last executing test programs: 4m44.808221049s ago: executing program 32 (id=1757): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0x6a}}]}]}, 0x34}}, 0x10) 4m21.470953101s ago: executing program 33 (id=2043): socket$kcm(0x10, 0x0, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000a7a000/0x3000)=nil], 0x0, 0x0, 0x0) 3m42.611994317s ago: executing program 34 (id=2142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000440)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}}, 0x28}}, 0x0) 3m42.344187129s ago: executing program 35 (id=2143): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="150500fdffffffff130012800b0001006970766c616e00000411028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}}, 0x0) 3m41.916307557s ago: executing program 36 (id=2146): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c000180"], 0x34}}, 0x0) 3m14.768021718s ago: executing program 6 (id=2263): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 3m14.583144045s ago: executing program 6 (id=2266): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r1, &(0x7f0000002340)={0x50, 0x8966d80c54c7a164, 0x0, {0x7, 0x28, 0x0, 0x2000, 0x0, 0xfffd}}, 0x50) 3m14.369299317s ago: executing program 6 (id=2269): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) 3m12.451072067s ago: executing program 6 (id=2276): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x223216, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0xa05077, 0x0) 3m12.310068421s ago: executing program 6 (id=2277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 3m9.089943206s ago: executing program 6 (id=2282): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@multicast1, @broadcast, r1}, 0xc) 3m8.809979303s ago: executing program 37 (id=2282): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@multicast1, @broadcast, r1}, 0xc) 3m8.088326271s ago: executing program 9 (id=2296): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00('], 0x5c}}, 0x0) r0 = io_uring_setup(0x7bda, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x16, 0x20000000, r1) 3m7.824389065s ago: executing program 9 (id=2299): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) r1 = io_uring_setup(0x371f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x363}) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) 3m7.587492746s ago: executing program 9 (id=2302): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x6, 0x80000000, 0x9, 0x7, 0x1, 0x7fff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x2, 0x5, 0x9}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x8, 0x80000001}}]}}}]}, 0x68}}, 0x0) 3m7.175784954s ago: executing program 9 (id=2307): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000100)="bc8c3719e35237bf", 0x8}, {&(0x7f0000000180)="512be9136ee51f0b", 0x8}], 0x2) 3m6.869683003s ago: executing program 9 (id=2309): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='comm\x00') writev(r0, 0x0, 0x0) 3m6.385658487s ago: executing program 9 (id=2314): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x40}}, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000080)={0x281, 0x3}) 3m6.019191143s ago: executing program 38 (id=2314): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x40}}, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000080)={0x281, 0x3}) 2m53.459506095s ago: executing program 7 (id=2398): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f0000001500)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000280)='\x00', 0x1}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 2m53.119087225s ago: executing program 7 (id=2401): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r1, 0xffffff7f, 0x1) 2m52.914064381s ago: executing program 7 (id=2403): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000480)=ANY=[@ANYRES32], 0x28) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2m52.673944782s ago: executing program 7 (id=2406): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x88c20, &(0x7f0000000100)=ANY=[@ANYBLOB=',f,'], 0x0, 0x0, 0x0) 2m52.369108128s ago: executing program 7 (id=2410): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)={0x0, 0x3000000}) 2m51.808505277s ago: executing program 7 (id=2419): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000a40)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x270, 0x2b8, 0xb0000000, 0x270, 0x0, 0x368, 0x3a8, 0x3a8, 0x368, 0x3a8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @local, [], [], 'vlan1\x00', 'pimreg1\x00'}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'virt_wifi0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) 2m51.375734318s ago: executing program 39 (id=2419): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000a40)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x270, 0x2b8, 0xb0000000, 0x270, 0x0, 0x368, 0x3a8, 0x3a8, 0x368, 0x3a8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @local, [], [], 'vlan1\x00', 'pimreg1\x00'}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'virt_wifi0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) 2m14.177286774s ago: executing program 5 (id=2842): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={0x0}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='environ\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0x2020) 2m13.955154926s ago: executing program 5 (id=2846): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000b80)=[{{&(0x7f0000000080)=@phonet={0x23, 0x0, 0x0, 0xa}, 0x80, 0x0}}], 0x1, 0x0) 2m13.798874452s ago: executing program 5 (id=2850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050004000000140004002e"], 0x58}}, 0x0) 2m13.510553418s ago: executing program 5 (id=2854): open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040), 0x9, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x221020, 0x0) 2m13.339301228s ago: executing program 5 (id=2857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2c, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @val, @void, [{0xdd, 0x6, "d8a062cc132f"}]}}]}, 0x48}}, 0x0) 2m13.20851241s ago: executing program 0 (id=2859): capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x20000000) 2m13.017076286s ago: executing program 0 (id=2861): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8042}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x3, 0x1a}}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}}, 0x0) 2m13.016714429s ago: executing program 5 (id=2862): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 2m12.754099249s ago: executing program 40 (id=2862): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 2m12.74339026s ago: executing program 0 (id=2865): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/121, 0x79}], 0x1, 0x0, 0x0) 2m12.45899844s ago: executing program 0 (id=2871): open(&(0x7f0000000000)='./bus\x00', 0x60942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./bus\x00', &(0x7f0000000400), 0x1000007, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) 2m12.321445799s ago: executing program 0 (id=2872): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0xc, "8ed8e367223fbca98de6"}]}}}}}}}, 0x0) 2m11.94176306s ago: executing program 0 (id=2873): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0xa8}}, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m11.632202782s ago: executing program 41 (id=2873): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0xa8}}, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m51.774618988s ago: executing program 4 (id=3021): r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='user\x00', &(0x7f0000000140)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='user\x00', &(0x7f0000000040), 0x0) 1m51.24462271s ago: executing program 4 (id=3022): unshare(0x2c020400) unshare(0x22020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x45) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='./file0\x00') 1m50.672693611s ago: executing program 4 (id=3024): pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xcc) keyctl$KEYCTL_WATCH_KEY(0x3, r1, 0xffffffffffffffff, 0x0) 1m50.08856241s ago: executing program 4 (id=3027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 1m49.648182236s ago: executing program 4 (id=3031): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) 1m49.249435828s ago: executing program 4 (id=3033): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000004c0)={0x50, r1, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x50}}, 0x0) 1m33.575713586s ago: executing program 42 (id=3033): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000004c0)={0x50, r1, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x50}}, 0x0) 1m29.127426824s ago: executing program 8 (id=3107): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x44}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0xde) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1m28.390688029s ago: executing program 8 (id=3110): socket$inet6(0xa, 0x400000000001, 0x0) unshare(0x680) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/reserved_size', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 1m27.917884971s ago: executing program 8 (id=3113): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 1m27.491063556s ago: executing program 8 (id=3115): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITHOUT_PARENT, &(0x7f00000003c0), 0x0) 1m27.011631067s ago: executing program 8 (id=3117): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0x0, 0x0, 0x101, 0x19}}}]}, 0x78}}, 0x0) 1m21.009785281s ago: executing program 8 (id=3127): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)={0x44, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m20.140935017s ago: executing program 43 (id=3127): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)={0x44, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m16.082182503s ago: executing program 1 (id=3138): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) 1m15.904678469s ago: executing program 1 (id=3139): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) 1m15.14727125s ago: executing program 1 (id=3142): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}}, 0x0, @in=@remote}}, 0xe8) 1m14.41699978s ago: executing program 1 (id=3144): syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x7, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m13.168018627s ago: executing program 1 (id=3145): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x3fb) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 1m12.459323626s ago: executing program 2 (id=3147): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x4}, 0x20) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000300)) 1m12.252609668s ago: executing program 2 (id=3148): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) 1m12.140508569s ago: executing program 1 (id=3150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000009800000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000008009e"], 0x38}}, 0x0) 1m12.001914013s ago: executing program 3 (id=3151): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) 1m11.96873342s ago: executing program 2 (id=3152): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a04"], 0x38}}, 0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)='\r', 0x7}]) 1m11.829463658s ago: executing program 3 (id=3153): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000e5ff61103c000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m11.718354696s ago: executing program 2 (id=3154): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x10, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x6c}}}, 0xe8) close(r0) 1m11.66035182s ago: executing program 3 (id=3155): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffe}, 0x1c) close(r0) 1m11.532938913s ago: executing program 2 (id=3156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000000)={0xfffffffffffffffb}) 1m11.450659277s ago: executing program 3 (id=3157): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2cac00, 0x0) r1 = openat(r0, &(0x7f0000000040)='.\x00', 0x0, 0x4) fchmod(r1, 0x518) mkdir(&(0x7f0000000300)='./file0\x00', 0x408) 1m11.264177224s ago: executing program 3 (id=3158): r0 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 1m11.118364593s ago: executing program 3 (id=3159): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x23b) 1m11.117033568s ago: executing program 2 (id=3167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000080), 0x76e5467) 0s ago: executing program 44 (id=3150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000009800000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000008009e"], 0x38}}, 0x0) kernel console output (not intermixed with test programs): 6][ T25] asix 2-1:0.0: probe with driver asix failed with error -71 [ 198.744838][ T25] usb 2-1: USB disconnect, device number 21 [ 199.625246][ T970] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 199.865126][ T970] usb 2-1: Using ep0 maxpacket: 8 [ 199.876553][ T970] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 199.885182][ T970] usb 2-1: config 179 has no interface number 0 [ 199.891523][ T970] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 199.936680][ T970] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 199.962382][ T970] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 200.036034][ T970] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 200.067022][ T970] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 200.091486][ T970] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 200.102577][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.175765][T10472] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 200.385494][ T5909] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 200.405193][ T25] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 200.460557][ T970] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input34 [ 200.482382][T10506] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2022'. [ 200.565146][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 200.579042][ T5909] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 200.606320][ T25] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 200.624321][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.645192][ T25] usb 5-1: config 0 has no interface number 0 [ 200.651377][ T25] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 200.668616][ T970] usb 2-1: USB disconnect, device number 22 [ 200.674630][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 200.674682][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 200.676055][ T5909] usb 4-1: Product: syz [ 200.714590][ T970] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 200.715398][ T25] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 200.745576][ T5909] usb 4-1: Manufacturer: syz [ 200.750243][ T5909] usb 4-1: SerialNumber: syz [ 200.780223][ T25] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 200.790844][ T5909] usb 4-1: config 0 descriptor?? [ 200.806148][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.830593][ T25] usb 5-1: Product: syz [ 200.834813][ T25] usb 5-1: Manufacturer: syz [ 200.855096][ T25] usb 5-1: SerialNumber: syz [ 200.889319][ T25] usb 5-1: config 0 descriptor?? [ 200.895549][T10495] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 200.903183][T10495] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 201.005468][ T5896] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 201.034530][ T5909] usb 4-1: USB disconnect, device number 19 [ 201.133297][T10495] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 201.141276][T10495] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 201.155120][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 201.162526][ T5896] usb 6-1: config 0 has no interfaces? [ 201.170633][ T5896] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 201.180017][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.188218][ T5896] usb 6-1: Product: syz [ 201.192592][ T5896] usb 6-1: Manufacturer: syz [ 201.197344][ T5896] usb 6-1: SerialNumber: syz [ 201.204956][ T5896] usb 6-1: config 0 descriptor?? [ 201.465686][ T970] usb 6-1: USB disconnect, device number 3 [ 201.553259][ T25] asix 5-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 201.569952][ T25] asix 5-1:0.251: probe with driver asix failed with error -524 [ 201.781398][ T25] usb 5-1: USB disconnect, device number 25 [ 202.689649][ T5850] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 202.699122][ T5850] Bluetooth: hci1: Injecting HCI hardware error event [ 202.707855][ T5850] Bluetooth: hci1: hardware error 0x00 [ 202.957110][T10562] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2042'. [ 202.977567][T10562] netem: change failed [ 203.173640][ T67] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.413987][ T67] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.432232][T10580] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2049'. [ 203.495684][T10580] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2049'. [ 203.573253][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.597615][ T5152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.606310][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.633221][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.646078][ T5152] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 203.656717][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 203.678597][ T67] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.656224][ T5893] usb 1-1: [UEAGLE-ATM] firmware is not available [ 205.352133][ T5850] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 205.532743][ T67] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.734653][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2065'. [ 205.806502][ T5850] Bluetooth: hci4: command tx timeout [ 205.983752][T10594] chnl_net:caif_netlink_parms(): no params data found [ 206.580407][T10648] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2072'. [ 206.679067][T10648] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2072'. [ 207.000697][T10594] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.046156][T10594] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.112637][T10594] bridge_slave_0: entered allmulticast mode [ 207.149036][T10594] bridge_slave_0: entered promiscuous mode [ 207.201904][T10594] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.250161][T10594] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.301749][T10594] bridge_slave_1: entered allmulticast mode [ 207.360364][T10594] bridge_slave_1: entered promiscuous mode [ 207.608938][T10594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.727485][T10594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.034106][ T5850] Bluetooth: hci4: command tx timeout [ 208.382031][T10594] team0: Port device team_slave_0 added [ 208.603542][T10594] team0: Port device team_slave_1 added [ 209.358905][T10594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.384029][T10594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.045545][ T5850] Bluetooth: hci4: command tx timeout [ 210.066495][T10594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.080418][T10594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.088776][T10594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.115840][T10594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.128256][ T67] bridge_slave_1: left allmulticast mode [ 210.165300][ T67] bridge_slave_1: left promiscuous mode [ 210.171103][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.208656][T10721] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2093'. [ 210.227848][T10721] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 210.266932][ T67] bridge_slave_0: left allmulticast mode [ 210.278944][ T67] bridge_slave_0: left promiscuous mode [ 210.321119][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.125639][ T5850] Bluetooth: hci4: command tx timeout [ 213.282996][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.356676][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.413967][ T67] bond0 (unregistering): Released all slaves [ 213.977843][T10594] hsr_slave_0: entered promiscuous mode [ 213.990587][T10789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2122'. [ 214.032205][T10594] hsr_slave_1: entered promiscuous mode [ 214.069028][T10594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.095366][T10594] Cannot create hsr debugfs directory [ 214.779014][ T29] audit: type=1326 audit(1729938467.662:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.0.2126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dc037e719 code=0x0 [ 221.155021][ C0] sched: DL replenish lagged too much [ 229.880118][T10904] Attempt to restore checkpoint with obsolete wellknown handles [ 237.292626][T10859] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2143'. [ 237.338991][T10859] ipvlan2: entered promiscuous mode [ 242.425261][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2146'. [ 243.365271][ T5853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 243.373840][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 243.527104][ T5846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 243.536025][ T5846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 243.543849][ T5846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 243.552086][ T5846] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 243.559525][ T5846] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 243.639004][ T5152] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 243.648779][ T5152] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 243.656661][ T5152] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 243.664561][ T5152] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 243.674290][ T5152] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 243.836274][ T5152] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.847597][ T5152] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.857010][ T5152] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 243.864631][ T5152] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 243.872658][ T5152] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.971993][ T5850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 245.827245][ T5152] Bluetooth: hci6: command tx timeout [ 245.890755][ T67] hsr_slave_0: left promiscuous mode [ 246.011352][ T67] hsr_slave_1: left promiscuous mode [ 246.025687][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.033207][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.052707][ T5152] Bluetooth: hci5: command tx timeout [ 246.059260][ T5152] Bluetooth: hci7: command tx timeout [ 246.076375][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.102275][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.143231][ T67] veth1_macvtap: left promiscuous mode [ 246.153133][ T67] veth0_macvtap: left promiscuous mode [ 246.165477][ T67] veth1_vlan: left promiscuous mode [ 246.175419][ T67] veth0_vlan: left promiscuous mode [ 247.897530][ T5847] Bluetooth: hci6: command tx timeout [ 248.134171][ T5152] Bluetooth: hci5: command tx timeout [ 248.143067][ T5847] Bluetooth: hci7: command tx timeout [ 248.513296][ T67] team0 (unregistering): Port device team_slave_1 removed [ 248.612463][ T67] team0 (unregistering): Port device team_slave_0 removed [ 249.589687][T10594] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 249.626438][T10594] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 249.875694][T10594] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 249.908791][T10594] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 250.002653][ T5152] Bluetooth: hci6: command tx timeout [ 250.213482][ T5152] Bluetooth: hci7: command tx timeout [ 250.219146][ T5152] Bluetooth: hci5: command tx timeout [ 250.384028][T10594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.408710][T10594] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.490616][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.497831][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.519737][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.526952][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.591057][T10926] chnl_net:caif_netlink_parms(): no params data found [ 250.772116][T10594] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.805267][T10594] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.230643][T10923] chnl_net:caif_netlink_parms(): no params data found [ 251.320846][T10594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.468006][T10594] veth0_vlan: entered promiscuous mode [ 251.597843][T10594] veth1_vlan: entered promiscuous mode [ 252.045429][ T5847] Bluetooth: hci6: command tx timeout [ 252.159966][T10926] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.208961][T10926] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.225229][T10926] bridge_slave_0: entered allmulticast mode [ 252.285509][ T5847] Bluetooth: hci5: command tx timeout [ 252.291133][ T5152] Bluetooth: hci7: command tx timeout [ 252.339080][T10926] bridge_slave_0: entered promiscuous mode [ 252.401835][T10594] veth0_macvtap: entered promiscuous mode [ 252.436467][T10926] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.463998][T10926] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.473578][T10926] bridge_slave_1: entered allmulticast mode [ 252.528342][T10926] bridge_slave_1: entered promiscuous mode [ 252.545492][T10929] chnl_net:caif_netlink_parms(): no params data found [ 252.666097][T10594] veth1_macvtap: entered promiscuous mode [ 252.734300][T10926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.776621][T10926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.818261][T10923] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.829517][T10923] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.838405][T10923] bridge_slave_0: entered allmulticast mode [ 252.846311][T10923] bridge_slave_0: entered promiscuous mode [ 252.933466][T11031] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2189'. [ 252.945791][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.977193][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.001823][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.038467][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.074615][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.107719][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.135174][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.157841][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.183632][T10594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.210813][T10923] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.230051][T10923] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.265304][T10923] bridge_slave_1: entered allmulticast mode [ 253.274905][T10923] bridge_slave_1: entered promiscuous mode [ 253.391838][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.404408][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.416323][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.427761][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.438109][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.451170][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.464892][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.477370][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.489320][T10594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.589948][T10926] team0: Port device team_slave_0 added [ 253.653764][T10923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.760786][T10594] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.774827][T10594] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.794414][T10594] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.819439][T10594] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.848723][T10926] team0: Port device team_slave_1 added [ 254.463361][T10923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.638646][T10929] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.668262][T10929] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.702578][T10929] bridge_slave_0: entered allmulticast mode [ 254.727135][T10929] bridge_slave_0: entered promiscuous mode [ 254.757894][T10929] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.779898][T10929] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.805706][T10929] bridge_slave_1: entered allmulticast mode [ 254.836408][T10929] bridge_slave_1: entered promiscuous mode [ 254.891199][T10926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.925564][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.214531][T10926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.271999][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2194'. [ 255.400649][T10926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.415187][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.441176][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.461358][T10926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.518969][T10923] team0: Port device team_slave_0 added [ 255.564466][T10929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.617087][T10929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.726627][T10923] team0: Port device team_slave_1 added [ 255.863928][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.871508][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.900362][T10929] team0: Port device team_slave_0 added [ 256.084939][T10929] team0: Port device team_slave_1 added [ 256.199665][T10923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.239518][T10923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.355322][T10923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.408067][T10923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.446917][T10923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.472849][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.579474][T10923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.632069][T10926] hsr_slave_0: entered promiscuous mode [ 256.927782][T10926] hsr_slave_1: entered promiscuous mode [ 257.071471][T10929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.089484][T10929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.183773][T10929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.385354][T10929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.412211][T10929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.438232][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.514840][T10929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.756717][ T709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.764670][ T709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.809965][T10929] hsr_slave_0: entered promiscuous mode [ 257.843419][T10929] hsr_slave_1: entered promiscuous mode [ 257.852797][T10929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.875275][T10929] Cannot create hsr debugfs directory [ 257.928103][ T67] IPVS: stop unused estimator thread 0... [ 258.029197][T10923] hsr_slave_0: entered promiscuous mode [ 258.103295][T10923] hsr_slave_1: entered promiscuous mode [ 258.144506][T10923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.164269][T10923] Cannot create hsr debugfs directory [ 258.483688][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.532190][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.494488][T10929] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 259.571363][T10929] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 259.880427][T10929] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 260.027421][T10929] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 260.759924][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.961383][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.053553][ T29] audit: type=1326 audit(1729938513.932:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11132 comm="syz.6.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ea17e719 code=0x7ffc0000 [ 261.107193][ T29] audit: type=1326 audit(1729938513.932:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11132 comm="syz.6.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ea17e719 code=0x7ffc0000 [ 261.139953][ T29] audit: type=1326 audit(1729938513.932:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11132 comm="syz.6.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f18ea17e719 code=0x7ffc0000 [ 261.164689][ T29] audit: type=1326 audit(1729938513.932:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11132 comm="syz.6.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ea17e719 code=0x7ffc0000 [ 261.193102][ T29] audit: type=1326 audit(1729938513.932:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11132 comm="syz.6.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f18ea17e719 code=0x7ffc0000 [ 261.225059][ T29] audit: type=1326 audit(1729938513.932:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11132 comm="syz.6.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ea17e719 code=0x7ffc0000 [ 261.257469][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.270190][ T29] audit: type=1326 audit(1729938513.932:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11132 comm="syz.6.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ea17e719 code=0x7ffc0000 [ 261.307298][ T29] audit: type=1326 audit(1729938513.932:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11132 comm="syz.6.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f18ea17e719 code=0x7ffc0000 [ 261.310935][T10926] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 261.350130][ T29] audit: type=1326 audit(1729938514.072:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11132 comm="syz.6.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ea17e719 code=0x7ffc0000 [ 261.379818][ T29] audit: type=1326 audit(1729938514.072:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11132 comm="syz.6.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ea17e719 code=0x7ffc0000 [ 261.447208][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.544801][T10926] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 261.567192][T10923] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 261.579027][T10923] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 261.599050][T10926] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 261.621297][T10926] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 261.631594][T10923] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 261.717176][T10923] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 261.894465][T10929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.081496][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.138381][T11155] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2220'. [ 262.198525][T10929] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.321176][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.389296][T10820] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.396479][T10820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.590657][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.641406][T10820] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.648602][T10820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.761655][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.809426][T10923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.933010][T10923] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.964886][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.972166][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.012813][T10926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.164520][ T2932] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.171709][ T2932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.278740][T10926] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.518777][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.588118][T10929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.668413][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.719637][ T2932] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.726848][ T2932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.756363][T11191] tipc: Started in network mode [ 263.761275][T11191] tipc: Node identity ac14140f, cluster identity 4711 [ 263.776270][T11191] tipc: New replicast peer: 255.255.255.255 [ 263.796524][T11191] tipc: Enabled bearer , priority 10 [ 263.879026][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.956497][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.963686][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.088781][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.310518][T10929] veth0_vlan: entered promiscuous mode [ 264.337688][T10923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.401814][T10929] veth1_vlan: entered promiscuous mode [ 264.529851][T10926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.575650][ T5893] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 264.582438][ T67] bridge_slave_1: left allmulticast mode [ 264.591255][ T67] bridge_slave_1: left promiscuous mode [ 264.598983][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.614887][ T67] bridge_slave_0: left allmulticast mode [ 264.622983][ T67] bridge_slave_0: left promiscuous mode [ 264.630091][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.652188][ T67] bridge_slave_1: left allmulticast mode [ 264.663197][ T67] bridge_slave_1: left promiscuous mode [ 264.669421][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.680749][ T67] bridge_slave_0: left allmulticast mode [ 264.687542][ T67] bridge_slave_0: left promiscuous mode [ 264.693223][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.705045][ T67] bridge_slave_1: left allmulticast mode [ 264.710718][ T67] bridge_slave_1: left promiscuous mode [ 264.721228][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.734121][ T67] bridge_slave_0: left allmulticast mode [ 264.740095][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 264.746030][ T67] bridge_slave_0: left promiscuous mode [ 264.752840][ T5893] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.766549][ T5893] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 264.777370][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.784888][ T5893] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 264.801761][ T5893] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.815856][ T5893] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 264.826161][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.915783][ T25] tipc: Node number set to 2886997007 [ 265.096321][ T5893] usb 4-1: GET_CAPABILITIES returned 0 [ 265.103227][ T5893] usbtmc 4-1:16.0: can't read capabilities [ 265.292915][ T5909] usb 4-1: USB disconnect, device number 20 [ 265.622359][ T67] dvmrp1 (unregistering): left allmulticast mode [ 265.860157][ T67] team0: Port device bridge1 removed [ 266.190706][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.206388][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.219050][ T67] bond0 (unregistering): Released all slaves [ 266.389737][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.404851][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.423948][ T67] bond0 (unregistering): Released all slaves [ 266.439825][ T67] bond1 (unregistering): Released all slaves [ 266.641417][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.654411][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.680314][ T67] bond0 (unregistering): Released all slaves [ 266.716191][T11222] netlink: 'syz.6.2239': attribute type 2 has an invalid length. [ 266.724114][T11222] netlink: 'syz.6.2239': attribute type 6 has an invalid length. [ 266.750447][T10923] veth0_vlan: entered promiscuous mode [ 266.787166][T10929] veth0_macvtap: entered promiscuous mode [ 266.838652][T10926] veth0_vlan: entered promiscuous mode [ 266.888993][T10929] veth1_macvtap: entered promiscuous mode [ 266.919833][T10926] veth1_vlan: entered promiscuous mode [ 266.966240][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.977709][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.987744][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.999103][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.010091][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.021241][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.031736][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.042835][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.053349][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.064508][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.078685][T10929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.158517][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.171705][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.196239][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.210981][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.226658][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.238862][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.257140][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.275752][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.286950][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.299052][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.322338][T10929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.372849][ T67] tipc: Disabling bearer [ 267.379854][ T67] tipc: Left network mode [ 267.404966][T10926] veth0_macvtap: entered promiscuous mode [ 267.414757][T10926] veth1_macvtap: entered promiscuous mode [ 267.431594][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.442236][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.452142][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.462712][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.474157][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.485104][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.495345][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.506174][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.516122][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.526649][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.536563][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.547070][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.558782][T10926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.568678][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.579556][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.589807][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.600402][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.610316][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.620818][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.630746][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.641354][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.651337][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.661863][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.671805][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.682697][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.694511][T10926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.711529][T10926] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.720340][T10926] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.729144][T10926] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.737908][T10926] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.814137][T10923] veth1_vlan: entered promiscuous mode [ 267.862848][T10929] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.895814][T10929] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.904591][T10929] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.947215][T10929] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.989857][ T67] tipc: Left network mode [ 268.409810][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.438842][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.441962][T10923] veth0_macvtap: entered promiscuous mode [ 268.462594][T11259] netlink: 'syz.3.2252': attribute type 1 has an invalid length. [ 268.581103][T10923] veth1_macvtap: entered promiscuous mode [ 268.727141][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2255'. [ 268.745794][T11269] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2255'. [ 268.763949][T11269] vlan2: entered allmulticast mode [ 268.849051][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.874496][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.903911][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.928346][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.999088][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.021307][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.032372][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.043869][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.053908][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.066452][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.077015][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.088634][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.099627][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.110848][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.122255][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.133342][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.144138][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.157857][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.171072][T10923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.205385][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.257536][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.310234][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.352358][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.378730][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.397235][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.416933][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.463767][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.474345][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.485864][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.496544][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.508356][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.519163][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.545777][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.567805][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.593839][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.613789][T10923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.816951][T10923] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.858936][T10923] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.892124][T10923] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.918361][T10923] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.247122][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2268'. [ 270.415674][ T46] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 270.497872][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.521153][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.565654][ T46] usb 7-1: Using ep0 maxpacket: 16 [ 270.576332][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.608351][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.634506][ T46] usb 7-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 270.660203][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.683497][ T46] usb 7-1: config 0 descriptor?? [ 270.725946][ T25] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 270.836628][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.844575][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.877575][ T67] hsr_slave_0: left promiscuous mode [ 270.890851][ T67] hsr_slave_1: left promiscuous mode [ 270.891476][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.918071][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.928248][ T25] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 270.938073][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.959863][ T25] usb 4-1: config 0 descriptor?? [ 270.965759][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.991404][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.047192][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.066695][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.111935][ T67] hsr_slave_0: left promiscuous mode [ 271.127356][ T67] hsr_slave_1: left promiscuous mode [ 271.146041][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.159330][ T46] logitech 0003:046D:C24F.002F: item fetching failed at offset 2/5 [ 271.172109][ T46] logitech 0003:046D:C24F.002F: parse failed [ 271.178997][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.179440][ T46] logitech 0003:046D:C24F.002F: probe with driver logitech failed with error -22 [ 271.201456][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.233038][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.303432][ T67] hsr_slave_0: left promiscuous mode [ 271.339556][ T67] hsr_slave_1: left promiscuous mode [ 271.419159][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.430211][ T25] arvo 0003:1E7D:30D4.0030: unknown main item tag 0x0 [ 271.439638][ T5897] usb 7-1: USB disconnect, device number 2 [ 271.439819][ T25] arvo 0003:1E7D:30D4.0030: unknown main item tag 0x0 [ 271.448516][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.478892][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.482045][ T25] arvo 0003:1E7D:30D4.0030: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 271.489843][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.712840][ T67] veth1_macvtap: left promiscuous mode [ 271.720856][T11335] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2275'. [ 271.726115][ T67] veth0_macvtap: left promiscuous mode [ 271.744336][ T67] veth1_vlan: left promiscuous mode [ 271.752253][ T67] veth0_vlan: left promiscuous mode [ 271.759690][ T67] veth1_macvtap: left promiscuous mode [ 271.766000][ T67] veth0_macvtap: left promiscuous mode [ 271.771718][ T67] veth1_vlan: left promiscuous mode [ 271.778861][ T67] veth0_vlan: left promiscuous mode [ 271.787091][ T67] veth1_macvtap: left promiscuous mode [ 271.792753][ T67] veth0_macvtap: left promiscuous mode [ 271.799225][ T67] veth1_vlan: left promiscuous mode [ 271.804629][ T67] veth0_vlan: left promiscuous mode [ 271.880237][ T5897] usb 4-1: USB disconnect, device number 21 [ 272.250388][ T67] pimreg3 (unregistering): left allmulticast mode [ 272.273811][ T67] pimreg (unregistering): left allmulticast mode [ 272.742837][ T67] team0 (unregistering): Port device team_slave_1 removed [ 272.793546][ T67] team0 (unregistering): Port device team_slave_0 removed [ 273.637614][ T67] team0 (unregistering): Port device team_slave_1 removed [ 273.684797][ T67] team0 (unregistering): Port device team_slave_0 removed [ 274.478706][ T67] team0 (unregistering): Port device team_slave_1 removed [ 274.523552][ T67] team0 (unregistering): Port device team_slave_0 removed [ 274.998720][T11337] batadv0: entered promiscuous mode [ 275.011548][T11337] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 275.021742][T11337] batadv0: left promiscuous mode [ 276.549049][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.558822][ T5152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.574043][ T5152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.584705][ T5152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.594893][ T5152] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.623225][ T5152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.183493][T11416] netlink: 'syz.8.2305': attribute type 37 has an invalid length. [ 277.607430][T11398] chnl_net:caif_netlink_parms(): no params data found [ 278.104364][T11398] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.117895][T11398] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.164172][T11398] bridge_slave_0: entered allmulticast mode [ 278.189151][T11398] bridge_slave_0: entered promiscuous mode [ 278.220256][T11398] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.237118][T11398] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.254796][T11398] bridge_slave_1: entered allmulticast mode [ 278.287031][T11398] bridge_slave_1: entered promiscuous mode [ 278.356725][ T67] IPVS: stop unused estimator thread 0... [ 278.383867][T11398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.443209][T11398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.593751][T11398] team0: Port device team_slave_0 added [ 278.637388][T11398] team0: Port device team_slave_1 added [ 278.648005][T11462] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2316'. [ 278.685999][ T5152] Bluetooth: hci0: command tx timeout [ 278.842087][T11398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.883111][T11398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.936418][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.966630][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.973727][T11398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.988885][T11398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.006171][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.021096][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.030775][T11398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.058139][T11398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.069038][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 279.077679][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.123248][ T5841] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 279.339546][ T5841] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 279.360295][ T709] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.376024][ T5841] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 279.394491][ T5841] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 279.429462][T11398] hsr_slave_0: entered promiscuous mode [ 279.437975][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.448032][T11398] hsr_slave_1: entered promiscuous mode [ 279.487318][T11398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.490038][T11472] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 279.518432][ T5841] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 279.526542][T11398] Cannot create hsr debugfs directory [ 279.596840][T11486] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2324'. [ 279.712668][ T709] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.784692][ T5896] usb 4-1: USB disconnect, device number 22 [ 279.879598][ T709] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.977697][ T709] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.767578][ T5152] Bluetooth: hci0: command tx timeout [ 281.089279][ T709] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.150153][T11525] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2334'. [ 281.163920][T11530] netlink: 'syz.3.2336': attribute type 11 has an invalid length. [ 281.175229][ T5152] Bluetooth: hci2: command tx timeout [ 281.387690][T11541] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2339'. [ 281.520440][ T709] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.545123][T11478] chnl_net:caif_netlink_parms(): no params data found [ 281.767855][ T709] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.792396][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2343'. [ 281.806462][T11548] team_slave_0: left promiscuous mode [ 281.812819][T11548] team_slave_1: left promiscuous mode [ 281.923109][T11548] team0 (unregistering): Port device team_slave_0 removed [ 281.949115][T11548] team0 (unregistering): Port device team_slave_1 removed [ 282.070667][ T709] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.624362][T11478] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.643351][T11478] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.663695][T11478] bridge_slave_0: entered allmulticast mode [ 282.673116][T11478] bridge_slave_0: entered promiscuous mode [ 282.727272][T11478] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.736772][T11478] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.744071][T11478] bridge_slave_1: entered allmulticast mode [ 282.752152][T11478] bridge_slave_1: entered promiscuous mode [ 282.792187][ T709] bridge_slave_1: left allmulticast mode [ 282.800803][ T709] bridge_slave_1: left promiscuous mode [ 282.807028][ T709] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.823880][ T709] bridge_slave_0: left allmulticast mode [ 282.834145][ T709] bridge_slave_0: left promiscuous mode [ 282.842898][ T709] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.855199][ T5152] Bluetooth: hci0: command tx timeout [ 282.873342][ T709] bridge_slave_1: left allmulticast mode [ 282.888571][ T709] bridge_slave_1: left promiscuous mode [ 282.894357][ T709] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.937415][ T709] bridge_slave_0: left allmulticast mode [ 282.950552][ T709] bridge_slave_0: left promiscuous mode [ 282.958289][ T709] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.162871][T11591] raw_sendmsg: syz.3.2355 forgot to set AF_INET. Fix it! [ 283.247502][ T5152] Bluetooth: hci2: command tx timeout [ 284.011450][ T709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.024115][ T709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.036020][ T709] bond0 (unregistering): Released all slaves [ 284.163432][ T709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.176726][ T709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.189846][ T709] bond0 (unregistering): Released all slaves [ 284.202238][T11398] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 284.215139][ T5897] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 284.242531][T11478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.316913][T11398] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 284.334932][T11398] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 284.354461][T11478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.397425][ T5897] usb 4-1: New USB device found, idVendor=1039, idProduct=2121, bcdDevice=9e.ff [ 284.412244][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.421900][ T5897] usb 4-1: Product: syz [ 284.427905][ T5897] usb 4-1: Manufacturer: syz [ 284.432638][ T5897] usb 4-1: SerialNumber: syz [ 284.452814][ T5897] usb 4-1: config 0 descriptor?? [ 284.458577][ T709] tipc: Disabling bearer [ 284.469560][ T5897] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2121) Rev (0X9EFF): Eagle II [ 284.483007][ T709] tipc: Left network mode [ 284.483097][T11398] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 284.591705][T11478] team0: Port device team_slave_0 added [ 284.615394][ T5897] usb 4-1: reset high-speed USB device number 23 using dummy_hcd [ 284.647406][T11478] team0: Port device team_slave_1 added [ 284.762168][T11478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.784621][T11478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.811789][T11478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.900214][T11478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.915164][T11478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.950730][ T5152] Bluetooth: hci0: command tx timeout [ 284.965522][T11478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.042998][T11398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.064867][T11478] hsr_slave_0: entered promiscuous mode [ 285.071744][T11478] hsr_slave_1: entered promiscuous mode [ 285.078354][T11478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.086040][T11478] Cannot create hsr debugfs directory [ 285.123874][T11617] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2365'. [ 285.138948][T11617] netlink: 'syz.8.2365': attribute type 1 has an invalid length. [ 285.147030][T11617] netlink: 'syz.8.2365': attribute type 2 has an invalid length. [ 285.186133][T11398] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.262972][ T709] hsr_slave_0: left promiscuous mode [ 285.281270][ T709] hsr_slave_1: left promiscuous mode [ 285.288732][ T709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.297761][ T709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.305143][ T5897] usb 4-1: device descriptor read/64, error -71 [ 285.312726][ T709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.321436][ T709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.335336][ T5152] Bluetooth: hci2: command tx timeout [ 285.347217][ T709] hsr_slave_0: left promiscuous mode [ 285.353260][ T709] hsr_slave_1: left promiscuous mode [ 285.360220][ T709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.368331][ T709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.381112][ T709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.389072][ T709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.422028][ T709] veth1_macvtap: left promiscuous mode [ 285.428345][ T709] veth0_macvtap: left promiscuous mode [ 285.433964][ T709] veth1_vlan: left promiscuous mode [ 285.439987][ T709] veth0_vlan: left promiscuous mode [ 285.448373][ T709] veth1_macvtap: left promiscuous mode [ 285.453913][ T709] veth0_macvtap: left promiscuous mode [ 285.462302][ T709] veth1_vlan: left promiscuous mode [ 285.469271][ T709] veth0_vlan: left promiscuous mode [ 285.545164][ T5897] usb 4-1: reset high-speed USB device number 23 using dummy_hcd [ 285.736059][ T5897] usb 4-1: device firmware changed [ 285.758701][ T5897] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 285.777434][ T5897] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 285.785758][ T5894] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 285.801826][ T5894] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 285.827813][ T5897] usb 4-1: USB disconnect, device number 23 [ 285.989316][ T5897] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 286.167356][ T5897] usb 4-1: config 0 has no interfaces? [ 286.173227][ T5897] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 286.185139][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.200864][ T5897] usb 4-1: config 0 descriptor?? [ 286.301364][ T709] team0 (unregistering): Port device team_slave_1 removed [ 286.352607][ T709] team0 (unregistering): Port device team_slave_0 removed [ 286.462279][ T5897] usb 4-1: USB disconnect, device number 24 [ 287.283112][ T709] team0 (unregistering): Port device team_slave_1 removed [ 287.338161][ T709] team0 (unregistering): Port device team_slave_0 removed [ 287.405298][ T5152] Bluetooth: hci2: command tx timeout [ 287.855911][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.863079][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.940842][T11636] openvswitch: netlink: Actions may not be safe on all matching packets [ 287.946597][ T2932] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.956427][ T2932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.107968][T11638] nvme_fabrics: missing parameter 'transport=%s' [ 288.123016][T11638] nvme_fabrics: missing parameter 'nqn=%s' [ 288.124606][T11641] hsr0: entered promiscuous mode [ 288.477578][T11650] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2378'. [ 288.558699][T11398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.925594][ T5841] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 288.981914][T11398] veth0_vlan: entered promiscuous mode [ 289.085947][ T5841] usb 4-1: Using ep0 maxpacket: 16 [ 289.097763][ T5841] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 289.110827][T11398] veth1_vlan: entered promiscuous mode [ 289.118482][ T5841] usb 4-1: config 0 has no interface number 0 [ 289.124707][ T5841] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 289.149094][ T5841] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 289.187779][ T5841] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 289.201540][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.223713][ T5841] usb 4-1: Product: syz [ 289.268190][ T5841] usb 4-1: Manufacturer: syz [ 289.272871][ T5841] usb 4-1: SerialNumber: syz [ 289.284918][T11398] veth0_macvtap: entered promiscuous mode [ 289.308212][ T5841] usb 4-1: config 0 descriptor?? [ 289.314053][T11658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 289.337551][T11398] veth1_macvtap: entered promiscuous mode [ 289.356303][T11658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 289.409264][T11478] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 289.432649][T11398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.461508][T11398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.479849][T11398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.501048][T11398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.511205][T11398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.539428][T11398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.553524][T11398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.563022][T11478] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 289.578487][T11478] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 289.607154][T11658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 289.614628][T11658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 289.643255][T11672] netlink: 'syz.8.2387': attribute type 2 has an invalid length. [ 289.662624][T11398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.694252][T11398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.717464][T11398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.730472][T11398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.741530][T11398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.753291][T11398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.767277][T11398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.775952][T11478] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 289.809181][T11398] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.822620][T11398] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.833070][T11398] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.842029][T11398] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.060546][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.067871][T11478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.085597][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.139417][T11478] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.187868][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.195072][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.219590][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.226820][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.238074][ T5841] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 290.255586][ T5841] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 290.280127][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.284630][ T5841] asix 4-1:0.251: probe with driver asix failed with error -71 [ 290.302613][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.310465][ T5841] usb 4-1: USB disconnect, device number 25 [ 290.512501][T11478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.539058][T11686] netlink: 'syz.2.2284': attribute type 16 has an invalid length. [ 290.547809][T11478] veth0_vlan: entered promiscuous mode [ 290.584442][T11686] netlink: 'syz.2.2284': attribute type 3 has an invalid length. [ 290.593448][T11686] netlink: 'syz.2.2284': attribute type 1 has an invalid length. [ 290.602286][T11686] netlink: 'syz.2.2284': attribute type 1 has an invalid length. [ 290.611827][T11686] netlink: 'syz.2.2284': attribute type 2 has an invalid length. [ 290.639842][T11478] veth1_vlan: entered promiscuous mode [ 290.652262][T11686] netlink: 64006 bytes leftover after parsing attributes in process `syz.2.2284'. [ 290.736333][T11478] veth0_macvtap: entered promiscuous mode [ 290.763343][T11478] veth1_macvtap: entered promiscuous mode [ 290.839426][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.875047][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.905754][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.935065][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.954134][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.980874][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.999382][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.023311][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.044701][T11478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.111523][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.133510][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.143608][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.154263][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.164288][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.174999][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.184849][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.195563][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.206764][T11478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.218340][T11478] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.227173][T11478] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.236407][T11478] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.245765][T11478] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.434268][T10820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.466109][T10820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.496667][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.536850][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.708869][T11710] netlink: 'syz.8.2404': attribute type 1 has an invalid length. [ 291.959768][T11719] tmpfs: Unknown parameter 'f' [ 292.210309][T11730] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2411'. [ 292.781144][ T709] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.046666][ T709] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.280308][ T709] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.295425][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2424'. [ 293.656730][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 293.679761][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 293.698602][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 293.724843][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 293.748032][ T709] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.753056][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 293.777709][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 294.240124][ T709] bridge_slave_1: left allmulticast mode [ 294.255206][ T709] bridge_slave_1: left promiscuous mode [ 294.261010][ T709] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.377237][ T709] bridge_slave_0: left allmulticast mode [ 294.383138][ T709] bridge_slave_0: left promiscuous mode [ 294.389432][ T709] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.795578][ T970] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 294.975461][ T970] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 295.001075][ T970] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 295.033948][ T970] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 295.044854][ T970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 295.073824][ T970] usb 6-1: SerialNumber: syz [ 295.109685][ T970] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 295.135555][ T970] usb-storage 6-1:1.0: USB Mass Storage device detected [ 295.178223][ T970] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 295.203381][ T970] scsi host1: usb-storage 6-1:1.0 [ 295.387744][ T709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.413394][ T709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.443561][ T709] bond0 (unregistering): Released all slaves [ 295.670565][T11793] chnl_net:caif_netlink_parms(): no params data found [ 295.966491][ T5152] Bluetooth: hci3: command tx timeout [ 296.086501][T11793] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.093739][T11793] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.109751][T11793] bridge_slave_0: entered allmulticast mode [ 296.129100][T11793] bridge_slave_0: entered promiscuous mode [ 296.171100][ T709] hsr_slave_0: left promiscuous mode [ 296.189575][ T709] hsr_slave_1: left promiscuous mode [ 296.218970][ T709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.251577][ T709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.273017][ T709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.291518][ T709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.367556][ T709] veth1_macvtap: left promiscuous mode [ 296.373236][ T709] veth0_macvtap: left promiscuous mode [ 296.407055][ T709] veth1_vlan: left promiscuous mode [ 296.412483][ T709] veth0_vlan: left promiscuous mode [ 296.505600][ T5896] usb 6-1: USB disconnect, device number 4 [ 296.799979][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2451'. [ 298.046357][ T5152] Bluetooth: hci3: command tx timeout [ 298.597542][ T709] team0 (unregistering): Port device team_slave_1 removed [ 298.803677][ T709] team0 (unregistering): Port device team_slave_0 removed [ 299.760448][T11793] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.770238][T11793] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.793555][T11793] bridge_slave_1: entered allmulticast mode [ 299.806356][T11793] bridge_slave_1: entered promiscuous mode [ 299.851541][T11915] bridge_slave_0: left allmulticast mode [ 299.876083][T11915] bridge_slave_0: left promiscuous mode [ 299.883822][T11915] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.910007][T11915] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 299.965606][T11969] tun0: tun_chr_ioctl cmd 1074025675 [ 299.991814][T11969] tun0: persist disabled [ 300.125421][ T5152] Bluetooth: hci3: command tx timeout [ 300.183820][T11793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.249747][T11793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.518494][T11793] team0: Port device team_slave_0 added [ 300.556510][T11793] team0: Port device team_slave_1 added [ 300.701963][T11793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.745341][T11793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.844211][T11793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.949318][T11793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.975760][T11793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.073882][T11793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.260398][T11793] hsr_slave_0: entered promiscuous mode [ 301.296366][T11793] hsr_slave_1: entered promiscuous mode [ 301.488936][T12022] vlan2: entered allmulticast mode [ 301.519691][T12022] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 301.549899][T12022] mac80211_hwsim hwsim27 wlan1: left allmulticast mode [ 301.898356][T12043] wireguard: wg0: Could not create IPv4 socket [ 302.206611][ T5152] Bluetooth: hci3: command tx timeout [ 302.665651][T11793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 302.688184][T11793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 302.738941][T11793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 302.774445][T11793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 303.077655][T12082] input: syz0 as /devices/virtual/input/input37 [ 303.112699][T11793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.182897][T11793] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.248696][ T2932] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.255910][ T2932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.328110][ T2932] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.335510][ T2932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.442479][T11793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.568759][T11793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.632785][T11793] veth0_vlan: entered promiscuous mode [ 303.639894][T11793] veth1_vlan: entered promiscuous mode [ 303.661528][T11793] veth0_macvtap: entered promiscuous mode [ 303.664795][T11793] veth1_macvtap: entered promiscuous mode [ 303.679404][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.704500][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.718104][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.718130][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.718154][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.718171][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.718192][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.718209][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.720420][T11793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.747714][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.862514][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.862546][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.862567][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.862589][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.862606][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.862627][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.862643][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.863970][T11793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.890806][T11793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.890896][T11793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.890929][T11793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.890961][T11793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.198401][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.198438][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.247387][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.247422][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.440587][T12125] IPv6: addrconf: prefix option has invalid lifetime [ 304.440622][T12125] IPv6: addrconf: prefix option has invalid lifetime [ 306.319422][T12222] vcan0: entered allmulticast mode [ 309.007014][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2586'. [ 310.260274][T12379] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2604'. [ 311.188691][ T970] IPVS: starting estimator thread 0... [ 311.305263][T12400] IPVS: using max 17 ests per chain, 40800 per kthread [ 311.875240][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 312.036967][ T9] usb 4-1: config 0 has no interfaces? [ 312.050192][ T9] usb 4-1: New USB device found, idVendor=1ad7, idProduct=0001, bcdDevice=cc.19 [ 312.104853][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.151285][ T9] usb 4-1: Product: syz [ 312.183818][ T9] usb 4-1: Manufacturer: syz [ 312.215558][ T9] usb 4-1: SerialNumber: syz [ 312.256930][ T9] usb 4-1: config 0 descriptor?? [ 312.539613][ T8] usb 4-1: USB disconnect, device number 26 [ 315.645447][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 315.825225][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 315.860969][ T8] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 315.901573][ T8] usb 6-1: config 0 has an invalid interface number: 49 but max is 2 [ 315.985068][ T8] usb 6-1: config 0 has no interface number 1 [ 316.002016][ T8] usb 6-1: config 0 has no interface number 2 [ 316.018724][ T8] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 316.050781][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.203281][ T8] usb 6-1: config 0 descriptor?? [ 316.239844][ T8] qmi_wwan 6-1:0.0: probe with driver qmi_wwan failed with error -22 [ 316.475305][ T8] qcserial 6-1:0.49: Qualcomm USB modem converter detected [ 316.714863][ T8] usb 6-1: USB disconnect, device number 5 [ 316.724427][ T8] qcserial 6-1:0.49: device disconnected [ 317.249990][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.257411][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.425185][ T8] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 317.500155][T12570] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2668'. [ 317.595330][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 317.603326][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.638374][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.692468][ T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 317.702503][ T8] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 317.712402][ T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 317.722435][ T8] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 317.894545][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.903809][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.912144][ T8] usb 4-1: Product: syz [ 317.916604][ T8] usb 4-1: Manufacturer: syz [ 317.921252][ T8] usb 4-1: SerialNumber: syz [ 318.243697][ T8] cdc_ncm 4-1:1.0: bind() failure [ 318.255993][ T8] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 318.262851][ T8] cdc_ncm 4-1:1.1: bind() failure [ 318.318302][ T8] usb 4-1: USB disconnect, device number 27 [ 319.129737][T12638] binder: 12637:12638 ioctl 400c620e 20000040 returned -22 [ 319.335409][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 319.505140][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 319.517169][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.529103][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58880, setting to 1024 [ 319.563297][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.595058][ T8] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 319.640311][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.670964][ T8] usb 6-1: config 0 descriptor?? [ 319.695703][T12636] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 319.746322][ T8] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input38 [ 320.084395][ T9] usb 6-1: USB disconnect, device number 6 [ 320.393211][T12700] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2706'. [ 320.426410][T12700] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2706'. [ 320.838482][T12716] input: syz0 as /devices/virtual/input/input39 [ 322.438448][T12784] netlink: 'syz.5.2734': attribute type 6 has an invalid length. [ 323.825867][ T970] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 323.956007][T12865] netlink: 'syz.2.2760': attribute type 5 has an invalid length. [ 324.025155][ T970] usb 6-1: Using ep0 maxpacket: 8 [ 324.032864][ T970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.047273][ T970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.063356][ T970] usb 6-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 324.093072][ T970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.135509][ T970] usb 6-1: config 0 descriptor?? [ 324.541432][T12894] vlan2: entered promiscuous mode [ 324.547375][T12894] vlan2: entered allmulticast mode [ 324.554431][T12894] syz_tun: entered allmulticast mode [ 324.574770][T12894] syz_tun: entered promiscuous mode [ 324.584288][ T970] playstation 0003:054C:0CE6.0031: unknown main item tag 0x0 [ 324.592035][ T970] playstation 0003:054C:0CE6.0031: unknown main item tag 0x0 [ 324.605378][ T970] playstation 0003:054C:0CE6.0031: unknown main item tag 0x0 [ 324.612880][ T970] playstation 0003:054C:0CE6.0031: unknown main item tag 0x0 [ 324.643509][T12894] team0: Port device vlan2 added [ 324.648848][ T970] playstation 0003:054C:0CE6.0031: unknown main item tag 0x0 [ 324.657685][ T970] playstation 0003:054C:0CE6.0031: unknown main item tag 0x0 [ 324.725710][ T970] playstation 0003:054C:0CE6.0031: unknown main item tag 0x0 [ 324.743640][T12902] kvm: user requested TSC rate below hardware speed [ 324.752946][ T970] playstation 0003:054C:0CE6.0031: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.5-1/input0 [ 324.858144][ T970] playstation 0003:054C:0CE6.0031: Invalid reportID received, expected 9 got 0 [ 324.875379][ T970] playstation 0003:054C:0CE6.0031: Failed to retrieve DualSense pairing info: -22 [ 324.885505][ T970] playstation 0003:054C:0CE6.0031: Failed to get MAC address from DualSense [ 324.894339][ T970] playstation 0003:054C:0CE6.0031: Failed to create dualsense. [ 324.931525][ T970] playstation 0003:054C:0CE6.0031: probe with driver playstation failed with error -22 [ 325.082738][ T970] usb 6-1: USB disconnect, device number 7 [ 325.983732][T12942] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 326.016066][ T5896] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 326.195205][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 326.208041][ T5896] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 326.231098][ T5896] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 326.273334][ T5896] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 326.310858][ T5896] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 326.354209][ T5896] usb 6-1: config 0 interface 0 has no altsetting 0 [ 326.396060][ T5896] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 326.414324][ T5896] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 326.438375][ T5896] usb 6-1: Product: syz [ 326.442615][ T5896] usb 6-1: Manufacturer: syz [ 326.478078][ T5896] usb 6-1: SerialNumber: syz [ 326.494396][ T5896] usb 6-1: config 0 descriptor?? [ 326.524785][ T5896] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 326.557398][ T5896] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 326.779538][ T5896] usb 6-1: USB disconnect, device number 8 [ 326.785999][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 326.825503][ T5896] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 326.981623][T12986] input: syz0 as /devices/virtual/input/input40 [ 327.016578][T12935] ldusb: No device or device unplugged -19 [ 327.471293][T13016] input: syz0 as /devices/virtual/input/input41 [ 328.229647][T13047] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 329.906935][T13113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2834'. [ 330.819390][T13159] netlink: 'syz.5.2850': attribute type 11 has an invalid length. [ 331.570356][T13194] team0: Port device vlan2 added [ 331.659957][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.850506][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.086205][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.216956][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.225294][ T970] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 332.300971][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 332.316680][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 332.326655][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 332.336157][ T5893] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 332.359605][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 332.377237][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 332.396484][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.406481][ T970] usb 3-1: Using ep0 maxpacket: 32 [ 332.429392][ T970] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 332.496641][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 332.511104][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 332.557780][ T5893] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.592446][ T11] bridge_slave_1: left allmulticast mode [ 332.596089][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 332.616998][ T11] bridge_slave_1: left promiscuous mode [ 332.622780][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.633364][ T5893] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.675560][ T970] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 332.687772][ T11] bridge_slave_0: left allmulticast mode [ 332.693673][ T5893] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 332.700555][ T11] bridge_slave_0: left promiscuous mode [ 332.713405][ T5893] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 332.722991][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.732449][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.741278][ T5893] usb 4-1: Product: syz [ 332.747503][ T970] usb 3-1: config 0 descriptor?? [ 332.755432][T13214] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 332.765762][ T5893] usb 4-1: Manufacturer: syz [ 332.777664][ T970] hub 3-1:0.0: USB hub found [ 332.802705][ T5893] hub 4-1:4.0: USB hub found [ 333.155464][ T5893] hub 4-1:4.0: 2 ports detected [ 333.166834][ T970] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 333.184102][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.206857][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.216370][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.227605][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.241912][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 333.250326][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.380196][ T970] usbhid 3-1:0.0: can't add hid device: -71 [ 333.387268][ T970] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 333.459154][ T970] usb 3-1: USB disconnect, device number 25 [ 333.578662][ T5893] hub 4-1:4.0: set hub depth failed [ 333.594369][ T5893] usb 4-1: USB disconnect, device number 28 [ 333.783731][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.805792][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.824631][ T11] bond0 (unregistering): Released all slaves [ 334.308710][T13227] chnl_net:caif_netlink_parms(): no params data found [ 334.453078][ T5152] Bluetooth: hci2: command tx timeout [ 334.662173][T13244] chnl_net:caif_netlink_parms(): no params data found [ 334.686694][T13297] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 334.934305][T13227] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.944759][T13227] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.959138][T13227] bridge_slave_0: entered allmulticast mode [ 334.971060][T13227] bridge_slave_0: entered promiscuous mode [ 335.005522][T13227] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.012797][T13227] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.045982][T13227] bridge_slave_1: entered allmulticast mode [ 335.066993][T13227] bridge_slave_1: entered promiscuous mode [ 335.182249][T13322] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 335.189434][T13322] pim6reg0: linktype set to 0 [ 335.304051][T13227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.325833][ T5152] Bluetooth: hci3: command tx timeout [ 335.343244][T13227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.403117][ T11] hsr_slave_0: left promiscuous mode [ 335.438142][ T11] hsr_slave_1: left promiscuous mode [ 335.447360][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.455462][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.464614][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.494201][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.570784][ T11] veth1_macvtap: left promiscuous mode [ 335.590759][ T11] veth0_macvtap: left promiscuous mode [ 335.615579][ T11] veth1_vlan: left promiscuous mode [ 335.631217][ T11] veth0_vlan: left promiscuous mode [ 336.528493][ T5152] Bluetooth: hci2: command tx timeout [ 336.710425][ T11] team0 (unregistering): Port device team_slave_1 removed [ 336.759129][ T11] team0 (unregistering): Port device team_slave_0 removed [ 337.231841][ T11] vcan0 (unregistering): left allmulticast mode [ 337.299693][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2914'. [ 337.472351][ T5152] Bluetooth: hci3: command tx timeout [ 337.589106][T13227] team0: Port device team_slave_0 added [ 337.610556][T13227] team0: Port device team_slave_1 added [ 337.635760][T13244] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.642940][T13244] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.687038][T13244] bridge_slave_0: entered allmulticast mode [ 337.694258][T13244] bridge_slave_0: entered promiscuous mode [ 337.733563][T13244] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.752472][T13244] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.786191][T13244] bridge_slave_1: entered allmulticast mode [ 337.796856][T13244] bridge_slave_1: entered promiscuous mode [ 337.953502][T13244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.973593][T13227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.001302][T13227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.031534][T13227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.046866][T13227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.053958][T13227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.080776][T13227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.110417][T13409] tap0: tun_chr_ioctl cmd 2147767521 [ 338.146706][T13244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.328690][T13244] team0: Port device team_slave_0 added [ 338.360982][T13244] team0: Port device team_slave_1 added [ 338.495817][T13227] hsr_slave_0: entered promiscuous mode [ 338.513943][T13227] hsr_slave_1: entered promiscuous mode [ 338.530079][T13227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.565507][T13227] Cannot create hsr debugfs directory [ 338.615213][ T5152] Bluetooth: hci2: command tx timeout [ 338.646283][T13244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.655855][T13244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.734354][T13244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.752375][T13244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.760474][T13244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.791477][T13244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.002056][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.264090][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.292143][T13448] kvm: kvm [13447]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0xe55 [ 339.324563][T13244] hsr_slave_0: entered promiscuous mode [ 339.358391][T13244] hsr_slave_1: entered promiscuous mode [ 339.381147][T13244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.399646][T13244] Cannot create hsr debugfs directory [ 339.485193][ T5152] Bluetooth: hci3: command tx timeout [ 339.494152][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.745864][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.399869][ T11] bridge_slave_1: left allmulticast mode [ 340.409714][ T11] bridge_slave_1: left promiscuous mode [ 340.430561][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.460123][ T11] bridge_slave_0: left allmulticast mode [ 340.480983][ T11] bridge_slave_0: left promiscuous mode [ 340.495981][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.515213][ T46] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 340.685457][ T5152] Bluetooth: hci2: command tx timeout [ 340.704235][ T46] usb 3-1: config 0 interface 0 has no altsetting 0 [ 340.714095][ T46] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 340.748938][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.795806][ T46] usb 3-1: config 0 descriptor?? [ 341.324359][ T11] team0: Port device vlan2 removed [ 341.594511][ T5152] Bluetooth: hci3: command tx timeout [ 341.696985][ T46] video4linux radio48: keene_cmd_main failed (-71) [ 341.724592][ T46] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 341.761651][ T46] usb 3-1: USB disconnect, device number 26 [ 342.135091][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.161293][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.184619][ T11] bond0 (unregistering): Released all slaves [ 342.253298][T13498] netlink: 'syz.3.2941': attribute type 2 has an invalid length. [ 342.276957][T13498] netlink: 'syz.3.2941': attribute type 1 has an invalid length. [ 342.546510][T13563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2951'. [ 342.964555][T13584] vxcan1: tx address claim with dest, not broadcast [ 343.015949][T13583] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.138357][T13227] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 343.444664][T13227] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 343.458537][T13227] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 343.656011][T13227] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 343.692818][ T11] hsr_slave_0: left promiscuous mode [ 343.707426][ T11] hsr_slave_1: left promiscuous mode [ 343.736657][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.756408][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.786570][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.824346][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.937586][ T11] veth1_macvtap: left promiscuous mode [ 343.943219][ T11] veth0_macvtap: left promiscuous mode [ 343.951491][ T11] veth1_vlan: left promiscuous mode [ 343.975488][ T11] veth0_vlan: left promiscuous mode [ 344.279588][T13641] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2972'. [ 344.922405][ T11] team0 (unregistering): Port device team_slave_1 removed [ 344.968915][ T11] team0 (unregistering): Port device team_slave_0 removed [ 345.901460][T13227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.002855][T13227] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.081786][ T2932] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.088985][ T2932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.111741][ T2932] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.118940][ T2932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.312301][T13244] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 346.342812][T13244] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 346.396651][T13244] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 346.422202][T13227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.456799][T13244] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 346.656671][T13227] veth0_vlan: entered promiscuous mode [ 346.747254][T13227] veth1_vlan: entered promiscuous mode [ 346.814738][T13244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.838613][T13702] af_packet: tpacket_rcv: packet too big, clamped from 65003 to 3966. macoff=82 [ 346.853166][T13227] veth0_macvtap: entered promiscuous mode [ 346.881481][T13244] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.892949][ T709] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.900110][ T709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.979795][T13227] veth1_macvtap: entered promiscuous mode [ 347.023962][ T709] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.031193][ T709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.514302][T13715] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 347.976573][ T5894] usb 4-1: [UEAGLE-ATM] firmware is not available [ 349.820579][ T29] audit: type=1326 audit(1729938602.702:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13750 comm="syz.3.3009" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f098ef7e719 code=0x0 [ 350.230405][T13227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.269549][T13227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.300060][T13227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.333945][T13754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 350.341091][T13227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.382006][T13227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.413456][T13227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.477080][T13227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.534715][T13227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.575018][T13227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.612786][T13227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.685438][T13227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.728004][T13227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.766709][T13227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.806220][T13227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.867480][T13227] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.897448][T13227] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.924769][T13227] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.984628][T13227] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.167429][T13244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.493285][T13244] veth0_vlan: entered promiscuous mode [ 351.566569][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.582218][T13244] veth1_vlan: entered promiscuous mode [ 351.621169][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.862202][T13244] veth0_macvtap: entered promiscuous mode [ 351.934298][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.934328][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.941145][T13244] veth1_macvtap: entered promiscuous mode [ 352.021719][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.021750][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.021766][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.021784][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.021799][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.021817][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.021833][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.021849][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.023167][T13244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.096261][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.096289][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.096305][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.096323][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.096337][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.096354][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.096369][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.096385][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.097589][T13244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.128133][T13244] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.128173][T13244] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.128204][T13244] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.128232][T13244] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.246494][T13775] trusted_key: encrypted_key: keyword 'A§date' not recognized [ 352.663264][T10820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.663292][T10820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.938769][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.938799][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.088251][ T5894] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 355.316662][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 355.364415][ T5894] usb 3-1: config 0 has an invalid interface number: 137 but max is 0 [ 355.403895][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.483007][ T5894] usb 3-1: config 0 has no interface number 0 [ 355.521734][ T5894] usb 3-1: config 0 interface 137 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 355.600762][ T5894] usb 3-1: config 0 interface 137 altsetting 0 endpoint 0x3 has invalid maxpacket 959, setting to 64 [ 355.655484][ T5894] usb 3-1: config 0 interface 137 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 355.715688][ T5894] usb 3-1: config 0 interface 137 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 12 [ 355.786139][ T5894] usb 3-1: New USB device found, idVendor=06f8, idProduct=3009, bcdDevice=3c.93 [ 355.823479][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.856910][ T5894] usb 3-1: Product: syz [ 355.887141][ T5894] usb 3-1: Manufacturer: syz [ 355.911361][ T5894] usb 3-1: SerialNumber: syz [ 355.977288][ T5894] usb 3-1: config 0 descriptor?? [ 356.006387][ T5894] gspca_main: gspca_pac7302-2.14.0 probing 06f8:3009 [ 356.859669][ T5894] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 356.888692][ T5894] gspca_pac7302 3-1:0.137: probe with driver gspca_pac7302 failed with error -71 [ 356.909109][ T5894] usb 3-1: USB disconnect, device number 27 [ 366.195478][ T8] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 366.365139][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 366.380974][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.403567][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.424739][ T8] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 366.434978][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.456605][ T8] usb 3-1: config 0 descriptor?? [ 366.960612][ T8] smartjoyplus 0003:6666:8804.0032: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.2-1/input0 [ 366.988702][ T8] smartjoyplus 0003:6666:8804.0032: Force feedback for SmartJoy PLUS PS2/USB adapter [ 367.201798][ T8] usb 3-1: USB disconnect, device number 28 [ 367.777068][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.139003][T13884] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3064'. [ 368.230490][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.240579][T13884] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.528283][ T5847] Bluetooth: hci6: command 0x0406 tx timeout [ 371.255574][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.525512][ T5894] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 371.753062][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 371.820453][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 371.905111][ T5894] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.ec [ 371.982668][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.067272][ T5894] usb 4-1: config 0 descriptor?? [ 372.128177][ T5894] ttusb_dec_send_command: command bulk message failed: error -22 [ 372.160738][T13949] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 372.220862][ T5894] ttusb-dec 4-1:0.0: probe with driver ttusb-dec failed with error -22 [ 372.360945][ T5894] usb 4-1: USB disconnect, device number 29 [ 372.612200][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 372.631363][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 372.642382][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 372.654605][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 372.662447][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 372.670604][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 373.462349][T13971] pimreg4: entered allmulticast mode [ 373.509776][T13969] pimreg4: left allmulticast mode [ 374.577022][T13959] chnl_net:caif_netlink_parms(): no params data found [ 374.777545][ T5847] Bluetooth: hci2: command tx timeout [ 375.195854][T13959] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.294579][T13959] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.365239][T13959] bridge_slave_0: entered allmulticast mode [ 375.415438][T13959] bridge_slave_0: entered promiscuous mode [ 375.466122][T13959] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.474010][T13959] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.543673][T13959] bridge_slave_1: entered allmulticast mode [ 375.588601][T13959] bridge_slave_1: entered promiscuous mode [ 375.703716][T14012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3106'. [ 375.765159][T14014] netlink: 47 bytes leftover after parsing attributes in process `syz.8.3107'. [ 375.988852][T13959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.138726][T13959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.534700][T13959] team0: Port device team_slave_0 added [ 376.652128][T13959] team0: Port device team_slave_1 added [ 376.855620][ T5847] Bluetooth: hci2: command tx timeout [ 377.198315][T13959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.288916][T13959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.495003][T13959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.593208][T13959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.663584][T13959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.689699][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.842355][T13959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.938196][T14042] bridge0: entered promiscuous mode [ 378.125863][T14035] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 378.715996][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.722592][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.926293][ T5847] Bluetooth: hci2: command tx timeout [ 379.734646][ T29] audit: type=1326 audit(1729938632.612:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14077 comm="syz.3.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098ef7e719 code=0x7ffc0000 [ 379.830341][ T29] audit: type=1326 audit(1729938632.652:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14077 comm="syz.3.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098ef7e719 code=0x7ffc0000 [ 379.936167][ T29] audit: type=1326 audit(1729938632.652:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14077 comm="syz.3.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f098ef7e719 code=0x7ffc0000 [ 380.049463][ T29] audit: type=1326 audit(1729938632.652:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14077 comm="syz.3.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098ef7e719 code=0x7ffc0000 [ 380.171820][ T29] audit: type=1326 audit(1729938632.652:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14077 comm="syz.3.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098ef7e719 code=0x7ffc0000 [ 380.269879][ T29] audit: type=1326 audit(1729938632.652:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14077 comm="syz.3.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f098ef7e719 code=0x7ffc0000 [ 380.426541][ T29] audit: type=1326 audit(1729938632.652:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14077 comm="syz.3.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f098ef756e7 code=0x7ffc0000 [ 380.520805][ T29] audit: type=1326 audit(1729938632.652:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14077 comm="syz.3.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f098ef1a099 code=0x7ffc0000 [ 380.650088][ T29] audit: type=1326 audit(1729938632.652:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14077 comm="syz.3.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f098ef756e7 code=0x7ffc0000 [ 380.762603][ T29] audit: type=1326 audit(1729938632.652:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14077 comm="syz.3.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f098ef1a099 code=0x7ffc0000 [ 381.006462][ T5847] Bluetooth: hci2: command tx timeout [ 383.315647][T14040] bridge0: left promiscuous mode [ 383.322510][T14050] netem: change failed [ 383.764388][T14124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3128'. [ 383.909586][ T52] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.038933][T13959] hsr_slave_0: entered promiscuous mode [ 384.092095][T13959] hsr_slave_1: entered promiscuous mode [ 385.337728][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 385.352900][ T5152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 385.370843][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 385.392057][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 385.400246][ T5152] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 385.408090][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 385.911829][ T52] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.164077][T14141] syz.2.3133 (14141): drop_caches: 2 [ 386.349801][ T52] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.703862][ T52] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.725512][ T5894] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 386.895399][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 386.948007][ T5894] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 386.995329][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 387.054407][ T5894] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 387.110993][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 387.151337][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 387.249582][ T5894] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 387.263513][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 387.316253][ T5894] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 387.365452][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 387.406068][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 387.452562][ T5894] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 387.468026][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 387.485699][ T5152] Bluetooth: hci4: command tx timeout [ 387.521825][ T5894] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 387.551299][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 387.593672][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 387.635735][ T5894] usb 3-1: string descriptor 0 read error: -22 [ 387.643835][ T5894] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 387.684331][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.745300][ T5894] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 388.109520][ T5894] usb 3-1: USB disconnect, device number 29 [ 389.576672][ T5152] Bluetooth: hci4: command tx timeout [ 391.645783][ T5152] Bluetooth: hci4: command tx timeout [ 400.358292][ T5152] Bluetooth: hci4: command tx timeout [ 406.368337][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 441.080439][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.099235][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 471.370818][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 501.270054][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 503.903767][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.299505][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.128055][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 561.722094][ T30] INFO: task kworker/u8:3:52 blocked for more than 168 seconds. [ 561.736670][ T30] Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 561.744361][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 566.005831][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.012185][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.021164][ T30] task:kworker/u8:3 state:D stack:18928 pid:52 tgid:52 ppid:2 flags:0x00004000 [ 566.115629][ T30] Workqueue: netns cleanup_net [ 566.120530][ T30] Call Trace: [ 566.123842][ T30] [ 566.165500][ T30] __schedule+0x18af/0x4bd0 [ 566.170113][ T30] ? __pfx___schedule+0x10/0x10 [ 566.215499][ T30] ? __pfx_lock_release+0x10/0x10 [ 566.220627][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 566.275532][ T30] ? kthread_data+0x52/0xd0 [ 566.280490][ T30] ? schedule+0x90/0x320 [ 566.284797][ T30] ? wq_worker_sleeping+0x66/0x240 [ 566.360808][ T30] ? schedule+0x90/0x320 [ 567.789179][ T30] schedule+0x14b/0x320 [ 567.793451][ T30] schedule_preempt_disabled+0x13/0x30 [ 567.799761][ T30] __mutex_lock+0x6a7/0xd70 [ 567.804591][ T30] ? __mutex_lock+0x52a/0xd70 [ 567.810080][ T30] ? cleanup_net+0x6af/0xcc0 [ 567.814731][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 567.820910][ T30] ? bpf_prog_array_free+0x34/0x40 [ 567.826982][ T30] cleanup_net+0x6af/0xcc0 [ 567.831450][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 567.837129][ T30] ? process_scheduled_works+0x976/0x1850 [ 567.842905][ T30] process_scheduled_works+0xa63/0x1850 [ 567.849212][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 567.855963][ T30] ? assign_work+0x364/0x3d0 [ 567.860618][ T30] worker_thread+0x870/0xd30 [ 567.865883][ T30] ? __kthread_parkme+0x169/0x1d0 [ 567.870974][ T30] ? __pfx_worker_thread+0x10/0x10 [ 567.876766][ T30] kthread+0x2f0/0x390 [ 567.880879][ T30] ? __pfx_worker_thread+0x10/0x10 [ 567.886631][ T30] ? __pfx_kthread+0x10/0x10 [ 567.891257][ T30] ret_from_fork+0x4b/0x80 [ 567.896377][ T30] ? __pfx_kthread+0x10/0x10 [ 567.901012][ T30] ret_from_fork_asm+0x1a/0x30 [ 567.906484][ T30] [ 567.909561][ T30] INFO: task kworker/u8:5:709 blocked for more than 174 seconds. [ 567.918146][ T30] Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 567.926599][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 567.935976][ T30] task:kworker/u8:5 state:D stack:20472 pid:709 tgid:709 ppid:2 flags:0x00004000 [ 567.946840][ T30] Workqueue: events_unbound linkwatch_event [ 567.952790][ T30] Call Trace: [ 567.956702][ T30] [ 567.959669][ T30] __schedule+0x18af/0x4bd0 [ 567.964235][ T30] ? __pfx___schedule+0x10/0x10 [ 567.969788][ T30] ? __pfx_lock_release+0x10/0x10 [ 567.975484][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 567.980994][ T30] ? kthread_data+0x52/0xd0 [ 567.986118][ T30] ? schedule+0x90/0x320 [ 567.990395][ T30] ? wq_worker_sleeping+0x66/0x240 [ 567.995710][ T30] ? schedule+0x90/0x320 [ 567.999994][ T30] schedule+0x14b/0x320 [ 568.004184][ T30] schedule_preempt_disabled+0x13/0x30 [ 568.009737][ T30] __mutex_lock+0x6a7/0xd70 [ 568.014283][ T30] ? __mutex_lock+0x52a/0xd70 [ 568.019066][ T30] ? linkwatch_event+0xe/0x60 [ 568.024157][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 568.029937][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 568.035970][ T30] ? process_scheduled_works+0x976/0x1850 [ 568.041756][ T30] linkwatch_event+0xe/0x60 [ 568.046909][ T30] process_scheduled_works+0xa63/0x1850 [ 568.052524][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 568.059186][ T30] ? assign_work+0x364/0x3d0 [ 568.063842][ T30] worker_thread+0x870/0xd30 [ 568.069091][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 568.075650][ T30] ? __kthread_parkme+0x169/0x1d0 [ 568.080756][ T30] ? __pfx_worker_thread+0x10/0x10 [ 568.086656][ T30] kthread+0x2f0/0x390 [ 568.090774][ T30] ? __pfx_worker_thread+0x10/0x10 [ 568.096526][ T30] ? __pfx_kthread+0x10/0x10 [ 568.101162][ T30] ret_from_fork+0x4b/0x80 [ 568.106241][ T30] ? __pfx_kthread+0x10/0x10 [ 568.110874][ T30] ret_from_fork_asm+0x1a/0x30 [ 568.116300][ T30] [ 568.119415][ T30] INFO: task dhcpcd:5508 blocked for more than 174 seconds. [ 568.127747][ T30] Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 568.136510][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 568.145897][ T30] task:dhcpcd state:D stack:20352 pid:5508 tgid:5508 ppid:5507 flags:0x00000002 [ 568.156722][ T30] Call Trace: [ 568.160044][ T30] [ 568.163012][ T30] __schedule+0x18af/0x4bd0 [ 568.168186][ T30] ? __pfx___schedule+0x10/0x10 [ 568.173092][ T30] ? __pfx_lock_release+0x10/0x10 [ 568.178820][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 568.184331][ T30] ? schedule+0x90/0x320 [ 568.189195][ T30] schedule+0x14b/0x320 [ 568.193386][ T30] schedule_preempt_disabled+0x13/0x30 [ 568.199535][ T30] __mutex_lock+0x6a7/0xd70 [ 568.204088][ T30] ? __mutex_lock+0x52a/0xd70 [ 568.209445][ T30] ? rtnl_dumpit+0x99/0x200 [ 568.213997][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 568.219694][ T30] ? __alloc_skb+0x28f/0x440 [ 568.224321][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 568.230195][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 568.235975][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 568.241393][ T30] rtnl_dumpit+0x99/0x200 [ 568.246389][ T30] netlink_dump+0x647/0xd80 [ 568.250939][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 568.256620][ T30] ? netlink_recvmsg+0x60a/0x11d0 [ 568.261695][ T30] ? kmem_cache_free+0x1a2/0x420 [ 568.267264][ T30] ? netlink_recvmsg+0x60a/0x11d0 [ 568.272341][ T30] netlink_recvmsg+0x6bb/0x11d0 [ 568.277907][ T30] ? __pfx_netlink_recvmsg+0x10/0x10 [ 568.283260][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 568.288791][ T30] ? __might_fault+0xaa/0x120 [ 568.293503][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 568.299178][ T30] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 568.304511][ T30] ? __pfx_netlink_recvmsg+0x10/0x10 [ 568.310017][ T30] sock_recvmsg+0x22f/0x280 [ 568.314577][ T30] ____sys_recvmsg+0x1c6/0x480 [ 568.319488][ T30] ? __pfx_____sys_recvmsg+0x10/0x10 [ 568.324918][ T30] __sys_recvmsg+0x2e6/0x3d0 [ 568.329956][ T30] ? __pfx_lock_release+0x10/0x10 [ 568.335677][ T30] ? __pfx___sys_recvmsg+0x10/0x10 [ 568.340865][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 568.347876][ T30] ? do_syscall_64+0x100/0x230 [ 568.352688][ T30] ? do_syscall_64+0xb6/0x230 [ 568.358100][ T30] do_syscall_64+0xf3/0x230 [ 568.362651][ T30] ? clear_bhb_loop+0x35/0x90 [ 568.368051][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.373996][ T30] RIP: 0033:0x7fb589c2691e [ 568.379115][ T30] RSP: 002b:00007fff97753d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 568.388300][ T30] RAX: ffffffffffffffda RBX: 00007fff97754e90 RCX: 00007fb589c2691e [ 568.396874][ T30] RDX: 0000000000000000 RSI: 00007fff97754db0 RDI: 0000000000000016 [ 568.405435][ T30] RBP: 00007fff97754e20 R08: 0000000000000000 R09: 0000000000040000 [ 568.413448][ T30] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000f00 [ 568.422086][ T30] R13: 00007fff97754d94 R14: 00007fff97754db0 R15: 00007fff97754da0 [ 568.430923][ T30] [ 568.434000][ T30] INFO: task syz-executor:13227 blocked for more than 175 seconds. [ 568.442718][ T30] Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 568.451006][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 568.460369][ T30] task:syz-executor state:D stack:20992 pid:13227 tgid:13227 ppid:1 flags:0x00004002 [ 568.471218][ T30] Call Trace: [ 568.474526][ T30] [ 568.478141][ T30] __schedule+0x18af/0x4bd0 [ 568.482723][ T30] ? __pfx___schedule+0x10/0x10 [ 568.488212][ T30] ? __pfx_lock_release+0x10/0x10 [ 568.493283][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 568.499411][ T30] ? schedule+0x90/0x320 [ 568.503694][ T30] schedule+0x14b/0x320 [ 568.508561][ T30] schedule_preempt_disabled+0x13/0x30 [ 568.514063][ T30] __mutex_lock+0x6a7/0xd70 [ 568.519260][ T30] ? __mutex_lock+0x52a/0xd70 [ 568.523979][ T30] ? netdev_run_todo+0x89e/0x1000 [ 568.529701][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 568.535033][ T30] ? __init_swait_queue_head+0xae/0x150 [ 568.540671][ T30] netdev_run_todo+0x89e/0x1000 [ 568.546420][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 568.551740][ T30] ? netdev_state_change+0xa8/0x1a0 [ 568.557633][ T30] ? __pfx_netdev_state_change+0x10/0x10 [ 568.563325][ T30] ? tun_chr_close+0x105/0x1b0 [ 568.568741][ T30] ? tun_chr_close+0x105/0x1b0 [ 568.573551][ T30] tun_chr_close+0x137/0x1b0 [ 568.578828][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 568.583983][ T30] __fput+0x23f/0x880 [ 568.588669][ T30] task_work_run+0x24f/0x310 [ 568.593297][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 568.599225][ T30] ? __pfx_task_work_run+0x10/0x10 [ 568.604377][ T30] ? do_exit+0xa2a/0x28e0 [ 568.609608][ T30] ? kmem_cache_free+0x1a2/0x420 [ 568.614591][ T30] ? do_exit+0xa2a/0x28e0 [ 568.619565][ T30] do_exit+0xa2f/0x28e0 [ 568.623767][ T30] ? __pfx_do_exit+0x10/0x10 [ 568.628523][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 568.634985][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 568.641358][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 568.646706][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 568.651950][ T30] do_group_exit+0x207/0x2c0 [ 568.657249][ T30] __x64_sys_exit_group+0x3f/0x40 [ 568.662312][ T30] x64_sys_call+0x2634/0x2640 [ 568.667662][ T30] do_syscall_64+0xf3/0x230 [ 568.672232][ T30] ? clear_bhb_loop+0x35/0x90 [ 568.677569][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.683520][ T30] RIP: 0033:0x7f0e8fb7e719 [ 568.688557][ T30] RSP: 002b:00007f0e8fe5dac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 568.697622][ T30] RAX: ffffffffffffffda RBX: 00007f0e8fbf123e RCX: 00007f0e8fb7e719 [ 568.706272][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 568.714274][ T30] RBP: 0000000000000001 R08: 00007f0e8fe5b867 R09: 00007f0e8fe5ed80 [ 568.722898][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0e8fe5ed80 [ 568.731542][ T30] R13: 00007f0e8fbf11cc R14: 0000555563c9b4a8 R15: 00007f0e8fe5fe40 [ 568.740386][ T30] [ 568.743446][ T30] INFO: task syz-executor:14145 blocked for more than 175 seconds. [ 568.752167][ T30] Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 568.760441][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 568.769879][ T30] task:syz-executor state:D stack:21728 pid:14145 tgid:14145 ppid:14129 flags:0x00000000 [ 568.780720][ T30] Call Trace: [ 568.784031][ T30] [ 568.787581][ T30] __schedule+0x18af/0x4bd0 [ 568.792159][ T30] ? __pfx___schedule+0x10/0x10 [ 568.797692][ T30] ? __pfx_lock_release+0x10/0x10 [ 568.802763][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 568.808866][ T30] ? schedule+0x90/0x320 [ 568.813149][ T30] schedule+0x14b/0x320 [ 568.817937][ T30] schedule_preempt_disabled+0x13/0x30 [ 568.823435][ T30] __mutex_lock+0x6a7/0xd70 [ 568.828577][ T30] ? __mutex_lock+0x52a/0xd70 [ 568.833302][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 568.839093][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 568.844175][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 568.849995][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 568.855985][ T30] ? __lock_acquire+0x1384/0x2050 [ 568.861070][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 568.867232][ T30] netlink_rcv_skb+0x1e3/0x430 [ 568.872053][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 568.878181][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 568.883523][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 568.889374][ T30] netlink_unicast+0x7f6/0x990 [ 568.894197][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 568.900155][ T30] ? __virt_addr_valid+0x183/0x530 [ 568.905915][ T30] ? __check_object_size+0x48e/0x900 [ 568.911248][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 568.916698][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.922029][ T30] ? __might_fault+0xaa/0x120 [ 568.927412][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 568.932400][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.937868][ T30] __sock_sendmsg+0x221/0x270 [ 568.942951][ T30] __sys_sendto+0x39b/0x4f0 [ 568.947609][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 568.952680][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 568.957956][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 568.964064][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 568.970732][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 568.977749][ T30] __x64_sys_sendto+0xde/0x100 [ 568.982562][ T30] do_syscall_64+0xf3/0x230 [ 568.987726][ T30] ? clear_bhb_loop+0x35/0x90 [ 568.992449][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.999048][ T30] RIP: 0033:0x7f3dc53805ac [ 569.003519][ T30] RSP: 002b:00007f3dc565f6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 569.012715][ T30] RAX: ffffffffffffffda RBX: 00007f3dc6064620 RCX: 00007f3dc53805ac [ 569.021360][ T30] RDX: 000000000000003c RSI: 00007f3dc6064670 RDI: 0000000000000003 [ 569.030127][ T30] RBP: 0000000000000000 R08: 00007f3dc565f704 R09: 000000000000000c [ 569.038751][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 569.047698][ T30] R13: 0000000000000000 R14: 00007f3dc6064670 R15: 0000000000000000 [ 569.056621][ T30] [ 569.059690][ T30] INFO: task syz.1.3150:14195 blocked for more than 175 seconds. [ 569.068050][ T30] Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 569.076309][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 569.085637][ T30] task:syz.1.3150 state:D stack:25984 pid:14195 tgid:14194 ppid:13244 flags:0x00000004 [ 569.096458][ T30] Call Trace: [ 569.099769][ T30] [ 569.102745][ T30] __schedule+0x18af/0x4bd0 [ 569.107928][ T30] ? __pfx___schedule+0x10/0x10 [ 569.112826][ T30] ? __pfx_lock_release+0x10/0x10 [ 569.118526][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 569.124048][ T30] ? schedule+0x90/0x320 [ 569.128973][ T30] schedule+0x14b/0x320 [ 569.133169][ T30] schedule_preempt_disabled+0x13/0x30 [ 569.139296][ T30] __mutex_lock+0x6a7/0xd70 [ 569.143857][ T30] ? __mutex_lock+0x52a/0xd70 [ 569.149424][ T30] ? nl80211_pre_doit+0x5f/0x8b0 [ 569.154417][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 569.160333][ T30] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 569.167380][ T30] ? __nla_parse+0x40/0x60 [ 569.171846][ T30] nl80211_pre_doit+0x5f/0x8b0 [ 569.177384][ T30] genl_rcv_msg+0xaaa/0xec0 [ 569.181947][ T30] ? mark_lock+0x9a/0x360 [ 569.186977][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 569.192077][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 569.197754][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 569.203175][ T30] ? __pfx_nl80211_remove_link_station+0x10/0x10 [ 569.210204][ T30] ? __pfx_nl80211_post_doit+0x10/0x10 [ 569.216324][ T30] ? __pfx___might_resched+0x10/0x10 [ 569.221663][ T30] netlink_rcv_skb+0x1e3/0x430 [ 569.227123][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 569.232203][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 569.238238][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 569.243758][ T30] genl_rcv+0x28/0x40 [ 569.248068][ T30] netlink_unicast+0x7f6/0x990 [ 569.253352][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 569.258733][ T30] ? __virt_addr_valid+0x183/0x530 [ 569.263890][ T30] ? __check_object_size+0x48e/0x900 [ 569.269305][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 569.274128][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.280110][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 569.285756][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.291086][ T30] __sock_sendmsg+0x221/0x270 [ 569.296410][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 569.301226][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 569.307193][ T30] __sys_sendmsg+0x292/0x380 [ 569.311832][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 569.317620][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 569.323995][ T30] ? do_syscall_64+0x100/0x230 [ 569.329420][ T30] ? do_syscall_64+0xb6/0x230 [ 569.334138][ T30] do_syscall_64+0xf3/0x230 [ 569.339308][ T30] ? clear_bhb_loop+0x35/0x90 [ 569.344053][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.350611][ T30] RIP: 0033:0x7fa14937e719 [ 569.357824][ T30] RSP: 002b:00007fa14a19d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.367151][ T30] RAX: ffffffffffffffda RBX: 00007fa149535f80 RCX: 00007fa14937e719 [ 569.375798][ T30] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 569.383826][ T30] RBP: 00007fa1493f132e R08: 0000000000000000 R09: 0000000000000000 [ 569.392451][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.401079][ T30] R13: 0000000000000000 R14: 00007fa149535f80 R15: 00007fa14965fa28 [ 569.409714][ T30] [ 569.412795][ T30] [ 569.412795][ T30] Showing all locks held in the system: [ 569.421156][ T30] 3 locks held by kworker/0:1/9: [ 569.426734][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 569.438430][ T30] #1: ffffc900000e7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 569.450134][ T30] #2: ffffffff8fcd31c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 569.461431][ T30] 1 lock held by khungtaskd/30: [ 569.467166][ T30] #0: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 569.477708][ T30] 4 locks held by kworker/u8:3/52: [ 569.482849][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 569.494444][ T30] #1: ffffc90000bd7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 569.505752][ T30] #2: ffffffff8fcc66d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 569.515869][ T30] #3: ffffffff8fcd31c8 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0 [ 569.525560][ T30] 3 locks held by kworker/u8:5/709: [ 569.530815][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 569.543287][ T30] #1: ffffc900032ffd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 569.555038][ T30] #2: ffffffff8fcd31c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 569.564501][ T30] 2 locks held by kworker/u8:7/2932: [ 569.570453][ T30] 3 locks held by kworker/R-ipv6_/3161: [ 569.576177][ T30] #0: ffff88814d067148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 569.587942][ T30] #1: ffffc9000ba0fc80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 569.601770][ T30] #2: ffffffff8fcd31c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 569.611955][ T30] 5 locks held by kworker/u9:1/5152: [ 569.617902][ T30] #0: ffff888022bce948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 569.629418][ T30] #1: ffffc90010247d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 569.642612][ T30] #2: ffff888069e6cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 569.653293][ T30] #3: ffff888069e6c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 569.663867][ T30] #4: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 569.675685][ T30] 3 locks held by syslogd/5196: [ 569.680569][ T30] 2 locks held by dhcpcd/5508: [ 569.685948][ T30] #0: ffff88807aec56c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: netlink_dump+0xcb/0xd80 [ 569.696165][ T30] #1: ffffffff8fcd31c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 569.705626][ T30] 2 locks held by getty/5604: [ 569.710326][ T30] #0: ffff8880356ea0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 569.720778][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 569.731567][ T30] 6 locks held by kworker/u9:5/5850: [ 569.737512][ T30] #0: ffff88805ec75948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 569.748982][ T30] #1: ffffc90004317d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 569.762442][ T30] #2: ffff88807c31cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 569.773146][ T30] #3: ffff88807c31c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 569.783496][ T30] #4: ffffffff8fe3fb28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 569.793919][ T30] #5: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 569.805575][ T30] 1 lock held by syz-executor/5858: [ 569.810810][ T30] 3 locks held by kworker/0:4/5894: [ 569.816625][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 569.829721][ T30] #1: ffffc900045f7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 569.841513][ T30] #2: ffffffff8fcd31c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 569.851860][ T30] 3 locks held by kworker/1:4/5896: [ 569.857728][ T30] 3 locks held by kworker/1:7/5909: [ 569.863496][ T30] 2 locks held by syz-executor/11398: [ 569.869571][ T30] 1 lock held by syz-executor/13227: [ 569.875500][ T30] #0: ffffffff8fcd31c8 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x89e/0x1000 [ 569.885541][ T30] 8 locks held by syz-executor/13959: [ 569.890963][ T30] 1 lock held by syz-executor/14145: [ 569.896890][ T30] #0: ffffffff8fcd31c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 569.906526][ T30] 2 locks held by syz.1.3150/14195: [ 569.911752][ T30] #0: ffffffff8fd38f70 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 569.920109][ T30] #1: ffffffff8fcd31c8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 569.929531][ T30] 3 locks held by kworker/u8:10/14216: [ 569.935886][ T30] 2 locks held by kworker/u8:11/14217: [ 569.941371][ T30] 2 locks held by syz-executor/14218: [ 569.947369][ T30] 3 locks held by udevd/14221: [ 569.952247][ T30] [ 569.954589][ T30] ============================================= [ 569.954589][ T30] [ 569.963628][ T30] NMI backtrace for cpu 1 [ 569.968013][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 569.978541][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 569.988625][ T30] Call Trace: [ 569.991926][ T30] [ 569.994882][ T30] dump_stack_lvl+0x241/0x360 [ 569.999615][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 570.004854][ T30] ? __pfx__printk+0x10/0x10 [ 570.009487][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 570.014481][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 570.019996][ T30] ? _printk+0xd5/0x120 [ 570.024193][ T30] ? __pfx__printk+0x10/0x10 [ 570.028824][ T30] ? __wake_up_klogd+0xcc/0x110 [ 570.033719][ T30] ? __pfx__printk+0x10/0x10 [ 570.038353][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 570.043421][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 570.049438][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 570.055469][ T30] watchdog+0xff4/0x1040 [ 570.059762][ T30] ? watchdog+0x1ea/0x1040 [ 570.064222][ T30] ? __pfx_watchdog+0x10/0x10 [ 570.068938][ T30] kthread+0x2f0/0x390 [ 570.073067][ T30] ? __pfx_watchdog+0x10/0x10 [ 570.077809][ T30] ? __pfx_kthread+0x10/0x10 [ 570.082439][ T30] ret_from_fork+0x4b/0x80 [ 570.086895][ T30] ? __pfx_kthread+0x10/0x10 [ 570.091515][ T30] ret_from_fork_asm+0x1a/0x30 [ 570.096333][ T30] [ 570.100798][ T30] Sending NMI from CPU 1 to CPUs 0: [ 570.106916][ C0] NMI backtrace for cpu 0 [ 570.106930][ C0] CPU: 0 UID: 0 PID: 14218 Comm: syz-executor Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 570.106952][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 570.106963][ C0] RIP: 0010:do_raw_spin_lock+0x16f/0x370 [ 570.106992][ C0] Code: be 04 00 00 00 e8 71 ea 8c 00 41 0f b6 44 1d 00 84 c0 48 89 da 0f 85 8d 01 00 00 8b 44 24 60 b9 01 00 00 00 f0 41 0f b1 0c 24 <0f> 85 df 00 00 00 65 8b 1d 30 17 92 7e 41 0f b6 04 17 84 c0 0f 85 [ 570.107007][ C0] RSP: 0018:ffffc9000334f260 EFLAGS: 00000046 [ 570.107025][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000001 [ 570.107037][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc9000334f2c0 [ 570.107050][ C0] RBP: ffffc9000334f330 R08: 0000000000000003 R09: fffff52000669e58 [ 570.107063][ C0] R10: dffffc0000000000 R11: fffff52000669e58 R12: ffffffff9a5e3a70 [ 570.107076][ C0] R13: 1ffff92000669e58 R14: ffffc9000334f2c0 R15: 1ffffffff34bc74f [ 570.107090][ C0] FS: 0000555582e2c500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 570.107106][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 570.107119][ C0] CR2: 00007f5a7fd646e0 CR3: 0000000080a22000 CR4: 00000000003526f0 [ 570.107135][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 570.107146][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 570.107158][ C0] Call Trace: [ 570.107164][ C0] [ 570.107171][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 570.107196][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 570.107224][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 570.107248][ C0] ? nmi_handle+0x2a/0x5a0 [ 570.107274][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 570.107298][ C0] ? nmi_handle+0x14f/0x5a0 [ 570.107315][ C0] ? nmi_handle+0x2a/0x5a0 [ 570.107334][ C0] ? do_raw_spin_lock+0x16f/0x370 [ 570.107356][ C0] ? default_do_nmi+0x63/0x160 [ 570.107381][ C0] ? exc_nmi+0x123/0x1f0 [ 570.107405][ C0] ? end_repeat_nmi+0xf/0x53 [ 570.107429][ C0] ? do_raw_spin_lock+0x16f/0x370 [ 570.107452][ C0] ? do_raw_spin_lock+0x16f/0x370 [ 570.107476][ C0] ? do_raw_spin_lock+0x16f/0x370 [ 570.107511][ C0] [ 570.107516][ C0] [ 570.107567][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 570.107592][ C0] _raw_spin_lock_irqsave+0xe1/0x120 [ 570.107609][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 570.107630][ C0] debug_check_no_obj_freed+0x234/0x580 [ 570.107652][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 570.107671][ C0] ? page_ext_get+0x20/0x2a0 [ 570.107689][ C0] ? page_ext_get+0x1d6/0x2a0 [ 570.107711][ C0] free_unref_page+0x41b/0xf20 [ 570.107740][ C0] __put_partials+0xeb/0x130 [ 570.107766][ C0] put_cpu_partial+0x17c/0x250 [ 570.107783][ C0] ? put_cpu_partial+0x70/0x250 [ 570.107800][ C0] __slab_free+0x2ea/0x3d0 [ 570.107818][ C0] ? __phys_addr+0xba/0x170 [ 570.107854][ C0] qlist_free_all+0x9a/0x140 [ 570.107873][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 570.107893][ C0] __kasan_slab_alloc+0x23/0x80 [ 570.107913][ C0] ? proc_alloc_inode+0x2a/0xc0 [ 570.107931][ C0] kmem_cache_alloc_lru_noprof+0x139/0x2b0 [ 570.107957][ C0] proc_alloc_inode+0x2a/0xc0 [ 570.107973][ C0] ? __pfx_proc_alloc_inode+0x10/0x10 [ 570.107991][ C0] alloc_inode+0x65/0x1a0 [ 570.108011][ C0] new_inode+0x22/0x1d0 [ 570.108033][ C0] proc_pid_make_inode+0x1f/0x130 [ 570.108055][ C0] proc_pid_instantiate+0x54/0x2b0 [ 570.108078][ C0] ? proc_pid_lookup+0xa7/0x480 [ 570.108098][ C0] proc_pid_lookup+0x31f/0x480 [ 570.108121][ C0] proc_root_lookup+0x1f/0x50 [ 570.108141][ C0] __lookup_slow+0x28c/0x3f0 [ 570.108167][ C0] ? __pfx___lookup_slow+0x10/0x10 [ 570.108200][ C0] lookup_slow+0x53/0x70 [ 570.108224][ C0] walk_component+0x2e1/0x410 [ 570.108248][ C0] link_path_walk+0x797/0xea0 [ 570.108277][ C0] path_lookupat+0xa9/0x450 [ 570.108304][ C0] filename_lookup+0x256/0x610 [ 570.108330][ C0] ? __pfx_filename_lookup+0x10/0x10 [ 570.108357][ C0] ? __pfx_kfree_link+0x10/0x10 [ 570.108379][ C0] ? strncpy_from_user+0x13a/0x260 [ 570.108407][ C0] ? getname_flags+0x1e3/0x540 [ 570.108431][ C0] do_readlinkat+0xf0/0x3a0 [ 570.108460][ C0] ? __pfx_do_readlinkat+0x10/0x10 [ 570.108485][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 570.108512][ C0] ? exc_page_fault+0x590/0x8c0 [ 570.108536][ C0] __x64_sys_readlink+0x7f/0x90 [ 570.108561][ C0] do_syscall_64+0xf3/0x230 [ 570.108580][ C0] ? clear_bhb_loop+0x35/0x90 [ 570.108601][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.108620][ C0] RIP: 0033:0x7ff3c8593446 [ 570.108634][ C0] Code: 00 00 66 90 41 55 ba 00 10 00 00 b8 59 00 00 00 48 8d 3d e5 53 08 00 41 54 55 53 48 81 ec 08 10 00 00 48 89 e5 48 89 ee 0f 05 <3d> 00 f0 ff ff 77 5b 85 c0 7e 57 0f b6 14 24 80 fa 5b 74 4e 80 fa [ 570.108649][ C0] RSP: 002b:00007fff82f4d830 EFLAGS: 00000206 ORIG_RAX: 0000000000000059 [ 570.108666][ C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff3c8593446 [ 570.108679][ C0] RDX: 0000000000001000 RSI: 00007fff82f4d830 RDI: 00007ff3c8618818 [ 570.108692][ C0] RBP: 00007fff82f4d830 R08: 0000000000000000 R09: 00007ff3c8618eb4 [ 570.108703][ C0] R10: 00007fff82f4e8c0 R11: 0000000000000206 R12: 00007fff82f4ea10 [ 570.108715][ C0] R13: 00007fff82f4e9f8 R14: 00007fff82f4e990 R15: 00007fff82f4e988 [ 570.108736][ C0] [ 570.108931][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 570.634616][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 570.645147][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 570.655226][ T30] Call Trace: [ 570.658529][ T30] [ 570.661480][ T30] dump_stack_lvl+0x241/0x360 [ 570.666196][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 570.671433][ T30] ? __pfx__printk+0x10/0x10 [ 570.676049][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 570.682076][ T30] ? vscnprintf+0x5d/0x90 [ 570.686446][ T30] panic+0x349/0x880 [ 570.690378][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 570.696582][ T30] ? __pfx_panic+0x10/0x10 [ 570.701028][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 570.706448][ T30] ? __irq_work_queue_local+0x137/0x410 [ 570.712117][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 570.717608][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 570.723798][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 570.729992][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 570.736187][ T30] watchdog+0x1033/0x1040 [ 570.740555][ T30] ? watchdog+0x1ea/0x1040 [ 570.745012][ T30] ? __pfx_watchdog+0x10/0x10 [ 570.749727][ T30] kthread+0x2f0/0x390 [ 570.753827][ T30] ? __pfx_watchdog+0x10/0x10 [ 570.758535][ T30] ? __pfx_kthread+0x10/0x10 [ 570.763167][ T30] ret_from_fork+0x4b/0x80 [ 570.767623][ T30] ? __pfx_kthread+0x10/0x10 [ 570.772240][ T30] ret_from_fork_asm+0x1a/0x30 [ 570.777055][ T30] [ 570.780364][ T30] Kernel Offset: disabled [ 570.784697][ T30] Rebooting in 86400 seconds..