last executing test programs: 20.488512616s ago: executing program 3 (id=4421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x5a, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x24, 0x6, 0x0, @dev, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0xe, [0xd, 0x9, 0x4]}]}}}}}}}}, 0x0) 20.018630654s ago: executing program 3 (id=4423): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x5}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x3001029}]}}]}, 0x48}}, 0x0) 19.588814731s ago: executing program 3 (id=4427): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4}, {0x4}, {0x4}]}]}, 0x2c}}, 0x0) 19.142035523s ago: executing program 3 (id=4428): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x20a0820, &(0x7f0000000300)=ANY=[@ANYBLOB="2c326fba746d6f64653d"], 0x0, 0x0, 0x0) 18.639346559s ago: executing program 3 (id=4430): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000240)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 13.124756986s ago: executing program 3 (id=4446): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xfffffde3}}]}, 0x88}}, 0x0) 4.988405067s ago: executing program 2 (id=4469): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3f, 0x0, 0x0, 0x20000000, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) 4.802986844s ago: executing program 2 (id=4470): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r1 = syz_open_dev$dmmidi(&(0x7f00000000c0), 0x2, 0x0) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000100)=""/116, 0x74}], 0x1) lseek(r0, 0x9, 0x0) 3.715387469s ago: executing program 2 (id=4473): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x48}}, 0x0) 3.346045265s ago: executing program 0 (id=4476): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="1800018008000100000004000c0002"], 0x30}}, 0x0) 3.246821369s ago: executing program 4 (id=4477): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000380), 0xc01) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x16}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 3.206750117s ago: executing program 1 (id=4478): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setresgid(0x0, 0x0, 0x0) 2.901563795s ago: executing program 4 (id=4479): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x14, 0x2, [@TCA_TBF_BURST={0x4}, @TCA_TBF_PBURST={0x8}]}}, @TCA_RATE={0x6}]}, 0x48}}, 0x0) 2.856347238s ago: executing program 1 (id=4480): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x9c) 2.487026578s ago: executing program 2 (id=4481): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 2.468941699s ago: executing program 0 (id=4482): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x4d92, 0x0, 0x0, 0x0, 0x0) 2.299977267s ago: executing program 4 (id=4483): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x84}}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x42e) 2.007405357s ago: executing program 1 (id=4484): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffb}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) 1.817777725s ago: executing program 0 (id=4485): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f000001aa80)=@newchain={0x840, 0x64, 0xf08, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffe5}, {0xfff3, 0xfff3}, {0xfff2, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x810, 0x2, [@TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xc, 0x7fffffff, 0x4, 0x2c3, 0x8, 0x3, 0x3a800000, 0x4, 0x5, 0x2cb62e57, 0x9, 0x1, 0x692, 0x101, 0xe, 0x800, 0x5, 0x4, 0x8, 0xe8, 0x2, 0x3, 0x1, 0x80000001, 0x6, 0x101, 0x80a0, 0x69f, 0x6, 0x4, 0x4, 0x80000000, 0x92d, 0xc5, 0x4, 0x4000008, 0x9, 0x1, 0xdcb, 0x9, 0x7, 0x0, 0x8000003, 0x7fff, 0x2, 0x8c95, 0x2, 0x24e0, 0x1, 0x9, 0x8, 0x7fff, 0x7, 0xeb20, 0x7f, 0x1, 0x4, 0x1, 0x9, 0xffffff78, 0x8, 0xb, 0x0, 0x9, 0x1, 0x7ff, 0x1, 0x2, 0x8, 0x8, 0x7fffffff, 0x7fff, 0xffff0000, 0xd8c, 0x4, 0x1, 0x8, 0x9, 0x6, 0x0, 0x5, 0x9, 0x80, 0xfffffffe, 0x3, 0x4, 0x3, 0x109, 0x2020000, 0x2, 0xb, 0x8, 0x0, 0x6, 0x0, 0x3, 0x5, 0x3ff, 0x7, 0x5, 0x3, 0x9, 0x7388, 0xb39, 0x8cc, 0x1ffc, 0x4, 0x1, 0x407b, 0x80000001, 0xed, 0x6, 0x7, 0x38a10141, 0xfffffffe, 0x5a10000, 0x5, 0x600, 0x30, 0x0, 0x53c, 0x400, 0x1, 0x800, 0x80, 0x0, 0x10001, 0x9, 0x9c, 0x1, 0xe, 0x9, 0x1, 0x500, 0x9, 0x2, 0x71c, 0x3, 0x6, 0x0, 0x3, 0x6, 0xfffffff7, 0x9, 0xa937, 0x200, 0x81, 0x4, 0xd7a92da9, 0x5, 0x3, 0xeed2, 0xb07, 0x9, 0x3, 0x0, 0x5, 0x1, 0x0, 0x5, 0x7, 0xffff0001, 0x3, 0x7, 0xa, 0x6, 0x85, 0x3, 0x2, 0x6, 0x7, 0x4, 0x81, 0x6, 0x7ff, 0x8, 0x7, 0x6, 0x0, 0x1468cfb1, 0x5749, 0x81, 0x1000, 0xfffffffe, 0x2, 0x1, 0x4, 0x8, 0x9, 0x4, 0x1, 0x4531, 0x81a, 0x8, 0x5, 0xe5af, 0x9, 0x8000, 0x77b, 0x1, 0x4, 0x9, 0x5, 0x5519, 0x0, 0x4, 0x3, 0x9, 0xc, 0xfffffffa, 0xec93, 0x9, 0x1, 0x5, 0x0, 0x1, 0x7f, 0x5, 0x9, 0x3, 0x7, 0x2, 0x10, 0xff, 0x8, 0x5, 0x1, 0x34, 0x6da, 0x7, 0x5, 0x85dc, 0x8, 0x8, 0x8, 0x1, 0x7, 0x5, 0x4, 0x10, 0x1000, 0xc, 0x10000, 0x736c1644, 0x2000, 0x6, 0xcd3, 0x71, 0x5, 0xfffffffb, 0x53a6, 0x4, 0xa, 0xc, 0x2, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4a5, 0x3, 0x9, 0x61f2068e, 0x4, 0x8, 0x9c1, 0x401, 0x6, 0x639, 0x10, 0x4, 0xe, 0x0, 0x7db, 0x7, 0x8, 0x4, 0x1, 0x7, 0xc, 0x6, 0x2, 0xe2, 0x3, 0x3ac, 0x3, 0xd, 0x8001, 0x0, 0xfffffbff, 0xf069, 0x2, 0x78c1, 0xe13, 0xfff, 0x3, 0x457d7ebb, 0x7ff, 0x7, 0x11, 0xd, 0x6, 0x2, 0xf642, 0x0, 0x6, 0x7f, 0x40, 0x6, 0x5, 0xb8d5, 0x5, 0x1, 0x2, 0x7, 0x4, 0x59, 0x60e, 0x76be000, 0xbe19, 0x9, 0x4007e251, 0x2, 0xfffffffa, 0x1, 0xb, 0xffffff93, 0xab6d, 0x8, 0x8, 0x9, 0xa, 0x3, 0x8, 0x2, 0x3, 0xf, 0x6, 0x9, 0x5, 0x1, 0xbc, 0x3, 0x9, 0x55, 0x8, 0x203, 0x7, 0x1, 0x2, 0x3c08e400, 0x7, 0x3, 0x8, 0xfffff7ba, 0x80, 0xffffffff, 0x327, 0x4, 0x0, 0x1, 0xffffffff, 0x2b, 0x5, 0x8, 0x1, 0x43, 0x5, 0x21a1d03, 0x9, 0x5, 0x3, 0xc, 0x4, 0x0, 0x9, 0x7, 0x8ce1, 0x5, 0xfffffffb, 0x9, 0x98d6, 0x80, 0x2, 0x0, 0xa, 0x1, 0xf7, 0x7, 0x7, 0x9c, 0x0, 0x4, 0xe38b, 0x800, 0x1a0, 0x6060, 0x8001, 0x2859, 0x2, 0xfffffffd, 0xffffff67, 0x40, 0xf, 0x2, 0xfffffffc, 0x7, 0x2, 0x1, 0x400, 0x6, 0x10, 0x50000, 0xa, 0x1, 0xfff, 0x3, 0x1, 0x6, 0x9, 0x2, 0x0, 0x0, 0x1e, 0x2, 0x56b685f3, 0x4000, 0x9, 0x0, 0x5, 0x3a, 0x3, 0x10, 0x10, 0xff, 0x8, 0x5, 0x3711, 0x5ab3927a, 0x8, 0x80000000, 0x0, 0x1, 0x401, 0x3, 0x9, 0x400, 0x7, 0xfff, 0x21200, 0x6, 0x0, 0xc345, 0xffff, 0xfffffff8, 0x0, 0x6, 0xfffffffc, 0x9, 0x7, 0x43, 0x10, 0x3, 0x3, 0x4, 0x7, 0xff, 0xfff, 0x10000, 0x4, 0x6fb3, 0x8, 0x79, 0x3, 0x9, 0x200, 0x6, 0x0, 0xffff, 0x1, 0x8, 0x6, 0x1, 0x9, 0x7, 0x8, 0xdde, 0x9, 0xe7, 0x4, 0xe, 0x8, 0x8000, 0x2, 0xf3b, 0x101, 0xffffffff, 0x8, 0xfff, 0x0, 0x48, 0x80, 0xfffffffa, 0x5, 0x1, 0x7, 0x19bb, 0x6, 0x5, 0x2, 0xb, 0x73e354c0, 0x21, 0x6, 0x7]}]}]}}]}, 0x840}}, 0x0) 1.749890543s ago: executing program 4 (id=4486): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) 1.493667822s ago: executing program 1 (id=4487): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000010c0)="88145492b5129915fb117fbbdb577d3fefb3f504c5bd0637c80559c559ccf4f04d6245e8ed3faedd77b0d8a6e54bd1c333e81dc18e74e7246e62be69eaa2eb2da927947b569717cb8fe753880307b4254127ede3e11fe5d1d94716b5d145cdc7ee427a47e52fbb3c42f91825be02f85bde50476c91124cdc0acbae4fb24177a21e89fe6381e5a3eb5d7a21e2cc7507afc840fab13ce40e43ab9e2fae5877bc69f678fbaf297775bc3f880d66933df3287384a131c09e1706a7bb9e8f5939ca447e07e70d65a4e6e8682f086e8db0c6ec85e30c8d93859d74574c211d57b6e3a83d9cefa45b5e8144c9b43a4060108a475562860397018fbd6045dc5f2559049ec89ab817d652c14a77a0c9d8ff12741d13b9b2f56b03299d93bc84bea3569a8f3fe9ea997f63bbceda10303fae544982496a1e5ad3bdcd6a540dae3e1b0744c310090c4876edee4380c9577018b2b63ed88e92da819477805b28d2117d62c304987e73ecd5f9b351b7ced28647102c74fbc1a05fbacb1fb502b6581de4aea0d9f33f6c839733c259127a63b665c7b87d36e3e8ab6313698cdf39aa6f83caf345e22d7d0ce182b6efcd842b780807b9948dd01bbb3df2c8de937d1dd23e4b3674dd1319cae5440fc6022dd6ea2a8f95869cd61fe756209dbfdb1e92ce98a7f1c72ac3ace2fec687362b180c3a335aeaabf3ca6eed749f4b1d871fcaa836f8cf628b5dc4b31d0134164b3f1da79e5f551c367bb57d2c3066748d3338749249814a21f8c8ed9db757f7c3791513772b9b722f665d30dfd48e87b6095fa019219bbdcb2401dcc0c8003354a3801d49321433be7511bb2589e103abbcae3b39fcb83f532d2147ed1aa97292dbe3ae68fba2b2b78d8339a9dc307b5611932b523b0079d741aa8e9e68a99765da5c3e68b571d4c21101fbf87f5731bcd0e34d5851f461a4ca5e3e437bdff87332c2ae7738f0356dcf105f2bc6549036e33afdbdd6cfa7d6071801eaf92f0ad7aba2dcd537a714c4247fabdd31211a92b07d892ba232b30f9a3aa0cdf90cfa39fc015f43a057b9072474e9c60c0933d45bc764b2efc3e023ef7a9864e95c8aa595855ee5292142e62c8f85523407dbd2eace77e169a3d4241e891a221219cea395a2c6245935072e2e865c723b2cae43e5976cc95ad3d90f1f0ab88f6019573bf04abfb1a469f01f522898de508660783002a5764dd0dccd778de70ee6d459a37595ae4dae1acbf905238c4b17b73d2f16998704028ae19ba227039c65aa0b8c8751427f9cbe4ae3f59c7d4b6bd2fea514187745ac7981ddce5978e8e6c2d8fb1340fcff0f90cdf037a5dfd3bafb3a20464340103a3c88b4e0bce658de180b5e086a810de94aca697766d2cd0aae31c030c8868a76119a5431a817dea08b3394f566e350e41f6896f8469eb33686eb34e46b852937e539e78531566b7dfcd7b800d4d06c6b8350b13faab78b2cc7ef08c368c4a91c9eff5500f774c962fb0909a8d4f90677ef40ab4305df3bc0d2f4ed36643a6e16205fcadb118422fa7158c74f20cac7b405c7a37e0c7e58da7da076069980b88006f44de405459a1266d2a096d8a104cc6a065883f5b918745b618ddcea28f7cff83cc4c2f3c043a20e7bb7442a10b2a075ba48f9d206d72aec6015eb286b641b5a8a6ee5d25c464c9e27a1253162a95ae038f7ee8a7e02caea6e94a94e7af8b74fe3fb117f92fa7c2d8e1504f5ac3bb3edf415381965c2895a6e1df234bdbd0e63220c1305043b77a1130c1d6f313cfc4ad4ab562ca19636d247037842bf344446c432f5368919932efa1ef692e2bd196c5309f8e45c1dc00d33bbf3fd91a63b135a58c94195b0ba379f9baa9f3dfc50316324d4abd5a5ea7c8dba8631009b392affdbe5e4d2d948ba0bf1ee95a7dbc5d028843fc4d7912c2e46b38eb4d2ba8a9429b61d167168b5652336fc647faad9c3ed21dd6a587aa1ee38bc6e0eba0ba8a18e24e19e17cc3142fff72fa20e812cd6266b4a1e66fc705051604eb1f46b867a85d952b26167f18228515fabd90fce0b7adc977eb0acccac1757a4caa8af7a37adaf84d69865d6248de429579c28138348e91e9ecaa9b1ba5ca4af8bfaaec69589963c3bb5ca6c95e6f66e34b4597c584717a89151700e7547282495b4deb67e28a204ce1588590ece5a447442cec41236fbd8d5094415cd4f416136a31dfaa22133c5de3d3b35cb6b3c26750b7bf1067cd2bf9c0f9f5febf7d0643129b40deb8595cceb8a76301d1182206982e4bba1c1f7228498085f34eef05d73bfdec1feb7aeb59530548e04e747885e203d3edb466961d5a19e30a56de69ec00e9b48d818ed195133ba75abf7e191671531fae94cd229c0dad79e252f365b691125a28ca0017ccf41606dc818a1801978a8704d1d03e6d10b3be592f92eeadf635a16c2595ee2dc18c2139f4dad3046cf7519808f31a43dee0cc138b16ace514f6b204f470adcdfe26cb72c72a0cfc03e9b2480dd82694313e0b7ccaad11ed999cfb407c72cea05d79d0f35176c5a863e0fbeee75162d83d1df72c8a378a9be6dfa1ea80d487a6acf8671a3e354370d72570aeeb7594d2ba1c795a3e95d70e3321ade131290d7c4d7864172f7143f966e26fee196dcc16e82c148772189c5df9ec72a7fd4b72dab9e2b375a52e5823f31d94b1407af9312b2f061c1bfda4419055c50993410aaf6865cd5cf411785dbbc5ecdacfced99eef71e3702667e1391034e5cf9c432b6fc992392aa161ecc0245d6f5ca10e0c654616d8fb47ca75553d3023d9a043b1a5839c0a008c8f5926a893d1e03e436c83b56bab14c5bbbbbeb517816a8a571d0bc091f4fc030e00dddd37b4247bb912843db52bd098dc051c32bc415a95a2f35caab0462df1e097cf8e867da2ee35eab9ab2a44a268dbb370336b9476c9df9edc5e9a70300acccd045e7807d66912be644148141cd4893e031bc39ec9485f49403f50d5c7c9a5792243daf72262bba212834e5fc889b1ca9f47424a427849baad7f6dccf16d266fe08ae62d9617aac8c37f0b3f9879cb41c265d2b7b6c48cd8ed04de7bccdfee54f5095f662cc6bf3acb995e548cca0a549af8fca495341c9d92364283c488586e89576beef1ef1e6b64f05f957819a73928be106d4ac79c675f6a8ef7176fb0406769012dd83036510bcf66a650eef66b5a106d21636f0fd88fcf6cb66a92ded23d11c4c61637ace31aa94a7457ff78b4a1e027507e34937616aa4491ad5aa0edac96b9c1232ad4101400690975c0d09e8e053fe29338cc63bc45dc54497d4bd0207785039d79e4236dbd2abe0b46b7a1e1fb107d0c5716e0bc8b1ccadb36e17531ecce1baca16ee38a7e3adda064db8312bf4f1b63a5315c0f8c5431b13f5f5a3e8043312193eb21f7bb669a4738e7b246b02cc0ae6aaf5175cbd6157dddcd3c28f7d681a33c595f82f98e38ba52a6ec9826a7409745c42b7843fd65840e1df3bb7d58eace02f03385ce4ada05dd24b65865ca13ec3d51e92547b3c54aa671db3c4642c1adc5c0cd828e60ab13151401e0bd2e1ab1294ad5b9618cb39a726754272ffd37e13248aec7f1a2dcecc27417e271f7946259531cbcbcd26525b9ec38e8ff4f74018c30f8bc2d833fe977dff61aecca836166dc7993a00a7995f51a073721e71020e6a5501917e0f12a05290a8537f8ff9de486efe40fb226b10947857f19af34f8b579ab1e71a6ed63b74c0da7fe2e28b15f94bb9e3ac468df810cab01a92ce1f9a99feb0729d0f6aa8cf2cf8daa14b9fb0122b770823ba6a51405ec10bec7f339c12903a2bddff2fa070bc047fc86afc9f275a98ee3df55f25fcbd930732dd9a342f7e6bec6a3c5ff35c8ad3b0db7ab6317bdada2e38b4c372c3d05314e93503b96f6256820874c4f05e834411f0e09962aaebdd260fa2d8af17a191b30234ad16054067f17b6098d94c6f24d13c4926c0dcfdae50a75776535310d6f5e50e97370c4c80d0c425a8eccf314e7095c9a4b9df380534b14aaafa9b8376f1c0aa2c3a7b7e838fa466b588c50741794534a7f30bf251f85de5b8408d7661c59fe1f373ad791892e840a2629cdf965a67a2d798c3b8045530354380494e89461bf4143856fb8cbf7443a29b01f9ab0318bc02ac61d4c20e38e1a73f66d134712adb223df249064ab3046fd5cc5e7e7313bd45a40a1e59ebf88bb29db8c4dad1608234128e60027c9b17fcadde2de887f8e918ed4af0773030854f54e80073d7e3ee93f4e39b569098dc2752eee83c55e0f41cadae86bf14e46051a0c32113c1790a135ff7a21a750a9b48021de024fb270ba90a59bdc5a7c8d3a079b98827fa60e92a56c3155993fd48b4489fb996339624d16d569ea0fc0c18cf0f0a83f5b39cb0a601c5b860ec3f637bfb3aba8f48d26bbcc0e8d7149c5bde0ddbfd077a414dc447cc7df7716c252bb1df810b9d803fe60788a47845e6b93a9c40262a6e8b51a7bb9aa84f7adc892fcdc180aafc56ee520b8200f0358c670da3f43c746bc9741bca6c026366411d4a81f9cf0f25b30123b96aacf18a026d1f14044d2350196763489c3fbc057459cec6265d9243bdb3eb982e5e4843aec2290f0c778e477a561884b1ecfa6214409a2e1f80e1da1423839fa61f5ba37a4b022d68b1b0f428d514902f3ee9b29c131300c15cc8a0db2b75aa3ab99091576a69c044bfb1e756d9c140d989c4aa2fe327c6fd048d390275161aa6309d449248c1bb7819f2cd806999dd41d0ac21a870d1092e934e94e593361250eca3de708f1712929ccc6d917d8082c1014fc990fcf4b85a4a22d9b78b748424ca2b4819c39b7f05f05800838fd61d13d42548090c61276c71749a0455f5609ad2ae832c2733296944f69cbc001b8c87018480daf31c9668fc7deeb0fe1c0ed65e545bc326d58a0e6f31d4c595f49767e4c48372420f82b1e3e47db7bb3efb0c54441236a99d4f1075e7d85fb2c823ee29ea08b7f265c411052392603758c5e585af099af6e7da94f0b55205f045c192ef26a5577ebad7f9c6302307e61ab99b4d97d4ab28c5b0b885379a015e6088399bbb0c2d6f66179e72a838e040f1af8ac900f5dab5337baffd78641df1080bfd41862edc6e6f14a9615547ae7485478cc890c00509c271cd50a60f0df0a6950af30618e90bd71a3073c0c8949d278bdc7fc7f791639d6e71e3711d3aa0b6ca483924bf466278e41fbe868b97a7614473b275215522dc7031ef672837b4fbf62652339bc38fa22f6423d43f6f28bcdc745f1520dbb901f7947076bf3b7545e98bced0c080efd8b50c1a0cb213ab9c7d3cdf29ab3cadde50a8db516fcf5e77d8a45bcf219b65775ecfbb713dc7b2be4b24df5f776fc5955a008671ed077c01c5c749ecf026e478e1a9a316685328a9b06d837a28137793be241d17498b6a2eb6f857520b2e7aeeec0d4bc9f54decf68ee781de6acf567f738f2dba238ef9c4a39c852c143675e352fc90d78c87a091ae2a58e5017ade9cd7c65a557e1cc204b585757b2dd3180984ce96f0813b839ae14e9b845e8352cc1cdae15b17a156dd0114a029f6dab92a9b73fe1c749251ba5cfae5", 0xf80}, {&(0x7f0000000300)="fc6f8751db78dbfe48c011953206ed6a22fa44a2089bcf", 0x17}, {&(0x7f00000020c0)="39669b5cb79e81145925761cc6525258397b7b78116aa5e0d8275498f95aa98f923d6202d140e9e21ab002f5d3a98cf82402e47c87fda4bbb909bb3ee33fb3d484ce017941a3d7765c4cfd008e9c2cf0b337a22f3c62c7847d56930e053a2945ae0ac1bbe564dfeea18ceafef2037705c757fabfb3a461c93bf36b82f06ecd3eb097300d16a6f4dc259ff0b17ba15e8d8c879ac5fcf0bfdd439a4972a320f3786b2e7ca20b96db5d05ed2c2a98bad332ebdb666134c41649f85cf2901b16ea9fc7975cac86f3153cb5aa83fff91c591a3705267ecea6197911b412f3dab4b63f09c893ed74f7552878a04485d60dd3fc7eded72af3555b7577084d5df8994aa5a9341b37a1eef72acc799060316a7078ebdaf74a871083828e38c14ee220a8d175fc8030fe86e6d2b4f030d8668f4b2bcb15d743516cc448656d7d1fcfb404a4997adfe59128279b96733356b1e25c2867d6885e7427218d7d6469eefd9f2733e5e4bc44455d35e516a4829e1285be76001cd00d9eaf9683187c2e20c92294dcc2b703799c78cc07e60b65c7c4a7b9fb895f909bc0cdbcdf61410ece57dfbdeece77504a175e18f295e16f9334c097493e30ed8e4e5e74d7a5d47c0cce5e110270ce1aabaedd2350b483b7f1e7998b0c8aeb2134d0a297c554b11a0a50d49535187fc5371300ad06e433ae5795e3508544d32fcef9b062dddd446a43e7cb31fca494eebce2c5def2d2ad23ddd6ab59660090f3c560ed7dbd35e9c808a3e34e4df5b93b1be8d80ec002c3ee58edd99f0536ac7720321bd00c284db9f3e26dbf3d0c6721abc05b14761650d7e9ae52cf3ffb2d8048b0a6be2a47a4a80def9c46968e023240fcf63c7bb2f480304150f861ae615dcdafea3d0d0d6b3c7bf9bc1450b3631fa14e8891b0331b7102c9561ab9dfa7338b7741338610a24a4906787b3eca8bd9d23f9744192b5e429d6a83d0702570a78daddfe2964828ef75cd5d064553ffecd3f32d4c166390d26e104664d95a6a8ecd5010a65e442006a860b5d73ba3bbf838dac57ebd64446295acaf6122bdb345c228d2def0a02da65277895cbbb4c0763a64d40e67cb0a6f02fdbafd1dd80af62381f80ed64ec53d3ef4c04a21fd5c3d7ab9762a3268b9e9c125fcfe85531c370ac101521f7415b6c80ca418a8cdc99aeb18874349ad6cd28f00b6693e1be39114001bd18b7f64aed082f9f8787417642236a7d08aa4d804d97860153270864cba507f79cab474436351e9216e5d2f915c5396bdf1fe3e44a30b44e7df658ba6700d13d1f71eb13a40b6cdfab434bf8dc5b39eddcaf944f8fb2c62a0e31453e94ef96025c27e954d3f3d91b7b655e2b5eceae2c5f93acac702fa8cd30761240d8b8389b0659392b09c90a42227905de42a461d178c6aa9e7cb4f19b1619b3456b90597a5e0ff7312ba74699d2f990dfe5d2141c573d210c1db120ed39aeba14fc498d9abb33c47173e610fbd6decf2b6a400a549c35a06b624d87fcdd50d1f910e1c513b7ee482c43996ba32170519544b0b6f083653236c4cab5c2a5c7cfd97939c7a65218e18afba5a32b30dd30aa073d9de0da338a241847bdc5ff80968ddc50fb46506746ce0a8bdc6ad0aebaca135925e3f7b8da2cc313cf0ef571ad54fc47724a2e53fb7312710ca81f447863667cc228ae847f59ae993860df6e2b4073d6b72c9246ea152e79872f82fe54793e54535dcd7b6ffc58f9036f36617b3af65d728f0d2657646c0be0fdc876a80c65b13143ae48004947af3ab5d02cec4e85b6c79a4282eb4f3ee44cb577bec740695504ab1d03f41117c3e45dac3a0419bab3c03d70d9cc2858f3918542799d77542f1e5f00f440eb52784c6e817d87ac006b4a6048de361ae17d9b0ba719105576bd49b0e9fc2471770e8f7dcefca4adb7c1de960a964fa75e4d50818de1df237fc67aae1312bfd1bac7457508b18c92d216ce8b55c6876e13545c6fd5d5447e2963b39e6cdbf5d2e06a4bb4b002623b66337e47eb490446bd9d55598bd21b4c1674bba6d5051124631dd79099dd7d89a37839dad094cf6c61ce28bff820e47d73ee53cfd6dfd737bca47ada469b53201e465be00904cfa631779b2a45095a80f02fb951aee11a91a5105a6ef421211f1d46ee50c5895ba454b48ee6091c15b899cf949449e6d27b01f51e4ae6cced6c300f6750c2f668d814e0ef5fb2fa5562d868e02fd11d863c4801b0d20b54ba662f8cba14a83a1f5ab46cca7ed7974bca50624cc336e37cb2cfd308a1155a5e7be5d03797c0d13d5018cda862776fdc9a7fcbde25c32b926d588f2a9a203806db6d0d6125e1d78423c7cbc31c53c7ece6e2dc6b6ab10621f9ab9b4139c0a7ce555ffe776b8cb4f8497c5c0d7d250197a6ec1d23f1bd1d8fd901736ffb214bab9485de1b1dcfc6901cca1649187dca7774c74169141e6ab8e7a42f9418308eaeb0ce7f24a4271dadd1b3890f5b7901557679343a43a8e32192b9f076809be25e46c86279e7a59a642d02a1c879a36c84978bdf6f8ce544e2fa4d8d155e44246c999f50ec36eb23fbf0f48924a1494b361bb0836d24dc32f2c1c1184015c12e254bb04ae7ed562881f238290f7948a361202760d0686ca87356f9ef229a9bb3d5c171180c8f562232bba71c88805fecaac7d0fa8b54abb4e24513fd1b549c8b79875e40095f0f9f43fb50ea147d03bdaf5afa7b6c621a32c2e6ac043a4489db73ed523d4ca438f71103674696f842d10d4512a9bf6167a1267f580bc9dc69d9bf5f68bab33e87fcc4ee1661f4eddcf07f2b5af08c3e207f984ae40f9b41c9fa6d499b85cccedaa5c8dc3c008f79fd84fcd824821d91702cf09e4c0f3dcf6deb3ccba9f78c159cbd29df300f4a0252b73e64cb84195efcc6bed74aea42524720f6380fb5ba3021a4a144c8663d0d7f3891d077e310b306b26bb8a57f637b3cac6b44620c737639abd924395c32851f2baf257b799c86de60ba27129297f39a69b27e6705b1a5e1c85cc81b78d52bb6a16c7f8115ac466628ad34b0c5676f4d4d48dad7385b4e5b048cf736035cde4ee1ee51f03e7fda7c95cb9bfd01bc1fc1ce23dee7b490049c398d8753667301dbd595c45f9f008397b5b9e0d67fe7bc42a15cf3255a31703294f13f4cf06e414c46643f2b46e0865a2a6a1d7d40fc1525d3dbdc28bc267e15a4a36016a72bef19a6e14025f6f07dc4fc9f74678d3a5011bbea5cc6abed9a4678666cea597c52d1058218d8dde939332c863b42a00a7b5dfe4bb442d691d9158ce378ed83f2b02cce95bd8968c9c8aaea8c55645c8e7d9c1de9604fac8737d0a4941f41a4caec8c9212e4889c501c596b3e9314bfdcde777d627787e5514221328dccd8db0c4b502ef14e5dc692a6ead4b2aa5530d72940133afbc07d5c977a622991cdd566a0aa8368f96e446d37814dc64e1f76191dfc743daeacd82bc6030e8803c50c8af4c332ee4b3fc81cfcbd0f90877676010eb5b1a716ec5c1e56b5ca7150fd6ef04798ed692deda0bedd2524ea153c6854faccc5ddc27f24a5e015ae15baf781bdffc2c53ec647852e40a0e89b4f6440fbb5ca8d94438d72ab2974e60006bb0e858d212f010cf6860d553b6cf7be68b425e63c8054fad39c0c7135f80aac9d478de77bcd19a6b4df14b258bdc7c78888d5bcba8a0821434637a46e73b6c855f3c67bf288f61de25d3e0764c142d02e7f7438c7b95dccdc14a1fcc9833a6ea26eb23f85b5e23dfba1344e18e009c8a71b3d436c5666f0f41806b44b9c298b00924e5651e1e3b2eed1205349d61acf012150a35d15d7cb05d1ba96d35a620faa420b3839ab99a918396efa26cd359a965cf0256e85a14550f16e0eb519d7ac004b91b7b02221383c98a2748f52ff221654de4d94e1c8405648ff09e1b21c10188936a3ecbb17cdf0ff0f1285d13a12ccb3a18fbdf694267ad799ba7a3e6feea5d742c78b6051e3d28e0632ef2ec6d676a2bac82e7e12265727f64ffa3cac34bed6f5722c90bf7041c412669b900587ed995ca3bb47994262db4d2a66fc1dde6eb467ef63abda3e2833c3fc910df81e559053e837ecd5ccb9dfe7848fcb3e2d299ad2453e49d2369ac54de5195fce8d0eacea103dc16a35048d8a49dafc58f75c99db5a020203e069cde0b19ed7e19de79f0fda743b42235f7618f107ddf55c73dc0ddd456ffa605765fe13f201ed86bf871082b5ac13219e698b902cb48a0e75929850445fc40f1bf39858d377b43cecd764d1cafb2df1a589201cd6a8f4bcf78d0578c0fddb2684b3707047b8003b9631a723181a59b4a61cb502111de50f1f47b874b2ac31d3fe97d456ca1ab5d654a6e6088922874e4ff0e4bbfd507fc44576fa53b587ac0fd716052b64d451d89d03d1c237fa533ea4e7b42814a15b0d199b892f78fa0de0d7811bee02f23b721f6a6a326d07ef57b0c36d38e29104b32cdb1d851748e9dc42c72522f1878996d15f810ed59344b5c2a74683dd23fc6bc49c8455ed57781f04294fd2f792b3e170225695d41a23573691725f3555a04781be1b02636a5924809d8d7dc24aae13dbe804c596933cd674f952c7973c708ff571b6a638a7da1ec2c2b79470368d3129a2e5f4a6bb50c81722a7e3e4fd02c4cf2b3db6c3bebe1cc2d5ec69f2f177f5ee5830529ea8b8e1084f5a43dab9b7aa7da169d0deb1c361fe0516ebcf46b87b5c0f6d16fa63f192c56c969960a1c6c621e66ea62aaa5ab3d6f275640efc82962913b48f358dd7f248d61fe6ed80e46a51c3a7be8d5fb8543da40a3a095ec417c0bb2b47161d2088c8713b962c62e0e1595221f592cefbc1e5b7065c57a9777b65e7a33bf3396f40f449071f5f9dbc387dd6c1bdaf95038679d51dd223e2abe9f521404f9d7699dafa4143b6cf05712295e801ca31ae585b9afa9e035d2d7405d7e5a642ef492702f468221d48f077d7bebe2d331f78c9d7abb2ee7c1765c98f3cdf91f477a2dceeac5d1c8290d92dd9caf50cf7f6baabca8607d446bbd68aea53def5a1f205e20d82ebc6f447f85debd1ec2575c289090046f6534c55c83077319e342f8cf1e351db79a5339049552e1df45fb166be730d865db57a0124dea3ad96c829a1589c004d071f5c1cf3b98a132e9c857d10a46cb5c946679eedbc8aac08f6cfd8d7046e70e2a61b47ee5dd36f793fddf357e11f209cc7f5b0d24935984f6abb181a0d4bb2ca6303bcd77dcce2603b68c3af394656f9646be3a176594c4fa909a802c3a86e3dfd22837effb5758e40c9399b67715c163f46b90a87808d001a7ec22106091f083370a461d090e0f56abd8bc91569da198b1394c28749273fccf2d6542e8c7ee246bb9013c19e1bb1257f4befc1d107ec20141544ba9dfc219ad1122a01d26bf857099c6c1e1ca87ed1690c4b3a62aef60c29c3e6b1bc08ff6f7e0999bdfa88c64835f8f8346cc76700b624831e157a1d7a7ed103e9067cc7768a203e41aa7713e99dcedb4d8be85f656ed62971024d84f997d253812b2e35f1bcac100d211156982a2c15e9d571ac48f27387de7561f059a9e2cc802", 0xf6a}], 0x3, 0x0, 0x0, 0x20000081}, 0x4004805) 1.424578283s ago: executing program 0 (id=4488): syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) io_setup(0x3, &(0x7f00000003c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 1.329903821s ago: executing program 4 (id=4489): openat$null(0xffffff9c, 0x0, 0x280000, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@dev, @broadcast, @val={@val, {0x8906}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "c4de57", 0x8, 0x6, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 1.122073372s ago: executing program 1 (id=4490): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x4, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000240)={@local, @link_local, @void, {@llc={0x4, {@snap={0xaa, 0x0, 'C', "988b2b"}}}}}, 0x0) 833.889436ms ago: executing program 2 (id=4491): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) connect$vsock_stream(r0, 0x0, 0x0) 589.060875ms ago: executing program 4 (id=4492): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0) 564.450212ms ago: executing program 1 (id=4493): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b05, &(0x7f0000000040)={'wlan1\x00'}) 456.22276ms ago: executing program 2 (id=4494): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffdb9, &(0x7f0000000680)={&(0x7f0000000000)={0x58, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "5a080039084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0b}]}]}, 0x58}}, 0x0) 385.073721ms ago: executing program 0 (id=4495): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in, 0x0, 0x0, 0x37, 0x0, "c3218d82c5896754d7cdb23c72887c897926a8856263b50c578ef1f9f362f16f21f5c872b1737718103bbde1a9d99011d25bbdff9c1351ba69e297337d6a5e4a948c1cbf827d6e95ad5bbfb5b3bd1929"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0xe, &(0x7f0000000040)=0x2, 0xf6) close(r0) 0s ago: executing program 0 (id=4496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e8593bc303ba9b58cf5d8aae7ec87b1aca548c40ea40b3d8"}]]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): [ T29] audit: type=1326 audit(1727321034.166:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15502 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 466.242453][ T29] audit: type=1326 audit(1727321034.196:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15502 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 466.265301][ T46] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 466.283186][ T29] audit: type=1326 audit(1727321034.196:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15502 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 466.334321][ T29] audit: type=1326 audit(1727321034.196:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15502 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 466.364930][ T5275] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 466.383133][ T29] audit: type=1326 audit(1727321034.196:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15502 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 466.411343][ T29] audit: type=1326 audit(1727321034.236:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15502 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 466.450295][ T29] audit: type=1326 audit(1727321034.236:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15504 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 466.476650][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 466.483301][ T29] audit: type=1326 audit(1727321034.236:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15502 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 466.516297][ T29] audit: type=1326 audit(1727321034.276:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15502 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 466.525138][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 466.554940][ T5275] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 466.576397][ T5275] usb 5-1: config 0 interface 0 has no altsetting 1 [ 466.577045][ T46] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 466.604218][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.610067][ T29] audit: type=1326 audit(1727321034.376:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15504 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 466.634243][ T46] usb 2-1: Product: syz [ 466.634269][ T46] usb 2-1: Manufacturer: syz [ 466.634289][ T46] usb 2-1: SerialNumber: syz [ 466.636897][ T46] usb 2-1: config 0 descriptor?? [ 466.657368][ T5275] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=25.e8 [ 466.671888][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.683211][ T46] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 466.695004][ T5275] usb 5-1: Product: syz [ 466.703100][ T5275] usb 5-1: Manufacturer: syz [ 466.705868][ T46] usb 2-1: Detected FT232R [ 466.711473][ T5275] usb 5-1: SerialNumber: syz [ 466.716934][ T29] audit: type=1326 audit(1727321034.406:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15502 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f33598 code=0x7ffc0000 [ 466.762674][ T5275] usb 5-1: config 0 descriptor?? [ 466.770644][ T29] audit: type=1326 audit(1727321034.406:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15502 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 466.795436][ T5275] ttusbir 5-1:0.0: cannot find expected altsetting [ 466.821827][ T29] audit: type=1326 audit(1727321034.406:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15502 comm="syz.0.3837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 466.892763][ T46] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 467.005126][ T5270] usb 5-1: USB disconnect, device number 42 [ 467.132839][ T46] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 467.376351][ T5275] usb 2-1: USB disconnect, device number 39 [ 467.440739][ T5275] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 467.465737][ T5275] ftdi_sio 2-1:0.0: device disconnected [ 467.674993][T15533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3852'. [ 467.842573][T15541] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 468.266101][ T5270] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 468.425807][ T5270] usb 5-1: Using ep0 maxpacket: 32 [ 468.433046][ T5270] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 468.442148][ T5270] usb 5-1: config 0 has no interface number 0 [ 468.460739][ T5270] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.474597][ T5270] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.484498][ T5270] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 468.494291][ T5270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.605429][ T5270] usb 5-1: config 0 descriptor?? [ 468.780059][ T6931] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.921515][T15562] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3867'. [ 469.042468][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 469.051930][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 469.072647][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 469.081652][ T5235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 469.097508][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 469.107094][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 469.179773][ T6931] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.248133][ T5270] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0094.006A/input/input69 [ 469.354328][ T6931] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.437169][ T5270] uclogic 0003:28BD:0094.006A: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.4-1/input1 [ 469.497009][ T5270] usb 5-1: USB disconnect, device number 43 [ 469.697324][ T6931] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.941491][T15569] chnl_net:caif_netlink_parms(): no params data found [ 470.019987][ T6931] bridge_slave_1: left allmulticast mode [ 470.043458][ T6931] bridge_slave_1: left promiscuous mode [ 470.066715][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.086314][ T6931] bridge_slave_0: left allmulticast mode [ 470.092117][ T6931] bridge_slave_0: left promiscuous mode [ 470.115458][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.506155][T15610] netlink: 'syz.3.3881': attribute type 1 has an invalid length. [ 470.525203][T15610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3881'. [ 470.987688][ T6931] bond0 (unregistering): left allmulticast mode [ 470.994165][ T6931] bond_slave_0: left allmulticast mode [ 471.000981][ T6931] bond_slave_1: left allmulticast mode [ 471.008424][ T6931] bond0 (unregistering): left promiscuous mode [ 471.014659][ T6931] bond_slave_0: left promiscuous mode [ 471.020540][ T6931] bond_slave_1: left promiscuous mode [ 471.043362][ T6931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.058577][ T6931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.070519][ T6931] bond0 (unregistering): Released all slaves [ 471.101589][T15607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3879'. [ 471.138358][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3882'. [ 471.157340][ T5235] Bluetooth: hci4: command tx timeout [ 471.444337][T15569] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.513818][T15569] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.553111][T15569] bridge_slave_0: entered allmulticast mode [ 471.580417][T15569] bridge_slave_0: entered promiscuous mode [ 471.612590][T15569] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.650278][T15569] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.671043][T15569] bridge_slave_1: entered allmulticast mode [ 471.693492][T15569] bridge_slave_1: entered promiscuous mode [ 471.776839][T15645] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3891'. [ 471.872108][ T5271] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 472.054959][ T5271] usb 4-1: Using ep0 maxpacket: 8 [ 472.086687][ T5271] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 472.111950][ T5271] usb 4-1: config 0 has no interface number 0 [ 472.151436][ T5271] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.172868][ T5271] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 472.190250][ T5271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.217290][ T5271] usb 4-1: config 0 descriptor?? [ 472.269609][T15569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.465483][T15569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.570621][ T6931] hsr_slave_0: left promiscuous mode [ 472.588096][ T6931] hsr_slave_1: left promiscuous mode [ 472.608964][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.632515][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.655512][ T5271] playstation 0003:054C:0CE6.006B: unknown main item tag 0x0 [ 472.664186][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.684650][ T5271] playstation 0003:054C:0CE6.006B: unknown main item tag 0x0 [ 472.692210][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.700818][ T5271] playstation 0003:054C:0CE6.006B: unknown main item tag 0x0 [ 472.734028][ T6931] veth1_macvtap: left promiscuous mode [ 472.739986][ T5271] playstation 0003:054C:0CE6.006B: unknown main item tag 0x0 [ 472.754977][ T5271] playstation 0003:054C:0CE6.006B: unknown main item tag 0x0 [ 472.762447][ T5271] playstation 0003:054C:0CE6.006B: unknown main item tag 0x0 [ 472.773407][ T6931] veth0_macvtap: left promiscuous mode [ 472.785035][ T6931] veth1_vlan: left promiscuous mode [ 472.795238][ T5271] playstation 0003:054C:0CE6.006B: unknown main item tag 0x0 [ 472.804120][ T6931] veth0_vlan: left promiscuous mode [ 472.826095][ T5271] playstation 0003:054C:0CE6.006B: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.3-1/input2 [ 472.936456][ T5271] playstation 0003:054C:0CE6.006B: Invalid byte count transferred, expected 20 got 0 [ 472.956711][ T5271] playstation 0003:054C:0CE6.006B: Failed to retrieve DualSense pairing info: -22 [ 472.986213][ T5271] playstation 0003:054C:0CE6.006B: Failed to get MAC address from DualSense [ 472.999638][ T5271] playstation 0003:054C:0CE6.006B: Failed to create dualsense. [ 473.009116][ T5271] playstation 0003:054C:0CE6.006B: probe with driver playstation failed with error -22 [ 473.212176][ T5271] usb 4-1: USB disconnect, device number 56 [ 473.234977][ T5235] Bluetooth: hci4: command tx timeout [ 473.781354][ T6931] team0 (unregistering): Port device team_slave_1 removed [ 473.872614][ T6931] team0 (unregistering): Port device team_slave_0 removed [ 474.387827][T15690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3904'. [ 474.421689][T15569] team0: Port device team_slave_0 added [ 474.438780][T15690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3904'. [ 474.456318][T15569] team0: Port device team_slave_1 added [ 474.564619][T15692] CUSE: info not properly terminated [ 474.587908][T15569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.614462][T15569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.643457][T15569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.677463][T15569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.684462][T15569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.743639][T15569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.020855][T15569] hsr_slave_0: entered promiscuous mode [ 475.047734][T15569] hsr_slave_1: entered promiscuous mode [ 475.348289][ T5235] Bluetooth: hci4: command tx timeout [ 475.384453][T15718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3913'. [ 475.719932][ T6931] IPVS: stop unused estimator thread 0... [ 476.024570][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 476.151475][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 476.161531][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 476.170845][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 476.185799][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 476.193190][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 476.429271][ T6931] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.719866][ T6931] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.858755][ T4619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 476.871365][ T4619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 476.880889][ T4619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 476.904341][ T4619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 476.919657][ T4619] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 476.921945][ T6931] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.955429][ T4619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 477.108814][ T6931] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.280349][T15739] chnl_net:caif_netlink_parms(): no params data found [ 477.329906][T15569] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 477.368974][T15569] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 477.384103][T15569] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 477.396565][ T5235] Bluetooth: hci4: command tx timeout [ 477.404316][T15569] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 477.506535][ T6931] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.559111][T15739] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.567369][T15739] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.574560][T15739] bridge_slave_0: entered allmulticast mode [ 477.582415][T15739] bridge_slave_0: entered promiscuous mode [ 477.593635][T15739] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.603306][T15739] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.610650][T15739] bridge_slave_1: entered allmulticast mode [ 477.618564][T15739] bridge_slave_1: entered promiscuous mode [ 477.643793][ T6931] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.753336][ T6931] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.789226][T15739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.802178][T15739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.848154][ T6931] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.865747][T15752] chnl_net:caif_netlink_parms(): no params data found [ 477.931960][T15739] team0: Port device team_slave_0 added [ 477.941281][T15739] team0: Port device team_slave_1 added [ 478.070016][T15739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.089586][T15739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.127749][T15739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.184470][T15739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.193312][T15739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.221636][T15739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.243268][T15752] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.250909][T15752] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.258315][T15752] bridge_slave_0: entered allmulticast mode [ 478.266168][T15752] bridge_slave_0: entered promiscuous mode [ 478.275417][ T5235] Bluetooth: hci0: command tx timeout [ 478.326390][T15752] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.333601][T15752] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.347957][T15752] bridge_slave_1: entered allmulticast mode [ 478.366655][T15752] bridge_slave_1: entered promiscuous mode [ 478.408037][ T6931] bridge_slave_1: left allmulticast mode [ 478.413756][ T6931] bridge_slave_1: left promiscuous mode [ 478.430975][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.444632][ T6931] bridge_slave_0: left allmulticast mode [ 478.456487][ T6931] bridge_slave_0: left promiscuous mode [ 478.462544][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.481909][ T6931] bridge_slave_1: left allmulticast mode [ 478.491542][ T6931] bridge_slave_1: left promiscuous mode [ 478.502026][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.524434][ T6931] bridge_slave_0: left allmulticast mode [ 478.532078][ T6931] bridge_slave_0: left promiscuous mode [ 478.538180][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.005040][ T5235] Bluetooth: hci3: command tx timeout [ 479.461962][ T6931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.473164][ T6931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.484955][ T6931] bond0 (unregistering): Released all slaves [ 479.615081][ T6931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.627539][ T6931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.638585][ T6931] bond0 (unregistering): Released all slaves [ 479.663722][T15752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.707888][T15739] hsr_slave_0: entered promiscuous mode [ 479.725739][T15739] hsr_slave_1: entered promiscuous mode [ 479.732191][T15739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.751375][T15739] Cannot create hsr debugfs directory [ 479.811514][T15752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.970876][T15752] team0: Port device team_slave_0 added [ 480.002073][T15569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.020274][T15752] team0: Port device team_slave_1 added [ 480.139280][T15752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.154910][T15752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.182940][T15752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.271742][T15569] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.280668][T15752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.290815][T15752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.317798][T15752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.359911][ T5235] Bluetooth: hci0: command tx timeout [ 480.524854][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.532026][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.548296][T15752] hsr_slave_0: entered promiscuous mode [ 480.556532][T15752] hsr_slave_1: entered promiscuous mode [ 480.562786][T15752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.575013][T15752] Cannot create hsr debugfs directory [ 480.614259][ T6931] hsr_slave_0: left promiscuous mode [ 480.620747][ T6931] hsr_slave_1: left promiscuous mode [ 480.627961][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.635875][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.646591][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.654042][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.676487][ T6931] hsr_slave_0: left promiscuous mode [ 480.682700][ T6931] hsr_slave_1: left promiscuous mode [ 480.697647][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.705282][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.713710][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.722384][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.753414][ T6931] veth1_macvtap: left promiscuous mode [ 480.759405][ T6931] veth0_macvtap: left promiscuous mode [ 480.765073][ T6931] veth1_vlan: left promiscuous mode [ 480.770366][ T6931] veth0_vlan: left promiscuous mode [ 480.778259][ T6931] veth1_macvtap: left promiscuous mode [ 480.783824][ T6931] veth0_macvtap: left promiscuous mode [ 480.789494][ T6931] veth1_vlan: left promiscuous mode [ 480.796844][ T6931] veth0_vlan: left promiscuous mode [ 481.079736][ T5235] Bluetooth: hci3: command tx timeout [ 481.389634][ T6931] team0 (unregistering): Port device team_slave_1 removed [ 481.443234][ T6931] team0 (unregistering): Port device team_slave_0 removed [ 482.296483][ T6931] team0 (unregistering): Port device team_slave_1 removed [ 482.351179][ T6931] team0 (unregistering): Port device team_slave_0 removed [ 482.435116][ T4619] Bluetooth: hci0: command tx timeout [ 482.732584][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.739781][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.054153][T15569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.142061][T15569] veth0_vlan: entered promiscuous mode [ 483.161697][T15569] veth1_vlan: entered promiscuous mode [ 483.165363][ T4619] Bluetooth: hci3: command tx timeout [ 483.282167][T15569] veth0_macvtap: entered promiscuous mode [ 483.343324][T15739] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 483.393544][T15569] veth1_macvtap: entered promiscuous mode [ 483.447590][T15739] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 483.468225][T15739] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 483.524072][T15739] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 483.577118][T15569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.597181][T15569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.607304][T15569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.617975][T15569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.629751][T15569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.718200][T15569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.730705][T15569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.744571][T15569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.755227][T15569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.767205][T15569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.783819][T15569] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.796798][T15569] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.806770][T15569] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.815885][T15569] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.009019][ T6931] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.052826][T15752] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 484.071759][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.080384][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.121495][ T6931] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.134705][T15752] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 484.149118][T15752] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 484.164694][T15752] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 484.203387][ T6931] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.226811][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.241796][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.251380][T15739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.327121][ T6931] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.405982][T15739] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.463491][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.470689][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.547241][ T4619] Bluetooth: hci0: command tx timeout [ 484.566346][T14987] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.573680][T14987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.719660][T15752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.770128][ T6931] bridge_slave_1: left allmulticast mode [ 484.787026][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 484.801803][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 484.811120][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 484.820973][ T6931] bridge_slave_1: left promiscuous mode [ 484.821176][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 484.838287][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 484.845906][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 484.853211][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.902380][ T6931] bridge_slave_0: left allmulticast mode [ 484.908740][ T6931] bridge_slave_0: left promiscuous mode [ 484.914510][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.236379][ T5235] Bluetooth: hci3: command tx timeout [ 485.491064][ T6931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.505464][ T6931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.521700][ T6931] bond0 (unregistering): Released all slaves [ 485.546682][T15752] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.647444][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.654703][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.747412][ T5270] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 485.766306][T14987] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.773424][T14987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.872780][T15739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.963047][ T5270] usb 3-1: Using ep0 maxpacket: 16 [ 485.980473][ T5270] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 485.987358][T15752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 486.004361][ T5270] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 486.034916][ T5270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.063378][ T5270] usb 3-1: config 0 descriptor?? [ 486.069683][ T6931] hsr_slave_0: left promiscuous mode [ 486.075888][ T6931] hsr_slave_1: left promiscuous mode [ 486.082054][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.090782][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.092604][ T5270] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input70 [ 486.108653][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.116792][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.142945][ T6931] veth1_macvtap: left promiscuous mode [ 486.148721][ T6931] veth0_macvtap: left promiscuous mode [ 486.154375][ T6931] veth1_vlan: left promiscuous mode [ 486.165845][ T6931] veth0_vlan: left promiscuous mode [ 486.339269][ T4666] bcm5974 3-1:0.0: could not read from device [ 486.398483][T15867] bcm5974 3-1:0.0: could not read from device [ 486.417170][ T5270] usb 3-1: USB disconnect, device number 50 [ 486.450196][ T4666] bcm5974 3-1:0.0: could not read from device [ 486.839979][ T4619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 486.861447][ T4619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 486.890184][ T4619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 486.901806][ T4619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 486.916769][ T4619] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 486.924713][ T4619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 486.934019][ T4619] Bluetooth: hci2: command tx timeout [ 486.985551][ T6931] team0 (unregistering): Port device team_slave_1 removed [ 487.119907][ T6931] team0 (unregistering): Port device team_slave_0 removed [ 487.705088][ T5324] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 487.738026][T15855] chnl_net:caif_netlink_parms(): no params data found [ 487.876859][ T5324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.890213][ T5324] usb 3-1: config 0 has no interfaces? [ 487.896391][ T5324] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 487.917645][ T5324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.930310][ T5324] usb 3-1: config 0 descriptor?? [ 487.991336][T15752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.091157][T15855] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.125408][T15855] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.132690][T15855] bridge_slave_0: entered allmulticast mode [ 488.157648][T15855] bridge_slave_0: entered promiscuous mode [ 488.171097][ T5270] usb 3-1: USB disconnect, device number 51 [ 488.197241][T15739] veth0_vlan: entered promiscuous mode [ 488.241157][T15855] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.268800][T15855] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.282846][T15855] bridge_slave_1: entered allmulticast mode [ 488.290383][T15855] bridge_slave_1: entered promiscuous mode [ 488.361041][T15739] veth1_vlan: entered promiscuous mode [ 488.392761][T15855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.405603][T15855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.463466][T15855] team0: Port device team_slave_0 added [ 488.475319][T15855] team0: Port device team_slave_1 added [ 488.529435][T15855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.538934][T15855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.568145][T15855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.607564][T15877] chnl_net:caif_netlink_parms(): no params data found [ 488.625677][T15855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.632736][T15855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.667243][T15855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.702199][T15752] veth0_vlan: entered promiscuous mode [ 488.869086][ T6931] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.926290][T15752] veth1_vlan: entered promiscuous mode [ 488.974412][T15855] hsr_slave_0: entered promiscuous mode [ 488.995390][T15876] Bluetooth: hci4: command tx timeout [ 488.996779][ T5235] Bluetooth: hci2: command tx timeout [ 489.019251][T15855] hsr_slave_1: entered promiscuous mode [ 489.046646][T15855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 489.054278][T15855] Cannot create hsr debugfs directory [ 489.111578][T15739] veth0_macvtap: entered promiscuous mode [ 489.178905][ T6931] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.301550][ T6931] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.346817][T15739] veth1_macvtap: entered promiscuous mode [ 489.416770][ T6931] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.449393][T15877] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.461167][T15877] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.468602][T15877] bridge_slave_0: entered allmulticast mode [ 489.481682][T15877] bridge_slave_0: entered promiscuous mode [ 489.489974][T15877] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.497476][T15877] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.504724][T15877] bridge_slave_1: entered allmulticast mode [ 489.511956][T15877] bridge_slave_1: entered promiscuous mode [ 489.581707][T15877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.614124][T15752] veth0_macvtap: entered promiscuous mode [ 489.624340][T15877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.678678][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.697818][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.711132][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.725205][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.743197][T15739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.768004][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.779260][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.789856][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.801545][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.818334][T15739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.857629][T15877] team0: Port device team_slave_0 added [ 489.915996][T15752] veth1_macvtap: entered promiscuous mode [ 489.926537][T15877] team0: Port device team_slave_1 added [ 490.000177][T15739] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.010257][T15739] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.022883][T15739] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.032129][T15739] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.067087][T15877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.074182][T15877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.103823][T15877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.153824][T15877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.163082][T15877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.191872][T15877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.268683][ T6931] bridge_slave_1: left allmulticast mode [ 490.274399][ T6931] bridge_slave_1: left promiscuous mode [ 490.289156][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.310640][ T6931] bridge_slave_0: left allmulticast mode [ 490.320747][ T6931] bridge_slave_0: left promiscuous mode [ 490.330436][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.729653][ T6931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.741120][ T6931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.752869][ T6931] bond0 (unregistering): Released all slaves [ 490.865684][T15955] bridge: RTM_NEWNEIGH with invalid ether address [ 490.901944][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.922345][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.932399][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.948191][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.959729][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.970420][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.986171][T15752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.018369][T15877] hsr_slave_0: entered promiscuous mode [ 491.026861][T15877] hsr_slave_1: entered promiscuous mode [ 491.032967][T15877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.040743][T15877] Cannot create hsr debugfs directory [ 491.074973][ T5235] Bluetooth: hci4: command tx timeout [ 491.075191][T15876] Bluetooth: hci2: command tx timeout [ 491.106840][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.120795][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.131893][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.142819][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.153133][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.164320][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.177355][T15752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.231705][T15752] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.252455][T15752] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.261802][T15752] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.270983][T15752] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.503946][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.541038][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.600101][ T6931] hsr_slave_0: left promiscuous mode [ 491.622169][ T6931] hsr_slave_1: left promiscuous mode [ 491.661664][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.691726][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.701632][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.722307][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.771656][ T6931] veth1_macvtap: left promiscuous mode [ 491.785243][ T6931] veth0_macvtap: left promiscuous mode [ 491.795886][ T6931] veth1_vlan: left promiscuous mode [ 491.809184][ T6931] veth0_vlan: left promiscuous mode [ 492.566512][ T6931] team0 (unregistering): Port device team_slave_1 removed [ 492.620053][ T6931] team0 (unregistering): Port device team_slave_0 removed [ 493.132032][T15855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 493.154999][T15876] Bluetooth: hci4: command tx timeout [ 493.165327][T15876] Bluetooth: hci2: command tx timeout [ 493.198240][T15855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 493.206702][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.214558][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.234170][T15855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 493.272310][T15855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 493.792569][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.822662][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.989720][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.025512][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.154004][T15855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.165013][T16019] input: syz1 as /devices/virtual/input/input71 [ 494.292069][T15877] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 494.340566][T15855] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.376797][T15877] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 494.417699][ T6931] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.424889][ T6931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.441455][ T6931] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.448670][ T6931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.470591][T15877] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 494.488199][T15877] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 494.774226][T15855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.889057][T15877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.890764][T16045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3981'. [ 494.932752][T16045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3981'. [ 494.972429][T15877] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.983321][T15855] veth0_vlan: entered promiscuous mode [ 495.013772][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.021066][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.096352][T15855] veth1_vlan: entered promiscuous mode [ 495.142241][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.149446][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.236132][T15876] Bluetooth: hci4: command tx timeout [ 495.351444][T15855] veth0_macvtap: entered promiscuous mode [ 495.361086][T15855] veth1_macvtap: entered promiscuous mode [ 495.377354][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.387996][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.398147][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.408754][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.419310][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.430167][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.441526][T15855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.448843][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 495.448864][ T29] audit: type=1326 audit(1727321063.376:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.2.3987" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 495.448911][ T29] audit: type=1326 audit(1727321063.396:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.2.3987" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 495.448951][ T29] audit: type=1326 audit(1727321063.396:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.2.3987" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 495.448991][ T29] audit: type=1326 audit(1727321063.396:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.2.3987" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 495.449029][ T29] audit: type=1326 audit(1727321063.436:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.2.3987" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 495.449067][ T29] audit: type=1326 audit(1727321063.436:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.2.3987" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 495.458096][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.569419][ T29] audit: type=1326 audit(1727321063.436:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.2.3987" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 495.591640][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.591670][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.591693][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.656901][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.667456][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.678826][T15855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.716931][ T29] audit: type=1326 audit(1727321063.446:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.2.3987" exe="/root/syz-executor" sig=0 arch=40000003 syscall=335 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 495.769933][T16067] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3989'. [ 495.775370][ T29] audit: type=1326 audit(1727321063.446:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.2.3987" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f84598 code=0x7ffc0000 [ 495.785463][T16067] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 495.845520][ T29] audit: type=1326 audit(1727321063.446:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.2.3987" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 495.888169][T15855] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.898623][T15855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.927503][T15855] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.944916][T15855] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.024239][T15877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.452594][ T6931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.510439][ T6931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.555598][T15877] veth0_vlan: entered promiscuous mode [ 496.649900][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.655286][T15877] veth1_vlan: entered promiscuous mode [ 496.677304][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.827763][T15877] veth0_macvtap: entered promiscuous mode [ 496.950407][T15877] veth1_macvtap: entered promiscuous mode [ 497.022906][T15877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.072415][T15877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.104980][T15877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.134866][T15877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.181409][T15877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.224563][T15877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.255147][T15877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.304877][T15877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.326502][T15877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.412709][T15877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.423308][T15877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.433555][T15877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.444190][T15877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.454245][T15877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.465498][T15877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.479708][T15877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.490235][T15877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.501881][T15877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.514383][T15877] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.523359][T15877] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.532151][T15877] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.540929][T15877] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.837148][T14987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.888060][T14987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.980880][T14987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.995119][T14987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.249768][T16158] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 498.291978][T16158] pim6reg0: linktype set to 778 [ 498.523620][ T5235] Bluetooth: hci1: command 0x0406 tx timeout [ 498.534901][ T5325] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 498.582366][T16177] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 498.845999][ T5325] usb 4-1: Using ep0 maxpacket: 8 [ 498.852738][ T5325] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 498.862183][ T5325] usb 4-1: config 179 has no interface number 0 [ 498.868703][ T5325] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 498.879994][ T5325] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 498.891390][ T5325] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 498.903095][ T5325] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 498.915059][ T5325] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 498.928868][ T5325] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 498.938150][ T5325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.961465][T16151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 499.299568][ T5325] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input72 [ 499.491528][ T8] usb 4-1: USB disconnect, device number 57 [ 499.491580][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 499.491620][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 499.521389][ T8] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 499.986720][T16227] ALSA: mixer_oss: invalid index 80000 [ 500.193616][T16231] netlink: 'syz.2.4052': attribute type 14 has an invalid length. [ 500.790010][T16254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4061'. [ 501.576820][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.584401][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.333333][ T8] IPVS: starting estimator thread 0... [ 502.445204][T16310] IPVS: using max 15 ests per chain, 36000 per kthread [ 502.721580][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4089'. [ 503.734998][ T5271] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 503.904890][ T5271] usb 3-1: Using ep0 maxpacket: 32 [ 503.935704][ T5271] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 503.964845][ T5271] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 504.003060][ T5271] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 504.058553][ T5271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=9 [ 504.074844][ T5271] usb 3-1: Product: syz [ 504.079076][ T5271] usb 3-1: Manufacturer: syz [ 504.093065][ T5271] usb 3-1: SerialNumber: syz [ 504.435221][ T5271] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 504.592248][ T8] usb 3-1: USB disconnect, device number 52 [ 504.626813][ T8] usblp0: removed [ 504.959082][T16405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4130'. [ 504.970101][T16405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4130'. [ 505.482523][T16417] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4135'. [ 505.554631][T16417] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4135'. [ 506.151147][T16437] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 506.158141][T16437] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 506.175136][T16437] vhci_hcd vhci_hcd.0: Device attached [ 506.334139][T16448] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 506.410337][ T8] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 506.750685][T16439] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 506.850169][ T2992] vhci_hcd: stop threads [ 506.871177][ T2992] vhci_hcd: release socket [ 506.889825][ T2992] vhci_hcd: disconnect device [ 506.897449][T16463] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.929054][T16465] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 507.285952][T16482] mac80211_hwsim hwsim70 wlan0: entered promiscuous mode [ 507.322600][T16482] macsec1: entered allmulticast mode [ 507.340263][T16482] mac80211_hwsim hwsim70 wlan0: entered allmulticast mode [ 507.441786][T16482] mac80211_hwsim hwsim70 wlan0: left allmulticast mode [ 507.464360][T16482] mac80211_hwsim hwsim70 wlan0: left promiscuous mode [ 507.563113][T16494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4166'. [ 507.576005][T16494] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4166'. [ 507.589277][T16494] vlan0: entered allmulticast mode [ 507.594552][T16494] veth0_vlan: entered allmulticast mode [ 507.631596][T16498] ALSA: mixer_oss: invalid OSS volume 'ÒrpA&7ߵюeÁ]|ÈIÇÜï*Æ ÏE¢aì' [ 507.784927][ T46] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 507.946568][ T46] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 507.958205][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.977458][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4175'. [ 507.988900][ T46] usb 3-1: config 0 descriptor?? [ 508.004060][ T46] cp210x 3-1:0.0: cp210x converter detected [ 508.414512][ T46] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 508.430285][ T46] usb 3-1: cp210x converter now attached to ttyUSB0 [ 508.705082][ T46] usb 3-1: USB disconnect, device number 53 [ 508.720018][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 508.831831][ T46] cp210x 3-1:0.0: device disconnected [ 509.614978][ T5273] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 509.788804][ T5273] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 509.820324][ T5273] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 509.834992][ T5325] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 509.840974][ T5273] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 509.864380][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.887636][T16560] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 509.910878][ T5273] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 510.005497][ T5325] usb 4-1: Using ep0 maxpacket: 8 [ 510.045781][ T5325] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 510.081145][ T5325] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 510.115418][ T5325] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 510.163082][ T5325] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 510.165410][T16587] netlink: 340 bytes leftover after parsing attributes in process `syz.2.4213'. [ 510.196602][ T5325] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 510.223787][ T5324] usb 2-1: USB disconnect, device number 40 [ 510.230560][ T5325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.231703][T16589] input: syz1 as /devices/virtual/input/input74 [ 510.505127][ T5325] usb 4-1: GET_CAPABILITIES returned 0 [ 510.516023][ T5325] usbtmc 4-1:16.0: can't read capabilities [ 510.609415][T16599] futex_wake_op: syz.2.4219 tries to shift op by 144; fix this program [ 510.750109][ T5325] usb 4-1: USB disconnect, device number 58 [ 511.354941][ T46] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 511.413814][T16635] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 511.485067][ T5325] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 511.535844][ T46] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 511.545001][ T8] vhci_hcd: vhci_device speed not set [ 511.559215][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.575674][ T46] usb 3-1: config 0 descriptor?? [ 511.597211][ T46] cp210x 3-1:0.0: cp210x converter detected [ 511.656552][ T5325] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 511.700679][ T5325] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 511.717195][ T5325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 511.730276][ T5325] usb 2-1: SerialNumber: syz [ 512.033219][ T46] usb 3-1: cp210x converter now attached to ttyUSB0 [ 512.104947][ T5270] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 512.277438][ T5270] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 512.285676][ T5275] usb 3-1: USB disconnect, device number 54 [ 512.301758][ T5270] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.321423][ T5270] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.332487][ T5275] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 512.352909][ T5270] usb 5-1: config 0 interface 0 has no altsetting 0 [ 512.364325][ T5270] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.377552][ T5275] cp210x 3-1:0.0: device disconnected [ 512.388610][ T5270] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.423825][ T5270] usb 5-1: config 0 interface 0 has no altsetting 0 [ 512.436707][ T5270] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.455489][ T5270] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.477598][ T5270] usb 5-1: config 0 interface 0 has no altsetting 0 [ 512.495733][ T5270] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.524488][ T5270] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.545242][ T5270] usb 5-1: config 0 interface 0 has no altsetting 0 [ 512.563401][ T5270] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.579520][ T5325] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 512.584254][ T5270] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.605849][ T5325] usb 2-1: USB disconnect, device number 41 [ 512.620564][ T5270] usb 5-1: config 0 interface 0 has no altsetting 0 [ 512.637088][ T5270] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.652207][ T5270] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.673699][ T5270] usb 5-1: config 0 interface 0 has no altsetting 0 [ 512.692591][ T5270] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.717033][ T5270] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.744986][ T5270] usb 5-1: config 0 interface 0 has no altsetting 0 [ 512.763008][ T5270] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.772665][ T5270] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.794332][ T5270] usb 5-1: config 0 interface 0 has no altsetting 0 [ 512.823853][ T5270] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 512.848629][ T5270] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 512.858920][ T5270] usb 5-1: Product: syz [ 512.863229][ T5270] usb 5-1: Manufacturer: syz [ 512.868540][ T5270] usb 5-1: SerialNumber: syz [ 512.879913][ T5270] usb 5-1: config 0 descriptor?? [ 512.953127][ T5270] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 513.349754][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 513.350561][ T8] usb 5-1: USB disconnect, device number 44 [ 513.373697][ T8] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 513.555027][ T5270] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 513.730011][ T5270] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 513.743063][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.767065][ T5270] usb 2-1: config 0 descriptor?? [ 513.786048][ T5270] cp210x 2-1:0.0: cp210x converter detected [ 513.981228][T16675] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 514.095112][ T46] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 514.182193][ T5270] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 514.214723][ T5270] usb 2-1: cp210x converter now attached to ttyUSB0 [ 514.266957][ T46] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 514.277617][ T46] usb 3-1: config 0 has no interface number 0 [ 514.283816][ T46] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 514.305278][ T8] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 514.310496][ T46] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 514.350711][ T46] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 514.371070][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.399899][ T46] usb 3-1: config 0 descriptor?? [ 514.431105][ T5275] usb 2-1: USB disconnect, device number 42 [ 514.434737][ T46] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 514.473327][ T5275] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 514.484259][ T8] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 514.501344][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 514.510555][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 514.521840][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 514.545419][ T5275] cp210x 2-1:0.0: device disconnected [ 514.561036][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 514.571667][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 514.583568][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 514.612638][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 514.621919][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 514.632977][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 514.652780][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 514.661997][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 514.673666][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 514.683078][T16671] iowarrior 3-1:0.1: Error -90 while submitting URB [ 514.695901][T16691] binder: 16690:16691 ioctl 400c620e 200002c0 returned -22 [ 514.697215][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 514.712452][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 514.724092][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 514.747395][ T46] usb 3-1: USB disconnect, device number 55 [ 514.753205][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 514.763622][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 514.764664][ T46] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 514.778745][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 514.841375][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 514.854452][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 514.876998][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 514.888546][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 514.898118][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 514.915115][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 514.923984][ T8] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 514.939180][ T8] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 514.950244][ T8] usb 4-1: Product: syz [ 514.954459][ T8] usb 4-1: Manufacturer: syz [ 514.978709][ T8] usb 4-1: SerialNumber: syz [ 515.011452][ T8] usb 4-1: config 0 descriptor?? [ 515.039505][ T8] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 515.160916][ T1117] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.280247][ T1117] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.401601][ T8] usb 4-1: USB disconnect, device number 59 [ 515.412099][ T8] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 515.473032][ T1117] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.670087][ T1117] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.692395][T16710] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 515.894308][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 515.906481][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 515.915856][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 515.935746][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 515.944326][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 515.952203][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 515.968478][ T5338] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 515.995616][ T1117] bridge_slave_1: left allmulticast mode [ 516.029219][ T1117] bridge_slave_1: left promiscuous mode [ 516.036699][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.088690][ T1117] bridge_slave_0: left allmulticast mode [ 516.097146][ T1117] bridge_slave_0: left promiscuous mode [ 516.104513][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.179916][ T5338] usb 2-1: Using ep0 maxpacket: 8 [ 516.208416][ T5338] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.247697][ T5338] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.281602][ T5338] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 516.332228][ T5338] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 516.365720][ T5338] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 516.392203][ T5338] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 516.416791][ T5338] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 516.446238][ T5338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.454348][ T5338] usb 2-1: Product: syz [ 516.480497][T16733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4279'. [ 516.500330][ T5338] usb 2-1: Manufacturer: syz [ 516.517500][ T5338] usb 2-1: SerialNumber: syz [ 516.798545][ T5338] cdc_ncm 2-1:1.0: bind() failure [ 516.805131][ T5275] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 516.816246][ T5338] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 516.831002][ T5338] cdc_ncm 2-1:1.1: bind() failure [ 516.847700][ T5338] usb 2-1: USB disconnect, device number 43 [ 517.004923][ T5275] usb 5-1: Using ep0 maxpacket: 8 [ 517.011656][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.026703][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.037097][ T5275] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 517.046657][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.058340][ T5275] usb 5-1: config 0 descriptor?? [ 517.284146][ T1117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.301152][ T1117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.317699][ T1117] bond0 (unregistering): Released all slaves [ 517.481999][ T5275] sony 0003:054C:0268.006C: unknown main item tag 0x0 [ 517.510729][ T5275] sony 0003:054C:0268.006C: unknown main item tag 0x6 [ 517.529702][ T5275] sony 0003:054C:0268.006C: unknown main item tag 0x5 [ 517.545188][T16752] GUP no longer grows the stack in syz.2.4285 (16752): 20004000-20006000 (20002000) [ 517.576158][ T5275] sony 0003:054C:0268.006C: unknown main item tag 0x4 [ 517.583019][ T5275] sony 0003:054C:0268.006C: unknown main item tag 0x0 [ 517.592032][T16752] CPU: 0 UID: 0 PID: 16752 Comm: syz.2.4285 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 517.602525][T16752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 517.612711][T16752] Call Trace: [ 517.616026][T16752] [ 517.618998][T16752] dump_stack_lvl+0x241/0x360 [ 517.623733][T16752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.628981][T16752] ? __pfx__printk+0x10/0x10 [ 517.633619][T16752] ? find_vma+0xf9/0x170 [ 517.637930][T16752] ? vma_is_secretmem+0xd/0x50 [ 517.642752][T16752] ? check_vma_flags+0x52b/0x5a0 [ 517.647754][T16752] __get_user_pages+0x4260/0x48d0 [ 517.652849][T16752] ? __pfx___get_user_pages+0x10/0x10 [ 517.658253][T16752] ? __pfx_down_read_killable+0x10/0x10 [ 517.663827][T16752] ? __pfx_lock_acquire+0x10/0x10 [ 517.668891][T16752] __gup_longterm_locked+0x3ba/0x17d0 [ 517.674306][T16752] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 517.680334][T16752] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 517.686718][T16752] gup_fast_fallback+0x2748/0x2b60 [ 517.691878][T16752] ? __pfx_gup_fast_fallback+0x10/0x10 [ 517.697366][T16752] ? __pfx_lock_acquire+0x10/0x10 [ 517.702449][T16752] ? mark_lock+0x9a/0x360 [ 517.706798][T16752] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 517.712800][T16752] ? __lock_acquire+0x1384/0x2050 [ 517.717848][T16752] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 517.724219][T16752] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 517.729803][T16752] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 517.735372][T16752] ? __phys_addr+0xba/0x170 [ 517.739890][T16752] ? is_valid_gup_args+0x124/0x200 [ 517.745039][T16752] pin_user_pages_fast+0xcc/0x160 [ 517.750106][T16752] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 517.755766][T16752] ? __kmalloc_node_noprof+0x247/0x440 [ 517.761241][T16752] ? __kvmalloc_node_noprof+0x72/0x190 [ 517.766734][T16752] io_pin_pages+0x7e/0x170 [ 517.771176][T16752] io_sqe_buffer_register+0x18a/0x2a30 [ 517.776674][T16752] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 517.782590][T16752] ? copy_compat_iovec_from_user+0x116/0x160 [ 517.788595][T16752] ? iovec_from_user+0x1b0/0x240 [ 517.793576][T16752] io_sqe_buffers_register+0x589/0x750 [ 517.799067][T16752] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 517.805068][T16752] ? do_futex+0x33b/0x560 [ 517.809414][T16752] ? __fget_files+0x29/0x470 [ 517.814020][T16752] __se_sys_io_uring_register+0x97d/0x1780 [ 517.819855][T16752] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 517.826121][T16752] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 517.832727][T16752] ? lockdep_hardirqs_on+0x99/0x150 [ 517.837941][T16752] __do_fast_syscall_32+0xb4/0x110 [ 517.843160][T16752] ? exc_page_fault+0x590/0x8c0 [ 517.848031][T16752] do_fast_syscall_32+0x34/0x80 [ 517.852900][T16752] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 517.859246][T16752] RIP: 0023:0xf7f84579 [ 517.863327][T16752] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 517.883035][T16752] RSP: 002b:00000000f570656c EFLAGS: 00000206 ORIG_RAX: 00000000000001ab [ 517.891570][T16752] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 517.899588][T16752] RDX: 00000000200002c0 RSI: 000000000000011a RDI: 0000000000000000 [ 517.907577][T16752] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 517.915653][T16752] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 517.923636][T16752] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 517.931635][T16752] [ 517.936210][ T5275] sony 0003:054C:0268.006C: unknown main item tag 0x0 [ 517.943047][ T5275] sony 0003:054C:0268.006C: unknown main item tag 0x0 [ 517.951928][ T5275] sony 0003:054C:0268.006C: unknown main item tag 0x0 [ 517.959552][ T5275] sony 0003:054C:0268.006C: unknown main item tag 0x0 [ 517.966538][ T5275] sony 0003:054C:0268.006C: unknown main item tag 0x0 [ 517.973367][ T5275] sony 0003:054C:0268.006C: unknown global tag 0xd [ 517.980020][ T5275] sony 0003:054C:0268.006C: item 0 4 1 13 parsing failed [ 517.987603][ T5275] sony 0003:054C:0268.006C: parse failed [ 517.993377][ T5275] sony 0003:054C:0268.006C: probe with driver sony failed with error -22 [ 518.021613][ T5275] usb 5-1: USB disconnect, device number 45 [ 518.041850][ T5235] Bluetooth: hci3: command tx timeout [ 518.394275][ T1117] hsr_slave_0: left promiscuous mode [ 518.418438][ T1117] hsr_slave_1: left promiscuous mode [ 518.440830][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 518.440848][ T29] audit: type=1326 audit(1727321086.436:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16776 comm="syz.2.4293" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x0 [ 518.472657][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.480219][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.494085][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.494959][ T5275] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 518.501628][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.537845][ T1117] veth1_macvtap: left promiscuous mode [ 518.547420][ T1117] veth0_macvtap: left promiscuous mode [ 518.559895][ T1117] veth1_vlan: left promiscuous mode [ 518.569855][ T1117] veth0_vlan: left allmulticast mode [ 518.575364][ T1117] veth0_vlan: left promiscuous mode [ 518.667883][ T5275] usb 4-1: config index 0 descriptor too short (expected 213, got 72) [ 518.702506][ T5275] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 518.730542][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.755109][ T5275] usb 4-1: Product: syz [ 518.764576][ T5275] usb 4-1: Manufacturer: syz [ 518.777869][ T5275] usb 4-1: SerialNumber: syz [ 518.805965][ T5275] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 518.920392][ T5338] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 519.202434][ T5275] usb 4-1: USB disconnect, device number 60 [ 519.423129][ T1117] team0 (unregistering): Port device team_slave_1 removed [ 519.473991][ T1117] team0 (unregistering): Port device team_slave_0 removed [ 519.654912][ T5270] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 519.814971][ T5270] usb 3-1: Using ep0 maxpacket: 8 [ 519.826134][ T5270] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 519.842089][ T5270] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 519.852100][ T5270] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 519.868030][ T5270] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.881887][ T5270] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 519.891784][ T5270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.955131][ T5338] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 519.973388][ T5338] ath9k_htc: Failed to initialize the device [ 519.996336][ T5275] usb 4-1: ath9k_htc: USB layer deinitialized [ 520.131185][ T5235] Bluetooth: hci3: command tx timeout [ 520.147619][ T5270] usb 3-1: GET_CAPABILITIES returned 0 [ 520.153158][ T5270] usbtmc 3-1:16.0: can't read capabilities [ 520.236659][T16720] chnl_net:caif_netlink_parms(): no params data found [ 520.304900][ T5275] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 520.367980][ T5270] usb 3-1: USB disconnect, device number 56 [ 520.463813][ T5275] usb 4-1: config index 0 descriptor too short (expected 213, got 72) [ 520.473160][ T5275] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.497154][T16720] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.523040][T16720] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.530795][ T5275] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 520.556794][T16720] bridge_slave_0: entered allmulticast mode [ 520.563901][T16720] bridge_slave_0: entered promiscuous mode [ 520.572801][ T5275] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 520.595055][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.603124][ T5275] usb 4-1: Product: syz [ 520.625357][ T5275] usb 4-1: Manufacturer: syz [ 520.630030][ T5275] usb 4-1: SerialNumber: syz [ 520.636630][T16720] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.643858][T16720] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.672829][ T5275] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 520.687471][T16720] bridge_slave_1: entered allmulticast mode [ 520.715578][T16720] bridge_slave_1: entered promiscuous mode [ 520.829089][T16720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.853308][T16720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.948129][ T5338] usb 4-1: USB disconnect, device number 61 [ 521.001034][T16826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4303'. [ 521.136300][T16720] team0: Port device team_slave_0 added [ 521.144592][T16720] team0: Port device team_slave_1 added [ 521.262673][T16720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.275438][T16720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.305836][T16720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.319227][T16720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.347426][T16720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.404606][T16720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.529412][T16720] hsr_slave_0: entered promiscuous mode [ 521.529664][T16840] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 521.556172][T16720] hsr_slave_1: entered promiscuous mode [ 522.112003][ T29] audit: type=1326 audit(1727321090.106:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16857 comm="syz.4.4312" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x0 [ 522.197064][ T5235] Bluetooth: hci3: command tx timeout [ 523.017728][ T29] audit: type=1326 audit(1727321091.006:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16874 comm="syz.2.4318" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x0 [ 523.504927][ T5270] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 523.677817][ T5270] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.696576][ T5270] usb 2-1: config 0 has no interfaces? [ 523.711495][ T5270] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 523.730792][ T5270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.741577][ T5270] usb 2-1: Product: syz [ 523.750248][ T5270] usb 2-1: Manufacturer: syz [ 523.759649][ T5270] usb 2-1: SerialNumber: syz [ 523.777737][ T5270] usb 2-1: config 0 descriptor?? [ 524.275073][ T5235] Bluetooth: hci3: command tx timeout [ 524.546659][ T5270] usb 2-1: USB disconnect, device number 44 [ 525.440871][T16903] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 525.974787][ C0] sched: DL replenish lagged too much [ 527.452941][T16885] netlink: 'syz.3.4322': attribute type 2 has an invalid length. [ 527.464718][T16885] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4322'. [ 528.227059][T16928] netlink: 'syz.4.4338': attribute type 10 has an invalid length. [ 528.353389][T16928] team0: Port device netdevsim0 added [ 528.484566][T16930] tun0: tun_chr_ioctl cmd 1074812117 [ 528.527250][T16934] netlink: 'syz.4.4338': attribute type 10 has an invalid length. [ 528.613861][T16934] team0: Port device netdevsim0 removed [ 528.656228][T16934] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 529.139845][T16950] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4345'. [ 529.946269][T16959] ɶƣ0GCTw: entered promiscuous mode [ 529.991915][T16960] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 530.184961][ T46] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 530.355130][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 530.369946][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.404022][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.450021][ T46] usb 3-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40 [ 530.472330][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.502782][ T46] usb 3-1: Product: syz [ 530.519870][ T46] usb 3-1: Manufacturer: syz [ 530.543843][ T46] usb 3-1: SerialNumber: syz [ 531.131242][T16985] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 531.204996][T16985] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 531.215982][ T46] hid (null): report_id 2668810406 is invalid [ 531.266119][ T46] asus 0003:0B05:19B6.006D: report_id 2668810406 is invalid [ 531.283832][T16985] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 531.342084][ T46] asus 0003:0B05:19B6.006D: item 0 4 1 8 parsing failed [ 531.353580][T16985] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 531.411116][ T46] asus 0003:0B05:19B6.006D: Asus hid parse failed: -22 [ 531.452792][ T46] asus 0003:0B05:19B6.006D: probe with driver asus failed with error -22 [ 531.479890][T16985] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 531.525983][T16985] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 531.545138][ T46] usb 3-1: USB disconnect, device number 57 [ 531.616105][T16985] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 531.701818][T16985] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 531.802841][T16985] geneve2: entered promiscuous mode [ 531.830644][T16985] geneve2: entered allmulticast mode [ 541.575060][T17031] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 541.584035][T17031] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 541.704871][T17031] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 541.713824][T17031] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 541.798939][T17031] geneve2: entered promiscuous mode [ 541.838571][T17031] geneve2: entered allmulticast mode [ 542.212137][T17046] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4370'. [ 542.272199][T17046] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 545.299167][T17068] netlink: 'syz.1.4377': attribute type 7 has an invalid length. [ 545.363236][T17068] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.372777][T17068] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.381690][T17068] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.391013][T17068] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.157264][T16720] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 546.260719][T16720] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 546.341662][T16720] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 546.484210][T16720] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 547.029134][T16720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.179738][T16720] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.373014][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.380258][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.506433][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.513596][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.819891][T16720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 548.134560][T16720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.479507][T16720] veth0_vlan: entered promiscuous mode [ 548.554037][T16720] veth1_vlan: entered promiscuous mode [ 548.820806][T16720] veth0_macvtap: entered promiscuous mode [ 548.944947][T16720] veth1_macvtap: entered promiscuous mode [ 549.078164][T16720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.164960][ T5273] IPVS: starting estimator thread 0... [ 549.195066][T16720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.275227][T16720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.325237][T17145] IPVS: using max 15 ests per chain, 36000 per kthread [ 549.369271][T16720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.431313][T16720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.517238][T16720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.581155][T16720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.650958][T16720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.730161][T16720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.965342][T16720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.039929][T16720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.134882][T16720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.245061][T16720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.314857][T16720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.384855][T16720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.464523][T16720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.542211][T16720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.586853][ T5273] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 550.617672][T16720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.731293][T16720] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.769764][ T5273] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 550.818825][T16720] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.863624][ T5273] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 550.903855][T16720] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.918107][ T5273] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 550.965160][T16720] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.992767][ T5273] usb 3-1: config 0 interface 0 has no altsetting 0 [ 551.064413][ T5273] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.103714][ T5273] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.191353][ T5273] usb 3-1: config 0 interface 0 has no altsetting 0 [ 551.226734][T17176] tap0: tun_chr_ioctl cmd 1074812118 [ 551.253322][ T5273] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.324125][ T5273] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.397942][ T5273] usb 3-1: config 0 interface 0 has no altsetting 0 [ 551.459973][ T5273] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.516564][ T5273] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.661790][ T5273] usb 3-1: config 0 interface 0 has no altsetting 0 [ 551.740886][ T5273] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.805063][ T5273] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.848453][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.911807][ T5273] usb 3-1: config 0 interface 0 has no altsetting 0 [ 551.928864][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.976554][ T5273] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 552.040234][ T5273] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 552.100295][T14987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.162258][ T5273] usb 3-1: config 0 interface 0 has no altsetting 0 [ 552.175252][T14987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.227547][ T5273] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 552.325823][ T5273] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 552.382491][ T5273] usb 3-1: config 0 interface 0 has no altsetting 0 [ 552.471099][ T5273] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 552.516837][ T5273] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 552.619492][ T5273] usb 3-1: config 0 interface 0 has no altsetting 0 [ 552.667644][ T5273] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 552.725216][ T5273] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 552.733626][ T5273] usb 3-1: Product: syz [ 552.753670][T17199] bridge_slave_0: default FDB implementation only supports local addresses [ 552.815001][ T5273] usb 3-1: Manufacturer: syz [ 552.860481][ T5273] usb 3-1: SerialNumber: syz [ 552.893132][ T5273] usb 3-1: config 0 descriptor?? [ 552.945096][ T5273] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 553.578125][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 553.595323][ T5273] usb 3-1: USB disconnect, device number 58 [ 553.631766][ T5273] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 554.050980][ T5273] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 554.107086][ T5273] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 554.161792][ T5273] hid-generic 0000:0000:0000.006E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 554.453091][T17226] kernel read not supported for file /$] (pid: 17226 comm: syz.3.4416) [ 554.537129][ T29] audit: type=1800 audit(1727321122.536:187): pid=17226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4416" name="$]" dev="mqueue" ino=76228 res=0 errno=0 [ 554.776396][T17231] netlink: 'syz.4.4417': attribute type 5 has an invalid length. [ 554.825724][T17231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4417'. [ 555.191997][ T29] audit: type=1326 audit(1727321123.186:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.1.4419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 555.365747][ T29] audit: type=1326 audit(1727321123.226:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.1.4419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 555.537743][ T29] audit: type=1326 audit(1727321123.226:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.1.4419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 555.693026][ T29] audit: type=1326 audit(1727321123.226:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.1.4419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 555.903106][ T29] audit: type=1326 audit(1727321123.226:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.1.4419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 556.110675][ T29] audit: type=1326 audit(1727321123.236:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.1.4419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=257 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 556.397155][ T5273] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 556.610622][ T5273] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 556.641194][T17264] tmpfs: Unknown parameter ',2oºtmode' [ 556.654906][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.715810][ T5273] usb 5-1: Product: syz [ 556.740048][ T5273] usb 5-1: Manufacturer: syz [ 556.771212][ T5273] usb 5-1: SerialNumber: syz [ 556.827590][ T5273] usb 5-1: config 0 descriptor?? [ 557.381145][ T5273] usb 5-1: USB disconnect, device number 46 [ 558.657007][ T5273] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 558.814902][ T5273] usb 5-1: Using ep0 maxpacket: 8 [ 558.824453][ T5273] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 558.839356][ T5273] usb 5-1: config 150 has no interface number 0 [ 558.848503][ T5273] usb 5-1: config 150 interface 204 has no altsetting 0 [ 558.862519][ T5273] usb 5-1: config 150 interface 1 has no altsetting 0 [ 558.873013][ T5273] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 558.891815][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.901698][ T5273] usb 5-1: Product: syz [ 558.911807][ T5273] usb 5-1: Manufacturer: syz [ 558.920972][ T5273] usb 5-1: SerialNumber: syz [ 559.179908][ T5273] xr_serial 5-1:150.204: xr_serial converter detected [ 559.815055][ T5273] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 559.821511][ T5273] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 559.877692][ T5273] usb 5-1: USB disconnect, device number 47 [ 559.917708][ T5273] xr_serial 5-1:150.204: device disconnected [ 562.036524][T17295] netlink: 'syz.4.4441': attribute type 1 has an invalid length. [ 562.074282][T17295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4441'. [ 563.045296][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.051785][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.807459][T15876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 563.821673][T15876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 563.835064][T15876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 563.847682][T15876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 563.866878][T15876] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 563.874307][T15876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 565.955063][ T5235] Bluetooth: hci2: command tx timeout [ 567.039437][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.076125][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 567.624899][ T5273] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 567.797956][ T5273] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 567.816988][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 567.834912][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 567.852964][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 567.862610][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 567.879692][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 567.904530][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 567.924163][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 567.936944][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 567.953409][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 567.968871][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 567.984367][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 568.003265][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 568.012549][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 568.031451][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 568.042685][ T5235] Bluetooth: hci2: command tx timeout [ 568.055618][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 568.064276][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 568.093542][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 568.128237][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 568.163937][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 568.190655][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 568.234640][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 568.258797][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 568.286706][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 568.310116][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 568.353648][ T5273] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 568.390924][ T5273] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 568.403723][ T5273] usb 5-1: Product: syz [ 568.418854][ T5273] usb 5-1: Manufacturer: syz [ 568.431099][ T5273] usb 5-1: SerialNumber: syz [ 568.457511][ T5273] usb 5-1: config 0 descriptor?? [ 568.495710][ T5273] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 568.855574][ T5273] usb 5-1: USB disconnect, device number 48 [ 568.874185][ T5273] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 569.397837][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.414876][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 569.755132][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.814847][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 570.116852][ T5235] Bluetooth: hci2: command tx timeout [ 570.385007][ T46] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 570.556656][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 570.589565][ T46] usb 2-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 570.623422][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.662088][ T46] usb 2-1: config 0 descriptor?? [ 570.713159][ T46] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 571.614247][ T5273] usb 2-1: USB disconnect, device number 45 [ 572.195075][ T5235] Bluetooth: hci2: command tx timeout [ 572.464245][ T29] audit: type=1326 audit(1727321140.456:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17378 comm="syz.1.4478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 572.526401][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.580101][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 572.601665][ T29] audit: type=1326 audit(1727321140.496:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17378 comm="syz.1.4478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 572.721543][ T29] audit: type=1326 audit(1727321140.496:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17378 comm="syz.1.4478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=170 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 572.813192][T17376] netlink: 'syz.0.4476': attribute type 2 has an invalid length. [ 572.848886][ T29] audit: type=1326 audit(1727321140.496:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17378 comm="syz.1.4478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 572.874200][T17382] netlink: 'syz.4.4479': attribute type 6 has an invalid length. [ 573.063654][ T29] audit: type=1326 audit(1727321140.496:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17378 comm="syz.1.4478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 573.589003][T17319] chnl_net:caif_netlink_parms(): no params data found [ 573.694670][ T11] bridge_slave_1: left allmulticast mode [ 573.757135][ T11] bridge_slave_1: left promiscuous mode [ 573.762968][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.733588][ T11] bridge_slave_0: left allmulticast mode [ 574.790184][ T11] bridge_slave_0: left promiscuous mode [ 574.828685][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.755541][T15876] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 586.786591][ T5225] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 586.796016][ T5225] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 586.805031][ T5225] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 586.814461][ T5225] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 586.821917][ T5225] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 586.845152][ T5225] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 586.877233][ T5225] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 586.898072][ T5225] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 586.918041][ T5225] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 586.927846][ T5225] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 586.937413][ T5225] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 587.095442][T15876] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 587.111326][T15876] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 587.120241][T15876] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 587.133230][T15876] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 587.142155][T15876] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 587.149659][T15876] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 587.281938][T15876] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 587.291209][T15876] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 587.301751][T15876] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 587.313715][T15876] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 587.323094][T15876] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 587.330496][T15876] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 588.915219][ T5225] Bluetooth: hci5: command tx timeout [ 588.995020][ T5225] Bluetooth: hci6: command tx timeout [ 589.237892][T15876] Bluetooth: hci7: command tx timeout [ 589.395027][T15876] Bluetooth: hci8: command tx timeout [ 590.995179][T15876] Bluetooth: hci5: command tx timeout [ 591.074922][T15876] Bluetooth: hci6: command tx timeout [ 591.314910][T15876] Bluetooth: hci7: command tx timeout [ 591.480597][T15876] Bluetooth: hci8: command tx timeout [ 593.075113][T15876] Bluetooth: hci5: command tx timeout [ 593.155009][T15876] Bluetooth: hci6: command tx timeout [ 593.394976][T15876] Bluetooth: hci7: command tx timeout [ 593.554988][T15876] Bluetooth: hci8: command tx timeout [ 595.165146][T15876] Bluetooth: hci5: command tx timeout [ 595.235790][T15876] Bluetooth: hci6: command tx timeout [ 595.474921][T15876] Bluetooth: hci7: command tx timeout [ 595.636458][T15876] Bluetooth: hci8: command tx timeout [ 600.921216][ T5225] Bluetooth: hci0: command 0x0406 tx timeout [ 611.162728][ T5225] Bluetooth: hci4: command 0x0406 tx timeout [ 624.204968][ T5225] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 624.214629][ T5225] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 624.222830][ T5225] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 624.232383][ T5225] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 624.245434][ T5225] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 624.256170][ T5225] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 624.439943][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.447550][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.355258][T15876] Bluetooth: hci9: command tx timeout [ 628.447453][T15876] Bluetooth: hci9: command tx timeout [ 630.515108][T15876] Bluetooth: hci9: command tx timeout [ 632.595013][T15876] Bluetooth: hci9: command tx timeout [ 641.883499][T15876] Bluetooth: hci3: command 0x0406 tx timeout [ 646.945303][T15876] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 646.964865][T15876] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 646.974629][T15876] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 646.982846][T15876] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 646.992838][T15876] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 647.000593][T15876] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 647.129433][ T5225] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 647.140583][ T5225] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 647.149882][ T5225] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 647.158896][ T5225] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 647.168544][ T5225] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 647.178221][ T5225] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 647.329171][T15876] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 647.342718][T15876] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 647.354958][T15876] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 647.367427][T15876] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 647.375584][T15876] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 647.386776][T15876] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 647.584134][ T5225] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 647.594176][ T5225] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 647.603508][ T5225] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 647.611866][ T5225] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 647.621491][ T5225] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 647.629532][ T5225] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 649.074877][ T5225] Bluetooth: hci10: command tx timeout [ 649.236237][ T5225] Bluetooth: hci11: command tx timeout [ 649.475102][ T5225] Bluetooth: hci12: command tx timeout [ 649.715016][ T5225] Bluetooth: hci13: command tx timeout [ 651.154952][ T5225] Bluetooth: hci10: command tx timeout [ 651.315035][ T5225] Bluetooth: hci11: command tx timeout [ 651.555020][ T5225] Bluetooth: hci12: command tx timeout [ 651.794886][ T5225] Bluetooth: hci13: command tx timeout [ 653.234882][ T5225] Bluetooth: hci10: command tx timeout [ 653.395099][ T5225] Bluetooth: hci11: command tx timeout [ 653.635019][ T5225] Bluetooth: hci12: command tx timeout [ 653.874943][T15876] Bluetooth: hci13: command tx timeout [ 655.314931][ T5225] Bluetooth: hci10: command tx timeout [ 655.475045][ T5225] Bluetooth: hci11: command tx timeout [ 655.715009][ T5225] Bluetooth: hci12: command tx timeout [ 655.956201][ T5225] Bluetooth: hci13: command tx timeout [ 674.603473][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.752657][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.847251][ T11] bond0 (unregistering): Released all slaves [ 684.452988][T15876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 684.471363][T15876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 684.482537][T15876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 684.490869][T15876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 684.498700][T15876] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 684.511346][T15876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 685.891906][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.898371][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.594901][T15876] Bluetooth: hci0: command tx timeout [ 688.674814][T15876] Bluetooth: hci0: command tx timeout [ 690.754984][T15876] Bluetooth: hci0: command tx timeout [ 692.834935][T15876] Bluetooth: hci0: command tx timeout [ 708.382992][ T5225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 708.393563][ T5225] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 708.406268][ T5225] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 708.420681][ T5225] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 708.474918][ T5225] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 708.507449][ T5225] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 708.611452][T15876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 708.629420][T15876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 708.637446][T15876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 708.645466][T15876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 708.653164][T15876] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 708.661240][T15876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 708.861022][ T5225] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 708.870671][ T5225] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 708.884991][ T5225] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 708.897528][ T5225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 708.907374][ T5225] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 708.915944][ T5225] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 708.972507][T15876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 708.986276][T15876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 708.994892][T15876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 709.003240][T15876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 709.011027][T15876] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 709.019158][T15876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 710.596962][T15876] Bluetooth: hci1: command tx timeout [ 710.754918][T15876] Bluetooth: hci2: command tx timeout [ 710.995010][T15876] Bluetooth: hci3: command tx timeout [ 711.074890][T15876] Bluetooth: hci4: command tx timeout [ 712.675101][ T4619] Bluetooth: hci1: command tx timeout [ 712.834880][ T4619] Bluetooth: hci2: command tx timeout [ 713.074922][ T4619] Bluetooth: hci3: command tx timeout [ 713.154927][ T4619] Bluetooth: hci4: command tx timeout [ 713.578549][ T4619] Bluetooth: hci8: command 0x0406 tx timeout [ 713.593667][ T4619] Bluetooth: hci5: command 0x0406 tx timeout [ 713.599818][ T4619] Bluetooth: hci6: command 0x0406 tx timeout [ 713.606169][T17506] Bluetooth: hci7: command 0x0406 tx timeout [ 714.754994][ T5235] Bluetooth: hci1: command tx timeout [ 714.915981][ T5235] Bluetooth: hci2: command tx timeout [ 715.154867][ T5235] Bluetooth: hci3: command tx timeout [ 715.234996][ T5235] Bluetooth: hci4: command tx timeout [ 716.842707][ T5235] Bluetooth: hci1: command tx timeout [ 716.994874][ T5235] Bluetooth: hci2: command tx timeout [ 717.235121][ T5235] Bluetooth: hci3: command tx timeout [ 717.314957][ T5235] Bluetooth: hci4: command tx timeout [ 746.795784][T15876] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 746.809196][T15876] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 746.818933][T15876] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 746.827838][T15876] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 746.835681][T15876] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 746.844195][T15876] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 747.324111][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.343077][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.915119][T15876] Bluetooth: hci14: command tx timeout [ 749.402098][T15876] Bluetooth: hci9: command 0x0406 tx timeout [ 750.995802][ T5235] Bluetooth: hci14: command tx timeout [ 753.074934][ T5235] Bluetooth: hci14: command tx timeout [ 755.154828][ T5235] Bluetooth: hci14: command tx timeout [ 767.621284][T15876] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 767.632426][T15876] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 767.641158][T15876] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 767.649533][T15876] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 767.657965][T15876] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 767.668868][T15876] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 768.761776][T17507] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 768.772313][T17507] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 768.780464][T17507] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 768.788604][T17507] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 768.799303][T17507] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 768.816012][T17507] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 768.898993][ T5235] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 768.912613][ T5235] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 768.925134][ T5235] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 768.954559][ T5235] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 768.962479][ T5235] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 768.971581][ T5235] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 769.090468][T17507] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 769.108352][T17507] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 769.117526][T17507] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 769.146339][T17507] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 769.155990][T17507] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 769.165025][T17507] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 769.714928][T17507] Bluetooth: hci15: command tx timeout [ 769.875155][T17507] Bluetooth: hci12: command 0x0406 tx timeout [ 769.881404][T17507] Bluetooth: hci13: command 0x0406 tx timeout [ 769.887830][ T5235] Bluetooth: hci10: command 0x0406 tx timeout [ 769.894017][ T5235] Bluetooth: hci11: command 0x0406 tx timeout [ 770.915353][T17505] Bluetooth: hci16: command tx timeout [ 771.074884][T17505] Bluetooth: hci17: command tx timeout [ 771.234922][T17505] Bluetooth: hci18: command tx timeout [ 771.794860][T17505] Bluetooth: hci15: command tx timeout [ 772.995146][T17505] Bluetooth: hci16: command tx timeout [ 773.164867][T17505] Bluetooth: hci17: command tx timeout [ 773.314875][T17505] Bluetooth: hci18: command tx timeout [ 773.874829][T17505] Bluetooth: hci15: command tx timeout [ 775.076134][T17505] Bluetooth: hci16: command tx timeout [ 775.234846][T17505] Bluetooth: hci17: command tx timeout [ 775.394901][T17505] Bluetooth: hci18: command tx timeout [ 775.955027][T17505] Bluetooth: hci15: command tx timeout [ 777.155021][T17505] Bluetooth: hci16: command tx timeout [ 777.314819][T17505] Bluetooth: hci17: command tx timeout [ 777.474913][T17505] Bluetooth: hci18: command tx timeout [ 808.299722][T15876] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 808.320883][T15876] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 808.375766][T15876] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 808.384254][T15876] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 808.396355][T15876] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 808.403849][T15876] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 808.762125][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.786842][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.435070][T17505] Bluetooth: hci19: command tx timeout [ 810.849081][T17505] Bluetooth: hci0: command 0x0406 tx timeout [ 812.515997][T15876] Bluetooth: hci19: command tx timeout [ 814.595048][T15876] Bluetooth: hci19: command tx timeout [ 816.675018][T15876] Bluetooth: hci19: command tx timeout [ 828.574926][T17505] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 828.585548][T17505] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 828.602947][T17505] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 828.611531][T17505] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 828.625417][T17505] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3 [ 828.634953][T17505] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 829.294852][T17529] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 829.305688][T17529] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 829.313779][T17529] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 829.322373][T17529] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 829.331181][T17529] Bluetooth: hci21: unexpected cc 0x0c25 length: 249 > 3 [ 829.339020][T17529] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 829.761559][T17506] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 829.774488][T17506] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 829.783426][T17506] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 829.791942][T17506] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 829.800244][T17506] Bluetooth: hci22: unexpected cc 0x0c25 length: 249 > 3 [ 829.810860][T17506] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 830.228000][T17529] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 830.237729][T17529] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 830.246566][T17529] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 830.258152][T17529] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 830.270175][T17529] Bluetooth: hci23: unexpected cc 0x0c25 length: 249 > 3 [ 830.285440][T17529] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 830.684970][T17529] Bluetooth: hci20: command tx timeout [ 831.339026][T17529] Bluetooth: hci1: command 0x0406 tx timeout [ 831.345185][T17506] Bluetooth: hci2: command 0x0406 tx timeout [ 831.351262][T17506] Bluetooth: hci3: command 0x0406 tx timeout [ 831.357428][ T5235] Bluetooth: hci4: command 0x0406 tx timeout [ 831.395105][T17506] Bluetooth: hci21: command tx timeout [ 831.874939][ T5225] Bluetooth: hci22: command tx timeout [ 832.354909][ T5225] Bluetooth: hci23: command tx timeout [ 832.754821][ T5225] Bluetooth: hci20: command tx timeout [ 833.475148][ T5225] Bluetooth: hci21: command tx timeout [ 833.955088][ T5225] Bluetooth: hci22: command tx timeout [ 834.434860][ T5225] Bluetooth: hci23: command tx timeout [ 834.841746][ T5225] Bluetooth: hci20: command tx timeout [ 835.555001][ T5225] Bluetooth: hci21: command tx timeout [ 836.034943][ T5225] Bluetooth: hci22: command tx timeout [ 836.275601][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 836.283311][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 836.305158][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 836.322674][ T30] task:kworker/u8:0 state:D stack:20920 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 836.424789][ T30] Workqueue: netns cleanup_net [ 836.429652][ T30] Call Trace: [ 836.432962][ T30] [ 836.484678][ T30] __schedule+0x1895/0x4b30 [ 836.489297][ T30] ? __pfx___schedule+0x10/0x10 [ 836.494230][ T30] ? __pfx_lock_release+0x10/0x10 [ 836.508806][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 836.516550][ T30] ? kthread_data+0x52/0xd0 [ 836.521114][ T30] ? schedule+0x90/0x320 [ 836.530987][ T5225] Bluetooth: hci23: command tx timeout [ 836.539968][ T30] ? wq_worker_sleeping+0x66/0x240 [ 836.548953][ T30] ? schedule+0x90/0x320 [ 836.553252][ T30] schedule+0x14b/0x320 [ 836.562899][ T30] schedule_preempt_disabled+0x13/0x30 [ 836.572202][ T30] __mutex_lock+0x6a7/0xd70 [ 836.580616][ T30] ? __mutex_lock+0x52a/0xd70 [ 836.589317][ T30] ? wiphy_unregister+0x236/0xb00 [ 836.594417][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 836.621062][ T30] ? __up_read+0x2c2/0x6b0 [ 836.625782][ T30] ? __pfx___up_read+0x10/0x10 [ 836.630610][ T30] wiphy_unregister+0x236/0xb00 [ 836.645985][ T30] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 836.651950][ T30] ? __pfx_wiphy_unregister+0x10/0x10 [ 836.664171][ T30] ? ieee80211_unregister_hw+0x144/0x2c0 [ 836.671932][ T30] ? ieee80211_unregister_hw+0x144/0x2c0 [ 836.684783][ T30] ieee80211_unregister_hw+0x1e2/0x2c0 [ 836.690302][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 836.702118][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 836.708619][ T30] hwsim_exit_net+0x5c1/0x670 [ 836.713363][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 836.729785][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 836.737795][ T30] cleanup_net+0x802/0xcc0 [ 836.742546][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 836.753993][ T30] ? process_scheduled_works+0x976/0x1850 [ 836.763283][ T30] process_scheduled_works+0xa63/0x1850 [ 836.774856][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 836.780908][ T30] ? assign_work+0x364/0x3d0 [ 836.793591][ T30] worker_thread+0x870/0xd30 [ 836.798543][ T30] ? __kthread_parkme+0x169/0x1d0 [ 836.803628][ T30] ? __pfx_worker_thread+0x10/0x10 [ 836.814720][ T30] kthread+0x2f0/0x390 [ 836.822418][ T30] ? __pfx_worker_thread+0x10/0x10 [ 836.833451][ T30] ? __pfx_kthread+0x10/0x10 [ 836.841046][ T30] ret_from_fork+0x4b/0x80 [ 836.852482][ T30] ? __pfx_kthread+0x10/0x10 [ 836.859828][ T30] ret_from_fork_asm+0x1a/0x30 [ 836.870830][ T30] [ 836.873987][ T30] INFO: task kworker/u8:3:52 blocked for more than 143 seconds. [ 836.884962][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 836.892326][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 836.909367][ T30] task:kworker/u8:3 state:D stack:19360 pid:52 tgid:52 ppid:2 flags:0x00004000 [ 836.921192][ T5225] Bluetooth: hci20: command tx timeout [ 836.935885][ T30] Workqueue: ipv6_addrconf addrconf_verify_work [ 836.942210][ T30] Call Trace: [ 836.953148][ T30] [ 836.956445][ T30] __schedule+0x1895/0x4b30 [ 836.961070][ T30] ? __pfx___schedule+0x10/0x10 [ 836.974321][ T30] ? __pfx_lock_release+0x10/0x10 [ 836.981541][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 836.994408][ T30] ? kthread_data+0x52/0xd0 [ 836.999540][ T30] ? schedule+0x90/0x320 [ 837.003934][ T30] ? wq_worker_sleeping+0x66/0x240 [ 837.019344][ T30] ? schedule+0x90/0x320 [ 837.029816][ T30] schedule+0x14b/0x320 [ 837.034111][ T30] schedule_preempt_disabled+0x13/0x30 [ 837.050079][ T30] __mutex_lock+0x6a7/0xd70 [ 837.057997][ T30] ? __mutex_lock+0x52a/0xd70 [ 837.062759][ T30] ? addrconf_verify_work+0x19/0x30 [ 837.072056][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 837.082302][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 837.093397][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 837.103731][ T30] ? process_scheduled_works+0x976/0x1850 [ 837.113444][ T30] addrconf_verify_work+0x19/0x30 [ 837.122840][ T30] process_scheduled_works+0xa63/0x1850 [ 837.134789][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 837.140837][ T30] ? assign_work+0x364/0x3d0 [ 837.152947][ T30] worker_thread+0x870/0xd30 [ 837.161738][ T30] ? __kthread_parkme+0x169/0x1d0 [ 837.174232][ T30] ? __pfx_worker_thread+0x10/0x10 [ 837.179830][ T30] kthread+0x2f0/0x390 [ 837.183945][ T30] ? __pfx_worker_thread+0x10/0x10 [ 837.195572][ T30] ? __pfx_kthread+0x10/0x10 [ 837.200223][ T30] ret_from_fork+0x4b/0x80 [ 837.212516][ T30] ? __pfx_kthread+0x10/0x10 [ 837.217487][ T30] ret_from_fork_asm+0x1a/0x30 [ 837.222326][ T30] [ 837.234942][ T30] INFO: task dhcpcd:4894 blocked for more than 144 seconds. [ 837.242280][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 837.259962][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 837.270943][ T30] task:dhcpcd state:D stack:23632 pid:4894 tgid:4894 ppid:1 flags:0x00000002 [ 837.284985][ T30] Call Trace: [ 837.288308][ T30] [ 837.291273][ T30] __schedule+0x1895/0x4b30 [ 837.304399][ T30] ? __pfx___schedule+0x10/0x10 [ 837.310572][ T30] ? __pfx_lock_release+0x10/0x10 [ 837.324089][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 837.331811][ T30] ? schedule+0x90/0x320 [ 837.343705][ T30] schedule+0x14b/0x320 [ 837.348252][ T30] schedule_preempt_disabled+0x13/0x30 [ 837.353761][ T30] __mutex_lock+0x6a7/0xd70 [ 837.367855][ T30] ? __mutex_lock+0x52a/0xd70 [ 837.372605][ T30] ? vlan_ioctl_handler+0x112/0x9d0 [ 837.384870][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 837.389963][ T30] ? __might_fault+0xc6/0x120 [ 837.401935][ T30] vlan_ioctl_handler+0x112/0x9d0 [ 837.407404][ T30] ? sock_ioctl+0x661/0x8e0 [ 837.411955][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 837.425146][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 837.430792][ T30] sock_ioctl+0x680/0x8e0 [ 837.443160][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 837.448937][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 837.453859][ T30] __se_sys_ioctl+0xf9/0x170 [ 837.469027][ T30] do_syscall_64+0xf3/0x230 [ 837.473598][ T30] ? clear_bhb_loop+0x35/0x90 [ 837.487698][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.493655][ T30] RIP: 0033:0x7ff500573d49 [ 837.504357][ T30] RSP: 002b:00007ffcb88423a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 837.514545][ T30] RAX: ffffffffffffffda RBX: 000055ca8eedf180 RCX: 00007ff500573d49 [ 837.525664][ T30] RDX: 00007ffcb88423b0 RSI: 0000000000008982 RDI: 0000000000000011 [ 837.533688][ T30] RBP: 0000000000000002 R08: 0000000000000008 R09: 0000000000000000 [ 837.552256][ T30] R10: 00007ffcb8852a30 R11: 0000000000000246 R12: 00007ffcb88423b0 [ 837.570890][ T30] R13: 00007ffcb8842470 R14: 000055ca8eedf180 R15: 000055ca8f113850 [ 837.580524][ T30] [ 837.583679][ T30] INFO: task kworker/u8:9:14987 blocked for more than 144 seconds. [ 837.601371][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 837.610304][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 837.624964][ T30] task:kworker/u8:9 state:D stack:21264 pid:14987 tgid:14987 ppid:2 flags:0x00004000 [ 837.644753][ T5225] Bluetooth: hci21: command tx timeout [ 837.659662][ T30] Workqueue: events_unbound linkwatch_event [ 837.671474][ T30] Call Trace: [ 837.678595][ T30] [ 837.681576][ T30] __schedule+0x1895/0x4b30 [ 837.690067][ T30] ? __pfx___schedule+0x10/0x10 [ 837.699645][ T30] ? __pfx_lock_release+0x10/0x10 [ 837.710911][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 837.721755][ T30] ? kthread_data+0x52/0xd0 [ 837.731376][ T30] ? schedule+0x90/0x320 [ 837.740859][ T30] ? wq_worker_sleeping+0x66/0x240 [ 837.751238][ T30] ? schedule+0x90/0x320 [ 837.758223][ T30] schedule+0x14b/0x320 [ 837.762435][ T30] schedule_preempt_disabled+0x13/0x30 [ 837.773573][ T30] __mutex_lock+0x6a7/0xd70 [ 837.782041][ T30] ? __mutex_lock+0x52a/0xd70 [ 837.791771][ T30] ? linkwatch_event+0xe/0x60 [ 837.800159][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 837.810235][ T30] ? process_scheduled_works+0x976/0x1850 [ 837.819364][ T30] linkwatch_event+0xe/0x60 [ 837.823923][ T30] process_scheduled_works+0xa63/0x1850 [ 837.834733][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 837.840788][ T30] ? assign_work+0x364/0x3d0 [ 837.856631][ T30] worker_thread+0x870/0xd30 [ 837.861298][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 837.873706][ T30] ? __kthread_parkme+0x169/0x1d0 [ 837.883181][ T30] ? __pfx_worker_thread+0x10/0x10 [ 837.896439][ T30] kthread+0x2f0/0x390 [ 837.900607][ T30] ? __pfx_worker_thread+0x10/0x10 [ 837.912325][ T30] ? __pfx_kthread+0x10/0x10 [ 837.917240][ T30] ret_from_fork+0x4b/0x80 [ 837.921716][ T30] ? __pfx_kthread+0x10/0x10 [ 837.934515][ T30] ret_from_fork_asm+0x1a/0x30 [ 837.939731][ T30] [ 837.942915][ T30] INFO: task syz.2.4494:17429 blocked for more than 145 seconds. [ 837.962100][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 837.971954][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 837.984668][ T30] task:syz.2.4494 state:D stack:25696 pid:17429 tgid:17428 ppid:13127 flags:0x20004002 [ 838.001802][ T30] Call Trace: [ 838.005797][ T30] [ 838.008779][ T30] __schedule+0x1895/0x4b30 [ 838.013352][ T30] ? __pfx___schedule+0x10/0x10 [ 838.026521][ T30] ? __pfx_lock_release+0x10/0x10 [ 838.031613][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 838.048876][ T30] ? schedule+0x90/0x320 [ 838.053190][ T30] schedule+0x14b/0x320 [ 838.062423][ T30] schedule_preempt_disabled+0x13/0x30 [ 838.071610][ T30] __mutex_lock+0x6a7/0xd70 [ 838.082388][ T30] ? __mutex_lock+0x52a/0xd70 [ 838.089830][ T30] ? tun_chr_close+0x3b/0x1b0 [ 838.094563][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 838.105161][ T30] ? __pfx_call_rcu+0x10/0x10 [ 838.109904][ T30] tun_chr_close+0x3b/0x1b0 [ 838.114447][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 838.124734][ T5225] Bluetooth: hci22: command tx timeout [ 838.133672][ T30] __fput+0x23f/0x880 [ 838.143976][ T30] task_work_run+0x24f/0x310 [ 838.152661][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 838.160981][ T30] ? __pfx_task_work_run+0x10/0x10 [ 838.171627][ T30] ? do_exit+0xa2a/0x28e0 [ 838.178661][ T30] ? kmem_cache_free+0x1a2/0x420 [ 838.183659][ T30] ? do_exit+0xa2a/0x28e0 [ 838.195556][ T30] do_exit+0xa2f/0x28e0 [ 838.199789][ T30] ? __pfx_do_exit+0x10/0x10 [ 838.204417][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 838.221415][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 838.228985][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 838.241432][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 838.250089][ T30] do_group_exit+0x207/0x2c0 [ 838.264691][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 838.270545][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 838.284866][ T30] get_signal+0x176f/0x1810 [ 838.289439][ T30] ? __sys_sendmsg+0x30b/0x380 [ 838.294264][ T30] ? __pfx_get_signal+0x10/0x10 [ 838.308888][ T30] ? fput+0x1a8/0x230 [ 838.312944][ T30] arch_do_signal_or_restart+0x96/0x860 [ 838.321354][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 838.333119][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 838.341648][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 838.352264][ T30] __do_fast_syscall_32+0xc4/0x110 [ 838.363892][ T30] ? exc_page_fault+0x590/0x8c0 [ 838.374532][ T30] do_fast_syscall_32+0x34/0x80 [ 838.382560][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 838.394041][ T30] RIP: 0023:0xf7f84579 [ 838.400835][ T30] RSP: 002b:00000000f570656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 838.414798][ T30] RAX: 0000000000000058 RBX: 0000000000000003 RCX: 00000000200006c0 [ 838.422826][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 838.439021][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 838.451025][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 838.468433][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 838.482827][ T30] [ 838.490940][ T30] INFO: task syz-executor:17444 blocked for more than 145 seconds. [ 838.501569][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 838.513873][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 838.527380][ T30] task:syz-executor state:D stack:25808 pid:17444 tgid:17444 ppid:1 flags:0x20004006 [ 838.542701][ T30] Call Trace: [ 838.546366][ T30] [ 838.549345][ T30] __schedule+0x1895/0x4b30 [ 838.563630][ T30] ? __pfx___schedule+0x10/0x10 [ 838.568933][ T30] ? __pfx_lock_release+0x10/0x10 [ 838.574054][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 838.587188][ T30] ? schedule+0x90/0x320 [ 838.591495][ T30] schedule+0x14b/0x320 [ 838.596136][ T5225] Bluetooth: hci23: command tx timeout [ 838.608888][ T30] schedule_preempt_disabled+0x13/0x30 [ 838.614406][ T30] __mutex_lock+0x6a7/0xd70 [ 838.621886][ T30] ? __mutex_lock+0x52a/0xd70 [ 838.632458][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 838.640513][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 838.652137][ T30] ? read_word_at_a_time+0xe/0x20 [ 838.660038][ T30] ? sized_strscpy+0x8d/0x220 [ 838.671999][ T30] ip_tunnel_init_net+0x20e/0x720 [ 838.692161][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 838.700536][ T30] vti_init_net+0x2e/0xf0 [ 838.713794][ T30] ops_init+0x31e/0x590 [ 838.718364][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 838.723888][ T30] setup_net+0x287/0x9e0 [ 838.735755][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 838.741381][ T30] ? __pfx_setup_net+0x10/0x10 [ 838.754099][ T30] copy_net_ns+0x33f/0x570 [ 838.762155][ T30] create_new_namespaces+0x425/0x7b0 [ 838.775196][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 838.780989][ T30] ksys_unshare+0x619/0xc10 [ 838.792901][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 838.798324][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 838.804377][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 838.820749][ T30] __ia32_sys_unshare+0x37/0x40 [ 838.828428][ T30] __do_fast_syscall_32+0xb4/0x110 [ 838.833599][ T30] ? exc_page_fault+0x590/0x8c0 [ 838.845824][ T30] do_fast_syscall_32+0x34/0x80 [ 838.850747][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 838.864560][ T30] RIP: 0023:0xf744d579 [ 838.872163][ T30] RSP: 002b:00000000f759ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 838.888808][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 838.900608][ T30] RDX: 00000000f743bff4 RSI: 00000000f731215e RDI: 0000000030000000 [ 838.912900][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 838.931495][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 838.941026][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 838.954900][ T30] [ 838.958371][ T30] INFO: task syz-executor:17445 blocked for more than 146 seconds. [ 838.975087][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 838.982418][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 838.999727][ T30] task:syz-executor state:D stack:25616 pid:17445 tgid:17445 ppid:1 flags:0x20004006 [ 839.014561][ T30] Call Trace: [ 839.021620][ T30] [ 839.024603][ T30] __schedule+0x1895/0x4b30 [ 839.035276][ T30] ? __pfx___schedule+0x10/0x10 [ 839.040302][ T30] ? __pfx_lock_release+0x10/0x10 [ 839.053593][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 839.059470][ T30] ? schedule+0x90/0x320 [ 839.063769][ T30] schedule+0x14b/0x320 [ 839.075778][ T30] schedule_preempt_disabled+0x13/0x30 [ 839.081309][ T30] __mutex_lock+0x6a7/0xd70 [ 839.095135][ T30] ? __mutex_lock+0x52a/0xd70 [ 839.099884][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 839.112410][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 839.119185][ T30] ? read_word_at_a_time+0xe/0x20 [ 839.124508][ T30] ? sized_strscpy+0x8d/0x220 [ 839.134682][ T30] ip_tunnel_init_net+0x20e/0x720 [ 839.139766][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 839.153468][ T30] ? ops_init+0x75/0x590 [ 839.159082][ T30] ops_init+0x31e/0x590 [ 839.163417][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 839.176623][ T30] setup_net+0x287/0x9e0 [ 839.180928][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 839.195280][ T30] ? __pfx_setup_net+0x10/0x10 [ 839.200416][ T30] copy_net_ns+0x33f/0x570 [ 839.212429][ T30] create_new_namespaces+0x425/0x7b0 [ 839.218108][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 839.223914][ T30] ksys_unshare+0x619/0xc10 [ 839.234848][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 839.239941][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 839.256203][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 839.262860][ T30] __ia32_sys_unshare+0x37/0x40 [ 839.274024][ T30] __do_fast_syscall_32+0xb4/0x110 [ 839.284037][ T30] ? exc_page_fault+0x590/0x8c0 [ 839.292110][ T30] do_fast_syscall_32+0x34/0x80 [ 839.304542][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 839.313870][ T30] RIP: 0023:0xf745d579 [ 839.324814][ T30] RSP: 002b:00000000f75aff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 839.333301][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 839.350159][ T30] RDX: 00000000f744bff4 RSI: 00000000f732215e RDI: 0000000030000000 [ 839.360898][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 839.374772][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 839.383988][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 839.402167][ T30] [ 839.409474][ T30] INFO: task syz-executor:17449 blocked for more than 146 seconds. [ 839.423737][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 839.432588][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 839.449215][ T30] task:syz-executor state:D stack:25488 pid:17449 tgid:17449 ppid:1 flags:0x20004006 [ 839.462804][ T30] Call Trace: [ 839.471190][ T30] [ 839.474168][ T30] __schedule+0x1895/0x4b30 [ 839.489712][ T30] ? __pfx___schedule+0x10/0x10 [ 839.496283][ T30] ? __pfx_lock_release+0x10/0x10 [ 839.501381][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 839.515762][ T30] ? schedule+0x90/0x320 [ 839.520070][ T30] schedule+0x14b/0x320 [ 839.524272][ T30] schedule_preempt_disabled+0x13/0x30 [ 839.536458][ T30] __mutex_lock+0x6a7/0xd70 [ 839.541028][ T30] ? __mutex_lock+0x52a/0xd70 [ 839.550970][ T30] ? wg_netns_pre_exit+0x1f/0x1e0 [ 839.559298][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 839.564407][ T30] wg_netns_pre_exit+0x1f/0x1e0 [ 839.574678][ T30] setup_net+0x570/0x9e0 [ 839.579064][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 839.596101][ T30] ? __pfx_setup_net+0x10/0x10 [ 839.600950][ T30] copy_net_ns+0x33f/0x570 [ 839.613095][ T30] create_new_namespaces+0x425/0x7b0 [ 839.619137][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 839.634891][ T30] ksys_unshare+0x619/0xc10 [ 839.639480][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 839.644590][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 839.658456][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 839.672844][ T30] __ia32_sys_unshare+0x37/0x40 [ 839.677878][ T30] __do_fast_syscall_32+0xb4/0x110 [ 839.683130][ T30] ? exc_page_fault+0x590/0x8c0 [ 839.700197][ T30] do_fast_syscall_32+0x34/0x80 [ 839.706983][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 839.713435][ T30] RIP: 0023:0xf7f44579 [ 839.732518][ T30] RSP: 002b:00000000f752ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 839.752544][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 839.760939][ T30] RDX: 00000000f73cbff4 RSI: 00000000f72a215e RDI: 0000000030000000 [ 839.774708][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 839.782771][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 839.802199][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 839.812765][ T30] [ 839.822013][ T30] INFO: task syz-executor:17451 blocked for more than 146 seconds. [ 839.831543][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 839.846807][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 839.863639][ T30] task:syz-executor state:D stack:25616 pid:17451 tgid:17451 ppid:1 flags:0x20004006 [ 839.874305][ T30] Call Trace: [ 839.884670][ T30] [ 839.887659][ T30] __schedule+0x1895/0x4b30 [ 839.901057][ T30] ? __pfx___schedule+0x10/0x10 [ 839.912252][ T30] ? __pfx_lock_release+0x10/0x10 [ 839.927004][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 839.932560][ T30] ? schedule+0x90/0x320 [ 839.943272][ T30] schedule+0x14b/0x320 [ 839.949074][ T30] schedule_preempt_disabled+0x13/0x30 [ 839.954590][ T30] __mutex_lock+0x6a7/0xd70 [ 839.968136][ T30] ? __mutex_lock+0x52a/0xd70 [ 839.972874][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 839.984695][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 839.989801][ T30] ? read_word_at_a_time+0xe/0x20 [ 840.002940][ T30] ? sized_strscpy+0x8d/0x220 [ 840.008806][ T30] ip_tunnel_init_net+0x20e/0x720 [ 840.013897][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 840.034021][ T30] ? ops_init+0x75/0x590 [ 840.038763][ T30] ops_init+0x31e/0x590 [ 840.042978][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 840.056045][ T30] setup_net+0x287/0x9e0 [ 840.060448][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 840.074023][ T30] ? __pfx_setup_net+0x10/0x10 [ 840.080500][ T30] copy_net_ns+0x33f/0x570 [ 840.091116][ T30] create_new_namespaces+0x425/0x7b0 [ 840.101448][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 840.113340][ T30] ksys_unshare+0x619/0xc10 [ 840.121620][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 840.135699][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 840.141762][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 840.156883][ T30] __ia32_sys_unshare+0x37/0x40 [ 840.161794][ T30] __do_fast_syscall_32+0xb4/0x110 [ 840.173516][ T30] ? exc_page_fault+0x590/0x8c0 [ 840.181043][ T30] do_fast_syscall_32+0x34/0x80 [ 840.192126][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 840.203428][ T30] RIP: 0023:0xf7f93579 [ 840.213577][ T30] RSP: 002b:00000000f757ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 840.224268][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 840.238937][ T30] RDX: 00000000f741bff4 RSI: 00000000f72f215e RDI: 0000000030000000 [ 840.250655][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 840.264789][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 840.272824][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 840.290696][ T30] [ 840.293934][ T30] INFO: task syz-executor:17458 blocked for more than 147 seconds. [ 840.314386][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 840.322364][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 840.338628][ T30] task:syz-executor state:D stack:25616 pid:17458 tgid:17458 ppid:1 flags:0x20004006 [ 840.352044][ T30] Call Trace: [ 840.367880][ T30] [ 840.370870][ T30] __schedule+0x1895/0x4b30 [ 840.381339][ T30] ? __pfx___schedule+0x10/0x10 [ 840.389054][ T30] ? __pfx_lock_release+0x10/0x10 [ 840.394150][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 840.406559][ T30] ? schedule+0x90/0x320 [ 840.410871][ T30] schedule+0x14b/0x320 [ 840.421177][ T30] schedule_preempt_disabled+0x13/0x30 [ 840.431365][ T30] __mutex_lock+0x6a7/0xd70 [ 840.442092][ T30] ? __mutex_lock+0x52a/0xd70 [ 840.449868][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 840.460652][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 840.469185][ T30] ? read_word_at_a_time+0xe/0x20 [ 840.474278][ T30] ? sized_strscpy+0x8d/0x220 [ 840.484186][ T30] ip_tunnel_init_net+0x20e/0x720 [ 840.493574][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 840.505129][ T30] ? ops_init+0x75/0x590 [ 840.509453][ T30] ops_init+0x31e/0x590 [ 840.513656][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 840.528007][ T30] setup_net+0x287/0x9e0 [ 840.532321][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 840.543845][ T30] ? __pfx_setup_net+0x10/0x10 [ 840.551290][ T30] copy_net_ns+0x33f/0x570 [ 840.560817][ T30] create_new_namespaces+0x425/0x7b0 [ 840.569394][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 840.581319][ T30] ksys_unshare+0x619/0xc10 [ 840.588677][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 840.593768][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 840.604759][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 840.621399][ T30] __ia32_sys_unshare+0x37/0x40 [ 840.628047][ T30] __do_fast_syscall_32+0xb4/0x110 [ 840.633226][ T30] ? exc_page_fault+0x590/0x8c0 [ 840.646589][ T30] do_fast_syscall_32+0x34/0x80 [ 840.651547][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 840.664713][ T30] RIP: 0023:0xf7f6f579 [ 840.668931][ T30] RSP: 002b:00000000f755ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 840.686403][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 840.694435][ T30] RDX: 00000000f73fbff4 RSI: 00000000f72d215e RDI: 0000000030000000 [ 840.710590][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 840.723299][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 840.739551][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 840.751371][ T30] [ 840.754442][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 840.781938][ T30] INFO: task syz-executor:17470 blocked for more than 147 seconds. [ 840.790766][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 840.804984][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 840.822204][ T30] task:syz-executor state:D stack:25584 pid:17470 tgid:17470 ppid:1 flags:0x20004006 [ 840.834663][ T30] Call Trace: [ 840.838172][ T30] [ 840.841229][ T30] __schedule+0x1895/0x4b30 [ 840.858662][ T30] ? __pfx___schedule+0x10/0x10 [ 840.863587][ T30] ? __pfx_lock_release+0x10/0x10 [ 840.872630][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 840.881987][ T30] ? schedule+0x90/0x320 [ 840.890208][ T30] schedule+0x14b/0x320 [ 840.894443][ T30] schedule_preempt_disabled+0x13/0x30 [ 840.905770][ T30] __mutex_lock+0x6a7/0xd70 [ 840.910530][ T30] ? __mutex_lock+0x52a/0xd70 [ 840.924968][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 840.930243][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 840.942917][ T30] ? read_word_at_a_time+0xe/0x20 [ 840.950348][ T30] ? sized_strscpy+0x8d/0x220 [ 840.962394][ T30] ip_tunnel_init_net+0x20e/0x720 [ 840.968756][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 840.974376][ T30] ? ops_init+0x75/0x590 [ 840.984708][ T30] ops_init+0x31e/0x590 [ 840.988963][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 840.994390][ T30] setup_net+0x287/0x9e0 [ 841.008070][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 841.013877][ T30] ? __pfx_setup_net+0x10/0x10 [ 841.029133][ T30] copy_net_ns+0x33f/0x570 [ 841.033634][ T30] create_new_namespaces+0x425/0x7b0 [ 841.042962][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 841.053006][ T30] ksys_unshare+0x619/0xc10 [ 841.061537][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 841.071382][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 841.085037][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 841.091700][ T30] __ia32_sys_unshare+0x37/0x40 [ 841.102981][ T30] __do_fast_syscall_32+0xb4/0x110 [ 841.108542][ T30] ? exc_page_fault+0x590/0x8c0 [ 841.113459][ T30] do_fast_syscall_32+0x34/0x80 [ 841.124749][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 841.131148][ T30] RIP: 0023:0xf7f34579 [ 841.143801][ T30] RSP: 002b:00000000f751ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 841.152986][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 841.171661][ T30] RDX: 00000000f73bbff4 RSI: 00000000f729215e RDI: 0000000030000000 [ 841.181328][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 841.196273][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 841.204298][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 841.219318][ T30] [ 841.224318][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 841.236790][ T30] INFO: task syz-executor:17472 blocked for more than 148 seconds. [ 841.258214][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 841.270522][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 841.281977][ T30] task:syz-executor state:D stack:25808 pid:17472 tgid:17472 ppid:1 flags:0x20004006 [ 841.302501][ T30] Call Trace: [ 841.307464][ T30] [ 841.310446][ T30] __schedule+0x1895/0x4b30 [ 841.327490][ T30] ? __pfx___schedule+0x10/0x10 [ 841.332435][ T30] ? __pfx_lock_release+0x10/0x10 [ 841.342860][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 841.351821][ T30] ? schedule+0x90/0x320 [ 841.363643][ T30] schedule+0x14b/0x320 [ 841.370750][ T30] schedule_preempt_disabled+0x13/0x30 [ 841.381281][ T30] __mutex_lock+0x6a7/0xd70 [ 841.388711][ T30] ? __mutex_lock+0x52a/0xd70 [ 841.393458][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 841.405852][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 841.410990][ T30] ? read_word_at_a_time+0xe/0x20 [ 841.424243][ T30] ? sized_strscpy+0x8d/0x220 [ 841.431280][ T30] ip_tunnel_init_net+0x20e/0x720 [ 841.443713][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 841.450169][ T30] ? ops_init+0x75/0x590 [ 841.454483][ T30] ops_init+0x31e/0x590 [ 841.465455][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 841.470920][ T30] setup_net+0x287/0x9e0 [ 841.485268][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 841.491195][ T30] ? __pfx_setup_net+0x10/0x10 [ 841.503517][ T30] copy_net_ns+0x33f/0x570 [ 841.508244][ T30] create_new_namespaces+0x425/0x7b0 [ 841.513614][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 841.529742][ T30] ksys_unshare+0x619/0xc10 [ 841.534361][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 841.548103][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 841.554339][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 841.572103][ T30] __ia32_sys_unshare+0x37/0x40 [ 841.578181][ T30] __do_fast_syscall_32+0xb4/0x110 [ 841.583366][ T30] ? exc_page_fault+0x590/0x8c0 [ 841.594959][ T30] do_fast_syscall_32+0x34/0x80 [ 841.599919][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 841.613630][ T30] RIP: 0023:0xf73ad579 [ 841.618142][ T30] RSP: 002b:00000000f74fff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 841.632149][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 841.650920][ T30] RDX: 00000000f739bff4 RSI: 00000000f727215e RDI: 0000000030000000 [ 841.664050][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 841.680176][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 841.691971][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 841.704729][ T30] [ 841.707802][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 841.723961][ T30] INFO: task syz-executor:17474 blocked for more than 148 seconds. [ 841.732423][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 841.750090][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 841.762683][ T30] task:syz-executor state:D stack:25808 pid:17474 tgid:17474 ppid:1 flags:0x20004006 [ 841.780729][ T30] Call Trace: [ 841.784063][ T30] [ 841.789262][ T30] __schedule+0x1895/0x4b30 [ 841.793891][ T30] ? __pfx___schedule+0x10/0x10 [ 841.814756][ T30] ? __pfx_lock_release+0x10/0x10 [ 841.819857][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 841.834484][ T30] ? schedule+0x90/0x320 [ 841.841150][ T30] schedule+0x14b/0x320 [ 841.853554][ T30] schedule_preempt_disabled+0x13/0x30 [ 841.859750][ T30] __mutex_lock+0x6a7/0xd70 [ 841.864320][ T30] ? __mutex_lock+0x52a/0xd70 [ 841.877311][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 841.882579][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 841.895999][ T30] ? read_word_at_a_time+0xe/0x20 [ 841.901093][ T30] ? sized_strscpy+0x8d/0x220 [ 841.913080][ T30] ip_tunnel_init_net+0x20e/0x720 [ 841.919768][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 841.931529][ T30] vti_init_net+0x2e/0xf0 [ 841.940592][ T30] ops_init+0x31e/0x590 [ 841.950945][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 841.961885][ T30] setup_net+0x287/0x9e0 [ 841.972435][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 841.979618][ T30] ? __pfx_setup_net+0x10/0x10 [ 841.984462][ T30] copy_net_ns+0x33f/0x570 [ 841.994764][ T30] create_new_namespaces+0x425/0x7b0 [ 842.000144][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 842.013798][ T30] ksys_unshare+0x619/0xc10 [ 842.019742][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 842.032134][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 842.039239][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 842.054765][ T30] __ia32_sys_unshare+0x37/0x40 [ 842.059713][ T30] __do_fast_syscall_32+0xb4/0x110 [ 842.072905][ T30] ? exc_page_fault+0x590/0x8c0 [ 842.078196][ T30] do_fast_syscall_32+0x34/0x80 [ 842.083114][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 842.094782][ T30] RIP: 0023:0xf7f6f579 [ 842.098913][ T30] RSP: 002b:00000000f755ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 842.116765][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 842.133270][ T30] RDX: 00000000f73fbff4 RSI: 00000000f72d215e RDI: 0000000030000000 [ 842.141703][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 842.159279][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 842.171039][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 842.187583][ T30] [ 842.190661][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 842.205359][ T30] INFO: task syz-executor:17487 blocked for more than 149 seconds. [ 842.213310][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 842.230864][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 842.253140][ T30] task:syz-executor state:D stack:26032 pid:17487 tgid:17487 ppid:1 flags:0x20004006 [ 842.272567][ T30] Call Trace: [ 842.276649][ T30] [ 842.279636][ T30] __schedule+0x1895/0x4b30 [ 842.284209][ T30] ? __pfx___schedule+0x10/0x10 [ 842.297942][ T30] ? __pfx_lock_release+0x10/0x10 [ 842.303044][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 842.312483][ T30] ? schedule+0x90/0x320 [ 842.320732][ T30] schedule+0x14b/0x320 [ 842.329000][ T30] schedule_preempt_disabled+0x13/0x30 [ 842.334519][ T30] __mutex_lock+0x6a7/0xd70 [ 842.345743][ T30] ? __mutex_lock+0x52a/0xd70 [ 842.352385][ T30] ? register_nexthop_notifier+0x84/0x290 [ 842.364743][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 842.369868][ T30] ? __asan_memset+0x23/0x50 [ 842.374516][ T30] register_nexthop_notifier+0x84/0x290 [ 842.389383][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 842.400015][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 842.411343][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 842.420229][ T30] ? __asan_memset+0x23/0x50 [ 842.429940][ T30] ops_init+0x31e/0x590 [ 842.434157][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 842.444874][ T30] setup_net+0x287/0x9e0 [ 842.449181][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 842.464239][ T30] ? __pfx_setup_net+0x10/0x10 [ 842.471931][ T30] copy_net_ns+0x33f/0x570 [ 842.483842][ T30] create_new_namespaces+0x425/0x7b0 [ 842.489565][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 842.502371][ T30] ksys_unshare+0x619/0xc10 [ 842.508290][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 842.513376][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 842.524972][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 842.531661][ T30] __ia32_sys_unshare+0x37/0x40 [ 842.543641][ T30] __do_fast_syscall_32+0xb4/0x110 [ 842.549194][ T30] ? exc_page_fault+0x590/0x8c0 [ 842.563264][ T30] do_fast_syscall_32+0x34/0x80 [ 842.570830][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 842.585574][ T30] RIP: 0023:0xf7ff6579 [ 842.589719][ T30] RSP: 002b:00000000f75dff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 842.605117][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 842.613364][ T30] RDX: 00000000f747bff4 RSI: 00000000f735215e RDI: 0000000030000000 [ 842.630374][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 842.642326][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 842.655743][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 842.663826][ T30] [ 842.676614][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 842.694742][ T30] [ 842.694742][ T30] Showing all locks held in the system: [ 842.702525][ T30] 4 locks held by kworker/u8:0/11: [ 842.717131][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 842.734375][ T30] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 842.754672][ T30] #2: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 842.773525][ T30] #3: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: wiphy_unregister+0x236/0xb00 [ 842.784007][ T30] 1 lock held by khungtaskd/30: [ 842.798399][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 842.813599][ T30] 3 locks held by kworker/u8:3/52: [ 842.821543][ T30] #0: ffff88814c30f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 842.849988][ T30] #1: ffffc90000bd7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 842.874740][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 842.884394][ T30] 2 locks held by dhcpcd/4894: [ 842.896999][ T30] #0: ffffffff8fcb63e8 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x661/0x8e0 [ 842.912844][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0x112/0x9d0 [ 842.929311][ T30] 2 locks held by getty/4985: [ 842.934073][ T30] #0: ffff88803225a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 842.949975][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 842.964807][ T30] 3 locks held by kworker/1:6/5271: [ 842.970138][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 842.992435][ T30] #1: ffffc900042c7d00 ((check_lifetime_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 843.012744][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: check_lifetime+0x433/0x960 [ 843.024002][ T30] 3 locks held by kworker/0:6/5325: [ 843.036813][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 843.052807][ T30] #1: ffffc90008e37d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 843.070048][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 843.086541][ T30] 6 locks held by kworker/0:7/5338: [ 843.091816][ T30] 3 locks held by kworker/u8:1/14975: [ 843.105323][ T30] #0: ffff8880b873ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 843.121710][ T30] #1: ffffc90003e7fd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 843.143850][ T30] #2: ffff8880b872a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 843.153607][ T30] 3 locks held by kworker/u8:9/14987: [ 843.164916][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 843.186424][ T30] #1: ffffc90003b17d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 843.203230][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 843.216042][ T30] 1 lock held by syz.2.4494/17429: [ 843.221233][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 843.236142][ T30] 2 locks held by syz.0.4496/17435: [ 843.241404][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 843.262381][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 843.283082][ T30] 2 locks held by syz-executor/17444: [ 843.290283][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 843.309090][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 843.327925][ T30] 2 locks held by syz-executor/17445: [ 843.333353][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 843.348985][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 843.363703][ T30] 2 locks held by syz-executor/17449: [ 843.374929][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 843.384448][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 843.400904][ T30] 2 locks held by syz-executor/17451: [ 843.411693][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 843.429571][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 843.444199][ T30] 2 locks held by syz-executor/17458: [ 843.453479][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 843.471181][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 843.494138][ T30] 2 locks held by syz-executor/17466: [ 843.500346][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 843.514774][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 843.524203][ T30] 2 locks held by syz-executor/17470: [ 843.538898][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 843.554568][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 843.564367][ T30] 2 locks held by syz-executor/17472: [ 843.580860][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 843.599427][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 843.613447][ T30] 2 locks held by syz-executor/17474: [ 843.622659][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 843.635480][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 843.653931][ T30] 2 locks held by syz-executor/17487: [ 843.660756][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 843.674717][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 843.694299][ T30] 2 locks held by syz-executor/17498: [ 843.700271][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 843.718945][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 843.733086][ T30] 2 locks held by syz-executor/17500: [ 843.742316][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 843.754792][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 843.774027][ T30] 2 locks held by syz-executor/17503: [ 843.779887][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 843.795296][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 843.812835][ T30] 2 locks held by syz-executor/17504: [ 843.819961][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 843.836897][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 843.852170][ T30] 2 locks held by syz-executor/17513: [ 843.861093][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 843.875936][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 843.908726][ T30] 2 locks held by syz-executor/17519: [ 843.914156][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 843.931232][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 843.943664][ T30] 2 locks held by syz-executor/17525: [ 843.956656][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 843.975821][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 843.996999][ T30] 2 locks held by syz-executor/17526: [ 844.002436][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 844.020053][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 844.032313][ T30] 2 locks held by syz-executor/17528: [ 844.045033][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 844.054536][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 844.074196][ T30] 2 locks held by syz-executor/17533: [ 844.084675][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 844.104162][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 844.117175][ T30] 2 locks held by syz-executor/17539: [ 844.122598][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 844.139942][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 844.152107][ T30] 2 locks held by syz-executor/17543: [ 844.163588][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 844.175961][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 844.191767][ T30] 2 locks held by syz-executor/17546: [ 844.202626][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 844.217101][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 844.235253][ T30] 2 locks held by syz-executor/17548: [ 844.240675][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 844.258339][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 844.272471][ T30] [ 844.278793][ T30] ============================================= [ 844.278793][ T30] [ 844.296787][ T30] NMI backtrace for cpu 1 [ 844.301166][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 844.311351][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 844.321435][ T30] Call Trace: [ 844.324747][ T30] [ 844.327706][ T30] dump_stack_lvl+0x241/0x360 [ 844.332435][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 844.337764][ T30] ? __pfx__printk+0x10/0x10 [ 844.342493][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 844.347491][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 844.352997][ T30] ? _printk+0xd5/0x120 [ 844.357192][ T30] ? __pfx__printk+0x10/0x10 [ 844.361821][ T30] ? __wake_up_klogd+0xcc/0x110 [ 844.366726][ T30] ? __pfx__printk+0x10/0x10 [ 844.371362][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 844.376433][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 844.382503][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 844.388538][ T30] watchdog+0xff4/0x1040 [ 844.392828][ T30] ? watchdog+0x1ea/0x1040 [ 844.397298][ T30] ? __pfx_watchdog+0x10/0x10 [ 844.402031][ T30] kthread+0x2f0/0x390 [ 844.406145][ T30] ? __pfx_watchdog+0x10/0x10 [ 844.410869][ T30] ? __pfx_kthread+0x10/0x10 [ 844.415501][ T30] ret_from_fork+0x4b/0x80 [ 844.419965][ T30] ? __pfx_kthread+0x10/0x10 [ 844.424592][ T30] ret_from_fork_asm+0x1a/0x30 [ 844.429507][ T30] [ 844.433820][ T30] Sending NMI from CPU 1 to CPUs 0: [ 844.439751][ C0] NMI backtrace for cpu 0 [ 844.439765][ C0] CPU: 0 UID: 0 PID: 5338 Comm: kworker/0:7 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 844.439787][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 844.439799][ C0] Workqueue: events nsim_dev_trap_report_work [ 844.439825][ C0] RIP: 0010:unwind_next_frame+0xaf5/0x22d0 [ 844.439856][ C0] Code: 0f b6 04 20 84 c0 0f 85 7c 16 00 00 48 0f bf 02 48 01 04 24 49 8d 6f 01 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 39 11 00 00 <48> 89 eb 48 c1 eb 03 42 0f b6 04 23 84 c0 0f 85 45 11 00 00 41 0f [ 844.439873][ C0] RSP: 0018:ffffc900000078b0 EFLAGS: 00000246 [ 844.439893][ C0] RAX: 0000000000000000 RBX: ffffffff90a6f771 RCX: ffffffff90303e8c [ 844.439907][ C0] RDX: ffffffff90a6f770 RSI: ffffffff90a6f770 RDI: 0000000000000001 [ 844.439921][ C0] RBP: ffffffff90a6f775 R08: 0000000000000003 R09: ffffc90000007a70 [ 844.439934][ C0] R10: ffffc900000079d0 R11: ffffffff81806870 R12: dffffc0000000000 [ 844.439948][ C0] R13: ffffc90000007980 R14: ffffc900000079b8 R15: ffffffff90a6f774 [ 844.439963][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 844.439979][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 844.439992][ C0] CR2: 000000005797a4c0 CR3: 000000000e734000 CR4: 00000000003506f0 [ 844.440008][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 844.440019][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 844.440031][ C0] Call Trace: [ 844.440038][ C0] [ 844.440046][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 844.440074][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 844.440102][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 844.440127][ C0] ? nmi_handle+0x2a/0x5a0 [ 844.440153][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 844.440177][ C0] ? nmi_handle+0x14f/0x5a0 [ 844.440194][ C0] ? nmi_handle+0x2a/0x5a0 [ 844.440212][ C0] ? unwind_next_frame+0xaf5/0x22d0 [ 844.440238][ C0] ? default_do_nmi+0x63/0x160 [ 844.440265][ C0] ? exc_nmi+0x123/0x1f0 [ 844.440291][ C0] ? end_repeat_nmi+0xf/0x53 [ 844.440315][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 844.440340][ C0] ? unwind_next_frame+0xaf5/0x22d0 [ 844.440366][ C0] ? unwind_next_frame+0xaf5/0x22d0 [ 844.440394][ C0] ? unwind_next_frame+0xaf5/0x22d0 [ 844.440422][ C0] [ 844.440428][ C0] [ 844.440439][ C0] ? stack_trace_save+0x118/0x1d0 [ 844.440460][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 844.440483][ C0] arch_stack_walk+0x11c/0x150 [ 844.440503][ C0] ? stack_trace_save+0x118/0x1d0 [ 844.440526][ C0] stack_trace_save+0x118/0x1d0 [ 844.440546][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 844.440573][ C0] ref_tracker_free+0x105/0x7e0 [ 844.440601][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 844.440633][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 844.440659][ C0] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 844.440682][ C0] dst_destroy+0x171/0x460 [ 844.440706][ C0] ? rcu_core+0xa37/0x17a0 [ 844.440722][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 844.440745][ C0] rcu_core+0xaaa/0x17a0 [ 844.440770][ C0] ? __pfx_rcu_core+0x10/0x10 [ 844.440804][ C0] handle_softirqs+0x2c5/0x980 [ 844.440831][ C0] ? do_softirq+0x11b/0x1e0 [ 844.440855][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 844.440882][ C0] do_softirq+0x11b/0x1e0 [ 844.440909][ C0] [ 844.440915][ C0] [ 844.440922][ C0] ? __pfx_do_softirq+0x10/0x10 [ 844.440945][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 844.440973][ C0] ? rcu_is_watching+0x15/0xb0 [ 844.440993][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 844.441017][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 844.441036][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 844.441059][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 844.441083][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 844.441104][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 844.441130][ C0] ? process_scheduled_works+0x976/0x1850 [ 844.441156][ C0] process_scheduled_works+0xa63/0x1850 [ 844.441194][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 844.441223][ C0] ? assign_work+0x364/0x3d0 [ 844.441248][ C0] worker_thread+0x870/0xd30 [ 844.441276][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 844.441299][ C0] ? __kthread_parkme+0x169/0x1d0 [ 844.441326][ C0] ? __pfx_worker_thread+0x10/0x10 [ 844.441351][ C0] kthread+0x2f0/0x390 [ 844.441367][ C0] ? __pfx_worker_thread+0x10/0x10 [ 844.441391][ C0] ? __pfx_kthread+0x10/0x10 [ 844.441408][ C0] ret_from_fork+0x4b/0x80 [ 844.441433][ C0] ? __pfx_kthread+0x10/0x10 [ 844.441449][ C0] ret_from_fork_asm+0x1a/0x30 [ 844.441483][ C0] [ 844.950504][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 844.957540][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 844.967914][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 844.978040][ T30] Call Trace: [ 844.981352][ T30] [ 844.984310][ T30] dump_stack_lvl+0x241/0x360 [ 844.989033][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 844.994276][ T30] ? __pfx__printk+0x10/0x10 [ 844.998909][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 845.004941][ T30] ? vscnprintf+0x5d/0x90 [ 845.009318][ T30] panic+0x349/0x880 [ 845.013254][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 845.019491][ T30] ? __pfx_panic+0x10/0x10 [ 845.023946][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 845.029357][ T30] ? __irq_work_queue_local+0x137/0x410 [ 845.034947][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 845.040361][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 845.046560][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 845.052770][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 845.058975][ T30] watchdog+0x1033/0x1040 [ 845.063347][ T30] ? watchdog+0x1ea/0x1040 [ 845.067812][ T30] ? __pfx_watchdog+0x10/0x10 [ 845.072530][ T30] kthread+0x2f0/0x390 [ 845.076632][ T30] ? __pfx_watchdog+0x10/0x10 [ 845.081364][ T30] ? __pfx_kthread+0x10/0x10 [ 845.086006][ T30] ret_from_fork+0x4b/0x80 [ 845.090479][ T30] ? __pfx_kthread+0x10/0x10 [ 845.095126][ T30] ret_from_fork_asm+0x1a/0x30 [ 845.099953][ T30] [ 845.103280][ T30] Kernel Offset: disabled [ 845.107619][ T30] Rebooting in 86400 seconds..