last executing test programs: 14.3780411s ago: executing program 1 (id=785): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) rmdir(&(0x7f0000000080)='./cgroup\x00') r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x9}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e21, 0x2, @mcast1, 0x8}}, [0x2, 0x7fff, 0xe00000, 0xffffffff, 0x2, 0x100, 0x4fa80d32, 0x36e6, 0xfffffffffffffffc, 0xe1, 0xc3, 0x0, 0xc, 0x8, 0xbf]}, &(0x7f0000000200)=0x100) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$tipc(r3, &(0x7f00000006c0)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x1, 0x2}, 0x3}}, 0x10, &(0x7f0000000680)=[{&(0x7f00000003c0)="fa0497eb18e3548c00256f7534f116ae36480cf37bb5dda14d182765a036994599126e756a935e2b0b3563658dbb0c891d5704c3fea63364190dfd741bca0f0e8a15408c1d6623e0cd9a782438b31cc00397bfe385540daddf10afedc8fdcfdb69dc4df3281460d3258b5c04d45b7bd27e47154c391a2cd85e2323c7b9950b", 0x7f}, {&(0x7f0000000440)="6c1485a54bfab541a8c3a2c4cd63ade0c4dd059ff10ad52ecd356d52b6f3479eec20cb34bae5cad757383872e10e5e68a860f8a50c73dc0ea1f15bf75233e1cade76b6448ee293e5386ac55b2074850cf7eb28ab347810eb2e3d44636ebcd7c13026a677a8b6766a829b87f5c3822833c3bf4de947eb9a29797974bdf8488ad05059a1fafc98880f7752e3dbf1eaa1cbd2f4d349a57e325dbaea7e7a7e76672674c10d1d5aa9ea709d21bb636b9375f94c19fe1dfd66bfe883f6d47d48cd3c3872b276d06bc9c0886149951497c63dbf", 0xd0}, {&(0x7f0000000540)="d9fd175adf9144ec5d4c303105e7479d40d61350c07f4ed69530e41b72e218f2f28fbcef80cd033b1ff48e5f10377394eb7dde5b8933683c1fb32c2b0cbb24a08eb4648e5789a9a7863c7677111bb529f498d34ef0dfa101b261f6cba4d1bb5ae24f0ab7c0f685a1ddfcbea5884c3d009460ecf6827fd80618159a96dffd287bc1861c1858ca24c03a269ad8c74b8b7d523f74196ec1ae1c4b14e1b9b33afdc3df8a455f038e7cfdead3566479f92e3094476a20967041506455080ac4fa4ed9071b779a71628d33e5a9eae11dee93d2c6ed373773b636f6787bc5174228315c1c2ba9d468f479e6ef628af4b6", 0xed}, {&(0x7f0000000640)="f6635e94d1471375e65a5d3ec9c3e15136cc8d1903d32a137f9491cbd5ab78d54166fd3d", 0x24}], 0x4, 0x0, 0x0, 0x23f8d3c59a9c3e73}, 0x8081) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) 14.094766888s ago: executing program 1 (id=787): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) 13.841015761s ago: executing program 2 (id=790): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f00000000c0)) 13.149911605s ago: executing program 2 (id=792): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x89e0, 0x40, 0x0, 0x800}, &(0x7f0000c57000), 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800002c1001c0"]) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) 12.502067269s ago: executing program 0 (id=795): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000010c0)={'vlan1\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001e00dedc9a8b98cf2e42149fffffff00400000000007010000", @ANYRES32=0x0, @ANYBLOB="000000000600050004000000"], 0x24}}, 0x0) syz_io_uring_setup(0x64e5, &(0x7f0000000480)={0x0, 0x1fc, 0x2, 0x2, 0x200000}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) memfd_create(&(0x7f0000000280)='%\x00', 0x4) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x800, 0xfffffffd, 0x324}) socket$inet6_sctp(0xa, 0x0, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x240001, 0x5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) llistxattr(0x0, 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000740)={0x0, 0xb4, "f657be3fdd76cea9805e7a507f3afbd542f6231382d2290c75caa56421c241f4462a83a2ebd6d149069de029544f89594689365b2414f7918454c67ad0b92ed10823b3fddc7389bd8b5de694a5063b769602ac9ee549226db08df963e3ae55f518e6a5ec851eb3f45f656bede53ddaf86e9027ec189baf831efe490427bb677339a99c3fbf545ae654179fae91cbfa73a2ce1855a40d0e5ebd963c2aa2c01a466d5d948bf89aa6f651e6006a61657b48c297ec11"}, &(0x7f0000000140)=0xbc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r5, 0x0, 0x3}, &(0x7f0000000400)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time_for_children\x00') migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) 12.015394672s ago: executing program 2 (id=798): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x6, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'veth1_vlan\x00'}) socket$kcm(0x10, 0xf, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000000c0)={0xa, {0x0, 0x3, 0x11}}, 0xa) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) read(r0, &(0x7f0000000100)=""/217, 0xd9) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 11.778661483s ago: executing program 2 (id=799): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0xb, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = dup(r1) r3 = syz_io_uring_setup(0x2500, &(0x7f0000000340)={0x0, 0x42ae, 0x1000, 0x2, 0x2bf}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, r2, &(0x7f00000000c0)={0xa0000, 0x20, 0x6}, &(0x7f0000000200)='./file0\x00', 0x18, 0x0, 0x23456}) io_uring_enter(r3, 0x1066, 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0xffff, 0x4) r6 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r6, 0x200002) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) sendfile(r8, r7, 0x0, 0x80001d00c0d0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/154, 0x9a}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=""/19, 0x13}}], 0x2, 0x2001, 0x0) unshare(0x26020280) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000006d000100"/20, @ANYRES32=r10, @ANYBLOB="0000aeff6c000000000000040034801b0d1a547df68f7224fa5671c9769b1ef2555cd3ec97fadcd97bdee672f61e920742a4a28f0d3781e3b6502783dd7891558f78b13baf30828d7841ab1f01e4c73ac088"], 0x24}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a300000000054000000030a01030000000100010000050000000900010073797a30000000002800048008000140000000011400040076657468315f766972745f77696669000800024000000000090003"], 0x9c}}, 0x0) unshare(0x0) waitid(0x0, 0x0, 0x0, 0x60000004, 0x0) 11.298132121s ago: executing program 2 (id=800): msgget$private(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffe8b, &(0x7f0000000100)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x16, 0x0, &(0x7f00000000c0)=0x600) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) pipe(&(0x7f0000000040)) unshare(0x2a000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r6 = syz_pidfd_open(0x0, 0x0) ftruncate(r6, 0xffffff7f) dup(r2) 10.926810937s ago: executing program 1 (id=802): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000000c0)) 10.597460389s ago: executing program 1 (id=804): syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000709c3120e804f2cc01669b81010203010902120001000000000904000000a35f5006a68cbe996d080f192d115551de540d1f4f6627c5e80436f259553b17fa47a850b7e482e2dc6f7a35487187ddb2f3ccfef25c07fa6302c951e47700fe94d2a603ca395f88a15409badbc45762aed07b67a0d4576e5c8d7346b2c2506ebdfa1efacd0ae2b934f00ad0d56991ab7810bcdef55e776d02a855297ed57e"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x9) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'tunl0\x00', r2, 0x20, 0x700, 0x6, 0x2, {{0x16, 0x4, 0x3, 0x0, 0x58, 0x67, 0x0, 0x6, 0x2f, 0x0, @private=0xa010101, @empty, {[@end, @noop, @cipso={0x86, 0x16, 0x1, [{0x1, 0x3, "e5"}, {0x6, 0x3, 'q'}, {0x1, 0xa, "ba273af91e4e3931"}]}, @end, @end, @noop, @cipso={0x86, 0x28, 0x983892b025299182, [{0x2, 0x4, "44a4"}, {0x1, 0xf, "d7862b9c8575720dd10dee6af0"}, {0x2, 0xf, "207b61bade96e6ffa5985116ee"}]}]}}}}}) pipe(&(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket(0x15, 0x5, 0x0) connect$unix(r6, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname$packet(r6, 0x0, &(0x7f0000000240)) r7 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r7, 0x1, &(0x7f0000000180)={&(0x7f0000000280)=""/36, 0x24}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988120000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 10.356681896s ago: executing program 0 (id=806): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) (async) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f00000eb000/0x3000)=nil) (async) r0 = shmget$private(0x0, 0x3000, 0x10, &(0x7f00000eb000/0x3000)=nil) shmat(r0, &(0x7f00003b7000/0x1000)=nil, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e000021d87040de360d60ad28ec6ba2b441d996e270a941bd44970a694bfea8769664af7303e0679a18faa7ceae389647295872318caa82f69e20578b", @ANYRES32=r2, @ANYBLOB="08001f0008000000"], 0x44}}, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@bridge_newvlan={0x24, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x3}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@bridge_newvlan={0x24, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x3}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) read(r5, &(0x7f0000001a00)=""/177, 0xb1) (async) read(r5, &(0x7f0000001a00)=""/177, 0xb1) socket$kcm(0x10, 0x2, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a00010000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000cc000480640001800c0001007061796c6f6164005400028008000140000000110800084000000000080005400000000b080003400000000508000840000000000800044000000008080001400000000e08000640000000000800044000000003080002"], 0x128}}, 0x0) 8.762047051s ago: executing program 2 (id=807): syz_open_dev$loop(&(0x7f00000001c0), 0xfff, 0x107382) r0 = memfd_create(&(0x7f0000000f40)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xefE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xd1\xa7@\xa1_B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7<\x7f\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xb0\xe1\xe6\xa6H\x1e\xfb\xb8S\x8b\x92\\\asW-Ee\x02\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcd\x90\x95\xdd\x8a\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x004\x00\x00\x00\x00\x00\x04\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7Ze.D \x10[F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1d`\xf5\x1c\xa7\b\xc9\xdd]tX\xf6\xac\xd3\x15\x18\xa0\xe3\xbb\xc8\xb4\x8ev\xact\">\xc11s\x01\x00\xc1\xd1\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\xc8\x98^\n', 0x0) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000380)="b9", 0x1}], 0x1, 0x800000, 0x2) r1 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee8000004002000001000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r3, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x3c}}, 0x880) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008020122010009058103"], 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x11, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40b80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x3, 0x1, 0x1b, 0x1e, 0x156, &(0x7f0000000700)}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x301}, 0x14}}, 0x0) ioctl$TIOCSTI(r5, 0x5423, &(0x7f0000000080)=0x7) 8.630734228s ago: executing program 4 (id=808): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x89e0, 0x40, 0x0, 0x800}, &(0x7f0000c57000), 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800002c1001c0"]) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) 7.785096534s ago: executing program 0 (id=810): creat(&(0x7f0000000300)='./file0\x00', 0x363) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='./file1\x00') execve(&(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000400)={[&(0x7f0000000200)='\xae', &(0x7f00000002c0)=':$:*%\x00', &(0x7f0000000380)='\xdb#{}\'%\x87\xc8\x14,[:(, %@@\\\\-@*\x00']}) (fail_nth: 8) 7.517546517s ago: executing program 4 (id=811): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x5502000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 7.213727874s ago: executing program 1 (id=812): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) 6.650741073s ago: executing program 0 (id=815): ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (fail_nth: 1) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) keyctl$set_timeout(0xf, r0, 0x0) 6.237187095s ago: executing program 4 (id=817): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000013c0), 0x3, 0x2) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000001400)={0x5, 0x1700, "6f1f28f872aec18d0b0000000000000000000000f04d228f", {0x8}, 0x2c24b2eb}) select(0x40, &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000800)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000880)={{}, {r2, r3+60000000}}, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0, 0x1c}}, 0x0) timerfd_settime(r4, 0x1, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000100)) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="01", 0x1, 0xfffffffffffffffe) r7 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r7, r6}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={'crc32-generic\x00'}}) r8 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), 0x0) io_uring_enter(r8, 0xa3d, 0x0, 0x0, 0x0, 0x0) 5.958565991s ago: executing program 3 (id=818): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00'}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000000801f5ffffffffffffff00050000060900010073797a0300000000040004800600024008000000050003"], 0x34}}, 0x24040840) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0xc}, {0xb}, {0xffe0}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x18, 0x0, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}, [@HEADER={0x4}]}, 0x18}}, 0x0) getpeername$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', r6, 0x29, 0x6, 0x7, 0x0, 0x40, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x8008, 0x2}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x10000804}, 0x0) 2.759190312s ago: executing program 4 (id=819): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000140, 0x0, 0x0, 0x20000170, 0x200001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB]}, 0x78) 2.720554076s ago: executing program 1 (id=820): socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902980003010000000904000000010100000a24010000000201020624040300bb0904010000010200000904010101010200000c24020200000000001cff130a24020100010000b48a0b240201000000000614af09050109000000000007250100000000090402000001020000090402010101020000072401000002000b24020108000001861b360905820908"], 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0xb5}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r2, @ANYBLOB="830405000000000020001280090001006970697000000000100002800500ff0089000000040013"], 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty}}}], 0x20}}], 0x1, 0x0) 2.350583902s ago: executing program 0 (id=821): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x89e0, 0x40, 0x0, 0x800}, &(0x7f0000c57000), 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000480)={{&(0x7f0000ca0000/0x2000)=nil, 0x2000}}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) 2.347943748s ago: executing program 4 (id=822): open_by_handle_at(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f00000000c0)={r1, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x2000000}, &(0x7f00000001c0)=0x9c) 2.227086891s ago: executing program 4 (id=823): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(r3, r3, 0x0, 0x9) r4 = socket$alg(0x26, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r5) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=@deltfilter={0xf00, 0x2d, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x8}, {0x0, 0xb}, {0x9, 0xffe0}}, [@f_rsvp6={{0xa}, {0xed0, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x1, 0x8}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x0, 0x0, 0x7fff}, {0x3, 0xfab, 0x8001}, 0x73, 0x91, 0xdc}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xa, 0x6}}, @TCA_RSVP_ACT={0xe9c, 0x6, [@m_pedit={0xe98, 0x1b, 0x0, 0x0, {{0xa}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0xfffffffb, 0x9, 0xffffffffffffffff, 0x6, 0x20}, 0x9, 0x7, [{0x4, 0x200, 0x6, 0x8, 0x8c, 0x10000}, {0x3, 0x8, 0x6, 0x8001, 0x10, 0x7}, {0x9, 0xec, 0x3, 0x2710, 0xc622, 0x2}]}, [{0x7, 0x2, 0x459709d5, 0x7fff, 0x9}, {0x2, 0xd9f3, 0x6, 0x6, 0xfffffffa, 0x6}, {0x1, 0x6, 0x6, 0x40, 0x60000, 0x10000}, {0x0, 0xffffffff, 0x6, 0x6, 0x7ff, 0x140}, {0x10001, 0x8, 0x800, 0x7, 0x7, 0x3}, {0x4, 0x9, 0x1, 0x3, 0x3}, {0x6, 0x38, 0x5, 0x6d, 0x401, 0x2}, {0x1, 0x9, 0x30000, 0x80000000, 0x3, 0xe}, {0x9, 0x8, 0x3, 0x200, 0x0, 0x4}, {0x80000000, 0x401, 0x4, 0x9, 0x4, 0x53}, {0x8, 0xfa4d, 0x0, 0x9, 0x76d, 0x2}, {0x1c, 0x8, 0x8, 0x7, 0xb6, 0x3}, {0x10001, 0x8, 0xb07, 0x9, 0x101, 0x3}, {0x1, 0x4, 0xc5, 0x0, 0x60de, 0xbd}, {0xffff7fff, 0x5, 0x7, 0x10000, 0xffff, 0x5}, {0x5, 0x10000, 0x80000000, 0x7, 0x8, 0x9}, {0x5, 0x8000, 0x200, 0x3, 0x4, 0x2515}, {0x1, 0x5, 0x8, 0x3, 0x3, 0x200}, {0x6e2507da, 0x1, 0x5, 0x6, 0x9, 0x80}, {0x7, 0x6, 0x4, 0xfffffffb, 0x3, 0x3}, {0x99, 0x0, 0x6, 0x3, 0x7, 0x3ff}, {0xffff, 0x4, 0x5, 0x5, 0x8, 0xff}, {0x4, 0xfffffffc, 0x0, 0x10000, 0x2, 0x5}, {0x7, 0x7ff, 0x4, 0x7, 0x2, 0xff}, {0x6, 0x7f, 0x3, 0x10, 0x68c, 0x7}, {0x4, 0x5, 0x7, 0x1b9e52cd, 0x4, 0x8000}, {0xd, 0x4, 0x0, 0x7, 0x0, 0x4}, {0xd, 0x842, 0x1f114794, 0x5, 0x2, 0x3}, {0x42, 0x8, 0x4, 0x2, 0x7, 0x4}, {0x1, 0x6, 0x7, 0x4, 0x7}, {0x101, 0x2, 0x9, 0xe, 0x6, 0x8}, {0x7ff, 0x5f, 0xc, 0x3, 0x1, 0x60}, {0x0, 0x639, 0x7, 0xd15, 0x2, 0x10001}, {0x4, 0x7fff, 0x3, 0x1, 0xc, 0x9}, {0xffff, 0x1000, 0x2, 0x73c, 0x7, 0x8}, {0x1, 0xffff, 0x8, 0x3, 0x0, 0x4968}, {0x0, 0x5, 0x10000000, 0x0, 0x6, 0x7}, {0xfffff801, 0x7f, 0x3, 0xffffffff, 0x2, 0xd3e}, {0x40, 0x3, 0x5, 0x10000, 0x14}, {0x10, 0xfffffffd, 0x4, 0x7882, 0x8, 0x8}, {0x10000, 0xc, 0x3, 0x1, 0x400, 0x80000000}, {0x4ec, 0x2, 0x8, 0x5, 0x7, 0x5}, {0x10000, 0x3c0d, 0x5, 0x5, 0x9, 0x7}, {0xff, 0x6f5b, 0x3, 0x5, 0x0, 0xffffffff}, {0x1, 0xff, 0x3, 0x10, 0x3f7, 0x5}, {0x1f8, 0x6, 0x5, 0x1, 0x7, 0x7}, {0xfff, 0x0, 0x2, 0x7194, 0x2, 0x6}, {0x5, 0x7, 0xc, 0x800, 0x9, 0x92de}, {0x10000, 0xe10, 0x8, 0x6, 0x8, 0x3}, {0x3, 0x81, 0x101, 0x1, 0x8, 0xd}, {0x8, 0x4c1, 0x1, 0x7, 0x3, 0x7}, {0x81, 0x9, 0x9, 0x4, 0x9, 0xa}, {0x3, 0x7, 0x33, 0x3, 0x2, 0x1}, {0x9, 0x2, 0xa, 0x3ff, 0x6, 0x7ff}, {0x2, 0x7, 0x6, 0x1, 0x662, 0x3}, {0x30000, 0x2, 0x9, 0x4, 0x1, 0x9}, {0x0, 0x9, 0x80000000, 0x4, 0xe4, 0x1}, {0x7, 0x8, 0x1ff, 0x200, 0x6, 0x5}, {0x6fa9, 0x1b93, 0x3, 0x10000, 0x4, 0xfff}, {0x4, 0x4, 0x3, 0x9, 0xffff, 0x2}, {0xfffffff3, 0x3, 0x6000, 0x4b, 0x6, 0xc580}, {0x6, 0x9, 0x2, 0x10001, 0xe4d2206, 0x9d8b}, {0xa, 0xfffffffd, 0x40, 0x9, 0x6, 0xaf}, {0xfffffffb, 0xfffffff1, 0x0, 0x8, 0x7954, 0x6}, {0x1, 0x6, 0x0, 0x1, 0x9, 0x5}, {0x3, 0x6, 0xffff8a55, 0x4, 0x3, 0x7}, {0x6e4, 0x4, 0x1ff, 0xd63, 0x1, 0x80000000}, {0x1, 0x9, 0xdc0900, 0x7f, 0xb, 0x288}, {0x0, 0x3, 0x3ba, 0x8, 0x7}, {0x92d, 0xb75d, 0xffffffff, 0x0, 0x5, 0x8}, {0x104a5173, 0xa, 0x8000, 0x4, 0x40, 0xfffffff9}, {0x824f, 0x7fff, 0x2, 0xf, 0x258, 0x3}, {0x2, 0xe, 0x0, 0x9, 0x8, 0x5}, {0x100, 0x5, 0x8, 0x5, 0x785, 0xa69}, {0x3000, 0x1, 0x24d10eec, 0xf34c, 0x6, 0x400}, {0x0, 0x4, 0x8, 0x7, 0x1ff, 0x8bb}, {0x2, 0xce, 0x4, 0x9, 0x2, 0xe2522967}, {0x1dee0, 0x5, 0x8001, 0x9, 0x80, 0x2}, {0x3, 0x97, 0xd377, 0x9, 0x0, 0x7fffffff}, {0x8001, 0x2, 0xffff, 0x6, 0xa6a3, 0x4}, {0x15, 0x8, 0x89b, 0xfffffc00, 0x4000, 0x6}, {0x8, 0x1, 0x1, 0xffffffff, 0x8, 0xd58b}, {0x100, 0x0, 0x400, 0x5, 0x80000000, 0x5}, {0x10001, 0xd, 0xffffff09, 0x3, 0x7, 0x1ff}, {0x2, 0x9, 0x5, 0x2, 0x5, 0x8}, {0x81, 0x0, 0x7, 0x9, 0xffffffff, 0x6}, {0x3, 0xf, 0x8, 0x7, 0x2, 0x7}, {0x7, 0x8, 0x80, 0x6, 0xfbc, 0x7}, {0x8, 0x8, 0xb, 0xffff, 0x8, 0x1}, {0x5, 0x5, 0x8000, 0x9, 0x8, 0x3}, {0x2, 0xfffffffa, 0x8000, 0x8, 0x4, 0x5}, {0x0, 0x5, 0x200, 0x4, 0x0, 0x4}, {0x1, 0x80, 0x5, 0x4, 0x4, 0x28d}, {0x7, 0x0, 0xffff, 0x8, 0x401, 0x8}, {0xc8, 0x6, 0x9ac, 0x7, 0x9, 0xfff}, {0x255, 0x800, 0x9, 0x5, 0x139, 0x20}, {0x5397, 0x4, 0xf3, 0x8, 0x40, 0x4}, {0x401, 0x4, 0x5, 0xb00, 0x1, 0x100}, {0x7, 0x9f0b, 0x80000000, 0x1000, 0x6, 0x9}, {0x13dc, 0x0, 0x3, 0x8, 0x3, 0x2e}, {0x0, 0x7fff, 0xfffffffc, 0x80, 0x0, 0x1}, {0x3, 0x7f, 0x8, 0x4, 0xb705, 0x9}, {0x9, 0xc669, 0x0, 0x3, 0x10, 0xb58a}, {0x2, 0x8, 0x5, 0x7, 0x6, 0xff}, {0x3, 0x6, 0x6, 0x7, 0x8, 0xb54}, {0x74, 0x7, 0x9458, 0x1, 0x4, 0x40}, {0x0, 0x9d51, 0x28000, 0x1ff, 0x0, 0x100}, {0x0, 0xf830, 0x99, 0xf56a, 0x7, 0x9}, {0x2, 0x4, 0x9, 0x29c0, 0x4, 0x318d}, {0x6, 0x401, 0x7fffffff, 0x0, 0x9, 0x21c4}, {0x19e00, 0x2, 0x8, 0x3, 0x1000, 0x40}, {0xbdf, 0x1, 0x0, 0x6, 0x5, 0x4}, {0x706, 0x60000, 0x2, 0x2, 0x5, 0x2}, {0x4, 0x4, 0x7, 0x4, 0x8, 0x4}, {0x3ddc, 0xb2, 0x8, 0x7, 0x4, 0x6}, {0x5, 0x6, 0x101, 0x6581a894, 0x68b01b62, 0x7}, {0x7ff, 0x4, 0xffffff80, 0x9, 0x2, 0x6}, {0x7ff, 0x10001, 0x4, 0x5c8b, 0xfff, 0x8c}, {0x9, 0x3, 0x5, 0x9, 0x3, 0x1}, {0x9, 0xfffffffe, 0x4, 0x2, 0x8, 0x7fffffff}, {0x177f, 0x9, 0x0, 0xa, 0x401, 0x8}, {0x7f, 0xf938, 0x40000000, 0xfffffff9, 0xd00db332, 0xe4}, {0xda, 0x6, 0x3, 0x1, 0x1, 0x4}, {0x1d, 0xfffffff9, 0x4, 0x3627, 0x0, 0x1ff}, {0x7, 0x6, 0x2909, 0xfff, 0x401, 0x4896}, {0x1ff, 0x7, 0x7fff, 0x80, 0x5, 0xb}, {0x0, 0x7, 0x3, 0x3, 0x4, 0x70}, {0x800, 0x5, 0x2, 0xfffffc00, 0x9, 0x1}], [{0x3, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x1}, {}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x4}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x7}, {0x4}, {0x0, 0x1}, {0x4}, {0x4}, {}, {0x5}, {0x1, 0x1}, {0x0, 0xff5d058f63cf0506}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x6}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x2}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x2}, {0x6, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xf00}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1.95662868s ago: executing program 3 (id=824): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a0000001400078005001500000000"], 0x60}}, 0x0) 1.794736817s ago: executing program 3 (id=825): r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, 0x0}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x62, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe8000000000000000000000000000aa3a020201"], 0x0) 1.580077988s ago: executing program 3 (id=826): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000000c0)) 1.127261776s ago: executing program 3 (id=827): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000000", @ANYRES32=0x0], 0x24}, 0x1, 0x5502000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 865.184443ms ago: executing program 0 (id=828): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000300)=ANY=[@ANYRESDEC=r1], 0x14}], 0x1}, 0x20048000) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x810001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x5ad8d27b}], 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000140)={0x0, 0x0, {0x13, 0x21, 0x14, 0x8, 0x6, 0x0, 0x2, 0x800011e, 0x1}}) r6 = syz_io_uring_setup(0x178b, &(0x7f0000000480)={0x0, 0x19ee, 0x0, 0x0, 0x2, 0x0, r4}, &(0x7f0000000180), &(0x7f0000000080)) socket$inet6(0xa, 0x0, 0x0) io_uring_enter(r6, 0x0, 0x0, 0x1, 0x0, 0x0) fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00') setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r7 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)='0', 0xcea40}], 0x2}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x60a42, 0x0) write$proc_mixer(r8, 0x0, 0x0) close(r8) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x56) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, &(0x7f0000000040)=0x2, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 0s ago: executing program 3 (id=829): socket$nl_rdma(0x10, 0x3, 0x14) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x22a00, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000240), &(0x7f0000000280)=@v2={0x2000000, [{0x2, 0x5}, {0x7, 0xffffff81}]}, 0x18, 0x1) (async) remap_file_pages(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) r2 = gettid() bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) (async) syz_open_procfs$namespace(r2, 0x0) (async) socket$rds(0x15, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = io_uring_setup(0x3b4a, &(0x7f0000000ac0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x3a0a, 0xbc, 0x1, 0xb}, {0x3, 0xa6, 0x5, 0x10001}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012801100010300724b6467655f736c6176650006000000000580"], 0x3c}}, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) kernel console output (not intermixed with test programs): if_netlink_parms(): no params data found [ 441.624548][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.638023][ T9834] chnl_net:caif_netlink_parms(): no params data found [ 441.730358][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.741019][ T5226] Bluetooth: hci3: command tx timeout [ 441.858815][ T5281] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 441.891329][ T5226] Bluetooth: hci4: command tx timeout [ 442.012952][ T4615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 442.026351][ T4615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 442.034957][ T5281] usb 2-1: config 0 has an invalid interface number: 116 but max is 0 [ 442.044945][ T5281] usb 2-1: config 0 has no interface number 0 [ 442.054112][ T5281] usb 2-1: too many endpoints for config 0 interface 116 altsetting 101: 115, using maximum allowed: 30 [ 442.065541][ T4615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 442.074511][ T5281] usb 2-1: config 0 interface 116 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 442.090752][ T5281] usb 2-1: config 0 interface 116 has no altsetting 0 [ 442.109106][ T4615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 442.118395][ T4615] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 442.119963][ T5281] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 442.134891][ T4615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 442.158477][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.190779][ T5281] usb 2-1: Product: syz [ 442.195039][ T5281] usb 2-1: Manufacturer: syz [ 442.224154][ T5281] usb 2-1: SerialNumber: syz [ 442.231106][ T5281] usb 2-1: config 0 descriptor?? [ 442.307641][ T9839] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.316008][ T9839] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.323857][ T9839] bridge_slave_0: entered allmulticast mode [ 442.331817][ T9839] bridge_slave_0: entered promiscuous mode [ 442.340944][ T9839] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.348138][ T9839] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.356470][ T9839] bridge_slave_1: entered allmulticast mode [ 442.364975][ T9839] bridge_slave_1: entered promiscuous mode [ 442.490174][ T5281] usb 2-1: USB disconnect, device number 23 [ 442.610682][ T9839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.623571][ T9839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.633864][ T9834] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.641518][ T9834] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.649045][ T9834] bridge_slave_0: entered allmulticast mode [ 442.655946][ T9834] bridge_slave_0: entered promiscuous mode [ 442.663918][ T9834] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.671334][ T9834] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.678698][ T9834] bridge_slave_1: entered allmulticast mode [ 442.685781][ T9834] bridge_slave_1: entered promiscuous mode [ 442.698361][ T35] bridge_slave_1: left allmulticast mode [ 442.705672][ T35] bridge_slave_1: left promiscuous mode [ 442.719000][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.731311][ T35] bridge_slave_0: left allmulticast mode [ 442.737049][ T35] bridge_slave_0: left promiscuous mode [ 442.743896][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.763786][ T35] bridge_slave_1: left allmulticast mode [ 442.770177][ T35] bridge_slave_1: left promiscuous mode [ 442.775944][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.785956][ T35] bridge_slave_0: left allmulticast mode [ 442.792652][ T35] bridge_slave_0: left promiscuous mode [ 442.798714][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.418712][ T25] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 443.566377][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.585366][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.585856][ T25] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 443.603297][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.613806][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 443.622332][ T35] bond0 (unregistering): Released all slaves [ 443.624824][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.642229][ T25] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 443.651724][ T25] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 443.659898][ T25] usb 2-1: Product: syz [ 443.664217][ T25] usb 2-1: Manufacturer: syz [ 443.676137][ T25] cdc_wdm 2-1:1.0: skipping garbage [ 443.683936][ T25] cdc_wdm 2-1:1.0: skipping garbage [ 443.691700][ T25] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 443.697716][ T25] cdc_wdm 2-1:1.0: Unknown control protocol [ 443.811667][ T4615] Bluetooth: hci3: command tx timeout [ 443.870112][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.884081][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.903195][ T9882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.920588][ T9882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.921619][ T35] bond0 (unregistering): Released all slaves [ 443.933235][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 443.941896][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 443.948229][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 443.954878][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 443.961415][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 443.968055][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 443.974341][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 443.981256][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 443.988865][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 443.996164][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 444.002667][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 444.009334][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 444.015650][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 444.022385][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 444.028691][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 444.035335][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 444.041677][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 444.048360][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 444.054737][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 444.061439][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 444.071729][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 444.080752][ T25] usb 2-1: USB disconnect, device number 24 [ 444.087854][ T4615] Bluetooth: hci4: command tx timeout [ 444.212459][ T4615] Bluetooth: hci2: command tx timeout [ 444.253830][ T9839] team0: Port device team_slave_0 added [ 444.262819][ T9834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.316671][ T9839] team0: Port device team_slave_1 added [ 444.350951][ T9834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.390806][ T9834] team0: Port device team_slave_0 added [ 444.455195][ T9839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.462842][ T9839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.468831][ T25] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 444.490877][ T9839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.513302][ T9839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.525884][ T9839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.553964][ T9839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.567795][ T9834] team0: Port device team_slave_1 added [ 444.641089][ T9834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.649324][ T9834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.676361][ T9834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.689428][ T25] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 444.698489][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.708816][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 444.717869][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.731527][ T25] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 444.740827][ T25] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 444.750359][ T25] usb 2-1: Product: syz [ 444.754598][ T25] usb 2-1: Manufacturer: syz [ 444.772970][ T25] cdc_wdm 2-1:1.0: skipping garbage [ 444.778262][ T25] cdc_wdm 2-1:1.0: skipping garbage [ 444.784918][ T25] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 444.796360][ T25] cdc_wdm 2-1:1.0: Unknown control protocol [ 444.851323][ T9834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.858426][ T9834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.887388][ T9834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.007916][ T9839] hsr_slave_0: entered promiscuous mode [ 445.017306][ T9839] hsr_slave_1: entered promiscuous mode [ 445.024415][ T9839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 445.034570][ T9839] Cannot create hsr debugfs directory [ 445.056336][ T9740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 445.093113][ T35] hsr_slave_0: left promiscuous mode [ 445.100936][ T35] hsr_slave_1: left promiscuous mode [ 445.116090][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.125649][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.139943][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.155360][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.180421][ T35] hsr_slave_0: left promiscuous mode [ 445.188136][ T35] hsr_slave_1: left promiscuous mode [ 445.200866][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.215229][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.224896][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.241474][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.293145][ T35] veth1_macvtap: left promiscuous mode [ 445.298827][ T35] veth0_macvtap: left promiscuous mode [ 445.304619][ T35] veth1_vlan: left promiscuous mode [ 445.310671][ T35] veth0_vlan: left promiscuous mode [ 445.317421][ T35] veth1_macvtap: left promiscuous mode [ 445.323709][ T35] veth0_macvtap: left promiscuous mode [ 445.329595][ T35] veth1_vlan: left promiscuous mode [ 445.334954][ T35] veth0_vlan: left promiscuous mode [ 445.738449][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.744965][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.889405][ T4615] Bluetooth: hci3: command tx timeout [ 446.147157][ T4615] Bluetooth: hci4: command tx timeout [ 446.289398][ T4615] Bluetooth: hci2: command tx timeout [ 446.394238][ T35] team0 (unregistering): Port device team_slave_1 removed [ 446.462889][ T35] team0 (unregistering): Port device team_slave_0 removed [ 446.837522][ T25] usb 2-1: USB disconnect, device number 25 [ 447.348806][ T5281] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 447.509224][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 447.531532][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.551963][ T5281] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 447.561207][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.584521][ T5281] usb 2-1: config 0 descriptor?? [ 447.607825][ T5281] hub 2-1:0.0: USB hub found [ 447.703698][ T35] team0 (unregistering): Port device team_slave_1 removed [ 447.767784][ T35] team0 (unregistering): Port device team_slave_0 removed [ 447.968844][ T4615] Bluetooth: hci3: command tx timeout [ 448.208791][ T4615] Bluetooth: hci4: command tx timeout [ 448.368839][ T4615] Bluetooth: hci2: command tx timeout [ 448.686987][ T9740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 448.828002][ T9740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 448.979253][ T9740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 449.011641][ T4615] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 449.020844][ T4615] Bluetooth: hci1: Injecting HCI hardware error event [ 449.031565][ T4615] Bluetooth: hci1: hardware error 0x00 [ 449.129267][ T9834] hsr_slave_0: entered promiscuous mode [ 449.136569][ T9834] hsr_slave_1: entered promiscuous mode [ 449.144112][ T9834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.152957][ T9834] Cannot create hsr debugfs directory [ 449.438436][ T9877] chnl_net:caif_netlink_parms(): no params data found [ 450.126839][ T5281] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 450.232884][ T5281] usbhid 2-1:0.0: can't add hid device: -71 [ 450.259995][ T5281] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 450.318514][ T5281] usb 2-1: USB disconnect, device number 26 [ 450.371612][ T9877] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.391881][ T9877] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.409357][ T9877] bridge_slave_0: entered allmulticast mode [ 450.433515][ T9877] bridge_slave_0: entered promiscuous mode [ 450.452799][ T5226] Bluetooth: hci2: command tx timeout [ 450.485953][ T9740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.525704][ T9877] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.534528][ T9877] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.542256][ T9877] bridge_slave_1: entered allmulticast mode [ 450.550619][ T9877] bridge_slave_1: entered promiscuous mode [ 450.647498][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.662177][ T9949] program syz.1.698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 450.726413][ T9740] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.751376][ T9877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.775865][ T9877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.830728][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.907517][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.914767][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.997304][ T9877] team0: Port device team_slave_0 added [ 451.014273][ T9877] team0: Port device team_slave_1 added [ 451.089180][ T4615] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 451.090797][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.155666][ T3645] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.162921][ T3645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.325812][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.367403][ T9877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.376782][ T9877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.413516][ T9877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.433921][ T9877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.444526][ T9877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.518753][ T9877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.659515][ T9839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 451.691291][ T9839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 451.831801][ T9839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 451.877488][ T9839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 451.929892][ T9877] hsr_slave_0: entered promiscuous mode [ 451.937373][ T9877] hsr_slave_1: entered promiscuous mode [ 451.945262][ T9877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.954582][ T9877] Cannot create hsr debugfs directory [ 451.978259][ T5226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 451.995853][ T5226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 452.005583][ T5226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 452.018438][ T5226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 452.034036][ T5226] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 452.042637][ T5226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 452.217570][ T35] bridge_slave_1: left allmulticast mode [ 452.227041][ T35] bridge_slave_1: left promiscuous mode [ 452.233437][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.243208][ T35] bridge_slave_0: left allmulticast mode [ 452.249531][ T35] bridge_slave_0: left promiscuous mode [ 452.255254][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.672295][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.684284][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.695708][ T35] bond0 (unregistering): Released all slaves [ 452.902166][ T9740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.230096][ T9834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 453.260377][ T9834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 453.279459][ T9834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 453.294580][ T9834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 453.321804][ T35] hsr_slave_0: left promiscuous mode [ 453.327863][ T35] hsr_slave_1: left promiscuous mode [ 453.335040][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.342985][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.355437][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.369590][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.404512][ T35] veth1_macvtap: left promiscuous mode [ 453.411147][ T35] veth0_macvtap: left promiscuous mode [ 453.416823][ T35] veth1_vlan: left promiscuous mode [ 453.424213][ T35] veth0_vlan: left promiscuous mode [ 453.556196][ T35] pimreg (unregistering): left allmulticast mode [ 454.024144][ T35] team0 (unregistering): Port device team_slave_1 removed [ 454.087268][ T35] team0 (unregistering): Port device team_slave_0 removed [ 454.131144][ T4615] Bluetooth: hci1: command tx timeout [ 454.790259][ T9839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.855262][ T9839] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.910523][ T9740] veth0_vlan: entered promiscuous mode [ 455.011327][ T5294] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.018451][ T5294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.031785][ T9740] veth1_vlan: entered promiscuous mode [ 455.039355][ T9973] chnl_net:caif_netlink_parms(): no params data found [ 455.099813][ T3645] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.107417][ T3645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.165598][ T9740] veth0_macvtap: entered promiscuous mode [ 455.285783][ T9740] veth1_macvtap: entered promiscuous mode [ 455.314009][ T9877] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 455.349712][ T9973] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.356908][ T9973] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.364969][ T9973] bridge_slave_0: entered allmulticast mode [ 455.373489][ T9973] bridge_slave_0: entered promiscuous mode [ 455.383225][ T9973] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.390713][ T9973] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.398285][ T9973] bridge_slave_1: entered allmulticast mode [ 455.407318][ T9973] bridge_slave_1: entered promiscuous mode [ 455.416893][ T9877] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 455.433338][ T9740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.444148][ T9740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.455654][ T9740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.487555][ T9973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.497498][ T9877] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 455.512790][ T9877] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 455.526736][ T9834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.572553][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.593322][ T9973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.618535][ T9740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.634677][ T9740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.646511][ T9740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.663034][ T9740] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.674504][ T9740] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.683608][ T9740] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.693324][ T9740] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.737275][ T9973] team0: Port device team_slave_0 added [ 455.767863][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.809983][ T9973] team0: Port device team_slave_1 added [ 455.820553][ T9834] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.886731][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.910766][ T9973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.917847][ T9973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.944854][ T9973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.962667][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.970032][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.030309][ T9973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.037403][ T9973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.077278][ T9973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.142818][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.169611][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.176768][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.208825][ T4615] Bluetooth: hci1: command tx timeout [ 456.294333][ T9973] hsr_slave_0: entered promiscuous mode [ 456.301147][ T9973] hsr_slave_1: entered promiscuous mode [ 456.589923][ T5294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.598091][ T5294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.712481][ T9839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.756605][ T9834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.767029][ T3645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.778677][ T3645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.815516][ T9877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.919979][ T35] bridge_slave_1: left allmulticast mode [ 456.925905][ T35] bridge_slave_1: left promiscuous mode [ 456.939545][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.956537][ T35] bridge_slave_0: left allmulticast mode [ 456.965895][ T35] bridge_slave_0: left promiscuous mode [ 456.979225][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.986792][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 456.986812][ T29] audit: type=1326 audit(1726936567.951:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453337def9 code=0x7ffc0000 [ 457.032621][ T29] audit: type=1326 audit(1726936567.951:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f453337def9 code=0x7ffc0000 [ 457.091481][ T29] audit: type=1326 audit(1726936567.951:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453337def9 code=0x7ffc0000 [ 457.159341][ T29] audit: type=1326 audit(1726936567.951:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f453337def9 code=0x7ffc0000 [ 457.188162][ T29] audit: type=1326 audit(1726936567.951:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453337def9 code=0x7ffc0000 [ 457.233687][ T29] audit: type=1326 audit(1726936567.951:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f453337def9 code=0x7ffc0000 [ 457.291849][ T29] audit: type=1326 audit(1726936567.951:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453337def9 code=0x7ffc0000 [ 457.331121][ T29] audit: type=1326 audit(1726936567.961:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f453337def9 code=0x7ffc0000 [ 457.389685][ T29] audit: type=1326 audit(1726936567.971:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453337def9 code=0x7ffc0000 [ 457.428804][ T29] audit: type=1326 audit(1726936567.971:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453337def9 code=0x7ffc0000 [ 457.942900][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.958271][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.974588][ T35] bond0 (unregistering): Released all slaves [ 457.995364][T10023] netlink: 'syz.2.702': attribute type 12 has an invalid length. [ 458.007681][T10023] netlink: 120 bytes leftover after parsing attributes in process `syz.2.702'. [ 458.203971][ T5416] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 458.261585][ T9877] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.288948][ T4615] Bluetooth: hci1: command tx timeout [ 458.324102][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.331310][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.361379][ T9839] veth0_vlan: entered promiscuous mode [ 458.378181][ T35] hsr_slave_0: left promiscuous mode [ 458.379511][ T5416] usb 3-1: Using ep0 maxpacket: 32 [ 458.391138][ T35] hsr_slave_1: left promiscuous mode [ 458.392577][ T5416] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 458.405932][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.406687][ T5416] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.421799][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.429902][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.435608][ T5416] usb 3-1: Product: syz [ 458.437342][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.445373][ T5416] usb 3-1: Manufacturer: syz [ 458.462944][ T5416] usb 3-1: SerialNumber: syz [ 458.474428][ T5416] usb 3-1: config 0 descriptor?? [ 458.484085][ T5416] pvrusb2: Hardware description: Terratec Grabster AV400 [ 458.488217][ T35] veth1_macvtap: left promiscuous mode [ 458.496587][ T5416] pvrusb2: ********** [ 458.497387][ T35] veth0_macvtap: left promiscuous mode [ 458.506389][ T5416] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 458.509688][ T35] veth1_vlan: left promiscuous mode [ 458.524251][ T35] veth0_vlan: left promiscuous mode [ 458.525099][ T5416] pvrusb2: Important functionality might not be entirely working. [ 458.545566][ T5416] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 458.558084][ T5416] pvrusb2: ********** [ 458.725192][ T5416] usb 3-1: USB disconnect, device number 38 [ 458.734579][ T2035] pvrusb2: Invalid write control endpoint [ 458.845242][ T2035] pvrusb2: Invalid write control endpoint [ 458.851849][ T2035] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 458.867240][ T2035] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 458.876383][ T2035] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 458.887551][ T2035] pvrusb2: Device being rendered inoperable [ 458.897435][ T2035] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 458.915566][ T2035] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 458.963480][ T2035] pvrusb2: Attached sub-driver cx25840 [ 458.970122][ T2035] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 458.981021][ T2035] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 459.357962][ T35] team0 (unregistering): Port device team_slave_1 removed [ 459.462103][ T35] team0 (unregistering): Port device team_slave_0 removed [ 459.790673][ T5281] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 459.962888][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 459.989957][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.011446][ T5281] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 460.020822][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.031042][ T5281] usb 3-1: config 0 descriptor?? [ 460.038223][ T5281] hub 3-1:0.0: USB hub found [ 460.187777][ T9839] veth1_vlan: entered promiscuous mode [ 460.197019][ T5294] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.204274][ T5294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.290042][ T9834] veth0_vlan: entered promiscuous mode [ 460.369702][ T4615] Bluetooth: hci1: command tx timeout [ 460.405363][ T9877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 460.451690][ T9877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.572229][ T9834] veth1_vlan: entered promiscuous mode [ 460.683572][ T9839] veth0_macvtap: entered promiscuous mode [ 460.734639][ T9839] veth1_macvtap: entered promiscuous mode [ 460.764848][ T9973] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 460.787200][ T9973] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 460.848001][ T9973] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 460.876518][ T9973] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 460.923504][ T9877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.071292][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.085540][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.101152][ T9839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.120885][ T9834] veth0_macvtap: entered promiscuous mode [ 461.164957][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.192601][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.222692][ T9839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.285733][ T9839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.310885][ T9839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.319883][ T9839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.328914][ T9839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.345592][ T9834] veth1_macvtap: entered promiscuous mode [ 461.504308][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.528215][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.546199][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.557355][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.585312][ T9834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.655119][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.667923][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.678229][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.689392][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.707087][ T9834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.766769][ T9877] veth0_vlan: entered promiscuous mode [ 461.812913][ T9834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.826727][ T9834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.836219][ T9834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.846766][ T9834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.895925][ T5358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.921788][ T9877] veth1_vlan: entered promiscuous mode [ 461.932765][ T5358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.103459][ T7773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.138357][ T7773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.147225][ T9877] veth0_macvtap: entered promiscuous mode [ 462.214043][ T9877] veth1_macvtap: entered promiscuous mode [ 462.328254][ T9973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.365515][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.421829][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.509377][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.521870][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.532457][ T5281] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 462.546392][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.557864][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.568393][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.579998][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.590312][ T5281] usbhid 3-1:0.0: can't add hid device: -71 [ 462.596363][ T5281] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 462.623737][ T9877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.634256][ T5281] usb 3-1: USB disconnect, device number 39 [ 462.680094][ T3645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.687998][ T3645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.697302][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.724078][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.742392][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.768127][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.788936][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.816154][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.837236][ T9877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.868383][ T9973] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.933645][ T9877] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.949851][ T9877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.959433][ T9877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.968177][ T9877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.088260][T10049] program syz.2.705 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 463.119507][ T7773] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.126645][ T7773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.177816][ T7773] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.185091][ T7773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.459832][ T3645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.510958][ T3645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.678502][ T3645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.682315][ T9973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.697537][ T3645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.882998][ T9973] veth0_vlan: entered promiscuous mode [ 463.982163][ T5274] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 464.012696][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 464.012717][ T29] audit: type=1326 audit(1726936574.981:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10073 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae157def9 code=0x7ffc0000 [ 464.067652][ T5294] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.080296][ T29] audit: type=1326 audit(1726936575.011:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10073 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f1ae157def9 code=0x7ffc0000 [ 464.140868][ T29] audit: type=1326 audit(1726936575.011:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10073 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae157def9 code=0x7ffc0000 [ 464.178258][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 464.196294][ T9973] veth1_vlan: entered promiscuous mode [ 464.209662][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.232033][ T5274] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 464.249003][ T29] audit: type=1326 audit(1726936575.011:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10073 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae157def9 code=0x7ffc0000 [ 464.276181][T10074] netlink: 48 bytes leftover after parsing attributes in process `syz.0.694'. [ 464.293661][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.332672][ T5274] usb 5-1: config 0 descriptor?? [ 464.348081][ T29] audit: type=1326 audit(1726936575.011:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10073 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f1ae157def9 code=0x7ffc0000 [ 464.374827][ T5274] hub 5-1:0.0: USB hub found [ 464.393144][ T29] audit: type=1326 audit(1726936575.011:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10073 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae157def9 code=0x7ffc0000 [ 464.423089][ T29] audit: type=1326 audit(1726936575.011:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10073 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1ae157def9 code=0x7ffc0000 [ 464.544058][ T29] audit: type=1326 audit(1726936575.011:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10073 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae157def9 code=0x7ffc0000 [ 464.574495][ T5294] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.622182][ T29] audit: type=1326 audit(1726936575.011:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10073 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1ae157def9 code=0x7ffc0000 [ 464.841470][ T5294] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.022597][ T5294] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.074862][ T9973] veth0_macvtap: entered promiscuous mode [ 465.137066][ T9973] veth1_macvtap: entered promiscuous mode [ 465.349458][ T9973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.367915][ T9973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.388143][ T9973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.409954][ T9973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.433350][ T9973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.450613][ T9973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.468496][ T9973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.489177][ T9973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.515380][ T9973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.532302][ T5226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 465.545005][ T5226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 465.545108][ T29] audit: type=1326 audit(1726936576.481:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10073 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae157def9 code=0x7ffc0000 [ 465.580956][ T5226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 465.610069][ T9973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.622690][ T9973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.634051][ T9973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.634706][ T5226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 465.647532][ T9973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.663290][ T9973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.675674][ T9973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.685953][ T9973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.686264][ T5226] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 465.696529][ T9973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.698195][ T9973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.770788][ T5226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 465.998984][ T9973] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.041555][ T9973] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.077160][ T9973] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.093025][ T9973] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.175690][ T5294] bridge_slave_1: left allmulticast mode [ 466.187091][ T5294] bridge_slave_1: left promiscuous mode [ 466.213251][ T5294] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.245942][ T5294] bridge_slave_0: left allmulticast mode [ 466.268922][ T5294] bridge_slave_0: left promiscuous mode [ 466.285806][ T5294] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.448082][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.712'. [ 466.723196][ T5274] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 466.743089][ T5274] usbhid 5-1:0.0: can't add hid device: -71 [ 466.749606][ T5274] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 466.788725][ T5281] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 466.799517][ T5274] usb 5-1: USB disconnect, device number 47 [ 466.957590][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 466.970740][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.982468][ T5281] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 466.993266][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.018775][ T9] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 467.034727][ T5281] usb 4-1: config 0 descriptor?? [ 467.050512][ T5281] hub 4-1:0.0: USB hub found [ 467.200785][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 467.222081][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.245889][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 467.265569][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.291291][ T9] usb 1-1: config 0 descriptor?? [ 467.321273][ T9] hub 1-1:0.0: USB hub found [ 467.358364][ T5294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.442935][ T5294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.482055][ T5294] bond0 (unregistering): Released all slaves [ 467.892419][ T4615] Bluetooth: hci0: command tx timeout [ 468.446068][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.458888][ T5342] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 468.485261][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.570717][ T5294] hsr_slave_0: left promiscuous mode [ 468.592223][ T5294] hsr_slave_1: left promiscuous mode [ 468.612029][ T5294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.624129][ T5294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.633963][ T5294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.644059][ T5294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.668915][ T5342] usb 5-1: Using ep0 maxpacket: 8 [ 468.682585][ T5342] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.707171][ T5342] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 468.720991][ T5294] veth1_macvtap: left promiscuous mode [ 468.726644][ T5294] veth0_macvtap: left promiscuous mode [ 468.735543][ T5342] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 468.747184][ T5342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.755697][ T5294] veth1_vlan: left promiscuous mode [ 468.774222][ T5294] veth0_vlan: left promiscuous mode [ 468.781272][ T5342] usb 5-1: Product: syz [ 468.791442][ T5342] usb 5-1: Manufacturer: syz [ 468.813840][ T5342] usb 5-1: SerialNumber: syz [ 469.528745][ T5277] usb 5-1: USB disconnect, device number 48 [ 469.587222][ T5281] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 469.659499][ T5281] usbhid 4-1:0.0: can't add hid device: -71 [ 469.686980][ T5281] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 469.706209][ T9] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 469.724274][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 469.753793][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 469.768660][ T5281] usb 4-1: USB disconnect, device number 48 [ 469.806937][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.718'. [ 469.824970][ T9] usb 1-1: USB disconnect, device number 22 [ 469.848359][T10115] netlink: 44 bytes leftover after parsing attributes in process `syz.3.718'. [ 469.887359][T10119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.719'. [ 469.916802][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 469.968796][ T4615] Bluetooth: hci0: command tx timeout [ 470.085681][T10126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.719'. [ 470.117487][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 470.117506][ T29] audit: type=1326 audit(1726936581.081:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031157def9 code=0x7ffc0000 [ 470.159213][ T29] audit: type=1326 audit(1726936581.111:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f031157def9 code=0x7ffc0000 [ 470.185620][ T29] audit: type=1326 audit(1726936581.111:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031157def9 code=0x7ffc0000 [ 470.253785][ T29] audit: type=1326 audit(1726936581.121:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f031157def9 code=0x7ffc0000 [ 470.295765][ T29] audit: type=1326 audit(1726936581.121:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031157def9 code=0x7ffc0000 [ 470.335098][ T29] audit: type=1326 audit(1726936581.121:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f031157def9 code=0x7ffc0000 [ 470.371784][ T29] audit: type=1326 audit(1726936581.121:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031157def9 code=0x7ffc0000 [ 470.409535][ T29] audit: type=1326 audit(1726936581.121:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f031157def9 code=0x7ffc0000 [ 470.475973][ T29] audit: type=1326 audit(1726936581.431:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031157def9 code=0x7ffc0000 [ 470.498760][ T29] audit: type=1326 audit(1726936581.431:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031157def9 code=0x7ffc0000 [ 470.675096][ T5294] team0 (unregistering): Port device team_slave_1 removed [ 470.740206][ T5294] team0 (unregistering): Port device team_slave_0 removed [ 471.324716][T10124] netlink: 48 bytes leftover after parsing attributes in process `syz.3.720'. [ 471.417004][ T7773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.447459][ T7773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.514390][T10081] chnl_net:caif_netlink_parms(): no params data found [ 471.991878][T10133] program syz.0.721 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 471.998867][T10081] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.048745][ T4615] Bluetooth: hci0: command tx timeout [ 472.049168][T10081] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.119084][T10134] program syz.4.722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.167174][T10081] bridge_slave_0: entered allmulticast mode [ 472.205084][T10081] bridge_slave_0: entered promiscuous mode [ 472.272510][T10081] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.306607][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.725'. [ 472.331346][T10081] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.368368][T10081] bridge_slave_1: entered allmulticast mode [ 472.412324][T10081] bridge_slave_1: entered promiscuous mode [ 472.525881][T10170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.726'. [ 472.584153][T10170] netlink: 44 bytes leftover after parsing attributes in process `syz.3.726'. [ 472.630914][T10081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.777077][T10081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.886492][T10081] team0: Port device team_slave_0 added [ 472.909030][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'. [ 472.949014][ T5310] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 473.055978][ T5294] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.140247][ T5310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 473.168771][ T5310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.187224][ T5310] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 473.217201][ T5310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.233219][T10081] team0: Port device team_slave_1 added [ 473.257934][ T5310] usb 2-1: config 0 descriptor?? [ 473.289776][ T5310] hub 2-1:0.0: USB hub found [ 473.411435][ T5294] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.512645][T10081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.543016][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.655542][T10081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.708310][T10081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.741563][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.853161][T10081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.951407][ T5294] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.981388][ T5226] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 473.993317][ T5226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 473.996279][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 474.015999][T10189] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 474.016161][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 474.034364][ T5229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 474.042319][T10189] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 474.051039][T10189] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 474.051096][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 474.062319][T10189] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 474.072671][T10189] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 474.090503][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 474.128740][ T5229] Bluetooth: hci0: command tx timeout [ 474.473368][ T5294] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.012744][T10081] hsr_slave_0: entered promiscuous mode [ 475.039276][T10081] hsr_slave_1: entered promiscuous mode [ 475.055942][T10081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.077668][T10081] Cannot create hsr debugfs directory [ 475.132274][T10199] program syz.3.736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 475.320557][ T5294] bridge_slave_1: left allmulticast mode [ 475.327725][ T5294] bridge_slave_1: left promiscuous mode [ 475.336965][ T5294] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.347889][ T5294] bridge_slave_0: left allmulticast mode [ 475.358350][ T5294] bridge_slave_0: left promiscuous mode [ 475.375502][ T5294] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.691153][ T5310] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 475.735540][ T5310] usbhid 2-1:0.0: can't add hid device: -71 [ 475.741824][ T5310] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 475.817715][ T5310] usb 2-1: USB disconnect, device number 27 [ 475.841065][T10219] syz.1.738 (10219): attempted to duplicate a private mapping with mremap. This is not supported. [ 476.128846][ T5229] Bluetooth: hci2: command tx timeout [ 476.128883][T10189] Bluetooth: hci3: command tx timeout [ 476.220100][ T5294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.235747][ T5294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.247075][ T5294] bond0 (unregistering): Released all slaves [ 476.580677][T10223] __nla_validate_parse: 1 callbacks suppressed [ 476.580701][T10223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.740'. [ 476.712592][T10190] chnl_net:caif_netlink_parms(): no params data found [ 476.787127][ T5294] hsr_slave_0: left promiscuous mode [ 476.805240][ T5294] hsr_slave_1: left promiscuous mode [ 476.838343][ T5294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.857240][ T5294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.888852][ T5294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.909228][ T5294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.037961][ T5294] veth1_macvtap: left promiscuous mode [ 477.061122][ T5294] veth0_macvtap: left promiscuous mode [ 477.094413][ T5294] veth1_vlan: left promiscuous mode [ 477.110551][ T5294] veth0_vlan: left promiscuous mode [ 477.191863][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 477.214516][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 477.228734][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 477.248411][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 477.271232][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 477.279575][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 478.179698][ T5294] team0 (unregistering): Port device team_slave_1 removed [ 478.212377][T10189] Bluetooth: hci3: command tx timeout [ 478.219310][T10189] Bluetooth: hci2: command tx timeout [ 478.262256][ T5294] team0 (unregistering): Port device team_slave_0 removed [ 479.207182][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 479.207205][ T29] audit: type=1326 audit(1726936590.171:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff069b7def9 code=0x7ffc0000 [ 479.245902][ T29] audit: type=1326 audit(1726936590.171:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff069b7def9 code=0x7ffc0000 [ 479.274200][ T29] audit: type=1326 audit(1726936590.171:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7ff069b7def9 code=0x7ffc0000 [ 479.328841][T10189] Bluetooth: hci4: command tx timeout [ 479.332205][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'. [ 479.348763][ T29] audit: type=1326 audit(1726936590.171:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff069b7def9 code=0x7ffc0000 [ 479.362839][T10253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.743'. [ 479.396768][ T29] audit: type=1326 audit(1726936590.171:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7ff069b7def9 code=0x7ffc0000 [ 479.437065][ T29] audit: type=1326 audit(1726936590.171:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff069b7def9 code=0x7ffc0000 [ 479.460713][ T29] audit: type=1326 audit(1726936590.171:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff069b7def9 code=0x7ffc0000 [ 479.486069][ T29] audit: type=1326 audit(1726936590.171:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff069b7def9 code=0x7ffc0000 [ 479.524598][ T29] audit: type=1326 audit(1726936590.171:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff069b7def9 code=0x7ffc0000 [ 479.558940][T10190] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.567828][T10190] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.591196][T10190] bridge_slave_0: entered allmulticast mode [ 479.607345][T10190] bridge_slave_0: entered promiscuous mode [ 479.636893][ T29] audit: type=1326 audit(1726936590.591:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff069b7def9 code=0x7ffc0000 [ 479.702951][T10191] chnl_net:caif_netlink_parms(): no params data found [ 479.753310][T10190] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.764833][T10190] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.775772][T10190] bridge_slave_1: entered allmulticast mode [ 479.805560][T10190] bridge_slave_1: entered promiscuous mode [ 479.950986][T10190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.964020][T10190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.271204][T10190] team0: Port device team_slave_0 added [ 480.284784][T10190] team0: Port device team_slave_1 added [ 480.289905][T10189] Bluetooth: hci2: command tx timeout [ 480.291108][ T5229] Bluetooth: hci3: command tx timeout [ 480.306026][T10262] program syz.1.744 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 480.510740][T10191] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.525826][T10191] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.533434][T10191] bridge_slave_0: entered allmulticast mode [ 480.547605][T10191] bridge_slave_0: entered promiscuous mode [ 480.562647][T10191] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.573882][T10191] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.588308][T10191] bridge_slave_1: entered allmulticast mode [ 480.605677][T10191] bridge_slave_1: entered promiscuous mode [ 480.626540][T10190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.652681][T10190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.678899][T10190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.722270][T10190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.735206][T10190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.766976][T10190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.874658][ T5294] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.898060][T10242] chnl_net:caif_netlink_parms(): no params data found [ 480.932392][T10191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.946091][T10191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.026912][ T5294] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.081599][T10191] team0: Port device team_slave_0 added [ 481.110207][T10190] hsr_slave_0: entered promiscuous mode [ 481.121573][T10190] hsr_slave_1: entered promiscuous mode [ 481.139680][T10190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.147862][T10190] Cannot create hsr debugfs directory [ 481.174867][T10081] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 481.282566][ T5294] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.360454][T10191] team0: Port device team_slave_1 added [ 481.388287][T10081] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 481.402224][T10081] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 481.409948][ T5229] Bluetooth: hci4: command tx timeout [ 481.534040][ T5294] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.614999][T10242] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.627218][T10189] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 481.637568][T10242] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.654078][T10242] bridge_slave_0: entered allmulticast mode [ 481.660614][T10189] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 481.670240][T10189] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 481.678362][T10189] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 481.684569][T10242] bridge_slave_0: entered promiscuous mode [ 481.700657][T10189] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 481.701510][T10081] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 481.720925][T10189] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 481.768028][T10191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.796044][T10191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.841801][T10191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.869522][T10191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.876626][T10191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.911683][T10191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.948232][T10242] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.957470][T10242] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.967863][T10242] bridge_slave_1: entered allmulticast mode [ 481.990663][T10242] bridge_slave_1: entered promiscuous mode [ 482.107055][T10242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.126407][T10242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.167817][T10191] hsr_slave_0: entered promiscuous mode [ 482.175756][T10191] hsr_slave_1: entered promiscuous mode [ 482.182479][T10191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.190153][T10191] Cannot create hsr debugfs directory [ 482.237309][T10242] team0: Port device team_slave_0 added [ 482.247406][T10242] team0: Port device team_slave_1 added [ 482.368970][ T5229] Bluetooth: hci3: command tx timeout [ 482.374441][ T5229] Bluetooth: hci2: command tx timeout [ 482.403482][T10242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.411121][T10242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.438197][T10242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.495099][T10242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.503957][T10242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.530897][T10242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.584635][T10190] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.724900][T10190] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.758251][T10242] hsr_slave_0: entered promiscuous mode [ 482.779401][T10242] hsr_slave_1: entered promiscuous mode [ 482.794268][T10242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.809245][T10242] Cannot create hsr debugfs directory [ 482.882062][T10190] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.030794][T10190] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.210533][T10081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.222597][T10285] chnl_net:caif_netlink_parms(): no params data found [ 483.237018][ T5294] bridge_slave_1: left allmulticast mode [ 483.243483][ T5294] bridge_slave_1: left promiscuous mode [ 483.251120][ T5294] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.269110][ T5294] bridge_slave_0: left allmulticast mode [ 483.274836][ T5294] bridge_slave_0: left promiscuous mode [ 483.287031][ T5294] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.296722][ T5294] bridge_slave_1: left allmulticast mode [ 483.303666][ T5294] bridge_slave_1: left promiscuous mode [ 483.309492][ T5294] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.318476][ T5294] bridge_slave_0: left allmulticast mode [ 483.325299][ T5294] bridge_slave_0: left promiscuous mode [ 483.332101][ T5294] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.507582][ T5229] Bluetooth: hci4: command tx timeout [ 483.822364][ T5229] Bluetooth: hci1: command tx timeout [ 484.166840][ T5294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.185772][ T5294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.197207][ T5294] bond0 (unregistering): Released all slaves [ 484.376123][ T5294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.388689][ T5294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.403015][ T5294] bond0 (unregistering): Released all slaves [ 484.705361][T10081] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.785880][T10285] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.818093][T10285] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.826502][T10285] bridge_slave_0: entered allmulticast mode [ 484.836573][T10285] bridge_slave_0: entered promiscuous mode [ 484.859670][ T3645] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.866851][ T3645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.918720][T10190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 485.008149][T10285] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.026665][T10285] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.035245][T10285] bridge_slave_1: entered allmulticast mode [ 485.050626][T10285] bridge_slave_1: entered promiscuous mode [ 485.089979][T10190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 485.175981][T10285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.189948][T10190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 485.214099][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.221333][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.337793][T10285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.362886][T10190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 485.402212][ T5294] hsr_slave_0: left promiscuous mode [ 485.408196][ T5294] hsr_slave_1: left promiscuous mode [ 485.417199][ T5294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.425449][ T5294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.434952][ T5294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.442940][ T5294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.457620][ T5294] hsr_slave_0: left promiscuous mode [ 485.463867][ T5294] hsr_slave_1: left promiscuous mode [ 485.470535][ T5294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.479592][ T5294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.487551][ T5294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.495836][ T5294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.533779][ T5294] veth1_macvtap: left promiscuous mode [ 485.540289][ T5294] veth0_macvtap: left promiscuous mode [ 485.545889][ T5294] veth1_vlan: left promiscuous mode [ 485.551395][ T5294] veth0_vlan: left promiscuous mode [ 485.557699][ T5294] veth1_macvtap: left promiscuous mode [ 485.563450][ T5294] veth0_macvtap: left promiscuous mode [ 485.569300][ T5294] veth1_vlan: left promiscuous mode [ 485.574589][ T5294] veth0_vlan: left promiscuous mode [ 485.579029][ T5229] Bluetooth: hci4: command tx timeout [ 485.899011][ T5229] Bluetooth: hci1: command tx timeout [ 486.274840][ T5294] team0 (unregistering): Port device team_slave_1 removed [ 486.334167][ T5294] team0 (unregistering): Port device team_slave_0 removed [ 487.464087][ T5294] team0 (unregistering): Port device team_slave_1 removed [ 487.524456][ T5294] team0 (unregistering): Port device team_slave_0 removed [ 487.972894][ T5229] Bluetooth: hci1: command tx timeout [ 488.225748][T10285] team0: Port device team_slave_0 added [ 488.236051][T10285] team0: Port device team_slave_1 added [ 488.286984][T10081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 488.311896][T10081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 488.421090][T10285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.428122][T10285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.455771][T10285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.481302][T10285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.489305][T10285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.524000][T10285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.666003][T10285] hsr_slave_0: entered promiscuous mode [ 488.695519][T10285] hsr_slave_1: entered promiscuous mode [ 488.707095][T10285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.718326][T10285] Cannot create hsr debugfs directory [ 488.748380][T10191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 488.764678][T10081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.783769][T10191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 488.796271][T10191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 488.831269][T10191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 489.030792][T10190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.104283][T10190] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.199903][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.207079][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.247971][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.255178][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.343393][T10081] veth0_vlan: entered promiscuous mode [ 489.423714][T10190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 489.441772][T10190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 489.467581][T10081] veth1_vlan: entered promiscuous mode [ 489.494795][T10242] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 489.583939][T10285] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.651037][T10242] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 489.700563][T10285] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.730793][T10191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.741435][T10242] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 489.763447][T10242] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 489.856696][T10285] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.913176][T10191] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.943480][T10190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.001151][T10285] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.046272][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.049698][ T5229] Bluetooth: hci1: command tx timeout [ 490.053509][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.112226][T10081] veth0_macvtap: entered promiscuous mode [ 490.172454][T10081] veth1_macvtap: entered promiscuous mode [ 490.235519][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.242749][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.265710][ T5294] bridge_slave_1: left allmulticast mode [ 490.285494][ T5294] bridge_slave_1: left promiscuous mode [ 490.303207][ T5294] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.316664][ T5294] bridge_slave_0: left allmulticast mode [ 490.328449][ T5294] bridge_slave_0: left promiscuous mode [ 490.338910][ T5294] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.937952][ T5294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.953122][ T5294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.971670][ T5294] bond0 (unregistering): Released all slaves [ 491.067006][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.078776][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.114812][T10081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.234301][T10190] veth0_vlan: entered promiscuous mode [ 491.303653][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.315213][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.330707][T10081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.414753][T10190] veth1_vlan: entered promiscuous mode [ 491.482267][T10285] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 491.497427][T10285] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 491.526831][T10081] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.538100][T10081] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.554610][T10081] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.564032][T10081] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.602366][T10285] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 491.643731][ T5294] hsr_slave_0: left promiscuous mode [ 491.651178][ T5294] hsr_slave_1: left promiscuous mode [ 491.657443][ T5294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.667289][ T5294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.676409][ T5294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.684404][ T5294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.730797][ T5294] veth1_macvtap: left promiscuous mode [ 491.736436][ T5294] veth0_macvtap: left promiscuous mode [ 491.744138][ T5294] veth1_vlan: left promiscuous mode [ 491.750181][ T5294] veth0_vlan: left promiscuous mode [ 492.662206][ T5294] team0 (unregistering): Port device team_slave_1 removed [ 492.731616][ T5294] team0 (unregistering): Port device team_slave_0 removed [ 493.412380][T10285] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 493.447672][T10242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.559847][T10190] veth0_macvtap: entered promiscuous mode [ 493.625274][T10190] veth1_macvtap: entered promiscuous mode [ 493.634932][T10242] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.656599][T10191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.716681][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.724724][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.750572][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.757714][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.795791][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.803021][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.825542][T10190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.842756][T10190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.854291][T10190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.896213][T10190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.907812][T10190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.920314][T10190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.931569][T10190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.942235][T10190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.951861][T10190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.960923][T10190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.999466][ T3645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.007493][ T3645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.047566][T10285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.204181][T10242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.243361][T10285] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.329888][T10191] veth0_vlan: entered promiscuous mode [ 494.397376][T10191] veth1_vlan: entered promiscuous mode [ 494.431436][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.438697][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.472619][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.479803][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.520524][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.541226][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.672628][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.681914][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.765694][T10242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.827353][T10191] veth0_macvtap: entered promiscuous mode [ 494.897778][T10191] veth1_macvtap: entered promiscuous mode [ 495.026965][T10285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.066374][T10191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.140342][T10191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.164441][T10191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.200805][T10191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.221524][T10191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.304308][T10191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.337794][T10191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.359836][T10191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.399421][T10191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.420085][T10191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.462649][T10191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.503173][T10191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.512647][T10191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.538916][T10191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.622348][T10285] veth0_vlan: entered promiscuous mode [ 495.659813][T10242] veth0_vlan: entered promiscuous mode [ 495.736632][T10242] veth1_vlan: entered promiscuous mode [ 495.763092][T10285] veth1_vlan: entered promiscuous mode [ 495.927476][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.950582][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.961023][T10242] veth0_macvtap: entered promiscuous mode [ 496.022826][T10242] veth1_macvtap: entered promiscuous mode [ 496.067929][T10285] veth0_macvtap: entered promiscuous mode [ 496.095045][ T3645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.097788][T10285] veth1_macvtap: entered promiscuous mode [ 496.135427][ T3645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.225701][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.244558][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 496.262344][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.276717][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.303539][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.329048][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 496.348428][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.380737][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.401517][T10242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.433632][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.448445][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.470849][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.498486][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.523508][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.568706][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.586786][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.752'. [ 496.601081][T10242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.683716][T10242] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.718682][T10242] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.727500][T10242] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.768681][T10242] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.791947][T10285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.819333][T10285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.838708][T10285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.859183][T10285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.872554][T10285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.891240][T10285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.902050][T10285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.918947][T10285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.936936][T10285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.980826][T10285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.988772][ T5274] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 496.992099][T10285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.018003][T10285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.035071][T10285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.045209][T10285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.057420][T10285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.067356][T10285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.079991][T10285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.091876][T10285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.103251][T10285] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.112135][T10285] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.121088][T10285] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.131590][T10285] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.170591][ T5274] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 497.180322][ T5274] usb 3-1: config 0 has no interface number 0 [ 497.186616][ T5274] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.198473][ T5274] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.241229][ T5274] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 497.269368][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.283612][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.295900][ T5274] usb 3-1: config 0 descriptor?? [ 497.308381][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.387878][ T3645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.403779][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.415110][ T3645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.423407][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.466701][ T3645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.481905][ T3645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.629998][ T5274] usbhid 3-1:0.32: can't add hid device: -71 [ 497.655225][ T5274] usbhid 3-1:0.32: probe with driver usbhid failed with error -71 [ 497.705850][ T5274] usb 3-1: USB disconnect, device number 40 [ 497.849176][ T5281] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 497.879104][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.759'. [ 497.961342][T10522] ptrace attach of ""[10524] was attempted by "./syz-executor exec"[10522] [ 497.993012][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.759'. [ 498.053954][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 498.079504][T10524] coredump: 12(syz.0.757): written to core: VMAs: 4, size 12439552; core: 43787 bytes, pos 12443648 [ 498.090466][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.108104][ T5281] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 498.130564][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.159477][ T5281] usb 4-1: config 0 descriptor?? [ 498.185045][ T5281] hub 4-1:0.0: USB hub found [ 498.857177][T10521] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 499.185012][T10540] x_tables: unsorted entry at hook 2 [ 500.063292][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.767'. [ 500.110702][T10554] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (61) [ 500.378810][ T5229] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 500.570073][ T5279] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 500.663753][ T5281] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 500.727170][ T5281] usbhid 4-1:0.0: can't add hid device: -71 [ 500.740892][ T5281] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 500.753176][ T5279] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.773806][T10570] netlink: 40 bytes leftover after parsing attributes in process `syz.2.773'. [ 500.795569][ T5281] usb 4-1: USB disconnect, device number 49 [ 500.803689][ T5279] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 500.859979][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.891526][ T5279] usb 1-1: config 0 descriptor?? [ 500.929275][ T5279] pwc: Askey VC010 type 2 USB webcam detected. [ 501.068839][ T5278] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 501.128130][ T5279] pwc: send_video_command error -71 [ 501.142492][ T5279] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 501.161783][ T5279] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 501.192453][ T5279] usb 1-1: USB disconnect, device number 23 [ 501.264262][ T5278] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 501.305165][ T5278] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 501.345579][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.376183][ T5278] usb 3-1: Product: syz [ 501.384750][ T5278] usb 3-1: Manufacturer: syz [ 501.396316][ T5278] usb 3-1: SerialNumber: syz [ 501.405114][ T5278] usb 3-1: config 0 descriptor?? [ 501.547067][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.774'. [ 501.582179][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.774'. [ 501.668871][ T5279] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 501.805025][T10592] FAULT_INJECTION: forcing a failure. [ 501.805025][T10592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.818958][T10592] CPU: 0 UID: 0 PID: 10592 Comm: syz.4.778 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 501.829618][T10592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 501.839845][T10592] Call Trace: [ 501.843623][T10592] [ 501.846695][T10592] dump_stack_lvl+0x241/0x360 [ 501.851505][T10592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.856869][T10592] ? __pfx__printk+0x10/0x10 [ 501.861532][T10592] ? __pfx_lock_release+0x10/0x10 [ 501.866633][T10592] should_fail_ex+0x3b0/0x4e0 [ 501.871377][T10592] _copy_from_user+0x2f/0xe0 [ 501.876033][T10592] copy_msghdr_from_user+0xae/0x680 [ 501.880503][ T5279] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.881268][T10592] ? __pfx___might_resched+0x10/0x10 [ 501.896671][T10592] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 501.902541][T10592] ? rcu_is_watching+0x15/0xb0 [ 501.904315][ T5279] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 501.907335][T10592] ? __might_fault+0xaa/0x120 [ 501.907379][T10592] do_recvmmsg+0x409/0xad0 [ 501.925579][T10592] ? __pfx_lock_release+0x10/0x10 [ 501.930702][T10592] ? __pfx_do_recvmmsg+0x10/0x10 [ 501.935725][T10592] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 501.937343][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.941656][T10592] ? ksys_write+0x23e/0x2c0 [ 501.941690][T10592] ? __pfx_lock_release+0x10/0x10 [ 501.941730][T10592] ? vfs_write+0x7bf/0xc90 [ 501.964184][T10592] ? __mutex_unlock_slowpath+0x21d/0x750 [ 501.969899][T10592] ? __fget_files+0x3f3/0x470 [ 501.974659][T10592] __x64_sys_recvmmsg+0x199/0x250 [ 501.979783][T10592] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 501.985396][T10592] ? do_syscall_64+0x100/0x230 [ 501.990269][T10592] ? do_syscall_64+0xb6/0x230 [ 501.995052][T10592] do_syscall_64+0xf3/0x230 [ 501.999619][T10592] ? clear_bhb_loop+0x35/0x90 [ 502.004417][T10592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.010373][T10592] RIP: 0033:0x7f87d377def9 [ 502.014850][T10592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.034500][T10592] RSP: 002b:00007f87d4565038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 502.042965][T10592] RAX: ffffffffffffffda RBX: 00007f87d3935f80 RCX: 00007f87d377def9 [ 502.050956][T10592] RDX: 04000000000001dc RSI: 0000000020001980 RDI: 0000000000000003 [ 502.058978][T10592] RBP: 00007f87d4565090 R08: 0000000000000000 R09: 0000000000000000 [ 502.067010][T10592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.075117][T10592] R13: 0000000000000000 R14: 00007f87d3935f80 R15: 00007f87d3a5fa28 [ 502.082340][ T5279] usb 1-1: config 0 descriptor?? [ 502.083131][T10592] [ 502.113313][ T5279] pwc: Askey VC010 type 2 USB webcam detected. [ 502.273818][T10586] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 502.506873][ T5279] pwc: recv_control_msg error -32 req 02 val 2b00 [ 502.514810][ T5279] pwc: recv_control_msg error -32 req 02 val 2700 [ 502.522684][ T5279] pwc: recv_control_msg error -32 req 02 val 2c00 [ 502.537549][ T5279] pwc: recv_control_msg error -32 req 04 val 1000 [ 502.555799][ T5279] pwc: recv_control_msg error -32 req 04 val 1300 [ 502.568005][ T5279] pwc: recv_control_msg error -32 req 04 val 1400 [ 502.575283][ T5279] pwc: recv_control_msg error -32 req 02 val 2000 [ 502.584823][ T5279] pwc: recv_control_msg error -32 req 02 val 2100 [ 502.593970][ T5279] pwc: recv_control_msg error -32 req 04 val 1500 [ 502.603837][ T5279] pwc: recv_control_msg error -32 req 02 val 2500 [ 502.622204][ T5279] pwc: recv_control_msg error -32 req 02 val 2400 [ 502.644627][ T5279] pwc: recv_control_msg error -32 req 02 val 2600 [ 502.655734][ T5279] pwc: recv_control_msg error -32 req 02 val 2900 [ 503.009661][ T5236] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 503.191298][ T5236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 503.203290][ T5236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.215035][ T5236] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 503.225949][ T5236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.241151][ T5236] usb 4-1: config 0 descriptor?? [ 503.255640][ T5236] hub 4-1:0.0: USB hub found [ 503.735173][T10619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.785'. [ 503.762024][ T5310] usb 3-1: USB disconnect, device number 41 [ 504.031448][ T5279] pwc: recv_control_msg error -71 req 04 val 1100 [ 504.064751][T10625] fuse: Unknown parameter 'grY¸Æ ·$A00000000000000000000' [ 504.075095][ T5279] pwc: recv_control_msg error -71 req 04 val 1200 [ 504.078943][ T5281] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 504.094409][ T5279] pwc: Registered as video71. [ 504.116193][ T5279] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 504.190617][ T5279] usb 1-1: USB disconnect, device number 24 [ 504.238151][T10630] netlink: 95352 bytes leftover after parsing attributes in process `syz.0.789'. [ 504.271957][ T5310] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 504.279913][ T5281] usb 5-1: Using ep0 maxpacket: 16 [ 504.333572][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.420602][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.502998][ T5281] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 504.533663][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.546095][ T5281] usb 5-1: config 0 descriptor?? [ 504.626696][ T5310] usb 2-1: Using ep0 maxpacket: 8 [ 504.671718][ T5310] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 504.723002][ T5310] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 504.736046][ T5310] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 504.754290][ T5310] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 504.830196][ T5310] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 504.866228][ T5310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.904003][ T5310] usbtmc 2-1:16.0: bulk endpoints not found [ 504.996131][T10621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.047308][T10621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.090240][ T5281] kovaplus 0003:1E7D:2D50.000A: item fetching failed at offset 5/7 [ 505.099437][ T5281] kovaplus 0003:1E7D:2D50.000A: parse failed [ 505.116361][ T5281] kovaplus 0003:1E7D:2D50.000A: probe with driver kovaplus failed with error -22 [ 505.295542][ T5342] usb 5-1: USB disconnect, device number 49 [ 505.373335][T10655] capability: warning: `syz.0.794' uses deprecated v2 capabilities in a way that may be insecure [ 505.858390][ T5236] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 505.903740][ T5236] usbhid 4-1:0.0: can't add hid device: -71 [ 505.917666][ T5236] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 506.006975][ T5236] usb 4-1: USB disconnect, device number 50 [ 506.489915][ T5236] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 506.525623][T10661] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 506.678888][ T5236] usb 4-1: Using ep0 maxpacket: 16 [ 506.716421][ T5236] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 506.756374][ T5236] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.783726][ T5236] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 506.812358][ T5236] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 506.847352][ T5236] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 506.875302][ T5236] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 506.898741][ T5236] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.924821][ T5236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.935181][ T5236] usb 4-1: Product: syz [ 506.939843][ T5236] usb 4-1: Manufacturer: syz [ 506.944779][ T5236] usb 4-1: SerialNumber: syz [ 507.044052][ T5342] usb 2-1: USB disconnect, device number 28 [ 507.085267][T10680] dccp_invalid_packet: P.type (SYNC) not Data || [Data]Ack, while P.X == 0 [ 507.174409][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.181686][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.643735][T10690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.740818][ T5342] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 509.829131][ T5281] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 509.906869][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 509.906890][ T29] audit: type=1326 audit(1726936620.871:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10707 comm="syz.3.809" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae9797def9 code=0x0 [ 509.986896][T10694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.806'. [ 510.001455][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.806'. [ 510.033655][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 510.054820][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.104430][ T5281] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 510.141852][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.260098][ T5281] usb 3-1: config 0 descriptor?? [ 510.288076][ T5281] hub 3-1:0.0: USB hub found [ 510.455908][T10713] FAULT_INJECTION: forcing a failure. [ 510.455908][T10713] name failslab, interval 1, probability 0, space 0, times 0 [ 510.598804][T10713] CPU: 0 UID: 0 PID: 10713 Comm: syz.0.810 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 510.609225][T10713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 510.619329][T10713] Call Trace: [ 510.622823][T10713] [ 510.625787][T10713] dump_stack_lvl+0x241/0x360 [ 510.630529][T10713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.635786][T10713] ? __pfx__printk+0x10/0x10 [ 510.640431][T10713] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 510.646037][T10713] ? __pfx___might_resched+0x10/0x10 [ 510.651384][T10713] should_fail_ex+0x3b0/0x4e0 [ 510.656115][T10713] ? vm_area_alloc+0x24/0x1d0 [ 510.660842][T10713] should_failslab+0xac/0x100 [ 510.665575][T10713] ? vm_area_alloc+0x24/0x1d0 [ 510.670302][T10713] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 510.675831][T10713] vm_area_alloc+0x24/0x1d0 [ 510.680646][T10713] alloc_bprm+0x67e/0xe20 [ 510.685029][T10713] ? __pfx_lock_release+0x10/0x10 [ 510.690114][T10713] ? __pfx_alloc_bprm+0x10/0x10 [ 510.695008][T10713] ? __virt_addr_valid+0x183/0x530 [ 510.700175][T10713] ? __phys_addr_symbol+0x2f/0x70 [ 510.705245][T10713] ? __might_fault+0xc6/0x120 [ 510.709978][T10713] do_execveat_common+0x18c/0x6f0 [ 510.715067][T10713] __x64_sys_execve+0x92/0xb0 [ 510.719788][T10713] do_syscall_64+0xf3/0x230 [ 510.724344][T10713] ? clear_bhb_loop+0x35/0x90 [ 510.729076][T10713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.735028][T10713] RIP: 0033:0x7fd6d197def9 [ 510.739518][T10713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.760475][T10713] RSP: 002b:00007fd6d13ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 510.769045][T10713] RAX: ffffffffffffffda RBX: 00007fd6d1b35f80 RCX: 00007fd6d197def9 [ 510.777090][T10713] RDX: 0000000020000400 RSI: 0000000000000000 RDI: 0000000020000100 [ 510.785282][T10713] RBP: 00007fd6d13ff090 R08: 0000000000000000 R09: 0000000000000000 [ 510.793313][T10713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.801417][T10713] R13: 0000000000000000 R14: 00007fd6d1b35f80 R15: 00007fd6d1c5fa28 [ 510.809549][T10713] [ 511.092598][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 512.312095][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.818'. [ 512.362532][T10733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.428095][T10733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.194141][T10733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.322123][T10733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.418390][ T5281] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 515.518813][ T5281] usbhid 3-1:0.0: can't add hid device: -32 [ 515.527512][ T5281] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 516.963864][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.827'. [ 517.033424][T10763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.827'. [ 517.288029][ T35] sched: DL replenish lagged too much [ 559.008980][ T9] usb 3-1: USB disconnect, device number 42 [ 561.828018][ T5236] usb 4-1: USB disconnect, device number 51 [ 563.514852][ T9195] udevd[9195]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.812647][T10189] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 564.824304][T10189] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 564.858849][T10189] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 564.867337][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 564.877415][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 564.908906][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 564.917774][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 564.928679][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 564.939495][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 564.947544][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 564.954972][T10189] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 564.967262][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 565.556039][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 565.599564][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 565.608283][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 565.617023][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 565.625503][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 565.634319][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 565.842609][T10771] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.887677][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 565.901768][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 565.910466][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 565.929169][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 565.940253][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 565.948070][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 566.169665][ T4615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 566.182142][ T4615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 566.199127][ T4615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 566.209905][ T4615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 566.239401][ T4615] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 566.246918][ T4615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 566.762343][T10771] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.008849][ T5229] Bluetooth: hci5: command tx timeout [ 567.088934][ T5229] Bluetooth: hci0: command tx timeout [ 567.163435][T10771] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.730260][ T5229] Bluetooth: hci1: command tx timeout [ 568.048858][ T5229] Bluetooth: hci2: command tx timeout [ 568.370037][ T5229] Bluetooth: hci6: command tx timeout [ 568.625201][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.631726][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.088731][ T5229] Bluetooth: hci5: command tx timeout [ 569.173918][ T5229] Bluetooth: hci0: command tx timeout [ 569.808947][ T5229] Bluetooth: hci1: command tx timeout [ 570.128687][ T5229] Bluetooth: hci2: command tx timeout [ 570.448925][ T5229] Bluetooth: hci6: command tx timeout [ 571.168801][ T5229] Bluetooth: hci5: command tx timeout [ 571.248790][ T5229] Bluetooth: hci0: command tx timeout [ 571.888786][ T5229] Bluetooth: hci1: command tx timeout [ 572.208689][ T5229] Bluetooth: hci2: command tx timeout [ 572.528819][ T5229] Bluetooth: hci6: command tx timeout [ 573.248741][ T5229] Bluetooth: hci5: command tx timeout [ 573.328789][ T5229] Bluetooth: hci0: command tx timeout [ 574.038682][ T5229] Bluetooth: hci1: command tx timeout [ 574.288721][ T5229] Bluetooth: hci2: command tx timeout [ 574.618804][ T5229] Bluetooth: hci6: command tx timeout [ 596.297260][ T5229] Bluetooth: hci3: command 0x0406 tx timeout [ 617.623736][T10771] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.798343][T10787] chnl_net:caif_netlink_parms(): no params data found [ 619.951406][T10789] chnl_net:caif_netlink_parms(): no params data found [ 620.105597][T10784] chnl_net:caif_netlink_parms(): no params data found [ 620.404049][T10791] chnl_net:caif_netlink_parms(): no params data found [ 620.431603][T10785] chnl_net:caif_netlink_parms(): no params data found [ 620.660721][T10771] bridge_slave_1: left allmulticast mode [ 620.666454][T10771] bridge_slave_1: left promiscuous mode [ 620.684208][T10771] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.713940][T10771] bridge_slave_0: left allmulticast mode [ 620.726397][T10771] bridge_slave_0: left promiscuous mode [ 620.737611][T10771] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.583233][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 621.595758][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 621.606463][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 621.621489][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 621.629550][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 621.637638][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 622.834118][T10771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.860700][ T4615] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 622.872596][ T4615] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 622.881538][ T4615] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 622.890387][ T4615] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 622.898121][ T4615] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 622.906018][ T4615] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 623.007812][T10771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.042030][T10771] bond0 (unregistering): Released all slaves [ 623.744357][ T4615] Bluetooth: hci4: command tx timeout [ 624.118852][T10789] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.126021][T10789] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.209382][T10789] bridge_slave_0: entered allmulticast mode [ 624.266071][T10789] bridge_slave_0: entered promiscuous mode [ 624.454860][ T5229] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 624.469339][ T5229] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 624.481363][ T5229] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 624.489790][ T5229] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 624.497690][ T5229] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 624.505683][ T5229] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 625.011276][ T5229] Bluetooth: hci7: command tx timeout [ 625.769617][ T4615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 625.788858][ T4615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 625.800452][ T4615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 625.809585][ T54] Bluetooth: hci4: command tx timeout [ 625.836345][ T4615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 625.846116][ T4615] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 625.854050][ T4615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 625.951043][ T4615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 625.962730][ T4615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 625.971410][ T4615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 625.980077][ T4615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 625.989082][ T4615] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 626.001881][ T4615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 626.768812][ T4615] Bluetooth: hci8: command tx timeout [ 627.088828][ T4615] Bluetooth: hci7: command tx timeout [ 627.888855][ T4615] Bluetooth: hci4: command tx timeout [ 627.969198][ T4615] Bluetooth: hci0: command tx timeout [ 628.048849][ T4615] Bluetooth: hci1: command tx timeout [ 628.848776][ T4615] Bluetooth: hci8: command tx timeout [ 629.172671][ T4615] Bluetooth: hci7: command tx timeout [ 629.968761][ T4615] Bluetooth: hci4: command tx timeout [ 630.052437][ T4615] Bluetooth: hci0: command tx timeout [ 630.059940][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.066404][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.128741][ T4615] Bluetooth: hci1: command tx timeout [ 630.928680][ T4615] Bluetooth: hci8: command tx timeout [ 631.248717][ T4615] Bluetooth: hci7: command tx timeout [ 632.128808][ T4615] Bluetooth: hci0: command tx timeout [ 632.208806][ T4615] Bluetooth: hci1: command tx timeout [ 633.008912][ T4615] Bluetooth: hci8: command tx timeout [ 634.208662][ T4615] Bluetooth: hci0: command tx timeout [ 634.289902][ T4615] Bluetooth: hci1: command tx timeout [ 685.006350][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 685.028647][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 685.037377][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 685.048660][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 685.056409][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 685.063952][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 686.068155][ T4615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 686.081923][ T4615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 686.090763][ T4615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 686.100807][ T4615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 686.110856][ T4615] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 686.118347][ T4615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 686.259671][ T5229] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 686.288693][ T5229] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 686.297348][ T5229] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 686.305990][ T5229] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 686.316275][ T5229] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 686.324766][ T5229] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 686.446847][ T4615] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 686.458366][ T4615] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 686.467505][ T4615] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 686.476060][ T4615] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 686.487077][ T4615] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 686.496196][ T4615] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 687.168848][ T4615] Bluetooth: hci2: command tx timeout [ 688.208766][ T4615] Bluetooth: hci5: command tx timeout [ 688.368894][ T4615] Bluetooth: hci6: command tx timeout [ 688.528743][ T4615] Bluetooth: hci9: command tx timeout [ 688.606183][ T5229] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 688.617859][ T5229] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 688.626742][ T5229] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 688.635999][ T5229] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 688.643910][ T5229] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 688.651530][ T5229] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 689.248807][ T5229] Bluetooth: hci2: command tx timeout [ 690.288861][ T5229] Bluetooth: hci5: command tx timeout [ 690.448954][ T5229] Bluetooth: hci6: command tx timeout [ 690.608849][ T5229] Bluetooth: hci9: command tx timeout [ 690.688778][ T5229] Bluetooth: hci10: command tx timeout [ 691.328761][ T5229] Bluetooth: hci2: command tx timeout [ 691.494648][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.508572][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.368677][ T5229] Bluetooth: hci5: command tx timeout [ 692.528677][ T5229] Bluetooth: hci6: command tx timeout [ 692.688859][ T5229] Bluetooth: hci9: command tx timeout [ 692.768773][ T5229] Bluetooth: hci10: command tx timeout [ 693.408816][ T5229] Bluetooth: hci2: command tx timeout [ 694.449104][ T5229] Bluetooth: hci5: command tx timeout [ 694.608845][ T5229] Bluetooth: hci6: command tx timeout [ 694.768803][ T5229] Bluetooth: hci9: command tx timeout [ 694.848702][ T5229] Bluetooth: hci10: command tx timeout [ 696.928865][ T5229] Bluetooth: hci10: command tx timeout [ 716.449217][ T30] INFO: task kworker/R-mm_pe:13 blocked for more than 143 seconds. [ 716.457284][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 716.498745][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 716.544806][ T30] task:kworker/R-mm_pe state:D stack:29328 pid:13 tgid:13 ppid:2 flags:0x00004000 [ 716.577724][ T30] Call Trace: [ 716.649061][ T30] [ 716.652080][ T30] __schedule+0x1893/0x4b50 [ 716.656660][ T30] ? __pfx___schedule+0x10/0x10 [ 716.736006][ T30] ? __pfx_lock_release+0x10/0x10 [ 716.778680][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 716.784249][ T30] ? kthread_data+0x52/0xd0 [ 716.818547][ T30] ? schedule+0x90/0x320 [ 716.822897][ T30] ? wq_worker_sleeping+0x66/0x240 [ 716.878534][ T30] ? schedule+0x90/0x320 [ 716.882881][ T30] schedule+0x14b/0x320 [ 716.887095][ T30] schedule_preempt_disabled+0x13/0x30 [ 716.941950][ T30] __mutex_lock+0x6a7/0xd70 [ 716.946555][ T30] ? __mutex_lock+0x52a/0xd70 [ 716.998577][ T30] ? worker_attach_to_pool+0x31/0x390 [ 717.004051][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 717.041567][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 717.047994][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 717.107782][ T30] worker_attach_to_pool+0x31/0x390 [ 717.122252][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 717.127629][ T30] rescuer_thread+0x3ed/0x10a0 [ 717.168789][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 717.188798][ T30] ? rescuer_thread+0x119/0x10a0 [ 717.193855][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 717.232641][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 717.252762][ T30] ? __kthread_parkme+0x169/0x1d0 [ 717.257899][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 717.296609][ T30] kthread+0x2f0/0x390 [ 717.313384][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 717.328654][ T30] ? __pfx_kthread+0x10/0x10 [ 717.333328][ T30] ret_from_fork+0x4b/0x80 [ 717.358587][ T30] ? __pfx_kthread+0x10/0x10 [ 717.363275][ T30] ret_from_fork_asm+0x1a/0x30 [ 717.368108][ T30] [ 717.397309][ T30] INFO: task kworker/R-wg-cr:10144 blocked for more than 144 seconds. [ 717.415956][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 717.443826][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 717.471336][ T30] task:kworker/R-wg-cr state:D stack:29328 pid:10144 tgid:10144 ppid:2 flags:0x00004000 [ 717.508956][ T30] Call Trace: [ 717.512316][ T30] [ 717.515285][ T30] __schedule+0x1893/0x4b50 [ 717.536460][ T30] ? __pfx___schedule+0x10/0x10 [ 717.555131][ T30] ? __pfx_lock_release+0x10/0x10 [ 717.573057][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 717.588505][ T30] ? kthread_data+0x52/0xd0 [ 717.593111][ T30] ? schedule+0x90/0x320 [ 717.597401][ T30] ? wq_worker_sleeping+0x66/0x240 [ 717.631585][ T30] ? schedule+0x90/0x320 [ 717.635925][ T30] schedule+0x14b/0x320 [ 717.660561][ T30] schedule_preempt_disabled+0x13/0x30 [ 717.666114][ T30] __mutex_lock+0x6a7/0xd70 [ 717.692654][ T30] ? __mutex_lock+0x52a/0xd70 [ 717.697515][ T30] ? worker_attach_to_pool+0x31/0x390 [ 717.722749][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 717.727988][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 717.766017][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 717.778517][ T30] worker_attach_to_pool+0x31/0x390 [ 717.783973][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 717.812483][ T30] rescuer_thread+0x3ed/0x10a0 [ 717.817348][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 717.845961][ T30] ? rescuer_thread+0x119/0x10a0 [ 717.857527][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 717.883398][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 717.898507][ T30] ? __kthread_parkme+0x169/0x1d0 [ 717.903622][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 717.936752][ T30] kthread+0x2f0/0x390 [ 717.948168][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 717.958535][ T30] ? __pfx_kthread+0x10/0x10 [ 717.963192][ T30] ret_from_fork+0x4b/0x80 [ 717.987335][ T30] ? __pfx_kthread+0x10/0x10 [ 718.008592][ T30] ret_from_fork_asm+0x1a/0x30 [ 718.013479][ T30] [ 718.048398][ T30] INFO: task kworker/R-wg-cr:10152 blocked for more than 144 seconds. [ 718.058054][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 718.103264][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 718.128590][ T30] task:kworker/R-wg-cr state:D stack:29328 pid:10152 tgid:10152 ppid:2 flags:0x00004000 [ 718.158755][ T30] Call Trace: [ 718.162105][ T30] [ 718.185159][ T30] __schedule+0x1893/0x4b50 [ 718.190199][ T30] ? __pfx___schedule+0x10/0x10 [ 718.195119][ T30] ? __pfx_lock_release+0x10/0x10 [ 718.219353][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 718.233185][ T30] ? kthread_data+0x52/0xd0 [ 718.237774][ T30] ? schedule+0x90/0x320 [ 718.268584][ T30] ? wq_worker_sleeping+0x66/0x240 [ 718.277769][ T30] ? schedule+0x90/0x320 [ 718.288521][ T30] schedule+0x14b/0x320 [ 718.292759][ T30] schedule_preempt_disabled+0x13/0x30 [ 718.298265][ T30] __mutex_lock+0x6a7/0xd70 [ 718.339791][ T30] ? __mutex_lock+0x52a/0xd70 [ 718.344659][ T30] ? worker_attach_to_pool+0x31/0x390 [ 718.358597][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 718.368803][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 718.375908][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 718.390407][ T30] worker_attach_to_pool+0x31/0x390 [ 718.395743][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 718.411148][ T30] rescuer_thread+0x3ed/0x10a0 [ 718.415998][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 718.428589][ T30] ? rescuer_thread+0x119/0x10a0 [ 718.433623][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 718.450428][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 718.455719][ T30] ? __kthread_parkme+0x169/0x1d0 [ 718.475576][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 718.481333][ T30] kthread+0x2f0/0x390 [ 718.485463][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 718.503553][ T30] ? __pfx_kthread+0x10/0x10 [ 718.508319][ T30] ret_from_fork+0x4b/0x80 [ 718.518871][ T30] ? __pfx_kthread+0x10/0x10 [ 718.523558][ T30] ret_from_fork_asm+0x1a/0x30 [ 718.528396][ T30] [ 718.543742][ T30] INFO: task kworker/R-wg-cr:10251 blocked for more than 145 seconds. [ 718.558638][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 718.579277][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 718.588014][ T30] task:kworker/R-wg-cr state:D stack:29088 pid:10251 tgid:10251 ppid:2 flags:0x00004000 [ 718.611231][ T30] Call Trace: [ 718.614580][ T30] [ 718.617549][ T30] __schedule+0x1893/0x4b50 [ 718.633395][ T30] ? __pfx___schedule+0x10/0x10 [ 718.638343][ T30] ? __pfx_lock_release+0x10/0x10 [ 718.648617][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 718.654162][ T30] ? kthread_data+0x52/0xd0 [ 718.671188][ T30] ? schedule+0x90/0x320 [ 718.675515][ T30] ? wq_worker_sleeping+0x66/0x240 [ 718.688511][ T30] ? schedule+0x90/0x320 [ 718.692832][ T30] schedule+0x14b/0x320 [ 718.697065][ T30] schedule_preempt_disabled+0x13/0x30 [ 718.717725][ T30] __mutex_lock+0x6a7/0xd70 [ 718.728581][ T30] ? __mutex_lock+0x52a/0xd70 [ 718.733344][ T30] ? worker_attach_to_pool+0x31/0x390 [ 718.748748][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 718.753861][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 718.771305][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 718.776528][ T30] worker_attach_to_pool+0x31/0x390 [ 718.792543][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 718.797826][ T30] rescuer_thread+0x3ed/0x10a0 [ 718.808573][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 718.814987][ T30] ? rescuer_thread+0x119/0x10a0 [ 718.830041][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 718.836014][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 718.850654][ T30] ? __kthread_parkme+0x169/0x1d0 [ 718.855764][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 718.868508][ T30] kthread+0x2f0/0x390 [ 718.880550][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 718.885830][ T30] ? __pfx_kthread+0x10/0x10 [ 718.901524][ T30] ret_from_fork+0x4b/0x80 [ 718.906017][ T30] ? __pfx_kthread+0x10/0x10 [ 718.918576][ T30] ret_from_fork_asm+0x1a/0x30 [ 718.923428][ T30] [ 718.926497][ T30] INFO: task kworker/R-wg-cr:10254 blocked for more than 145 seconds. [ 718.952667][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 718.967451][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 718.988957][ T30] task:kworker/R-wg-cr state:D stack:29328 pid:10254 tgid:10254 ppid:2 flags:0x00004000 [ 719.008589][ T30] Call Trace: [ 719.011932][ T30] [ 719.014900][ T30] __schedule+0x1893/0x4b50 [ 719.028525][ T30] ? __pfx___schedule+0x10/0x10 [ 719.033466][ T30] ? __pfx_lock_release+0x10/0x10 [ 719.049722][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 719.055249][ T30] ? kthread_data+0x52/0xd0 [ 719.068763][ T30] ? schedule+0x90/0x320 [ 719.073086][ T30] ? wq_worker_sleeping+0x66/0x240 [ 719.090159][ T30] ? schedule+0x90/0x320 [ 719.094974][ T30] schedule+0x14b/0x320 [ 719.108510][ T30] schedule_preempt_disabled+0x13/0x30 [ 719.114052][ T30] __mutex_lock+0x6a7/0xd70 [ 719.128508][ T30] ? __mutex_lock+0x52a/0xd70 [ 719.133270][ T30] ? worker_attach_to_pool+0x31/0x390 [ 719.149762][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 719.154882][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 719.172517][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 719.177737][ T30] worker_attach_to_pool+0x31/0x390 [ 719.191281][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 719.196573][ T30] rescuer_thread+0x3ed/0x10a0 [ 719.209473][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 719.215891][ T30] ? rescuer_thread+0x119/0x10a0 [ 719.228518][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 719.234535][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 719.250008][ T30] ? __kthread_parkme+0x169/0x1d0 [ 719.255120][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 719.268844][ T30] kthread+0x2f0/0x390 [ 719.272995][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 719.278262][ T30] ? __pfx_kthread+0x10/0x10 [ 719.296105][ T30] ret_from_fork+0x4b/0x80 [ 719.305933][ T30] ? __pfx_kthread+0x10/0x10 [ 719.317892][ T30] ret_from_fork_asm+0x1a/0x30 [ 719.323353][ T30] [ 719.330713][ T30] INFO: task kworker/R-wg-cr:10314 blocked for more than 146 seconds. [ 719.347702][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 719.356772][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 719.376763][ T30] task:kworker/R-wg-cr state:D stack:29264 pid:10314 tgid:10314 ppid:2 flags:0x00004000 [ 719.393417][ T30] Call Trace: [ 719.396781][ T30] [ 719.411239][ T30] __schedule+0x1893/0x4b50 [ 719.415946][ T30] ? __pfx___schedule+0x10/0x10 [ 719.430152][ T30] ? __pfx_lock_release+0x10/0x10 [ 719.435272][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 719.448968][ T30] ? kthread_data+0x52/0xd0 [ 719.453628][ T30] ? schedule+0x90/0x320 [ 719.457930][ T30] ? wq_worker_sleeping+0x66/0x240 [ 719.474967][ T30] ? schedule+0x90/0x320 [ 719.484244][ T30] schedule+0x14b/0x320 [ 719.497036][ T30] schedule_preempt_disabled+0x13/0x30 [ 719.509237][ T30] __mutex_lock+0x6a7/0xd70 [ 719.513831][ T30] ? __mutex_lock+0x52a/0xd70 [ 719.528656][ T30] ? worker_attach_to_pool+0x31/0x390 [ 719.534114][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 719.550087][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 719.556501][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 719.570171][ T30] worker_attach_to_pool+0x31/0x390 [ 719.575458][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 719.594044][ T30] rescuer_thread+0x3ed/0x10a0 [ 719.603030][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 719.618283][ T30] ? rescuer_thread+0x119/0x10a0 [ 719.626033][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 719.638540][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 719.643825][ T30] ? __kthread_parkme+0x169/0x1d0 [ 719.660071][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 719.665437][ T30] kthread+0x2f0/0x390 [ 719.678877][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 719.684260][ T30] ? __pfx_kthread+0x10/0x10 [ 719.704236][ T30] ret_from_fork+0x4b/0x80 [ 719.716445][ T30] ? __pfx_kthread+0x10/0x10 [ 719.726026][ T30] ret_from_fork_asm+0x1a/0x30 [ 719.738487][ T30] [ 719.741573][ T30] INFO: task kworker/R-bond0:10798 blocked for more than 146 seconds. [ 719.758526][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 719.765862][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 719.785627][ T30] task:kworker/R-bond0 state:D stack:29392 pid:10798 tgid:10798 ppid:2 flags:0x00004000 [ 719.804043][ T30] Call Trace: [ 719.807795][ T30] [ 719.819038][ T30] __schedule+0x1893/0x4b50 [ 719.823651][ T30] ? __pfx___schedule+0x10/0x10 [ 719.840001][ T30] ? __pfx_lock_release+0x10/0x10 [ 719.845114][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 719.858809][ T30] ? schedule+0x90/0x320 [ 719.863146][ T30] schedule+0x14b/0x320 [ 719.867368][ T30] schedule_preempt_disabled+0x13/0x30 [ 719.884701][ T30] __mutex_lock+0x6a7/0xd70 [ 719.897185][ T30] ? __mutex_lock+0x52a/0xd70 [ 719.908567][ T30] ? rescuer_thread+0xd0/0x10a0 [ 719.913646][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 719.928523][ T30] rescuer_thread+0xd0/0x10a0 [ 719.933302][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 719.948908][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 719.954882][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 719.970023][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 719.975993][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 719.997169][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 720.007848][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 720.022120][ T30] ? __kthread_parkme+0x169/0x1d0 [ 720.027230][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 720.038621][ T30] kthread+0x2f0/0x390 [ 720.042797][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 720.048050][ T30] ? __pfx_kthread+0x10/0x10 [ 720.065478][ T30] ret_from_fork+0x4b/0x80 [ 720.077197][ T30] ? __pfx_kthread+0x10/0x10 [ 720.086842][ T30] ret_from_fork_asm+0x1a/0x30 [ 720.097722][ T30] [ 720.102469][ T30] INFO: task kworker/R-bond0:10799 blocked for more than 147 seconds. [ 720.123979][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 720.137592][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 720.154111][ T30] task:kworker/R-bond0 state:D stack:29392 pid:10799 tgid:10799 ppid:2 flags:0x00004000 [ 720.175178][ T30] Call Trace: [ 720.179385][ T30] [ 720.182359][ T30] __schedule+0x1893/0x4b50 [ 720.186935][ T30] ? __pfx___schedule+0x10/0x10 [ 720.206231][ T30] ? __pfx_lock_release+0x10/0x10 [ 720.217839][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 720.228507][ T30] ? schedule+0x90/0x320 [ 720.232833][ T30] schedule+0x14b/0x320 [ 720.237042][ T30] schedule_preempt_disabled+0x13/0x30 [ 720.254058][ T30] __mutex_lock+0x6a7/0xd70 [ 720.265975][ T30] ? __mutex_lock+0x52a/0xd70 [ 720.275839][ T30] ? rescuer_thread+0xd0/0x10a0 [ 720.284020][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 720.297408][ T30] rescuer_thread+0xd0/0x10a0 [ 720.306712][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 720.323708][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 720.334642][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 720.347274][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 720.358389][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 720.364871][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 720.378536][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 720.383828][ T30] ? __kthread_parkme+0x169/0x1d0 [ 720.400381][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 720.405798][ T30] kthread+0x2f0/0x390 [ 720.420183][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 720.425463][ T30] ? __pfx_kthread+0x10/0x10 [ 720.440263][ T30] ret_from_fork+0x4b/0x80 [ 720.444859][ T30] ? __pfx_kthread+0x10/0x10 [ 720.459970][ T30] ret_from_fork_asm+0x1a/0x30 [ 720.464833][ T30] [ 720.467898][ T30] INFO: task kworker/R-bond0:10801 blocked for more than 147 seconds. [ 720.487327][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 720.497874][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 720.511527][ T30] task:kworker/R-bond0 state:D stack:29392 pid:10801 tgid:10801 ppid:2 flags:0x00004000 [ 720.533031][ T30] Call Trace: [ 720.536390][ T30] [ 720.547021][ T30] __schedule+0x1893/0x4b50 [ 720.555583][ T30] ? __pfx___schedule+0x10/0x10 [ 720.567734][ T30] ? __pfx_lock_release+0x10/0x10 [ 720.577806][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 720.588506][ T30] ? schedule+0x90/0x320 [ 720.592824][ T30] schedule+0x14b/0x320 [ 720.597029][ T30] schedule_preempt_disabled+0x13/0x30 [ 720.617279][ T30] __mutex_lock+0x6a7/0xd70 [ 720.627751][ T30] ? __mutex_lock+0x52a/0xd70 [ 720.638592][ T30] ? rescuer_thread+0xd0/0x10a0 [ 720.643530][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 720.660065][ T30] rescuer_thread+0xd0/0x10a0 [ 720.664821][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 720.678505][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 720.684475][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 720.700301][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 720.706269][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 720.726986][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 720.736831][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 720.748561][ T30] ? __kthread_parkme+0x169/0x1d0 [ 720.753671][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 720.770269][ T30] kthread+0x2f0/0x390 [ 720.774409][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 720.788876][ T30] ? __pfx_kthread+0x10/0x10 [ 720.793542][ T30] ret_from_fork+0x4b/0x80 [ 720.798008][ T30] ? __pfx_kthread+0x10/0x10 [ 720.814016][ T30] ret_from_fork_asm+0x1a/0x30 [ 720.827587][ T30] [ 720.832311][ T30] [ 720.832311][ T30] Showing all locks held in the system: [ 720.849005][ T30] 1 lock held by kworker/R-mm_pe/13: [ 720.854363][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 720.876113][ T30] 6 locks held by kworker/1:0/25: [ 720.885507][ T30] 1 lock held by khungtaskd/30: [ 720.897815][ T30] #0: ffffffff8e9389e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 720.913117][ T30] 2 locks held by dhcpcd/4891: [ 720.917944][ T30] #0: ffff88807a4106c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: netlink_dump+0xcb/0xd80 [ 720.937806][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 720.957578][ T30] 2 locks held by getty/4985: [ 720.969927][ T30] #0: ffff88803299a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 720.990252][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 721.008680][ T30] 2 locks held by kworker/1:2/5236: [ 721.013948][ T30] 3 locks held by kworker/1:6/5342: [ 721.033614][ T30] 1 lock held by kworker/R-bond0/10105: [ 721.045948][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xfbf/0x10a0 [ 721.060725][ T30] 1 lock held by kworker/R-wg-cr/10144: [ 721.066386][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 721.086864][ T30] 1 lock held by kworker/R-wg-cr/10146: [ 721.098504][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 721.121642][ T30] 1 lock held by kworker/R-wg-cr/10152: [ 721.138505][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 721.162348][ T30] 1 lock held by kworker/R-wg-cr/10251: [ 721.167968][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 721.188508][ T30] 1 lock held by kworker/R-wg-cr/10254: [ 721.194125][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 721.216887][ T30] 1 lock held by kworker/R-wg-cr/10265: [ 721.228351][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 721.248518][ T30] 1 lock held by kworker/R-wg-cr/10270: [ 721.254220][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 721.276907][ T30] 1 lock held by kworker/R-wg-cr/10276: [ 721.286871][ T30] 1 lock held by kworker/R-wg-cr/10313: [ 721.300856][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 721.318543][ T30] 1 lock held by kworker/R-wg-cr/10314: [ 721.324243][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 721.353917][ T30] 3 locks held by kworker/u8:10/10771: [ 721.365676][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 721.383165][ T30] #1: ffffc900095b7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 721.400565][ T30] #2: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 721.418556][ T30] 1 lock held by kworker/1:5/10777: [ 721.423819][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_thread+0x5c/0xd30 [ 721.446030][ T30] 1 lock held by kworker/R-bond0/10798: [ 721.456001][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 721.474629][ T30] 1 lock held by kworker/R-bond0/10799: [ 721.484618][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 721.506236][ T30] 1 lock held by kworker/R-bond0/10801: [ 721.516179][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 721.535547][ T30] 1 lock held by kworker/R-bond0/10806: [ 721.546586][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 721.563956][ T30] 1 lock held by kworker/R-bond0/10807: [ 721.583451][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 721.598499][ T30] 1 lock held by kworker/R-wg-cr/10814: [ 721.604115][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 721.626336][ T30] 1 lock held by kworker/R-wg-cr/10815: [ 721.637909][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 721.656970][ T30] 1 lock held by kworker/R-wg-cr/10816: [ 721.666804][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 721.685488][ T30] 1 lock held by kworker/R-wg-cr/10817: [ 721.694949][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 721.712653][ T30] 1 lock held by kworker/R-wg-cr/10818: [ 721.718289][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 721.740362][ T30] 1 lock held by kworker/R-wg-cr/10819: [ 721.746063][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 721.768844][ T30] 1 lock held by kworker/R-wg-cr/10820: [ 721.774464][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 721.788940][ T30] 1 lock held by kworker/R-wg-cr/10821: [ 721.794545][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 721.816556][ T30] 3 locks held by syz-executor/10824: [ 721.825990][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 721.842721][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 721.863708][ T30] #2: ffffffff8e7d28d0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 721.882605][ T30] 2 locks held by syz-executor/10827: [ 721.888220][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 721.908564][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 721.917404][ T30] 1 lock held by kworker/R-wg-cr/10830: [ 721.934528][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 721.959004][ T30] 1 lock held by kworker/R-wg-cr/10832: [ 721.964707][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 721.988647][ T30] 1 lock held by kworker/R-wg-cr/10836: [ 721.994279][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 722.016570][ T30] 1 lock held by kworker/R-wg-cr/10840: [ 722.027390][ T30] #0: ffffffff8e7e2fe8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 722.045247][ T30] 2 locks held by syz-executor/10845: [ 722.058524][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 722.078510][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 722.087975][ T30] 2 locks held by syz-executor/10852: [ 722.105565][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 722.118500][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 722.128119][ T30] 2 locks held by syz-executor/10854: [ 722.155467][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 722.170579][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 722.188575][ T30] 2 locks held by syz-executor/10862: [ 722.194020][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 722.218643][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 722.228284][ T30] 2 locks held by syz-executor/10865: [ 722.245965][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 722.270095][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 722.289344][ T30] 2 locks held by syz-executor/10867: [ 722.296605][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 722.316389][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 722.329001][ T30] 2 locks held by syz-executor/10869: [ 722.334448][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 722.349933][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 722.372440][ T30] 2 locks held by syz-executor/10871: [ 722.377879][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 722.395055][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 722.415997][ T30] [ 722.418397][ T30] ============================================= [ 722.418397][ T30] [ 722.431240][ T30] NMI backtrace for cpu 0 [ 722.435640][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 722.445837][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 722.455937][ T30] Call Trace: [ 722.459260][ T30] [ 722.462233][ T30] dump_stack_lvl+0x241/0x360 [ 722.466977][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 722.472240][ T30] ? __pfx__printk+0x10/0x10 [ 722.476894][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 722.481886][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 722.487405][ T30] ? _printk+0xd5/0x120 [ 722.491625][ T30] ? __pfx__printk+0x10/0x10 [ 722.496271][ T30] ? __wake_up_klogd+0xcc/0x110 [ 722.501195][ T30] ? __pfx__printk+0x10/0x10 [ 722.505836][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 722.510947][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 722.516976][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 722.523018][ T30] watchdog+0xff4/0x1040 [ 722.527311][ T30] ? watchdog+0x1ea/0x1040 [ 722.531780][ T30] ? __pfx_watchdog+0x10/0x10 [ 722.536501][ T30] kthread+0x2f0/0x390 [ 722.540611][ T30] ? __pfx_watchdog+0x10/0x10 [ 722.545332][ T30] ? __pfx_kthread+0x10/0x10 [ 722.550050][ T30] ret_from_fork+0x4b/0x80 [ 722.554518][ T30] ? __pfx_kthread+0x10/0x10 [ 722.559157][ T30] ret_from_fork_asm+0x1a/0x30 [ 722.563991][ T30] [ 722.568244][ T30] Sending NMI from CPU 0 to CPUs 1: [ 722.574237][ C1] NMI backtrace for cpu 1 [ 722.574254][ C1] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 722.574277][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 722.574291][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 722.574318][ C1] RIP: 0010:__dev_queue_xmit+0x24b/0x3e80 [ 722.574341][ C1] Code: 7a 06 01 0f 85 71 1f 00 00 e8 41 99 08 f8 80 3d 44 05 7a 06 01 0f 85 91 1f 00 00 e8 2f 99 08 f8 48 b8 00 00 00 00 00 fc ff df <48> 8b 4c 24 58 80 3c 01 00 74 0a 48 8b 7c 24 20 e8 d0 28 70 f8 48 [ 722.574358][ C1] RSP: 0018:ffffc90000a17b00 EFLAGS: 00000246 [ 722.574374][ C1] RAX: dffffc0000000000 RBX: 000000000000004a RCX: ffff88801d681e00 [ 722.574388][ C1] RDX: 0000000000000100 RSI: 000000000000004a RDI: 0000000000000000 [ 722.574406][ C1] RBP: ffffc90000a17df0 R08: ffffffff898c25c2 R09: dd860aaaaaaaaaaa [ 722.574420][ C1] R10: 0aaaaaaaaaaa0000 R11: dd860aaaaaaaaaaa R12: 1ffff11007a2eb42 [ 722.574435][ C1] R13: 0000000000000132 R14: dffffc0000000000 R15: ffff88803d175a10 [ 722.574449][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 722.574465][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 722.574479][ C1] CR2: 0000000020b63fe4 CR3: 000000000e734000 CR4: 00000000003506f0 [ 722.574497][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 722.574508][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 722.574520][ C1] Call Trace: [ 722.574527][ C1] [ 722.574536][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 722.574558][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 722.574587][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 722.574607][ C1] ? nmi_handle+0x2a/0x5a0 [ 722.574633][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 722.574658][ C1] ? nmi_handle+0x14f/0x5a0 [ 722.574676][ C1] ? nmi_handle+0x2a/0x5a0 [ 722.574695][ C1] ? __dev_queue_xmit+0x24b/0x3e80 [ 722.574713][ C1] ? default_do_nmi+0x63/0x160 [ 722.574733][ C1] ? exc_nmi+0x123/0x1f0 [ 722.574753][ C1] ? end_repeat_nmi+0xf/0x53 [ 722.574783][ C1] ? __dev_queue_xmit+0x212/0x3e80 [ 722.574802][ C1] ? __dev_queue_xmit+0x24b/0x3e80 [ 722.574821][ C1] ? __dev_queue_xmit+0x24b/0x3e80 [ 722.574840][ C1] ? __dev_queue_xmit+0x24b/0x3e80 [ 722.574858][ C1] [ 722.574865][ C1] [ 722.574876][ C1] ? mark_lock+0x9a/0x360 [ 722.574895][ C1] ? __lock_acquire+0x1384/0x2050 [ 722.574924][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 722.574953][ C1] ? mark_lock+0x9a/0x360 [ 722.574971][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 722.574999][ C1] ? __ipv6_neigh_lookup_noref+0x59f/0x730 [ 722.575028][ C1] ? ip6_finish_output2+0xdc6/0x1730 [ 722.575057][ C1] ip6_finish_output2+0xfc9/0x1730 [ 722.575088][ C1] ? ip6_finish_output2+0x75c/0x1730 [ 722.575116][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 722.575147][ C1] ? ip6_mtu+0x81/0x3f0 [ 722.575171][ C1] ip6_finish_output+0x41e/0x810 [ 722.575198][ C1] synproxy_send_tcp_ipv6+0x568/0x7c0 [ 722.575226][ C1] ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10 [ 722.575256][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 722.575284][ C1] ? skb_put+0x114/0x1f0 [ 722.575312][ C1] synproxy_send_client_synack_ipv6+0x7d0/0xc30 [ 722.575344][ C1] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 722.575370][ C1] ? synproxy_pernet+0x45/0x270 [ 722.575402][ C1] nft_synproxy_do_eval+0x739/0xa60 [ 722.575429][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 722.575455][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 722.575480][ C1] ? __pfx_validate_chain+0x10/0x10 [ 722.575499][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 722.575527][ C1] nft_do_chain+0x4ad/0x1da0 [ 722.575552][ C1] ? wg_packet_receive+0x11f3/0x2570 [ 722.575576][ C1] ? nf_nat_inet_fn+0xa30/0xd10 [ 722.575605][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 722.575641][ C1] ? nf_nat_ipv6_fn+0x2cb/0x3e0 [ 722.575663][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 722.575683][ C1] nft_do_chain_inet+0x418/0x6b0 [ 722.575709][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 722.575733][ C1] ? nf_nat_ipv6_local_in+0x1cd/0x620 [ 722.575755][ C1] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 722.575773][ C1] ? nf_nat_ipv6_fn+0x2cb/0x3e0 [ 722.575795][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 722.575818][ C1] nf_hook_slow+0xc3/0x220 [ 722.575840][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 722.575867][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 722.575895][ C1] NF_HOOK+0x29e/0x450 [ 722.575922][ C1] ? NF_HOOK+0x9a/0x450 [ 722.575947][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 722.575974][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 722.576003][ C1] ? ip6_rcv_finish_core+0x1fb/0x410 [ 722.576032][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 722.576058][ C1] NF_HOOK+0x3a4/0x450 [ 722.576083][ C1] ? skb_orphan+0xae/0xd0 [ 722.576099][ C1] ? NF_HOOK+0x9a/0x450 [ 722.576124][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 722.576153][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 722.576183][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 722.576209][ C1] __netif_receive_skb+0x1ea/0x650 [ 722.576231][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 722.576258][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 722.576278][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 722.576304][ C1] ? __pfx_lock_release+0x10/0x10 [ 722.576331][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 722.576361][ C1] process_backlog+0x662/0x15b0 [ 722.576386][ C1] ? process_backlog+0x33b/0x15b0 [ 722.576417][ C1] ? __pfx_process_backlog+0x10/0x10 [ 722.576439][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 722.576467][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 722.576495][ C1] __napi_poll+0xcb/0x490 [ 722.576516][ C1] net_rx_action+0x89b/0x1240 [ 722.576549][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 722.576571][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 722.576614][ C1] handle_softirqs+0x2c5/0x980 [ 722.576641][ C1] ? do_softirq+0x11b/0x1e0 [ 722.576665][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 722.576694][ C1] do_softirq+0x11b/0x1e0 [ 722.576716][ C1] [ 722.576722][ C1] [ 722.576729][ C1] ? __pfx_do_softirq+0x10/0x10 [ 722.576753][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 722.576782][ C1] ? rcu_is_watching+0x15/0xb0 [ 722.576802][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 722.576827][ C1] ? wg_socket_send_skb_to_peer+0x176/0x1d0 [ 722.576849][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 722.576874][ C1] ? mod_peer_timer+0x21/0x260 [ 722.576896][ C1] wg_socket_send_skb_to_peer+0x176/0x1d0 [ 722.576920][ C1] wg_packet_tx_worker+0x1bf/0x810 [ 722.576943][ C1] ? process_scheduled_works+0x976/0x1850 [ 722.576969][ C1] process_scheduled_works+0xa63/0x1850 [ 722.577007][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 722.577037][ C1] ? assign_work+0x364/0x3d0 [ 722.577063][ C1] worker_thread+0x870/0xd30 [ 722.577095][ C1] ? __kthread_parkme+0x169/0x1d0 [ 722.577123][ C1] ? __pfx_worker_thread+0x10/0x10 [ 722.577148][ C1] kthread+0x2f0/0x390 [ 722.577166][ C1] ? __pfx_worker_thread+0x10/0x10 [ 722.577191][ C1] ? __pfx_kthread+0x10/0x10 [ 722.577209][ C1] ret_from_fork+0x4b/0x80 [ 722.577235][ C1] ? __pfx_kthread+0x10/0x10 [ 722.577253][ C1] ret_from_fork_asm+0x1a/0x30 [ 722.577286][ C1] [ 723.375873][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 723.382800][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 723.393003][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 723.403127][ T30] Call Trace: [ 723.406446][ T30] [ 723.409630][ T30] dump_stack_lvl+0x241/0x360 [ 723.414369][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 723.419623][ T30] ? __pfx__printk+0x10/0x10 [ 723.424266][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 723.430306][ T30] ? vscnprintf+0x5d/0x90 [ 723.434677][ T30] panic+0x349/0x880 [ 723.438621][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 723.444820][ T30] ? __pfx_panic+0x10/0x10 [ 723.449279][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 723.454696][ T30] ? __irq_work_queue_local+0x137/0x410 [ 723.460296][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 723.465711][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 723.471912][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 723.478115][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 723.484322][ T30] watchdog+0x1033/0x1040 [ 723.488704][ T30] ? watchdog+0x1ea/0x1040 [ 723.493825][ T30] ? __pfx_watchdog+0x10/0x10 [ 723.498549][ T30] kthread+0x2f0/0x390 [ 723.502661][ T30] ? __pfx_watchdog+0x10/0x10 [ 723.507386][ T30] ? __pfx_kthread+0x10/0x10 [ 723.512019][ T30] ret_from_fork+0x4b/0x80 [ 723.516495][ T30] ? __pfx_kthread+0x10/0x10 [ 723.521123][ T30] ret_from_fork_asm+0x1a/0x30 [ 723.526042][ T30] [ 723.529499][ T30] Kernel Offset: disabled [ 723.533851][ T30] Rebooting in 86400 seconds..