ 1435.902787][T14616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1436.889346][T14616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1437.417779][ T6603] hsr_slave_0: left promiscuous mode [ 1437.448511][ T6603] hsr_slave_1: left promiscuous mode [ 1437.462504][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1437.474056][ T6603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1437.500705][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1437.515689][ T6603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.991840][T14914] ALSA: seq fatal error: cannot create timer (-22) [ 1438.096264][ T6603] hsr_slave_0: left promiscuous mode [ 1438.130712][ T6603] hsr_slave_1: left promiscuous mode [ 1438.148285][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1438.168545][ T6603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1438.190779][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1438.205663][ T6603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1438.224457][ T6603] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1438.240342][ T6603] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1438.295483][ T8] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1438.391814][ T6603] veth1_macvtap: left promiscuous mode [ 1438.401849][ T6603] veth0_macvtap: left promiscuous mode [ 1438.414919][ T6603] veth1_vlan: left promiscuous mode [ 1438.424061][ T6603] veth0_vlan: left promiscuous mode [ 1438.433514][ T6603] veth1_macvtap: left promiscuous mode [ 1438.445578][ T6603] veth0_macvtap: left promiscuous mode [ 1438.445932][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 1438.457104][ T6603] veth1_vlan: left promiscuous mode [ 1438.462721][ T6603] veth0_vlan: left promiscuous mode [ 1438.473304][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1438.489408][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1438.515520][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc [ 1438.524720][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.542422][ T8] usb 5-1: config 0 descriptor?? [ 1438.559374][ T8] appletouch 5-1:0.0: Could not find int-in endpoint [ 1438.576797][ T8] appletouch 5-1:0.0: probe with driver appletouch failed with error -5 [ 1438.596265][ T8] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1438.761958][ T8] usb 5-1: USB disconnect, device number 20 [ 1439.359616][T14927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1440.121615][T14933] netlink: 'syz.3.1348': attribute type 16 has an invalid length. [ 1440.129795][T14933] netlink: 'syz.3.1348': attribute type 3 has an invalid length. [ 1440.146343][ T8] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1440.305777][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 1440.312734][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1440.324672][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1440.334984][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc [ 1440.345627][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.357647][ T8] usb 5-1: config 0 descriptor?? [ 1440.375283][ T8] appletouch 5-1:0.0: Could not find int-in endpoint [ 1440.395007][ T8] appletouch 5-1:0.0: probe with driver appletouch failed with error -5 [ 1440.406927][ T8] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1440.642983][ T6603] team0 (unregistering): Port device team_slave_1 removed [ 1440.707508][ T6603] team0 (unregistering): Port device team_slave_0 removed [ 1442.195075][ T6603] team0 (unregistering): Port device team_slave_1 removed [ 1442.288902][ T6603] team0 (unregistering): Port device team_slave_0 removed [ 1442.888184][T14560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1442.916694][T14933] netlink: 'syz.3.1348': attribute type 1 has an invalid length. [ 1442.924493][T14933] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1348'. [ 1442.929600][ T8499] usb 5-1: USB disconnect, device number 21 [ 1443.240379][T14560] veth0_vlan: entered promiscuous mode [ 1443.265074][T14946] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1350'. [ 1444.121999][T14560] veth1_vlan: entered promiscuous mode [ 1444.296554][T14659] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1444.377887][T14659] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1444.390929][T14659] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1444.471568][T14616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1444.522269][T14659] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1444.560128][ T5272] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1444.650806][T14560] veth0_macvtap: entered promiscuous mode [ 1444.659621][T14969] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1444.672311][T14560] veth1_macvtap: entered promiscuous mode [ 1444.752299][T14616] 8021q: adding VLAN 0 to HW filter on device team0 [ 1444.777053][ T5272] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1444.796537][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1444.807462][ T5272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.807579][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.815940][ T5272] usb 4-1: Product: syz [ 1444.826666][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1444.829843][ T5272] usb 4-1: Manufacturer: syz [ 1444.840442][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.844953][ T5272] usb 4-1: SerialNumber: syz [ 1444.855065][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1444.871121][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.880010][ T5272] usb 4-1: config 0 descriptor?? [ 1444.900005][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1444.912425][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.938418][T14560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1444.953710][ T5272] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1444.970424][ T8895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.977705][ T8895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1445.021288][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1445.032331][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.063428][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1445.077407][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.088219][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1445.111663][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.132707][T14975] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1356'. [ 1445.352478][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1445.453262][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.712318][T14560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1445.854634][T14560] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.868094][ T5272] sonixb 4-1:0.0: Error writing register 01: -71 [ 1445.874671][ T5272] sonixb 4-1:0.0: probe with driver sonixb failed with error -71 [ 1445.885277][ T5272] usb 4-1: USB disconnect, device number 22 [ 1445.891407][T14560] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.903404][T14560] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.913163][T14560] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.020237][ T8895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.027525][ T8895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1446.644563][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 1446.879865][ T8895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.905625][ T5272] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1446.941095][ T8895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.005249][T14659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1447.022530][ T8884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.045761][ T8884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.079845][T14659] 8021q: adding VLAN 0 to HW filter on device team0 [ 1447.093472][ T5272] usb 5-1: Using ep0 maxpacket: 8 [ 1447.127159][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1447.161101][ T8891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.168351][ T8891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1447.175690][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1447.207183][ T5272] usb 5-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc [ 1447.216587][ T2637] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1447.230093][ T6603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.237373][ T6603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1447.268485][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.292453][ T5272] usb 5-1: config 0 descriptor?? [ 1447.304741][T14616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1447.330110][ T5272] appletouch 5-1:0.0: Could not find int-in endpoint [ 1447.342924][ T5272] appletouch 5-1:0.0: probe with driver appletouch failed with error -5 [ 1447.357808][ T5272] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1447.428918][ T2637] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1447.439055][T14616] veth0_vlan: entered promiscuous mode [ 1447.476938][T14616] veth1_vlan: entered promiscuous mode [ 1447.554484][ T2637] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 1447.573632][ T2637] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.581886][ T2637] usb 4-1: Product: syz [ 1447.586500][ T2637] usb 4-1: Manufacturer: syz [ 1447.593956][ T2637] usb 4-1: SerialNumber: syz [ 1447.603887][ T5272] usb 5-1: USB disconnect, device number 22 [ 1447.640423][T14616] veth0_macvtap: entered promiscuous mode [ 1447.681125][T14616] veth1_macvtap: entered promiscuous mode [ 1447.738252][T14616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.780152][T14616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.809469][T14616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.830509][ T2637] cdc_ncm 4-1:1.0: bind() failure [ 1447.836190][T14616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.856867][ T2637] usbtest 4-1:1.0: Linux gadget zero [ 1447.862353][ T2637] usbtest 4-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 1447.877353][T14616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.896429][T14616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.907926][ T2637] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1447.914782][ T2637] cdc_ncm 4-1:1.1: bind() failure [ 1447.921110][T14616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.933350][T14616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.943548][ T2637] usbtest 4-1:1.1: couldn't get endpoints, -71 [ 1447.950440][ T2637] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 1447.958881][T14616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.982704][ T2637] usb 4-1: USB disconnect, device number 23 [ 1447.993228][T14616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.029487][T14616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1448.054253][T14616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.068520][T14616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.082308][T14616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.093493][T14616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.136904][T14616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.159073][T14616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.179235][T14616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.190036][T14616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.199996][T14616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.210976][T14616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.222598][T14616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1448.260691][T14659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1448.269615][T14616] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.280059][T14616] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.290662][T14616] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.301120][T14616] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.548350][T14659] veth0_vlan: entered promiscuous mode [ 1448.608465][ T8903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.626813][ T4611] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1448.635994][ T4611] Bluetooth: hci5: Injecting HCI hardware error event [ 1448.647800][ T4611] Bluetooth: hci5: hardware error 0x00 [ 1448.685572][ T8903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.728624][T14659] veth1_vlan: entered promiscuous mode [ 1448.851793][ T6603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.878564][T14659] veth0_macvtap: entered promiscuous mode [ 1448.893363][ T6603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.939941][T14659] veth1_macvtap: entered promiscuous mode [ 1448.996477][ T7837] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1448.996947][T14659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.040827][T14659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.059940][T14659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.074383][T14659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.140126][T14659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.170131][T14659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.180920][ T7837] usb 4-1: Using ep0 maxpacket: 8 [ 1449.206267][T14659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.228388][ T7837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1449.238763][T14659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.248821][ T7837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1449.266292][T14659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.276944][ T7837] usb 4-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc [ 1449.286129][ T7837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.295749][T14659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.307999][ T7837] usb 4-1: config 0 descriptor?? [ 1449.314510][T14659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.327634][ T7837] appletouch 4-1:0.0: Could not find int-in endpoint [ 1449.334430][ T7837] appletouch 4-1:0.0: probe with driver appletouch failed with error -5 [ 1449.343427][T14659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.379133][T14659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1449.387753][ T7837] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1449.415271][T14659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1449.450615][T14659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.474475][T14659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1449.501964][T14659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.526288][ T51] usb 4-1: USB disconnect, device number 24 [ 1449.541508][T14659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1449.564917][T14659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.585256][T14659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1449.631538][T14659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.642514][T14659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1449.658128][T14659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.669007][T14659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1449.679797][T14659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.694432][T14659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1449.763737][T14659] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.782622][T14659] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.791623][T14659] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.810342][T14659] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.877628][ T8] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1450.011290][ T8903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.056526][ T8903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1450.067807][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1450.085743][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1450.100522][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1450.110958][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1450.129862][ T8] usb 2-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 1450.139927][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.152573][ T8] usb 2-1: Product: syz [ 1450.154388][ T8898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.160422][ T8] usb 2-1: Manufacturer: syz [ 1450.169903][ T8898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1450.179239][ T8] usb 2-1: SerialNumber: syz [ 1450.205276][ T8] usb 2-1: config 0 descriptor?? [ 1450.232408][ T8] ti_usb_3410_5052 2-1:0.0: TI USB 3410 1 port adapter converter detected [ 1450.275633][ T5272] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1450.296576][ T8] usb 2-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 1450.476838][ T5272] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 1450.505341][ T5272] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.545503][ T5272] usb 5-1: config 0 has no interface number 0 [ 1450.557653][ T8] usb 2-1: USB disconnect, device number 22 [ 1450.572889][ T8] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 1450.627516][ T5272] usb 5-1: config 0 interface 109 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1450.670420][ T8] ti_usb_3410_5052 2-1:0.0: device disconnected [ 1450.680111][ T5272] usb 5-1: config 0 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 495, setting to 64 [ 1450.712700][ T4611] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1450.727514][ T5272] usb 5-1: config 0 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1450.747136][ T5272] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1450.756706][ T5272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.764832][ T5272] usb 5-1: Product: syz [ 1450.770231][ T5272] usb 5-1: Manufacturer: syz [ 1450.774986][ T5272] usb 5-1: SerialNumber: syz [ 1450.782440][ T5272] usb 5-1: config 0 descriptor?? [ 1450.789251][T15067] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1450.809584][T15067] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1450.933549][T15091] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1450.940189][T15091] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1450.948928][T15091] vhci_hcd vhci_hcd.0: Device attached [ 1451.162938][ T5272] ath6kl: Failed to submit usb control message: -71 [ 1451.172568][ T5272] ath6kl: unable to send the bmi data to the device: -71 [ 1451.181660][ T5272] ath6kl: Unable to send get target info: -71 [ 1451.205665][ T8499] vhci_hcd: vhci_device speed not set [ 1451.289183][ T8499] usb 13-1: new full-speed USB device number 5 using vhci_hcd [ 1451.451650][ T5272] ath6kl: Failed to init ath6kl core: -71 [ 1451.552522][ T5272] ath6kl_usb 5-1:0.109: probe with driver ath6kl_usb failed with error -71 [ 1451.755846][ T5272] usb 5-1: USB disconnect, device number 23 [ 1451.991043][T15093] vhci_hcd: connection reset by peer [ 1452.508506][ T8903] vhci_hcd: stop threads [ 1452.512836][ T8903] vhci_hcd: release socket [ 1452.547017][ T8903] vhci_hcd: disconnect device [ 1453.109661][T15111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1384'. [ 1453.137224][T15107] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1381'. [ 1453.701717][T15113] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1382'. [ 1453.845986][T15116] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1385'. [ 1454.486168][ T5272] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1454.681579][ T5272] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1454.735022][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1454.842058][ T5272] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1454.894392][ T5272] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1454.943859][ T5272] usb 5-1: Manufacturer: syz [ 1454.982838][ T5272] usb 5-1: config 0 descriptor?? [ 1455.526841][ T5272] rc_core: IR keymap rc-hauppauge not found [ 1455.532807][ T5272] Registered IR keymap rc-empty [ 1455.588638][ T5272] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1455.695860][ T5272] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20 [ 1456.375998][ T8499] vhci_hcd: vhci_device speed not set [ 1456.514643][ T8903] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.680877][ C0] igorplugusb 5-1:0.0: receive overflow invalid: 70 [ 1457.132804][ T8903] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.376655][ T8499] usb 5-1: USB disconnect, device number 24 [ 1457.897265][ T8903] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.048241][T15129] netlink: 'syz.0.1391': attribute type 7 has an invalid length. [ 1458.057096][T15129] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1391'. [ 1458.196595][T15126] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1458.203263][T15126] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1458.212331][T15126] vhci_hcd vhci_hcd.0: Device attached [ 1458.253234][T15137] random: crng reseeded on system resumption [ 1458.266794][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1458.287587][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1458.302175][ T8903] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.314403][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1458.336803][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1458.348877][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1458.357183][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1458.396052][ T8499] vhci_hcd: vhci_device speed not set [ 1458.455813][ T8499] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 1459.785323][ T8903] bridge_slave_1: left allmulticast mode [ 1460.147103][ T8903] bridge_slave_1: left promiscuous mode [ 1460.152932][ T8903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.209826][ T8903] bridge_slave_0: left allmulticast mode [ 1460.220837][ T8903] bridge_slave_0: left promiscuous mode [ 1460.236447][ T8903] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.465704][ T54] Bluetooth: hci4: command tx timeout [ 1461.357358][ T8] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1461.823499][T15178] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1400'. [ 1462.589477][ T54] Bluetooth: hci4: command tx timeout [ 1462.617119][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1462.626987][ T8] usb 3-1: config 2 interface 0 has no altsetting 0 [ 1462.644465][ T8] usb 3-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 1462.653991][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.059438][ T8] usb 3-1: Product: syz [ 1463.063675][ T8] usb 3-1: Manufacturer: syz [ 1463.079073][ T8] usb 3-1: SerialNumber: syz [ 1463.234146][T15130] vhci_hcd: connection reset by peer [ 1463.240698][ T8884] vhci_hcd: stop threads [ 1463.279967][ T8884] vhci_hcd: release socket [ 1463.297235][ T8884] vhci_hcd: disconnect device [ 1463.350051][ T8] usb 3-1: USB disconnect, device number 29 [ 1463.579790][ T8499] vhci_hcd: vhci_device speed not set [ 1463.652091][ T8903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1463.681819][ T8903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1463.703582][ T8903] bond0 (unregistering): Released all slaves [ 1463.738128][T15182] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1401'. [ 1464.581029][T15127] chnl_net:caif_netlink_parms(): no params data found [ 1464.614109][T15196] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1402'. [ 1464.674934][ T54] Bluetooth: hci4: command tx timeout [ 1464.780705][T15201] netlink: 'syz.2.1405': attribute type 1 has an invalid length. [ 1464.789118][T15201] netlink: 9376 bytes leftover after parsing attributes in process `syz.2.1405'. [ 1464.798933][T15201] netlink: 'syz.2.1405': attribute type 1 has an invalid length. [ 1464.936253][T15207] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1465.480873][T15215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 1465.999974][ T51] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1466.050689][ T8903] hsr_slave_0: left promiscuous mode [ 1466.085889][ T8903] hsr_slave_1: left promiscuous mode [ 1466.100456][ T8903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1466.119578][ T8903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1466.162375][ T8903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1466.177549][ T8903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1466.705587][ T54] Bluetooth: hci4: command tx timeout [ 1466.783496][ T8903] veth1_macvtap: left promiscuous mode [ 1466.789851][ T8903] veth0_macvtap: left promiscuous mode [ 1466.795709][ T8903] veth1_vlan: left promiscuous mode [ 1466.801048][ T8903] veth0_vlan: left promiscuous mode [ 1467.105097][ T51] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1467.118388][ T51] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1467.129405][ T51] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1467.136908][ T51] usb 5-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.00 [ 1467.146213][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.159786][ T51] usb 5-1: config 0 descriptor?? [ 1467.251794][ T936] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 1467.489726][ T936] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1467.505875][ T936] usb 3-1: not running at top speed; connect to a high speed hub [ 1467.526110][ T936] usb 3-1: config 106 has an invalid interface number: 8 but max is 0 [ 1467.556573][ T936] usb 3-1: config 106 has no interface number 0 [ 1467.563216][ T936] usb 3-1: config 106 interface 8 has no altsetting 0 [ 1467.610894][ T51] wacom 0003:056A:0035.0013: hidraw0: USB HID v0.00 Device [HID 056a:0035] on usb-dummy_hcd.4-1/input0 [ 1467.633333][ T936] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 1467.675450][ T936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.683635][ T936] usb 3-1: Product: syz [ 1467.688188][ T936] usb 3-1: Manufacturer: syz [ 1467.692848][ T936] usb 3-1: SerialNumber: syz [ 1467.850709][ T51] usb 5-1: USB disconnect, device number 25 [ 1467.938030][ T936] kalmia 3-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 1468.106476][ T936] kalmia 3-1:106.8: probe with driver kalmia failed with error -22 [ 1468.127450][ T936] usb 3-1: USB disconnect, device number 30 [ 1468.359604][T15245] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1416'. [ 1469.692585][ T54] Bluetooth: hci0: command tx timeout [ 1470.468164][ T8903] team0 (unregistering): Port device team_slave_1 removed [ 1470.701564][ T8903] team0 (unregistering): Port device team_slave_0 removed [ 1471.444279][T15262] fuse: Bad value for 'rootmode' [ 1471.868189][T15127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1471.876478][T15127] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.883813][T15127] bridge_slave_0: entered allmulticast mode [ 1471.890966][T15127] bridge_slave_0: entered promiscuous mode [ 1471.915496][T15253] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1418'. [ 1472.413244][T15127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.454196][T15271] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1424'. [ 1472.506164][T15127] bridge0: port 2(bridge_slave_1) entered disabled state [ 1472.554267][T15127] bridge_slave_1: entered allmulticast mode [ 1472.598226][T15127] bridge_slave_1: entered promiscuous mode [ 1472.970360][T15127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.053870][T15127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1473.210957][T15282] random: crng reseeded on system resumption [ 1473.302837][T15127] team0: Port device team_slave_0 added [ 1473.344162][T15127] team0: Port device team_slave_1 added [ 1473.490793][T15127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1473.490817][T15127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1473.490848][T15127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1473.493525][T15127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1473.493547][T15127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1473.493579][T15127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1473.869478][T15127] hsr_slave_0: entered promiscuous mode [ 1473.902430][T15127] hsr_slave_1: entered promiscuous mode [ 1473.923240][T15127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1473.923275][T15127] Cannot create hsr debugfs directory [ 1474.037797][T15290] netlink: 'syz.0.1430': attribute type 4 has an invalid length. [ 1474.037827][T15290] netlink: 'syz.0.1430': attribute type 8 has an invalid length. [ 1474.037845][T15290] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1430'. [ 1475.004516][T15301] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1431'. [ 1477.145700][T15320] ALSA: seq fatal error: cannot create timer (-22) [ 1478.213516][T15325] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1439'. [ 1478.356641][ T8499] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1478.516280][ T8499] usb 3-1: Using ep0 maxpacket: 8 [ 1478.527052][ T8499] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1478.557197][ T8499] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1478.595495][ T8499] usb 3-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc [ 1478.639641][ T8499] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.686936][ T8499] usb 3-1: config 0 descriptor?? [ 1478.695792][T15127] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1478.709922][ T8499] appletouch 3-1:0.0: Could not find int-in endpoint [ 1478.720578][ T8499] appletouch 3-1:0.0: probe with driver appletouch failed with error -5 [ 1478.727971][T15127] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1478.743346][ T8499] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1478.829639][T15127] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1478.886873][T15127] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1478.931791][ T8499] usb 3-1: USB disconnect, device number 31 [ 1479.071472][T15127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1479.333626][T15127] 8021q: adding VLAN 0 to HW filter on device team0 [ 1479.353417][ T8210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.360718][ T8210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1479.494573][ T8210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.502089][ T8210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1481.971173][T15364] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1445'. [ 1482.085968][ T8441] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1482.326014][ T8441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1482.437485][ T8441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1482.522081][ T8441] usb 3-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 1482.612101][ T8441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.683466][ T8441] usb 3-1: config 0 descriptor?? [ 1483.028341][T15127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1483.405992][ T8441] wacom 0003:056A:0336.0014: hidraw0: USB HID v0.00 Device [HID 056a:0336] on usb-dummy_hcd.2-1/input0 [ 1483.545787][T15127] veth0_vlan: entered promiscuous mode [ 1483.603680][ T8441] usb 3-1: USB disconnect, device number 32 [ 1483.659205][T15127] veth1_vlan: entered promiscuous mode [ 1483.898532][T15385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1450'. [ 1483.977693][T15127] veth0_macvtap: entered promiscuous mode [ 1484.076292][T15127] veth1_macvtap: entered promiscuous mode [ 1484.248281][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1484.377838][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.469032][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1484.561182][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.578723][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.586189][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.642056][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1484.669200][T15394] netlink: 'syz.2.1452': attribute type 1 has an invalid length. [ 1484.725899][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.748241][T15394] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1452'. [ 1484.813947][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1484.830215][T15394] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1452'. [ 1484.903985][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.985728][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1485.063534][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.135527][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1485.209866][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.306826][T15127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1485.513630][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1485.604818][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.697387][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1485.771690][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.857218][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1485.868771][ T8441] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1485.942179][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.025804][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1486.187129][ T8441] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.198663][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.271602][ T8441] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1486.286297][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1486.340969][ T8441] usb 2-1: config 1 has no interface number 0 [ 1486.348788][T15409] ALSA: seq fatal error: cannot create timer (-22) [ 1486.365557][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.407744][ T8441] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1486.457383][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1486.521200][ T8441] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1486.547226][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.569868][ T8441] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.612826][T15127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1486.632035][ T8441] usb 2-1: Product: syz [ 1486.666088][ T8441] usb 2-1: Manufacturer: syz [ 1486.689465][ T5272] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1486.711334][ T8441] usb 2-1: SerialNumber: syz [ 1486.732699][T15127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.767736][ T8441] usb 2-1: selecting invalid altsetting 1 [ 1486.806172][T15127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.884244][T15127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.900051][ T5272] usb 3-1: Using ep0 maxpacket: 8 [ 1486.951176][T15127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.965584][ T5272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1487.036893][ T5272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1487.133819][ T5272] usb 3-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc [ 1487.202934][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.215696][ T8441] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 1487.245205][ T8441] cdc_ncm 2-1:1.1: bind() failure [ 1487.285312][ T5272] usb 3-1: config 0 descriptor?? [ 1487.306105][ T8441] usb 2-1: USB disconnect, device number 23 [ 1487.369809][ T5272] appletouch 3-1:0.0: Could not find int-in endpoint [ 1487.479255][ T5272] appletouch 3-1:0.0: probe with driver appletouch failed with error -5 [ 1487.560048][ T5272] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1487.746989][ T5272] usb 3-1: USB disconnect, device number 33 [ 1487.767165][ T8884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1487.855182][ T8884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1488.027392][ T8210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1488.095064][ T8210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1488.460339][T15430] fuse: Bad value for 'rootmode' [ 1489.705606][ T5272] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1489.936977][ T5272] usb 2-1: Using ep0 maxpacket: 16 [ 1489.979567][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1490.076014][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1490.132886][ T5272] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1490.249746][ T5272] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1490.293427][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.365199][ T5272] usb 2-1: config 0 descriptor?? [ 1490.960902][ T5272] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0015/input/input27 [ 1491.253632][ T8210] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.265988][ T5272] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1491.424904][ T5272] usb 2-1: USB disconnect, device number 24 [ 1493.326110][ T4611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1493.396982][ T4611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1493.415025][ T4611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1493.435155][ T4611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1493.454237][ T4611] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1493.462411][ T4611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1493.604892][T15482] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1469'. [ 1495.505694][ T54] Bluetooth: hci5: command tx timeout [ 1496.529771][ T4611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1496.541972][ T4611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1496.552313][ T4611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1496.571591][ T4611] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1496.580364][ T4611] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1496.588856][ T4611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1497.285554][ T8] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1497.445542][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1497.463110][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1497.474609][ T8] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1497.494581][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.515597][ T8] usb 2-1: config 0 descriptor?? [ 1497.585645][ T4611] Bluetooth: hci5: command tx timeout [ 1497.983721][ T8] lenovo 0003:17EF:60EE.0016: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0 [ 1498.203126][ T8] usb 2-1: USB disconnect, device number 25 [ 1498.705665][ T4611] Bluetooth: hci6: command tx timeout [ 1499.666115][ T4611] Bluetooth: hci5: command tx timeout [ 1499.823622][T15530] netlink: 'syz.1.1490': attribute type 16 has an invalid length. [ 1499.835243][T15530] netlink: 'syz.1.1490': attribute type 3 has an invalid length. [ 1500.786387][ T4611] Bluetooth: hci6: command tx timeout [ 1501.745727][ T4611] Bluetooth: hci5: command tx timeout [ 1502.866089][ T4611] Bluetooth: hci6: command tx timeout [ 1504.847159][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1504.875730][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1504.885259][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1504.893648][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1504.901813][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1504.910774][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1504.950556][ T54] Bluetooth: hci6: command tx timeout [ 1506.946861][ T54] Bluetooth: hci7: command tx timeout [ 1508.799890][ T4611] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1508.811961][ T4611] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1508.822158][ T4611] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1508.832339][ T4611] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1508.842819][ T4611] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1508.853247][ T4611] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1509.025865][ T4611] Bluetooth: hci7: command tx timeout [ 1510.416399][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1510.430817][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1510.441009][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1510.453354][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1510.462933][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1510.472773][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1510.945846][ T54] Bluetooth: hci8: command tx timeout [ 1511.105933][ T54] Bluetooth: hci7: command tx timeout [ 1512.545650][ T54] Bluetooth: hci9: command tx timeout [ 1513.025788][ T54] Bluetooth: hci8: command tx timeout [ 1513.185935][ T54] Bluetooth: hci7: command tx timeout [ 1514.626840][ T54] Bluetooth: hci9: command tx timeout [ 1515.105733][ T54] Bluetooth: hci8: command tx timeout [ 1516.707915][ T54] Bluetooth: hci9: command tx timeout [ 1517.190540][ T54] Bluetooth: hci8: command tx timeout [ 1518.785591][ T54] Bluetooth: hci9: command tx timeout [ 1537.840236][ T4611] Bluetooth: hci2: command 0x0406 tx timeout [ 1537.846471][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 1545.991153][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.997791][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.943936][ T5225] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1552.957129][ T5225] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1552.978831][ T5225] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1552.987148][ T5225] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1552.995905][ T5225] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1553.005726][ T5225] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1555.025605][T14617] Bluetooth: hci10: command tx timeout [ 1556.585820][ T5225] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1556.616507][ T5225] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1556.626886][ T5225] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1556.635509][ T5225] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1556.643584][ T5225] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1556.651433][ T5225] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1557.105516][ T5225] Bluetooth: hci10: command tx timeout [ 1558.705718][ T5225] Bluetooth: hci11: command tx timeout [ 1559.186497][ T5225] Bluetooth: hci10: command tx timeout [ 1560.785743][ T5225] Bluetooth: hci11: command tx timeout [ 1561.265521][ T5225] Bluetooth: hci10: command tx timeout [ 1562.875810][ T5225] Bluetooth: hci11: command tx timeout [ 1564.951243][ T5225] Bluetooth: hci11: command tx timeout [ 1565.064841][T14617] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1565.091005][T14617] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1565.104371][T14617] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1565.113009][T14617] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1565.126368][T14617] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1565.136995][T14617] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1567.191290][T14617] Bluetooth: hci12: command tx timeout [ 1568.983683][ T5225] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1569.003411][ T5225] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1569.013642][ T5225] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1569.027980][ T5225] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1569.042871][ T5225] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1569.056222][ T5225] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1569.265727][ T5225] Bluetooth: hci12: command tx timeout [ 1570.471280][T14617] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1570.483441][T14617] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1570.493540][T14617] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1570.501718][T14617] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1570.511922][T14617] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1570.519604][T14617] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1571.110453][T14617] Bluetooth: hci13: command tx timeout [ 1571.345509][T14617] Bluetooth: hci12: command tx timeout [ 1572.626130][T14617] Bluetooth: hci14: command tx timeout [ 1573.185567][T14617] Bluetooth: hci13: command tx timeout [ 1573.425479][T14617] Bluetooth: hci12: command tx timeout [ 1573.671501][T14617] Bluetooth: hci1: command 0x0406 tx timeout [ 1574.705577][ T5225] Bluetooth: hci14: command tx timeout [ 1575.272581][ T5225] Bluetooth: hci13: command tx timeout [ 1576.785493][ T5225] Bluetooth: hci14: command tx timeout [ 1577.345713][ T5225] Bluetooth: hci13: command tx timeout [ 1578.828599][ T8210] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.867899][ T5225] Bluetooth: hci14: command tx timeout [ 1583.916152][ T5225] Bluetooth: hci4: command 0x0406 tx timeout [ 1607.443775][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.451489][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.334004][ T4611] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1613.351546][ T4611] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1613.361303][ T4611] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1613.369998][ T4611] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1613.377934][ T4611] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 1613.385507][ T4611] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1617.033866][ T54] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1617.049585][ T54] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1617.058868][ T54] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1617.069375][ T54] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1617.079076][ T54] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 1617.091289][ T54] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1619.752308][T15592] Bluetooth: hci5: command 0x0406 tx timeout [ 1619.785471][T15592] Bluetooth: hci6: command 0x0406 tx timeout [ 1622.793052][ T8207] kworker/u8:14 (8207) used greatest stack depth: 18264 bytes left [ 1624.918714][ T4611] Bluetooth: hci15: command tx timeout [ 1625.485832][ T4611] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1625.506126][ T4611] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1625.515954][ T4611] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1625.524433][ T4611] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1625.532841][ T4611] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 1625.545546][ T4611] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1626.945817][ T4611] Bluetooth: hci16: command tx timeout [ 1626.954162][T13615] Bluetooth: hci15: command tx timeout [ 1627.665991][T13615] Bluetooth: hci17: command tx timeout [ 1629.034459][T13615] Bluetooth: hci15: command tx timeout [ 1629.041180][ T5225] Bluetooth: hci16: command tx timeout [ 1629.115890][ T5225] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1629.128347][ T5225] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1629.137570][ T5225] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1629.152375][ T5225] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1629.166121][ T5225] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1629.176493][ T5225] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1629.745845][T13615] Bluetooth: hci17: command tx timeout [ 1629.993303][T13615] Bluetooth: hci7: command 0x0406 tx timeout [ 1630.527172][T14617] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1630.542396][T14617] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1630.554226][T14617] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1630.563035][T14617] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1630.571157][T14617] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 1630.580342][T14617] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1631.105576][T13615] Bluetooth: hci15: command tx timeout [ 1631.113295][ T54] Bluetooth: hci16: command tx timeout [ 1631.825680][ T54] Bluetooth: hci17: command tx timeout [ 1633.185571][T15591] Bluetooth: hci16: command tx timeout [ 1633.915985][T15591] Bluetooth: hci17: command tx timeout [ 1635.105558][T15591] Bluetooth: hci8: command 0x0406 tx timeout [ 1635.114436][T13615] Bluetooth: hci9: command 0x0406 tx timeout [ 1645.196586][ T30] INFO: task syz.0.1482:15514 blocked for more than 143 seconds. [ 1645.204469][ T30] Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1645.257457][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1645.301060][ T30] task:syz.0.1482 state:D stack:25984 pid:15514 tgid:15513 ppid:14560 flags:0x00000004 [ 1645.345177][ T30] Call Trace: [ 1645.375584][ T30] [ 1645.378597][ T30] __schedule+0x1843/0x4ae0 [ 1645.383184][ T30] ? __pfx___schedule+0x10/0x10 [ 1645.411654][ T30] ? __pfx_lock_release+0x10/0x10 [ 1645.436086][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1645.441643][ T30] ? schedule+0x90/0x320 [ 1645.535460][ T30] schedule+0x14b/0x320 [ 1645.539725][ T30] schedule_preempt_disabled+0x13/0x30 [ 1645.545238][ T30] __mutex_lock+0x6a7/0xd70 [ 1645.615620][ T30] ? __mutex_lock+0x52a/0xd70 [ 1645.620393][ T30] ? nl80211_vendor_cmd_dump+0x8e/0x1600 [ 1645.685593][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1645.690722][ T30] nl80211_vendor_cmd_dump+0x8e/0x1600 [ 1645.735556][ T30] ? trace_kmalloc+0x1f/0xd0 [ 1645.740225][ T30] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 1645.795341][ T30] ? __build_skb_around+0x245/0x3d0 [ 1645.800631][ T30] ? __pfx_nl80211_vendor_cmd_dump+0x10/0x10 [ 1645.865421][ T30] ? __alloc_skb+0x28f/0x440 [ 1645.870109][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.915476][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 1645.920514][ T30] genl_dumpit+0x107/0x1a0 [ 1645.924987][ T30] netlink_dump+0x647/0xd80 [ 1645.977444][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 1645.982602][ T30] ? __asan_memset+0x23/0x50 [ 1646.052390][ T30] ? genl_start+0x4a8/0x6d0 [ 1646.057286][ T30] __netlink_dump_start+0x5a2/0x790 [ 1646.062580][ T30] genl_rcv_msg+0x88c/0xec0 [ 1646.113949][ T30] ? mark_lock+0x9a/0x360 [ 1646.131406][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1646.148461][ T30] ? __pfx_genl_start+0x10/0x10 [ 1646.153420][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 1646.164916][ T30] ? __pfx_genl_done+0x10/0x10 [ 1646.174304][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1646.185468][ T30] ? __pfx_nl80211_vendor_cmd_dump+0x10/0x10 [ 1646.191544][ T30] ? __pfx___might_resched+0x10/0x10 [ 1646.205080][ T30] netlink_rcv_skb+0x1e3/0x430 [ 1646.210512][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1646.220745][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1646.233051][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 1646.242051][ T30] genl_rcv+0x28/0x40 [ 1646.252289][ T30] netlink_unicast+0x7f6/0x990 [ 1646.260711][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1646.278277][ T30] ? __virt_addr_valid+0x183/0x530 [ 1646.283494][ T30] ? __check_object_size+0x48e/0x900 [ 1646.295705][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 1646.300574][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1646.313978][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1646.319843][ T30] __sock_sendmsg+0x221/0x270 [ 1646.326306][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 1646.331163][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1646.347645][ T30] __sys_sendmsg+0x292/0x380 [ 1646.352355][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1646.365887][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1646.372333][ T30] ? do_syscall_64+0x100/0x230 [ 1646.385953][ T30] ? do_syscall_64+0xb6/0x230 [ 1646.390738][ T30] do_syscall_64+0xf3/0x230 [ 1646.407316][ T30] ? clear_bhb_loop+0x35/0x90 [ 1646.412071][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.427561][ T30] RIP: 0033:0x7f89d097dff9 [ 1646.432061][ T30] RSP: 002b:00007f89d1784038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1646.445708][ T30] RAX: ffffffffffffffda RBX: 00007f89d0b35f80 RCX: 00007f89d097dff9 [ 1646.464311][ T30] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000003 [ 1646.477389][ T30] RBP: 00007f89d09f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1646.493685][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1646.503335][ T30] R13: 0000000000000000 R14: 00007f89d0b35f80 R15: 00007ffdb9e0b2e8 [ 1646.520981][ T30] [ 1646.524212][ T30] INFO: task syz.1.1490:15530 blocked for more than 144 seconds. [ 1646.544094][ T30] Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 1646.553988][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1646.573382][ T30] task:syz.1.1490 state:D stack:25504 pid:15530 tgid:15529 ppid:14616 flags:0x00000006 [ 1646.584120][ T30] Call Trace: [ 1646.595884][ T30] [ 1646.598879][ T30] __schedule+0x1843/0x4ae0 [ 1646.603453][ T30] ? __pfx___schedule+0x10/0x10 [ 1646.616002][ T30] ? __pfx_lock_release+0x10/0x10 [ 1646.621119][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1646.639362][ T30] ? schedule+0x90/0x320 [ 1646.643708][ T30] schedule+0x14b/0x320 [ 1646.655096][ T30] schedule_preempt_disabled+0x13/0x30 [ 1646.663650][ T30] __mutex_lock+0x6a7/0xd70 [ 1646.674475][ T30] ? __mutex_lock+0x52a/0xd70 [ 1646.686680][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1646.691878][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1646.703354][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1646.711663][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 1646.722903][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1646.730946][ T30] ? ref_tracker_free+0x643/0x7e0 [ 1646.743411][ T30] netlink_rcv_skb+0x1e3/0x430 [ 1646.752003][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1646.764232][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1646.772076][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1646.783411][ T30] netlink_unicast+0x7f6/0x990 [ 1646.791033][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1646.803952][ T30] ? __virt_addr_valid+0x183/0x530 [ 1646.811744][ T30] ? __check_object_size+0x48e/0x900 [ 1646.823254][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 1646.830718][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1646.843359][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1646.851352][ T30] __sock_sendmsg+0x221/0x270 [ 1646.864267][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 1646.873079][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1646.884464][ T30] __sys_sendmsg+0x292/0x380 [ 1646.891741][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1646.902851][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1646.913286][ T30] ? do_syscall_64+0x100/0x230 [ 1646.924287][ T30] ? do_syscall_64+0xb6/0x230 [ 1646.932285][ T30] do_syscall_64+0xf3/0x230 [ 1646.944387][ T30] ? clear_bhb_loop+0x35/0x90 [ 1646.955194][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.967540][ T30] RIP: 0033:0x7fcd84d7dff9 [ 1646.972028][ T30] RSP: 002b:00007fcd85b7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1646.988340][ T30] RAX: ffffffffffffffda RBX: 00007fcd84f35f80 RCX: 00007fcd84d7dff9 [ 1647.001616][ T30] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 1647.013722][ T30] RBP: 00007fcd84df0296 R08: 0000000000000000 R09: 0000000000000000 [ 1647.033051][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1647.044741][ T30] R13: 0000000000000000 R14: 00007fcd84f35f80 R15: 00007ffd9756d8d8 [ 1647.060092][ T30] [ 1647.063279][ T30] [ 1647.063279][ T30] Showing all locks held in the system: [ 1647.080799][ T30] 1 lock held by khungtaskd/30: [ 1647.089570][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1647.105349][ T30] 6 locks held by kworker/1:1/51: [ 1647.110447][ T30] 5 locks held by kworker/u9:0/54: [ 1647.123728][ T30] #0: ffff8880607d7148 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1647.135301][ T30] #1: ffffc90000bf7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1647.163689][ T30] #2: ffff88806545cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1647.175990][ T30] #3: ffff88806545c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 1647.193309][ T30] #4: ffffffff8fe2c168 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 1647.215464][ T30] 2 locks held by kworker/1:2/936: [ 1647.220677][ T30] 5 locks held by kworker/u9:1/4611: [ 1647.234733][ T30] #0: ffff8880532fb148 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1647.255395][ T30] #1: ffffc9000ce3fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1647.278642][ T30] #2: ffff88805a278d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1647.293790][ T30] #3: ffff88805a278078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 1647.307741][ T30] #4: ffffffff8fe2c168 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 1647.324525][ T30] 2 locks held by getty/4973: [ 1647.333167][ T30] #0: ffff88802e4b30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1647.349472][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1647.369382][ T30] 4 locks held by kworker/u9:4/5225: [ 1647.383583][ T30] #0: ffff888067767148 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1647.398901][ T30] #1: ffffc90004067d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1647.416165][ T30] #2: ffff88807ff88078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 1647.435718][ T30] #3: ffffffff8fe2c168 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 1647.456835][ T30] 3 locks held by kworker/1:6/5772: [ 1647.462112][ T30] 6 locks held by kworker/u8:15/8210: [ 1647.475361][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1647.494663][ T30] #1: ffffc90003d47d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1647.517010][ T30] #2: ffffffff8fcb2dd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1647.534281][ T30] #3: ffff88805d3840e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 1647.544871][ T30] #4: ffff88805d381250 (&devlink->lock_key#69){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 1647.565357][ T30] #5: ffffffff8fcbf8c8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 1647.574367][ T30] 3 locks held by kworker/0:4/8441: [ 1647.589929][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1647.608075][ T30] #1: ffffc9000340fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1647.625397][ T30] #2: ffffffff8fcbf8c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 1647.635089][ T30] 3 locks held by kworker/u8:16/8884: [ 1647.650543][ T30] #0: ffff88814c25e948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1647.673623][ T30] #1: ffffc9000353fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1647.697924][ T30] #2: ffffffff8fcbf8c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1647.715374][ T30] 2 locks held by kworker/u8:21/8895: [ 1647.720806][ T30] 3 locks held by kworker/u8:22/8898: [ 1647.733879][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1647.756668][ T30] #1: ffffc9000329fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1647.778120][ T30] #2: ffffffff8fcbf8c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1647.795319][ T30] 4 locks held by kworker/u9:3/14617: [ 1647.800750][ T30] #0: ffff88803f1bd148 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1647.822441][ T30] #1: ffffc90003b97d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1647.838060][ T30] #2: ffff8880707ac078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 1647.854415][ T30] #3: ffffffff8fe2c168 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 1647.869179][ T30] 4 locks held by syz.2.1455/15405: [ 1647.874429][ T30] 2 locks held by syz.3.1473/15495: [ 1647.885405][ T30] #0: ffffffff8fcbf8c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1647.902313][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 1647.917054][ T30] 1 lock held by syz-executor/15505: [ 1647.922400][ T30] #0: ffffffff8fcbf8c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1647.940792][ T30] 3 locks held by syz.0.1482/15514: [ 1647.950799][ T30] #0: ffffffff8fd25630 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 1647.965479][ T30] #1: ffff8880323266c8 (nlk_cb_mutex-GENERIC){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 1647.983621][ T30] #2: ffffffff8fcbf8c8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_vendor_cmd_dump+0x8e/0x1600 [ 1648.000055][ T30] 1 lock held by syz.1.1490/15530: [ 1648.005233][ T30] #0: ffffffff8fcbf8c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1648.024126][ T30] 1 lock held by syz-executor/15533: [ 1648.035340][ T30] #0: ffffffff8fcbf8c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1648.044855][ T30] 1 lock held by syz-executor/15539: [ 1648.060506][ T30] #0: ffffffff8fcbf8c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1648.080877][ T30] 1 lock held by syz-executor/15545: [ 1648.089697][ T30] #0: ffffffff8fcbf8c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1648.105416][ T30] 1 lock held by syz-executor/15550: [ 1648.110755][ T30] #0: ffffffff8fcbf8c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1648.127991][ T30] 1 lock held by syz-executor/15556: [ 1648.133344][ T30] #0: ffffffff8fcbf8c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1648.149486][ T30] 1 lock held by syz-executor/15562: [ 1648.155060][ T30] #0: ffffffff8fcbf8c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1648.172953][ T30] 1 lock held by syz-executor/15568: [ 1648.184630][ T30] #0: ffffffff8fcbf8c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1648.199273][ T30] 1 lock held by syz-executor/15574: [ 1648.204642][ T30] #0: ffffffff8fcbf8c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1648.224932][ T30] 1 lock held by syz-executor/15582: [ 1648.231058][ T30] #0: ffffffff8fcbf8c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1648.245434][ T30] 1 lock held by syz-executor/15587: [ 1648.250782][ T30] #0: ffffffff8fcbf8c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1648.269906][ T30] 5 locks held by kworker/u9:7/15593: [ 1648.281938][ T30] #0: ffff88806deaf148 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1648.302678][ T30] #1: ffffc900039dfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1648.329770][ T30] #2: ffff88805711cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1648.344688][ T30] #3: ffff88805711c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 1648.359604][ T30] #4: ffffffff8fe2c168 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 1648.374703][ T30] 1 lock held by syz-executor/15596: [ 1648.385162][ T30] #0: ffffffff8fcbf8c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1648.404876][ T30] 1 lock held by syz-executor/15600: [ 1648.420807][ T30] #0: ffffffff8fcbf8c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1648.439552][ T30] 1 lock held by syz-executor/15605: [ 1648.444904][ T30] #0: ffffffff8fcbf8c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1648.465897][ T30] [ 1648.468306][ T30] ============================================= [ 1648.468306][ T30] [ 1648.485447][ T30] NMI backtrace for cpu 0 [ 1648.489833][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 1648.500373][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1648.510471][ T30] Call Trace: [ 1648.513780][ T30] [ 1648.516740][ T30] dump_stack_lvl+0x241/0x360 [ 1648.521460][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1648.526694][ T30] ? __pfx__printk+0x10/0x10 [ 1648.531347][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1648.536337][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1648.541839][ T30] ? _printk+0xd5/0x120 [ 1648.546044][ T30] ? __pfx__printk+0x10/0x10 [ 1648.550688][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1648.555584][ T30] ? __pfx__printk+0x10/0x10 [ 1648.560238][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1648.565323][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1648.571352][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1648.577381][ T30] watchdog+0xff4/0x1040 [ 1648.581669][ T30] ? watchdog+0x1ea/0x1040 [ 1648.586138][ T30] ? __pfx_watchdog+0x10/0x10 [ 1648.590860][ T30] kthread+0x2f0/0x390 [ 1648.594965][ T30] ? __pfx_watchdog+0x10/0x10 [ 1648.599691][ T30] ? __pfx_kthread+0x10/0x10 [ 1648.604320][ T30] ret_from_fork+0x4b/0x80 [ 1648.608785][ T30] ? __pfx_kthread+0x10/0x10 [ 1648.613412][ T30] ret_from_fork_asm+0x1a/0x30 [ 1648.618235][ T30] [ 1648.622130][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1648.627902][ C1] NMI backtrace for cpu 1 [ 1648.627916][ C1] CPU: 1 UID: 0 PID: 51 Comm: kworker/1:1 Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 1648.627938][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1648.627951][ C1] Workqueue: events nsim_dev_trap_report_work [ 1648.627978][ C1] RIP: 0010:unwind_next_frame+0x196e/0x22d0 [ 1648.627999][ C1] Code: 0f 84 b5 00 00 00 48 8b 44 24 20 42 0f b6 04 20 84 c0 0f 85 2d 01 00 00 41 c7 45 00 00 00 00 00 31 c0 48 81 c4 98 00 00 00 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 4d 89 f4 4c 89 f5 4c 89 [ 1648.628015][ C1] RSP: 0018:ffffc90000a175b0 EFLAGS: 00000282 [ 1648.628030][ C1] RAX: 0000000000000101 RBX: ffffc90000a175e0 RCX: 0000000000000102 [ 1648.628044][ C1] RDX: dffffc0000000000 RSI: ffffc90000a11000 RDI: 0000000000000001 [ 1648.628057][ C1] RBP: ffffc90000a175e0 R08: ffffc90000a17988 R09: 0000000000000000 [ 1648.628070][ C1] R10: ffffc90000a17630 R11: fffff52000142ec8 R12: dffffc0000000000 [ 1648.628084][ C1] R13: ffffc90000a175e0 R14: ffffc90000a11000 R15: ffffc90000a17998 [ 1648.628099][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1648.628114][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1648.628127][ C1] CR2: 000000110c33ab89 CR3: 000000000e734000 CR4: 00000000003526f0 [ 1648.628143][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1648.628154][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1648.628166][ C1] Call Trace: [ 1648.628173][ C1] [ 1648.628181][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1648.628205][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1648.628233][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1648.628255][ C1] ? nmi_handle+0x2a/0x5a0 [ 1648.628282][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1648.628308][ C1] ? nmi_handle+0x14f/0x5a0 [ 1648.628326][ C1] ? nmi_handle+0x2a/0x5a0 [ 1648.628346][ C1] ? unwind_next_frame+0x196e/0x22d0 [ 1648.628363][ C1] ? default_do_nmi+0x63/0x160 [ 1648.628387][ C1] ? exc_nmi+0x123/0x1f0 [ 1648.628409][ C1] ? end_repeat_nmi+0xf/0x53 [ 1648.628431][ C1] ? unwind_next_frame+0x196e/0x22d0 [ 1648.628449][ C1] ? unwind_next_frame+0x196e/0x22d0 [ 1648.628468][ C1] ? unwind_next_frame+0x196e/0x22d0 [ 1648.628486][ C1] [ 1648.628493][ C1] [ 1648.628499][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1648.628524][ C1] arch_stack_walk+0x11c/0x150 [ 1648.628553][ C1] ? post_alloc_hook+0x1f3/0x230 [ 1648.628577][ C1] stack_trace_save+0x118/0x1d0 [ 1648.628600][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1648.628628][ C1] save_stack+0xfb/0x1f0 [ 1648.628652][ C1] ? mark_lock+0x9a/0x360 [ 1648.628670][ C1] ? __pfx_save_stack+0x10/0x10 [ 1648.628705][ C1] __set_page_owner+0x92/0x800 [ 1648.628729][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1648.628750][ C1] ? get_page_from_freelist+0x87b/0x3180 [ 1648.628776][ C1] ? __pfx_lock_release+0x10/0x10 [ 1648.628803][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 1648.628832][ C1] post_alloc_hook+0x1f3/0x230 [ 1648.628863][ C1] get_page_from_freelist+0x3039/0x3180 [ 1648.628891][ C1] ? __pfx_validate_chain+0x10/0x10 [ 1648.628919][ C1] ? __pfx_validate_chain+0x10/0x10 [ 1648.628939][ C1] ? get_stack_info_noinstr+0x1a/0x130 [ 1648.628973][ C1] __alloc_pages_noprof+0x256/0x6c0 [ 1648.628999][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1648.629035][ C1] alloc_pages_mpol_noprof+0x3e8/0x680 [ 1648.629067][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1648.629097][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1648.629123][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1648.629149][ C1] ? alloc_pages_noprof+0x43/0x170 [ 1648.629168][ C1] alloc_slab_page+0x6a/0x120 [ 1648.629194][ C1] allocate_slab+0x5a/0x2f0 [ 1648.629219][ C1] ___slab_alloc+0xcd1/0x14b0 [ 1648.629243][ C1] ? __alloc_skb+0x1c3/0x440 [ 1648.629264][ C1] ? __alloc_skb+0x1c3/0x440 [ 1648.629281][ C1] __slab_alloc+0x58/0xa0 [ 1648.629302][ C1] ? __alloc_skb+0x1c3/0x440 [ 1648.629320][ C1] kmem_cache_alloc_node_noprof+0x1fe/0x320 [ 1648.629344][ C1] __alloc_skb+0x1c3/0x440 [ 1648.629364][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 1648.629387][ C1] synproxy_send_client_synack+0x1ba/0xf30 [ 1648.629416][ C1] ? kasan_quarantine_put+0xdc/0x230 [ 1648.629440][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1648.629469][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1648.629497][ C1] ? synproxy_pernet+0x45/0x270 [ 1648.629526][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 1648.629566][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1648.629595][ C1] ? nf_ip_checksum+0x13a/0x500 [ 1648.629613][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 1648.629643][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1648.629669][ C1] ? validate_chain+0x11e/0x5920 [ 1648.629692][ C1] ? __pfx_validate_chain+0x10/0x10 [ 1648.629717][ C1] nft_do_chain+0x4ad/0x1da0 [ 1648.629741][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1648.629757][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 1648.629794][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 1648.629816][ C1] nft_do_chain_inet+0x418/0x6b0 [ 1648.629845][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1648.629870][ C1] ? ipt_do_table+0x312/0x1860 [ 1648.629906][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1648.629932][ C1] nf_hook_slow+0xc3/0x220 [ 1648.629957][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1648.629979][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1648.630001][ C1] NF_HOOK+0x29e/0x450 [ 1648.630022][ C1] ? NF_HOOK+0x9a/0x450 [ 1648.630041][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1648.630063][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1648.630088][ C1] ? ip_rcv_finish+0x406/0x560 [ 1648.630109][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1648.630130][ C1] NF_HOOK+0x3a4/0x450 [ 1648.630149][ C1] ? __lock_acquire+0x1384/0x2050 [ 1648.630177][ C1] ? NF_HOOK+0x9a/0x450 [ 1648.630197][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1648.630215][ C1] ? ip_rcv_core+0x801/0xd10 [ 1648.630237][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1648.630261][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1648.630282][ C1] __netif_receive_skb+0x2bf/0x650 [ 1648.630308][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1648.630335][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 1648.630357][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1648.630384][ C1] ? __pfx_lock_release+0x10/0x10 [ 1648.630412][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1648.630442][ C1] process_backlog+0x662/0x15b0 [ 1648.630469][ C1] ? process_backlog+0x33b/0x15b0 [ 1648.630498][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1648.630522][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1648.630555][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1648.630591][ C1] __napi_poll+0xcb/0x490 [ 1648.630615][ C1] net_rx_action+0x89b/0x1240 [ 1648.630649][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1648.630674][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 1648.630716][ C1] handle_softirqs+0x2c5/0x980 [ 1648.630743][ C1] ? do_softirq+0x11b/0x1e0 [ 1648.630767][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1648.630796][ C1] do_softirq+0x11b/0x1e0 [ 1648.630818][ C1] [ 1648.630824][ C1] [ 1648.630831][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1648.630854][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 1648.630883][ C1] ? rcu_is_watching+0x15/0xb0 [ 1648.630904][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 1648.630928][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 1648.630950][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1648.630974][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1648.630997][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 1648.631021][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 1648.631050][ C1] ? process_scheduled_works+0x976/0x1850 [ 1648.631075][ C1] process_scheduled_works+0xa63/0x1850 [ 1648.631114][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1648.631143][ C1] ? assign_work+0x364/0x3d0 [ 1648.631169][ C1] worker_thread+0x870/0xd30 [ 1648.631199][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1648.631225][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1648.631253][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1648.631278][ C1] kthread+0x2f0/0x390 [ 1648.631294][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1648.631320][ C1] ? __pfx_kthread+0x10/0x10 [ 1648.631338][ C1] ret_from_fork+0x4b/0x80 [ 1648.631364][ C1] ? __pfx_kthread+0x10/0x10 [ 1648.631381][ C1] ret_from_fork_asm+0x1a/0x30 [ 1648.631413][ C1] [ 1649.491687][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1649.498609][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 1649.509160][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1649.519261][ T30] Call Trace: [ 1649.522570][ T30] [ 1649.525527][ T30] dump_stack_lvl+0x241/0x360 [ 1649.530244][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1649.535488][ T30] ? __pfx__printk+0x10/0x10 [ 1649.540146][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1649.546179][ T30] ? vscnprintf+0x5d/0x90 [ 1649.550559][ T30] panic+0x349/0x880 [ 1649.554499][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1649.560693][ T30] ? __pfx_panic+0x10/0x10 [ 1649.565143][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1649.570551][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1649.576139][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1649.581545][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1649.587753][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1649.593950][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1649.600148][ T30] watchdog+0x1033/0x1040 [ 1649.604518][ T30] ? watchdog+0x1ea/0x1040 [ 1649.608978][ T30] ? __pfx_watchdog+0x10/0x10 [ 1649.613692][ T30] kthread+0x2f0/0x390 [ 1649.617789][ T30] ? __pfx_watchdog+0x10/0x10 [ 1649.622508][ T30] ? __pfx_kthread+0x10/0x10 [ 1649.627132][ T30] ret_from_fork+0x4b/0x80 [ 1649.631590][ T30] ? __pfx_kthread+0x10/0x10 [ 1649.636217][ T30] ret_from_fork_asm+0x1a/0x30 [ 1649.641051][ T30] [ 1649.644599][ T30] Kernel Offset: disabled [ 1649.648934][ T30] Rebooting in 86400 seconds..