last executing test programs: 31.972739393s ago: executing program 2 (id=3120): r0 = io_uring_setup(0x177f, &(0x7f0000000340)={0x0, 0x20452d, 0x400, 0x1000005}) gettid() clock_gettime(0x5, &(0x7f00000032c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0xa94, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x80, 0x25}, &(0x7f00000003c0), &(0x7f0000000080)) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000340)="a4", 0x1, 0x40, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) shutdown(r1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000d00)={0xc}) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0xfffff792, 0x8000, 0x48fe, 0x11, r3, 0x9, '\x00', 0x0, r2, 0x2, 0x1, 0x0, 0x3}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x60, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r4 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) read$hiddev(r4, &(0x7f0000000740)=""/43, 0x2b) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x5, {0x2, 0x1}, {0x2, 0xff, 0x2}, 0x0, 0xfe}, {0x1, 0x0, {0x1, 0x1, 0x2}, {0x2, 0xff, 0x4}, 0xfd, 0xfd}, {0x1, 0x1, {0x2, 0x0, 0x2}, {0x1, 0xf0, 0x4}, 0xfd, 0x2}, {0x3, 0x0, {0x1, 0xff, 0x2}, {0x1, 0xf0, 0x4}, 0x0, 0x1f9}, {0x2, 0x3, {0x0, 0xff, 0x4}, {0x1, 0x1, 0x4}, 0xff}], 0xa0) close_range(r0, 0xffffffffffffffff, 0x0) 25.50645662s ago: executing program 2 (id=3126): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vmci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000001c0)={@my=0x0}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) r2 = dup(r0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000100)={{@my=0x0}, 0x1}) 24.585613894s ago: executing program 2 (id=3129): keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0xfffffffffffffddd, &(0x7f0000000040)={&(0x7f0000000740)={'wp512-generic\x00'}}) 24.550278271s ago: executing program 2 (id=3130): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2000000000000000000000000700000001440c0567"], 0x20}}], 0x1, 0x0) 24.498288996s ago: executing program 2 (id=3131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x9, 0x0, 0x1, @counter={{0x10}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) 23.504286983s ago: executing program 2 (id=3132): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000200)='GPL\x00'}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x80000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x0, 0x3d, 0x0, 0x3, 0x24, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x6, 0x7}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x38011, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f00000000c0)) 22.700375713s ago: executing program 1 (id=3133): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) keyctl$set_timeout(0xa, 0x0, 0x20ffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 22.677021125s ago: executing program 1 (id=3134): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x200, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x168, 0x240, 0x240, 0x168, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1]}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 21.919130613s ago: executing program 1 (id=3137): r0 = io_uring_setup(0x177f, &(0x7f0000000340)={0x0, 0x20452d, 0x400, 0x1000005}) gettid() clock_gettime(0x5, &(0x7f00000032c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0xa94, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x80, 0x25}, &(0x7f00000003c0), &(0x7f0000000080)) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000340)="a4", 0x1, 0x40, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) shutdown(r1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000d00)={0xc}) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0xfffff792, 0x8000, 0x48fe, 0x11, r3, 0x9, '\x00', 0x0, r2, 0x2, 0x1, 0x0, 0x3}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x60, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r4 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) read$hiddev(r4, &(0x7f0000000740)=""/43, 0x2b) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x5, {0x2, 0x1}, {0x2, 0xff, 0x2}, 0x0, 0xfe}, {0x1, 0x0, {0x1, 0x1, 0x2}, {0x2, 0xff, 0x4}, 0xfd, 0xfd}, {0x1, 0x1, {0x2, 0x0, 0x2}, {0x1, 0xf0, 0x4}, 0xfd, 0x2}, {0x3, 0x0, {0x1, 0xff, 0x2}, {0x1, 0xf0, 0x4}, 0x0, 0x1f9}, {0x2, 0x3, {0x0, 0xff, 0x4}, {0x1, 0x1, 0x4}, 0xff}], 0xa0) close_range(r0, 0xffffffffffffffff, 0x0) 16.12790377s ago: executing program 4 (id=3150): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getitimer(0x0, &(0x7f0000000000)) 15.669436644s ago: executing program 1 (id=3151): sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000003c0), 0x100000000000022d) 15.60449894s ago: executing program 0 (id=3153): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x21}, 0x90) 15.596950902s ago: executing program 0 (id=3154): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6d}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) 14.838031716s ago: executing program 0 (id=3155): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x9, 0x1, 0x1}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/215, 0xd7}], 0x1, 0x0, 0x0) 14.837370951s ago: executing program 1 (id=3156): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff7fb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000003000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90) 14.836521248s ago: executing program 4 (id=3157): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x20}}], 0x1, 0x2400c084) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 14.737280009s ago: executing program 3 (id=3158): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x82101) r2 = dup3(r1, r0, 0x0) writev(r2, &(0x7f0000001680)=[{&(0x7f0000001280)='7N', 0xfdef}], 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)) 14.725528868s ago: executing program 1 (id=3159): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_virt_wifi\x00', &(0x7f0000000080)=@ethtool_dump={0x40}}) 14.666459726s ago: executing program 4 (id=3160): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{0x0}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) madvise(&(0x7f00000d9000/0x2000)=nil, 0x2000, 0x14) 14.419088021s ago: executing program 4 (id=3162): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffe}], 0x0, 0x0, 0x0}) 14.271500338s ago: executing program 4 (id=3163): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x55}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 14.115198341s ago: executing program 4 (id=3164): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 13.695111603s ago: executing program 3 (id=3165): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}]}, 0x24}}, 0x0) 13.561989366s ago: executing program 3 (id=3166): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6d}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) 13.385059879s ago: executing program 3 (id=3168): socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @empty}, "de9c72338c008651"}}}}}, 0x0) 13.233287708s ago: executing program 3 (id=3169): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x6, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = dup2(r3, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) 12.506953137s ago: executing program 0 (id=3170): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x4) syz_usbip_server_init(0x1) syz_emit_vhci(0x0, 0x7) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0x7) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x5, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000340), 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000440)=0x82, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed1a49a975a6c8dbb480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e3bbe5230e07dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078bf1c7389a6ba0f89257f0eac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdbc64ce943f895dd4c2e9dd7393543d89b00dc6b3a25045d4ec932366c67dfad087fa8dc104644828440bdf67dd97ebccb3bd", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmsg(r3, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x1, 0xc8, 0x20}}}, 0x7) r4 = add_key(&(0x7f00000003c0)='dns_resolver\x00', 0x0, &(0x7f0000000080)="00000102", 0x4, 0x0) keyctl$describe(0x6, r4, &(0x7f0000000380)=""/46, 0x2e) personality(0x400000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/rt_cache\x00') 5.53905303s ago: executing program 0 (id=3171): syz_emit_ethernet(0x44, &(0x7f00000000c0)={@broadcast, @local, @void, {@mpls_uc={0x8847, {[{}, {}, {}, {}, {}, {}, {}, {}], @llc={@llc={0x0, 0x0, "c3", "148912763d08b3503f35fd3260523d2d5e91b7"}}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000001c80)={r2, 0x0, 0x1, "f8"}, 0x9) 5.531319111s ago: executing program 3 (id=3172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000280)={0x0, 0xff00, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000380), 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) accept4(r5, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000001a80)) r6 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x3, &(0x7f0000000080), &(0x7f0000000080)="833cbcc8c1281269b5dd8da9de678fa703f25ee1851cac28974befadc7c1d0f781", 0x21) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0585605, &(0x7f0000000680)={0x0, 0x0, {0x0, 0x0, 0x300a, 0x8}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x141602, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000a8f3d2207205200385010102030109021b0001000000000904"], 0x0) 0s ago: executing program 0 (id=3174): socket$key(0xf, 0x3, 0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0xfffffffffffffef6}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000, 0x0, 0x0, 0x1a, &(0x7f0000000040)="08b04a9b42c4939980741c3dc7fc17d8276a194d93249b29a289a4009822130c0600a98fc018cf8070d1a27dce1241974f2e875ffeba15"}, 0x28) kernel console output (not intermixed with test programs): th3 [ 647.128302][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.149322][T16865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.160003][T16865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.170457][T16865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.181728][T16865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.192543][T16865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.203209][T16865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.214652][T16865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.250117][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.332806][T16865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.344740][T16865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.354404][T16865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.363179][T16865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.393699][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.434855][T16930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.534506][T17131] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.541636][T17131] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.549829][T17131] bridge_slave_0: entered allmulticast mode [ 647.557472][T17131] bridge_slave_0: entered promiscuous mode [ 647.615623][T17131] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.622757][T17131] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.630675][T17131] bridge_slave_1: entered allmulticast mode [ 647.638338][T17131] bridge_slave_1: entered promiscuous mode [ 647.777086][T17131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.813911][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.825843][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.840807][T17131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.961213][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.009165][T17131] team0: Port device team_slave_0 added [ 648.026146][T16930] veth0_vlan: entered promiscuous mode [ 648.053691][ T4490] Bluetooth: hci1: command tx timeout [ 648.060450][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.077708][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.081315][T17131] team0: Port device team_slave_1 added [ 648.091331][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.111134][T17171] chnl_net:caif_netlink_parms(): no params data found [ 648.185737][T17131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.192713][T17131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.249527][T17131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.266701][T16930] veth1_vlan: entered promiscuous mode [ 648.299764][T17043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.340350][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.362681][T17131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.372785][T17131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.403901][T17131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.481953][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.493052][ T5141] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 648.650775][T17043] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.668400][T17131] hsr_slave_0: entered promiscuous mode [ 648.677042][T17131] hsr_slave_1: entered promiscuous mode [ 648.678798][ T5141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 648.692544][ T5141] usb 1-1: New USB device found, idVendor=595a, idProduct=0001, bcdDevice=e7.1a [ 648.698565][T17131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 648.702663][ T4490] Bluetooth: hci2: command tx timeout [ 648.716250][ T5141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.718523][T17131] Cannot create hsr debugfs directory [ 648.738715][ T5141] usb 1-1: config 0 descriptor?? [ 648.878552][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.885753][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.905667][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.912812][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.991411][T15828] usb 1-1: USB disconnect, device number 37 [ 649.077435][T17171] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.090535][T17171] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.108081][T17171] bridge_slave_0: entered allmulticast mode [ 649.121235][T17171] bridge_slave_0: entered promiscuous mode [ 649.134955][T17171] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.152024][T17171] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.160143][T17171] bridge_slave_1: entered allmulticast mode [ 649.169027][T17171] bridge_slave_1: entered promiscuous mode [ 649.230203][T17171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.297949][T17171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.318963][T16930] veth0_macvtap: entered promiscuous mode [ 649.381299][T16930] veth1_macvtap: entered promiscuous mode [ 649.423941][T17171] team0: Port device team_slave_0 added [ 649.435824][T17171] team0: Port device team_slave_1 added [ 649.522643][ T35] bridge_slave_1: left allmulticast mode [ 649.528553][ T35] bridge_slave_1: left promiscuous mode [ 649.535417][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.545472][ T35] bridge_slave_0: left allmulticast mode [ 649.552094][ T35] bridge_slave_0: left promiscuous mode [ 649.558793][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.571392][ T35] bridge_slave_1: left allmulticast mode [ 649.578596][ T35] bridge_slave_1: left promiscuous mode [ 649.584881][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.595894][ T35] bridge_slave_0: left allmulticast mode [ 649.601527][ T35] bridge_slave_0: left promiscuous mode [ 649.609193][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.848990][ T29] audit: type=1326 audit(1720264346.400:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17227 comm="syz.0.2842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1262575bd9 code=0x0 [ 650.138370][ T4490] Bluetooth: hci1: command tx timeout [ 650.370378][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.384511][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.395220][ T35] bond0 (unregistering): Released all slaves [ 650.517621][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.530216][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.542806][ T35] bond0 (unregistering): Released all slaves [ 650.586057][T17171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.606572][T17171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.647111][T17171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.671821][T17171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.681570][T17171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.720280][T17171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.780153][ T4490] Bluetooth: hci2: command tx timeout [ 650.858145][T16930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.871649][T16930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.884770][T16930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.903028][T16930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.912992][T16930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.931796][T16930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.942924][T16930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.955834][T16930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.967538][T16930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.060598][T16930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.086847][T16930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.097603][T16930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.123856][T16930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.143135][T16930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.163303][T16930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.183077][T16930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.203028][T16930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.224756][T16930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.387211][T17171] hsr_slave_0: entered promiscuous mode [ 651.410961][T17171] hsr_slave_1: entered promiscuous mode [ 651.429084][T17171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 651.443169][T17171] Cannot create hsr debugfs directory [ 651.455048][T16930] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.474967][T16930] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.491631][T16930] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.504603][T16930] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.672116][T17043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.861328][T17250] netlink: 'syz.0.2845': attribute type 4 has an invalid length. [ 651.873271][T17250] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2845'. [ 652.192932][ T35] hsr_slave_0: left promiscuous mode [ 652.200149][ T35] hsr_slave_1: left promiscuous mode [ 652.206645][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.216908][ T4490] Bluetooth: hci1: command tx timeout [ 652.228793][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.237096][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.239832][ T29] audit: type=1326 audit(1720264348.800:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.0.2849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1262575bd9 code=0x0 [ 652.268149][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.278795][ T35] hsr_slave_0: left promiscuous mode [ 652.285747][ T35] hsr_slave_1: left promiscuous mode [ 652.291672][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.299220][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.307090][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.315356][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.355451][ T35] veth1_macvtap: left promiscuous mode [ 652.360988][ T35] veth0_macvtap: left promiscuous mode [ 652.366784][ T35] veth1_vlan: left promiscuous mode [ 652.372079][ T35] veth0_vlan: left promiscuous mode [ 652.378611][ T35] veth1_macvtap: left promiscuous mode [ 652.384331][ T35] veth0_macvtap: left promiscuous mode [ 652.389978][ T35] veth1_vlan: left promiscuous mode [ 652.395933][ T35] veth0_vlan: left promiscuous mode [ 652.853137][ T4490] Bluetooth: hci2: command tx timeout [ 652.956289][ T35] team0 (unregistering): Port device team_slave_1 removed [ 652.997181][ T35] team0 (unregistering): Port device team_slave_0 removed [ 653.258975][T17264] binder: 17263:17264 ioctl c0306201 20000380 returned -14 [ 653.880989][ T35] team0 (unregistering): Port device team_slave_1 removed [ 653.926244][ T35] team0 (unregistering): Port device team_slave_0 removed [ 654.385431][T17267] netlink: 'syz.0.2852': attribute type 4 has an invalid length. [ 654.403613][T17267] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2852'. [ 654.456651][T17131] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 654.480089][T17043] veth0_vlan: entered promiscuous mode [ 654.480577][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.505259][T17131] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 654.543179][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.760448][T17131] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 654.833520][T17131] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 654.863625][T17043] veth1_vlan: entered promiscuous mode [ 654.876100][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.904442][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.933284][ T4490] Bluetooth: hci2: command tx timeout [ 655.159116][T17043] veth0_macvtap: entered promiscuous mode [ 655.402580][T17043] veth1_macvtap: entered promiscuous mode [ 655.598094][T17043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.620585][T17043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.635167][T17043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.646050][T17043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.663042][T17043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.675984][T17043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.698803][T17043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.741726][T17043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.759218][T17043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.781364][T17043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.792216][T17043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.806117][T17043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.818524][T17043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.834395][T17043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.971592][T17043] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.988601][T17043] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.001145][T17043] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.011490][T17043] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.087995][T17171] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 656.137653][T17171] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 656.166528][T17171] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 656.240044][T17131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.260887][T17171] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 656.342040][T17131] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.432794][T17310] vlan2: entered allmulticast mode [ 656.447944][T17310] bridge0: entered allmulticast mode [ 656.459946][T17310] bridge0: port 3(vlan2) entered blocking state [ 656.466874][T17310] bridge0: port 3(vlan2) entered disabled state [ 656.481565][T17310] bridge0: left allmulticast mode [ 656.526037][T15829] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.533242][T15829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.598017][T15829] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.605217][T15829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.681873][ T1058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.716564][ T1058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.801068][ T1058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.841692][ T1058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.878112][T17171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.891930][T17131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.903518][T15832] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 656.933747][T17171] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.997012][T15829] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.004207][T15829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.028520][T15829] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.035618][T15829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.108868][T17131] veth0_vlan: entered promiscuous mode [ 657.125061][T15832] usb 3-1: Using ep0 maxpacket: 16 [ 657.157969][T15832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.181334][T15832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.187375][T17131] veth1_vlan: entered promiscuous mode [ 657.206916][T15832] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 657.274475][T15832] usb 3-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 657.313064][T15832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.372290][T17171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.393312][T15832] usb 3-1: config 0 descriptor?? [ 657.412480][T17131] veth0_macvtap: entered promiscuous mode [ 657.456065][T17131] veth1_macvtap: entered promiscuous mode [ 657.627373][T17131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.670194][T17131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.682019][T17131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.701001][T17131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.754127][T17131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.790595][T17131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.823148][T17131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.854520][T17131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.868944][T15832] sony 0003:1430:474C.0013: unknown main item tag 0x0 [ 657.883099][T15832] sony 0003:1430:474C.0013: unknown main item tag 0x0 [ 657.911371][T15832] sony 0003:1430:474C.0013: hidraw0: USB HID v0.00 Device [HID 1430:474c] on usb-dummy_hcd.2-1/input0 [ 657.939049][T17131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.948986][T15832] sony 0003:1430:474C.0013: failed to claim input [ 658.066611][T15832] usb 3-1: USB disconnect, device number 38 [ 658.118571][T17131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.163070][T17131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.195499][T17131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.230475][T17131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.240920][T17131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.278745][T17131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.303084][T17131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.337851][T17131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.379242][T17131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.431248][T17131] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.489492][T17131] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.514595][T17131] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.545007][T17131] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.718288][T17171] veth0_vlan: entered promiscuous mode [ 658.833059][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.840899][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.885191][T17171] veth1_vlan: entered promiscuous mode [ 658.989292][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.016829][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.166166][T17171] veth0_macvtap: entered promiscuous mode [ 659.191103][T17171] veth1_macvtap: entered promiscuous mode [ 659.234591][T17367] tipc: Invalid UDP bearer configuration [ 659.234627][T17367] tipc: Enabling of bearer rejected, failed to enable media [ 659.289138][T17368] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 659.297188][T17171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.334763][T17171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.345677][T17171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.357476][T17171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.390670][T17171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.415257][T17171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.464953][T17171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.493035][T17171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.513748][T17171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.525105][T15862] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 659.565618][T17171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.588983][T17171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.593275][T15858] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 659.629682][T17171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.682806][T17171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.708742][T17171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.725552][T17171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.754073][T17171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.766624][T17171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.777494][T17171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.792490][T17171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.805182][T17171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.819154][T15862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 659.837358][T17171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.847701][T15862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 659.872622][T17171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.934724][T17171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.956066][T15862] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 659.995428][T15862] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 660.004413][T17171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.040760][T17171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.048455][T15862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.056842][T17171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.095699][T15862] usb 5-1: config 0 descriptor?? [ 660.292724][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.334692][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.416694][T17374] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 660.487135][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.496653][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.524801][T15862] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x2 [ 660.542675][T15862] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 660.565764][T15862] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 660.599008][T15862] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 660.883218][T15858] usb 4-1: device descriptor read/64, error -71 [ 660.935303][T15862] usb 5-1: USB disconnect, device number 39 [ 661.193309][T15858] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 661.241601][T17392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2876'. [ 661.284287][ T5093] Bluetooth: hci4: unexpected event 0x07 length: 8 < 255 [ 661.308538][ T5093] Bluetooth: hci4: SCO packet for unknown connection handle 1039 [ 661.386301][T15858] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.449768][T15858] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 661.491325][T15858] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 661.515370][T15858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=65 [ 661.549738][T15858] usb 4-1: SerialNumber: syz [ 661.583937][T15858] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 661.703243][T15828] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 661.895681][T15828] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 661.908036][T15832] usb 4-1: USB disconnect, device number 47 [ 661.927867][T15828] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 661.976413][T15828] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 662.011375][T15828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.048112][T17401] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 662.244007][T17430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2888'. [ 662.330977][T15829] usb 2-1: USB disconnect, device number 34 [ 662.478963][ T29] audit: type=1326 audit(1720264359.030:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.0.2889" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1262575bd9 code=0x0 [ 663.674444][T15832] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 663.771446][ T4490] Bluetooth: hci1: unexpected event 0x07 length: 8 < 255 [ 663.786531][ T4490] Bluetooth: hci1: SCO packet for unknown connection handle 1039 [ 663.894596][T15832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.995472][T15832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.016584][T17489] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 664.104088][T15832] usb 1-1: New USB device found, idVendor=046d, idProduct=c13f, bcdDevice= 0.00 [ 664.104166][T15832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.120504][T15832] usb 1-1: config 0 descriptor?? [ 664.237518][ T29] audit: type=1326 audit(1720264360.790:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17496 comm="syz.4.2907" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49ea575bd9 code=0x0 [ 664.424314][T15829] usb 1-1: USB disconnect, device number 38 [ 664.977268][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 665.322193][ T930] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 665.331812][T17527] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 665.543755][ T930] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 665.602445][ T930] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 665.647344][ T930] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 665.676671][ T930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.692011][T17517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 666.007633][ T930] usb 3-1: USB disconnect, device number 39 [ 666.910023][T17584] xt_TCPMSS: Only works on TCP SYN packets [ 668.254146][ T5093] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 668.272027][ T5093] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 668.280856][ T5093] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 668.292708][ T5093] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 668.300858][ T5093] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 668.309643][ T5093] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 668.556044][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.663200][T15828] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 668.680121][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.892574][T15828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 668.923018][T15828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 668.935132][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.953852][T15828] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 668.971170][T15828] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 668.984897][T15828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.997111][T15828] usb 5-1: config 0 descriptor?? [ 669.099747][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.408162][T17606] chnl_net:caif_netlink_parms(): no params data found [ 669.448890][ T51] bridge_slave_1: left allmulticast mode [ 669.463014][ T51] bridge_slave_1: left promiscuous mode [ 669.472828][T15828] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 669.480961][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.497922][ T51] bridge_slave_0: left allmulticast mode [ 669.505235][T15828] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 669.521768][ T51] bridge_slave_0: left promiscuous mode [ 669.528143][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.120659][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.136678][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.148518][ T51] bond0 (unregistering): Released all slaves [ 670.376377][ T4490] Bluetooth: hci2: command tx timeout [ 670.556413][T17663] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 670.802918][T17606] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.852844][T17606] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.878333][T17606] bridge_slave_0: entered allmulticast mode [ 670.899282][T17606] bridge_slave_0: entered promiscuous mode [ 670.924490][T17606] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.950693][T17606] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.981600][T17606] bridge_slave_1: entered allmulticast mode [ 671.010766][T17606] bridge_slave_1: entered promiscuous mode [ 671.057243][ T51] hsr_slave_0: left promiscuous mode [ 671.069456][ T51] hsr_slave_1: left promiscuous mode [ 671.082844][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.115578][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.144602][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.188573][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.265489][ T51] veth1_macvtap: left promiscuous mode [ 671.271063][ T51] veth0_macvtap: left promiscuous mode [ 671.293183][ T51] veth1_vlan: left promiscuous mode [ 671.298527][ T51] veth0_vlan: left promiscuous mode [ 671.518087][T17686] netlink: 'syz.4.2967': attribute type 5 has an invalid length. [ 671.606598][ T5134] usb 5-1: USB disconnect, device number 40 [ 672.251716][ T51] team0 (unregistering): Port device team_slave_1 removed [ 672.298535][ T51] team0 (unregistering): Port device team_slave_0 removed [ 672.333158][T15832] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 672.453044][ T4490] Bluetooth: hci2: command tx timeout [ 672.544976][T15832] usb 5-1: config 0 has an invalid interface number: 154 but max is 0 [ 672.554801][T15832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.566492][T15832] usb 5-1: config 0 has no interface number 0 [ 672.572621][T15832] usb 5-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 672.583697][T15832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.597637][T15832] usb 5-1: config 0 descriptor?? [ 672.605777][T15832] qmi_wwan 5-1:0.154: skipping garbage [ 672.611269][T15832] qmi_wwan 5-1:0.154: skipping garbage [ 672.617418][T15832] qmi_wwan 5-1:0.154: bogus CDC Union: master=0, slave=0 [ 672.624660][T15832] qmi_wwan 5-1:0.154: probe with driver qmi_wwan failed with error -22 [ 672.839084][T15832] usb 5-1: USB disconnect, device number 41 [ 673.105778][T17606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.150443][T17606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.344149][T17606] team0: Port device team_slave_0 added [ 673.367678][T17606] team0: Port device team_slave_1 added [ 673.621973][T17606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.684802][T17606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.793031][ T930] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 673.803391][T17606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.825859][T17606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.833056][T17606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.859553][T17606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.873087][T15832] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 673.958099][T17606] hsr_slave_0: entered promiscuous mode [ 673.967029][T17606] hsr_slave_1: entered promiscuous mode [ 673.979587][T17606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 673.988323][ T930] usb 1-1: Using ep0 maxpacket: 8 [ 673.993526][T17606] Cannot create hsr debugfs directory [ 674.001667][T17731] netlink: 'syz.4.2986': attribute type 18 has an invalid length. [ 674.011569][ T930] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 674.020471][ T930] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 674.030706][ T930] usb 1-1: config 0 has no interface number 0 [ 674.040254][ T930] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 674.070406][ T930] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 674.155183][T15832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.167318][T15832] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 674.213404][ T930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.228784][T15832] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 674.271241][ T930] usb 1-1: config 0 descriptor?? [ 674.337104][T15832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.366582][T15832] usb 3-1: config 0 descriptor?? [ 674.535801][ T4490] Bluetooth: hci2: command tx timeout [ 674.856383][T15832] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 674.885740][T15832] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 674.898639][T15832] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 674.910411][T15832] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 675.168353][ T5134] usb 3-1: USB disconnect, device number 40 [ 675.465010][T17606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 675.494511][T17606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 675.520510][T17606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 675.662625][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.712783][T17606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 675.837444][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.016519][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.027601][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a87ac00: rx timeout, send abort [ 676.201080][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.449219][T17606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.525716][T15828] usb 1-1: USB disconnect, device number 39 [ 676.537373][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a87ac00: abort rx timeout. Force session deactivation [ 676.613941][ T4490] Bluetooth: hci2: command tx timeout [ 676.679219][ T5093] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 676.691695][ T5093] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 676.703594][ T5093] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 676.711700][ T5093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 676.724405][ T5093] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 676.727070][ T12] bridge_slave_1: left allmulticast mode [ 676.739990][ T5093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 676.753308][ T12] bridge_slave_1: left promiscuous mode [ 676.759384][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.806883][ T12] bridge_slave_0: left allmulticast mode [ 676.819131][ T12] bridge_slave_0: left promiscuous mode [ 676.825413][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.973432][T15703] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 677.004485][T17793] xt_HMARK: spi-set and port-set can't be combined [ 677.179427][T15703] usb 3-1: config 0 has no interfaces? [ 677.192002][T15703] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 677.212135][T15703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.221888][T15703] usb 3-1: Product: syz [ 677.253214][T15703] usb 3-1: Manufacturer: syz [ 677.257925][T15703] usb 3-1: SerialNumber: syz [ 677.266037][T15703] usb 3-1: config 0 descriptor?? [ 677.486521][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.510989][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.522139][ T12] bond0 (unregistering): Released all slaves [ 677.557631][T17803] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 677.565317][T17803] pim6reg0: linktype set to 0 [ 677.572148][T17606] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.643441][T15832] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.650553][T15832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.762852][T15862] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.770048][T15862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.026693][T15862] usb 3-1: USB disconnect, device number 41 [ 678.054648][ T12] hsr_slave_0: left promiscuous mode [ 678.096381][ T12] hsr_slave_1: left promiscuous mode [ 678.171143][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.184826][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.193842][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.201613][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.286910][ T12] veth1_macvtap: left promiscuous mode [ 678.333167][ T12] veth0_macvtap: left promiscuous mode [ 678.347529][ T12] veth1_vlan: left promiscuous mode [ 678.365093][ T12] veth0_vlan: left promiscuous mode [ 678.853795][ T4490] Bluetooth: hci1: command tx timeout [ 678.892410][T15832] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 679.114655][T15832] usb 1-1: Using ep0 maxpacket: 8 [ 679.125953][T15832] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 679.147467][T15832] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 679.157479][T15832] usb 1-1: config 0 has no interface number 0 [ 679.164066][T15832] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 679.177613][T15832] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 679.187888][T15832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.219293][T15832] usb 1-1: config 0 descriptor?? [ 679.397943][ T12] team0 (unregistering): Port device team_slave_1 removed [ 679.456861][ T12] team0 (unregistering): Port device team_slave_0 removed [ 680.325715][T17841] hsr0: entered promiscuous mode [ 680.469914][T17606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 680.590587][T17846] xt_TCPMSS: Only works on TCP SYN packets [ 680.600020][T17791] chnl_net:caif_netlink_parms(): no params data found [ 680.642414][T17846] loop7: detected capacity change from 0 to 16384 [ 680.934465][ T4490] Bluetooth: hci1: command tx timeout [ 680.961780][T17846] I/O error, dev loop7, sector 776 op 0x0:(READ) flags 0x80700 phys_seg 10 prio class 0 [ 681.047952][T17791] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.082787][T17791] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.117591][T17791] bridge_slave_0: entered allmulticast mode [ 681.140027][T17791] bridge_slave_0: entered promiscuous mode [ 681.186618][T17606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.220737][T17791] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.242019][T17791] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.250832][T17791] bridge_slave_1: entered allmulticast mode [ 681.269425][T17791] bridge_slave_1: entered promiscuous mode [ 681.417745][T17791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.451421][T17791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.475874][T15832] usb 1-1: USB disconnect, device number 40 [ 681.572655][T17606] veth0_vlan: entered promiscuous mode [ 681.619978][T17606] veth1_vlan: entered promiscuous mode [ 681.672898][T17791] team0: Port device team_slave_0 added [ 681.682608][T17791] team0: Port device team_slave_1 added [ 681.774586][T17791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.781563][T17791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.824743][T17791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.874134][T17606] veth0_macvtap: entered promiscuous mode [ 681.887432][T17791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.908766][T17791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.941280][T17791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.963102][T15703] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 682.119686][T17606] veth1_macvtap: entered promiscuous mode [ 682.165468][T15703] usb 3-1: config 0 has no interfaces? [ 682.174213][T15703] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 682.177328][T17606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.201411][T15703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.206297][T17606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.214069][T15703] usb 3-1: Product: syz [ 682.228113][T15703] usb 3-1: Manufacturer: syz [ 682.232740][T15703] usb 3-1: SerialNumber: syz [ 682.234393][T17606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.243634][T15703] usb 3-1: config 0 descriptor?? [ 682.252734][T17606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.270749][T17606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.281323][T17606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.291569][T17606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.302205][T17606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.314538][T17606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.431390][T17606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.449305][T17606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.469615][T17606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.499741][T17606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.531483][T17606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.555663][T17606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.568893][T17606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.582806][T17606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.604751][T17606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.617506][T17791] hsr_slave_0: entered promiscuous mode [ 682.641308][T17791] hsr_slave_1: entered promiscuous mode [ 682.648553][T17791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 682.656329][T17791] Cannot create hsr debugfs directory [ 682.670902][T17606] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.687487][T17606] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.700526][T17606] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.713589][T17606] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.887678][ T8737] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.016863][ T4490] Bluetooth: hci1: command tx timeout [ 683.157298][ T8737] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.226842][T15829] usb 3-1: USB disconnect, device number 42 [ 683.258293][T17900] xt_TCPMSS: Only works on TCP SYN packets [ 683.296695][T17900] loop7: detected capacity change from 0 to 16384 [ 683.350636][ T8737] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.370988][ T5093] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 683.389330][ T5093] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 683.398305][ T5093] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 683.406406][ T5093] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 683.416689][ T5093] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 683.424535][ T5093] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 683.515144][ T98] I/O error, dev loop7, sector 768 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 683.527419][ T98] Buffer I/O error on dev loop7, logical block 96, lost async page write [ 683.536176][ T98] I/O error, dev loop7, sector 776 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 683.547647][ T98] Buffer I/O error on dev loop7, logical block 97, lost async page write [ 683.556341][ T98] I/O error, dev loop7, sector 784 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 683.565975][ T98] Buffer I/O error on dev loop7, logical block 98, lost async page write [ 683.574671][ T98] I/O error, dev loop7, sector 792 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 683.587018][ T98] Buffer I/O error on dev loop7, logical block 99, lost async page write [ 683.602382][ T8737] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.603521][T17900] I/O error, dev loop7, sector 800 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 683.613158][T17906] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 683.623296][T17900] Buffer I/O error on dev loop7, logical block 100, lost async page write [ 683.658953][T17906] Buffer I/O error on dev loop7, logical block 0, async page read [ 683.689783][T17906] ldm_validate_partition_table(): Disk read failed. [ 683.699261][T17906] Dev loop7: unable to read RDB block 0 [ 683.705663][T17906] loop7: unable to read partition table [ 683.711728][T17906] loop7: partition table beyond EOD, truncated [ 683.718536][T17906] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 683.813245][T17905] netlink: 'syz.2.3020': attribute type 3 has an invalid length. [ 683.821334][T17905] netlink: 'syz.2.3020': attribute type 3 has an invalid length. [ 683.854073][T17905] netlink: 152988 bytes leftover after parsing attributes in process `syz.2.3020'. [ 683.882786][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.908890][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.395236][T15828] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 684.437097][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.514751][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.629380][T15828] usb 1-1: string descriptor 0 read error: -22 [ 684.639062][T15828] usb 1-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 684.649496][T15828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.665655][T15828] usb 1-1: config 0 descriptor?? [ 684.692535][T15828] usb 1-1: Found UVC 0.00 device (30c9:0093) [ 684.714300][T15828] usb 1-1: No valid video chain found. [ 684.747193][ T8737] bridge_slave_1: left allmulticast mode [ 684.752854][ T8737] bridge_slave_1: left promiscuous mode [ 684.761448][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.779456][ T8737] bridge_slave_0: left allmulticast mode [ 684.785733][ T8737] bridge_slave_0: left promiscuous mode [ 684.793566][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.093792][ T4490] Bluetooth: hci1: command tx timeout [ 685.320395][ T8737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.335745][ T8737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.347432][ T8737] bond0 (unregistering): Released all slaves [ 685.416198][T17926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3021'. [ 685.495709][ T4490] Bluetooth: hci3: command tx timeout [ 685.948130][T17910] chnl_net:caif_netlink_parms(): no params data found [ 686.055852][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.062178][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.122561][ T8737] hsr_slave_0: left promiscuous mode [ 686.136058][ T8737] hsr_slave_1: left promiscuous mode [ 686.153672][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.162801][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.208891][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.225923][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.271433][ T8737] hsr0: left promiscuous mode [ 686.284530][ T8737] veth1_macvtap: left promiscuous mode [ 686.300980][ T8737] veth0_macvtap: left promiscuous mode [ 686.332166][ T8737] veth1_vlan: left promiscuous mode [ 686.339950][ T8737] veth0_vlan: left promiscuous mode [ 686.415056][ T5093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 686.426110][ T5093] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 686.434960][ T5093] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 686.446347][ T5093] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 686.473115][ T5093] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 686.482150][ T5093] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 687.031257][ T930] usb 1-1: USB disconnect, device number 41 [ 687.276013][ T8737] team0 (unregistering): Port device team_slave_1 removed [ 687.317276][ T8737] team0 (unregistering): Port device team_slave_0 removed [ 687.578735][ T4490] Bluetooth: hci3: command tx timeout [ 687.823281][T17952] netlink: 'syz.0.3031': attribute type 21 has an invalid length. [ 687.831146][T17952] netlink: 'syz.0.3031': attribute type 1 has an invalid length. [ 687.855139][T17791] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 687.890315][T17791] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 687.967162][T17910] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.990002][T17910] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.001983][T17910] bridge_slave_0: entered allmulticast mode [ 688.022586][T17910] bridge_slave_0: entered promiscuous mode [ 688.038391][T17791] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 688.079503][T17910] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.109981][T17910] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.133682][T17910] bridge_slave_1: entered allmulticast mode [ 688.141442][T17910] bridge_slave_1: entered promiscuous mode [ 688.229634][T17791] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 688.319067][T17910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.393576][T17910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.438017][T17965] nftables ruleset with unbound set [ 688.538959][ T4490] Bluetooth: hci0: command tx timeout [ 688.558065][T17910] team0: Port device team_slave_0 added [ 688.608771][T17910] team0: Port device team_slave_1 added [ 688.711292][ T5093] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 688.721263][ T5093] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 688.735070][ T5093] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 688.747636][ T5093] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 688.755404][ T5093] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 688.764501][ T5093] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 688.944919][T17910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.951893][T17910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.985680][T17910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.059309][T17910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.081141][T17910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.115762][T17910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.156029][T17948] chnl_net:caif_netlink_parms(): no params data found [ 689.257311][T17910] hsr_slave_0: entered promiscuous mode [ 689.265435][T17910] hsr_slave_1: entered promiscuous mode [ 689.272037][T17910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 689.280490][T17910] Cannot create hsr debugfs directory [ 689.402864][T17948] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.410717][T17948] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.418634][T17948] bridge_slave_0: entered allmulticast mode [ 689.426026][T17948] bridge_slave_0: entered promiscuous mode [ 689.455376][T17948] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.462510][T17948] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.473624][T17948] bridge_slave_1: entered allmulticast mode [ 689.480562][T17948] bridge_slave_1: entered promiscuous mode [ 689.537990][ T8737] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.571419][T17948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.652763][T17948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.665639][ T4490] Bluetooth: hci3: command tx timeout [ 689.693618][ T8737] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.859349][ T8737] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.871710][T18003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3041'. [ 690.001312][ T8737] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.018896][T17977] chnl_net:caif_netlink_parms(): no params data found [ 690.041716][T17948] team0: Port device team_slave_0 added [ 690.056579][T17948] team0: Port device team_slave_1 added [ 690.132056][T17791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.281293][T17948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.295657][T17948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.322471][T17948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.340505][T17948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.347516][T17948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.383070][T17948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.631294][ T4490] Bluetooth: hci0: command tx timeout [ 690.681561][T17948] hsr_slave_0: entered promiscuous mode [ 690.704515][T17948] hsr_slave_1: entered promiscuous mode [ 690.724861][T17948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 690.732456][T17948] Cannot create hsr debugfs directory [ 690.761115][T17977] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.783233][T17977] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.790440][T17977] bridge_slave_0: entered allmulticast mode [ 690.813759][T17977] bridge_slave_0: entered promiscuous mode [ 690.846718][T17791] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.853679][ T4490] Bluetooth: hci2: command tx timeout [ 690.874083][ T5093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 690.895960][ T5093] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 690.908088][ T5093] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 690.915828][T17977] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.927856][T17977] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.932101][ T5093] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 690.944256][T17977] bridge_slave_1: entered allmulticast mode [ 690.951147][ T5093] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 690.954978][T17977] bridge_slave_1: entered promiscuous mode [ 690.959122][ T5093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 691.042204][ T8737] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.083482][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.090636][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.239987][T17977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.267817][T17977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.320619][ T8737] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.349303][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.356490][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.506109][ T8737] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.545039][T17977] team0: Port device team_slave_0 added [ 691.567140][T17910] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 691.601242][T17977] team0: Port device team_slave_1 added [ 691.635823][ T8737] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.650991][T17910] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 691.697027][T17977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.706211][T17977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.732437][T17977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.746329][ T4490] Bluetooth: hci3: command tx timeout [ 691.752723][T17910] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 691.796682][T17977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.804887][T17977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.831760][T17977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.851817][T17910] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 692.004552][T17977] hsr_slave_0: entered promiscuous mode [ 692.012072][T17977] hsr_slave_1: entered promiscuous mode [ 692.020069][T17977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 692.028075][T17977] Cannot create hsr debugfs directory [ 692.210132][ T8737] bridge_slave_1: left allmulticast mode [ 692.218530][ T8737] bridge_slave_1: left promiscuous mode [ 692.225111][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.236151][ T8737] bridge_slave_0: left allmulticast mode [ 692.242590][ T8737] bridge_slave_0: left promiscuous mode [ 692.249133][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.261186][ T8737] bridge_slave_1: left allmulticast mode [ 692.270521][ T8737] bridge_slave_1: left promiscuous mode [ 692.282594][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.295952][ T8737] bridge_slave_0: left allmulticast mode [ 692.301624][ T8737] bridge_slave_0: left promiscuous mode [ 692.308114][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.708197][ T4490] Bluetooth: hci0: command tx timeout [ 692.944469][ T4490] Bluetooth: hci2: command tx timeout [ 692.952783][ T8737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.967451][ T8737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.977737][ T8737] bond0 (unregistering): Released all slaves [ 693.016630][ T4490] Bluetooth: hci4: command tx timeout [ 693.107299][ T8737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.117868][ T8737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.129482][ T8737] bond0 (unregistering): Released all slaves [ 693.340793][T17791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.450675][T18029] chnl_net:caif_netlink_parms(): no params data found [ 693.756638][T18029] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.769927][T18029] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.779395][T18029] bridge_slave_0: entered allmulticast mode [ 693.794346][T18029] bridge_slave_0: entered promiscuous mode [ 693.873514][T18029] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.880722][T18029] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.901661][T18029] bridge_slave_1: entered allmulticast mode [ 693.913972][T18029] bridge_slave_1: entered promiscuous mode [ 694.049026][ T8737] hsr_slave_0: left promiscuous mode [ 694.060845][ T8737] hsr_slave_1: left promiscuous mode [ 694.070261][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.077914][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.086321][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.094164][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.106416][ T8737] hsr_slave_0: left promiscuous mode [ 694.112485][ T8737] hsr_slave_1: left promiscuous mode [ 694.118432][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.126177][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.135321][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.142706][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.182781][ T8737] veth1_macvtap: left promiscuous mode [ 694.188450][ T8737] veth0_macvtap: left promiscuous mode [ 694.194784][ T8737] veth1_vlan: left promiscuous mode [ 694.200157][ T8737] veth0_vlan: left promiscuous mode [ 694.207418][ T8737] veth1_macvtap: left promiscuous mode [ 694.213002][ T8737] veth0_macvtap: left promiscuous mode [ 694.218648][ T8737] veth1_vlan: left promiscuous mode [ 694.224190][ T8737] veth0_vlan: left promiscuous mode [ 694.765279][ T8737] team0 (unregistering): Port device team_slave_1 removed [ 694.783000][ T4490] Bluetooth: hci0: command tx timeout [ 694.814618][ T8737] team0 (unregistering): Port device team_slave_0 removed [ 695.016061][ T4490] Bluetooth: hci2: command tx timeout [ 695.096906][ T4490] Bluetooth: hci4: command tx timeout [ 695.569306][ T8737] team0 (unregistering): Port device team_slave_1 removed [ 695.615882][ T8737] team0 (unregistering): Port device team_slave_0 removed [ 696.054702][T18029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.109253][T18029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.173815][T17791] veth0_vlan: entered promiscuous mode [ 696.248677][T17948] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 696.259566][T17948] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 696.270629][T17948] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 696.287142][T18029] team0: Port device team_slave_0 added [ 696.297343][T18029] team0: Port device team_slave_1 added [ 696.392774][T17948] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 696.493389][T17910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.502032][T17791] veth1_vlan: entered promiscuous mode [ 696.516528][T18029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.525993][T18029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.556051][T18029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.623711][T18029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.630697][T18029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.671100][T18029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.855328][T17910] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.885083][T18029] hsr_slave_0: entered promiscuous mode [ 696.894124][T18029] hsr_slave_1: entered promiscuous mode [ 696.900582][T18029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 696.908690][T18029] Cannot create hsr debugfs directory [ 696.969279][T15829] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.976501][T15829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.000319][T15829] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.007516][T15829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.070793][T17791] veth0_macvtap: entered promiscuous mode [ 697.081065][T17791] veth1_macvtap: entered promiscuous mode [ 697.093088][ T4490] Bluetooth: hci2: command tx timeout [ 697.184153][ T4490] Bluetooth: hci4: command tx timeout [ 697.218973][T17791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.230837][T17791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.241191][T17791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.252850][T17791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.268910][T17791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.332475][T17791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.347377][T17791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.357395][T17791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.368241][T17791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.381923][T17791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.476617][T17791] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.499598][T17791] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.513051][T17791] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.521774][T17791] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.577932][ T8737] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.615106][T17977] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 697.671973][T17948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.696979][ T8737] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.713422][T17977] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 697.724714][T17977] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 697.807013][ T8737] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.831069][T17977] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 697.882249][T17910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.895205][T17948] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.960518][ T8737] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.010928][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.018130][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.037808][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.044991][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.077661][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.088838][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.190543][T17948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 698.211109][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.239604][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.295672][T17910] veth0_vlan: entered promiscuous mode [ 698.428044][T17910] veth1_vlan: entered promiscuous mode [ 698.440121][ T8737] bridge_slave_1: left allmulticast mode [ 698.447478][ T8737] bridge_slave_1: left promiscuous mode [ 698.454286][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.469121][ T8737] bridge_slave_0: left allmulticast mode [ 698.475984][ T8737] bridge_slave_0: left promiscuous mode [ 698.481714][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.102689][ T8737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.124180][ T8737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.144493][ T8737] bond0 (unregistering): Released all slaves [ 699.263312][ T4490] Bluetooth: hci4: command tx timeout [ 699.369674][T17948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.635214][T17910] veth0_macvtap: entered promiscuous mode [ 699.680006][T17948] veth0_vlan: entered promiscuous mode [ 699.708793][T17977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.781161][T17910] veth1_macvtap: entered promiscuous mode [ 699.845102][ T8737] hsr_slave_0: left promiscuous mode [ 699.870729][ T8737] hsr_slave_1: left promiscuous mode [ 699.883817][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.891268][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.919143][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.934524][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.992733][ T8737] veth1_macvtap: left promiscuous mode [ 699.998720][ T8737] veth0_macvtap: left promiscuous mode [ 700.005032][ T8737] veth1_vlan: left promiscuous mode [ 700.010386][ T8737] veth0_vlan: left promiscuous mode [ 700.052190][ T5093] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 700.064311][ T5093] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 700.072708][ T5093] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 700.081093][ T5093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 700.089299][ T5093] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 700.098746][ T5093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 700.632321][ T8737] team0 (unregistering): Port device team_slave_1 removed [ 700.676188][ T8737] team0 (unregistering): Port device team_slave_0 removed [ 701.088221][T17977] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.132614][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.139809][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.151238][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.158408][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.206942][T17948] veth1_vlan: entered promiscuous mode [ 701.348489][T17910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.359279][T17910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.370182][T17910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.381318][T17910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.405591][T17910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.456667][T17948] veth0_macvtap: entered promiscuous mode [ 701.486346][T18029] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 701.497869][T18029] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 701.516575][T17948] veth1_macvtap: entered promiscuous mode [ 701.533284][T17910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.544247][T17910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.554768][T17910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.565454][T17910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.578376][T17910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.603513][T18029] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 701.617790][T17948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.628360][T17948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.640230][T17948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.650689][T17948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.660791][T17948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.672185][T17948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.684108][T17948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.695045][T17910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.704324][T17910] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.713471][T17910] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.722178][T17910] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.782412][T18029] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 701.836733][T17948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.847791][T17948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.858097][T17948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.869575][T17948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.879992][T17948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.890523][T17948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.905502][T17948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.925369][T17977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.980494][T17948] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.996379][T17948] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.005281][T17948] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.014423][T17948] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.060078][T18175] chnl_net:caif_netlink_parms(): no params data found [ 702.125643][ T8737] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.213340][ T4490] Bluetooth: hci1: command tx timeout [ 702.266833][T18175] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.278116][T18175] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.286890][T18175] bridge_slave_0: entered allmulticast mode [ 702.295332][T18175] bridge_slave_0: entered promiscuous mode [ 702.332036][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.341423][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.370808][ T8737] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.393990][T18175] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.401076][T18175] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.408548][T18175] bridge_slave_1: entered allmulticast mode [ 702.416080][T18175] bridge_slave_1: entered promiscuous mode [ 702.428948][T17977] veth0_vlan: entered promiscuous mode [ 702.503903][ T8737] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.528710][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.538188][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.556330][T18175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.570142][T17977] veth1_vlan: entered promiscuous mode [ 702.585119][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.611868][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.622420][T18175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.674298][T18187] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3017'. [ 702.685842][ T8737] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.727095][T18029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.849360][T18029] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.875687][T18175] team0: Port device team_slave_0 added [ 702.896124][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.898793][T18175] team0: Port device team_slave_1 added [ 702.926654][T17977] veth0_macvtap: entered promiscuous mode [ 702.933146][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.981320][T15862] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.988679][T15862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.075696][T17977] veth1_macvtap: entered promiscuous mode [ 703.108756][T18175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.129827][T18175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.184382][T18175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.262455][T15862] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.269665][T15862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.311703][T18175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.345855][T18175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.419583][T18175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.602564][ T8737] bridge_slave_1: left allmulticast mode [ 703.609969][ T8737] bridge_slave_1: left promiscuous mode [ 703.617782][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.628900][ T8737] bridge_slave_0: left allmulticast mode [ 703.634903][ T8737] bridge_slave_0: left promiscuous mode [ 703.640683][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.114587][T18214] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3056'. [ 704.255860][ T5093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 704.269080][ T5093] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 704.286604][ T5093] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 704.293980][T14278] Bluetooth: hci1: command tx timeout [ 704.301261][ T5093] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 704.309275][ T5093] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 704.322634][ T5093] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 704.397266][ T8737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.409196][ T8737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.419821][ T8737] bond0 (unregistering): Released all slaves [ 704.464952][T17977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.475427][T17977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.485789][T17977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.502009][T17977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.511893][T17977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.522394][T17977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.532376][T17977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.552728][T17977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.578842][T17977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.608113][T18175] hsr_slave_0: entered promiscuous mode [ 704.615868][T18175] hsr_slave_1: entered promiscuous mode [ 704.627912][T17977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.639215][T17977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.650334][T17977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.662306][T17977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.672410][T17977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.690656][T17977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.700929][T17977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.711772][T17977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.724337][T17977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.739152][T17977] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.749220][T17977] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.759074][T17977] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.778678][T17977] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.069904][T18029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 705.165176][ T8737] hsr_slave_0: left promiscuous mode [ 705.174088][ T8737] hsr_slave_1: left promiscuous mode [ 705.197874][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.205995][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.214395][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.221800][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 705.261656][ T8737] veth1_macvtap: left promiscuous mode [ 705.293269][ T8737] veth0_macvtap: left promiscuous mode [ 705.298940][ T8737] veth1_vlan: left promiscuous mode [ 705.320361][ T8737] veth0_vlan: left promiscuous mode [ 705.996899][T15829] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 706.017687][T15829] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz1 [ 706.246238][ T8737] team0 (unregistering): Port device team_slave_1 removed [ 706.298844][ T8737] team0 (unregistering): Port device team_slave_0 removed [ 706.374409][ T4490] Bluetooth: hci0: command tx timeout [ 706.379416][ T5093] Bluetooth: hci1: command tx timeout [ 706.972897][ T1058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.993045][ T1058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.024576][T18029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.370205][T18222] chnl_net:caif_netlink_parms(): no params data found [ 707.438590][ T1058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.464889][ T1058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.628280][T18029] veth0_vlan: entered promiscuous mode [ 707.770584][T18222] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.797971][T18222] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.810692][T18222] bridge_slave_0: entered allmulticast mode [ 707.830558][T18222] bridge_slave_0: entered promiscuous mode [ 707.862373][T18029] veth1_vlan: entered promiscuous mode [ 707.931831][T18222] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.957471][T18222] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.983915][T18222] bridge_slave_1: entered allmulticast mode [ 708.006264][T18222] bridge_slave_1: entered promiscuous mode [ 708.094853][ T169] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.142375][T18175] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 708.174796][T18175] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 708.188597][T18175] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 708.207444][T18222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.255365][T18222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.283185][T18175] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 708.459225][ T5093] Bluetooth: hci0: command tx timeout [ 708.465068][ T5093] Bluetooth: hci1: command tx timeout [ 708.486489][ T169] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.635129][T18222] team0: Port device team_slave_0 added [ 708.644344][T18029] veth0_macvtap: entered promiscuous mode [ 708.712480][ T169] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.772971][T18029] veth1_macvtap: entered promiscuous mode [ 708.797097][T18222] team0: Port device team_slave_1 added [ 708.927129][ T169] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.059513][T18222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.077454][T18222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.127842][T18222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.172174][T18319] fuse: Unknown parameter '0x000000000000000b' [ 709.233775][T18222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.243809][T18222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.273768][T18222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.310924][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.334765][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.359592][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.402138][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.434451][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.455166][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.475421][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.501258][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.513866][T18029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.547436][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.589115][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.613235][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.639739][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.667085][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.696346][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.721600][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.748403][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.779490][T18029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.870942][T18029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.902608][T18029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.929463][T18029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.945641][T18029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.979984][T18222] hsr_slave_0: entered promiscuous mode [ 709.990889][T18222] hsr_slave_1: entered promiscuous mode [ 710.002442][T18222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 710.010559][T18222] Cannot create hsr debugfs directory [ 710.207469][T18175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.230647][ T169] bridge_slave_1: left allmulticast mode [ 710.236673][ T169] bridge_slave_1: left promiscuous mode [ 710.244192][ T169] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.255220][ T169] bridge_slave_0: left allmulticast mode [ 710.260916][ T169] bridge_slave_0: left promiscuous mode [ 710.267551][ T169] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.533043][ T5093] Bluetooth: hci0: command tx timeout [ 710.678417][ T169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.692451][ T169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.703247][ T169] bond0 (unregistering): Released all slaves [ 710.738465][T18340] vlan2: entered promiscuous mode [ 710.748014][T18340] vlan0: entered promiscuous mode [ 710.770991][T18340] vlan0: left promiscuous mode [ 710.903118][ T5143] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 711.054678][T18175] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.094640][ T5143] usb 4-1: Using ep0 maxpacket: 16 [ 711.103683][ T169] hsr_slave_0: left promiscuous mode [ 711.109869][ T169] hsr_slave_1: left promiscuous mode [ 711.111427][ T5143] usb 4-1: New USB device found, idVendor=0582, idProduct=05e6, bcdDevice=4e.00 [ 711.126214][ T169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.132263][ T5143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.134545][ T169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.143281][ T5143] usb 4-1: Product: syz [ 711.153664][ T5143] usb 4-1: Manufacturer: syz [ 711.158267][ T5143] usb 4-1: SerialNumber: syz [ 711.160114][ T169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.171698][ T169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.172113][ T5143] usb 4-1: config 0 descriptor?? [ 711.212272][ T169] veth1_macvtap: left promiscuous mode [ 711.218060][ T169] veth0_macvtap: left promiscuous mode [ 711.224492][ T169] veth1_vlan: left promiscuous mode [ 711.229791][ T169] veth0_vlan: left promiscuous mode [ 711.343097][ T930] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 711.532996][ T930] usb 2-1: Using ep0 maxpacket: 16 [ 711.543843][ T930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.562825][ T930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 711.595880][ T930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 711.607678][ T930] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 711.617498][ T930] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 711.631644][ T930] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 711.650139][ T930] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 711.671624][ T930] usb 2-1: Manufacturer: syz [ 711.680119][ T930] usb 2-1: config 0 descriptor?? [ 711.854348][ T169] team0 (unregistering): Port device team_slave_1 removed [ 711.916825][ T169] team0 (unregistering): Port device team_slave_0 removed [ 711.993003][ T930] rc_core: IR keymap rc-hauppauge not found [ 711.998948][ T930] Registered IR keymap rc-empty [ 712.014099][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 712.056232][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 712.112882][ T930] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 712.136305][ T930] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input32 [ 712.176674][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 712.218367][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 712.265439][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 712.295957][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 712.336536][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 712.378795][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 712.419079][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 712.466365][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 712.506483][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 712.544422][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 712.587370][ T930] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 712.595696][ T930] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 712.613473][ T5093] Bluetooth: hci0: command tx timeout [ 712.617800][ T930] usb 2-1: USB disconnect, device number 35 [ 712.636241][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.652589][T18342] bond0: entered promiscuous mode [ 712.663028][T18342] bond_slave_0: entered promiscuous mode [ 712.682076][T18342] bond_slave_1: entered promiscuous mode [ 712.684473][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.706808][T18342] bond0: left promiscuous mode [ 712.711609][T18342] bond_slave_0: left promiscuous mode [ 712.721056][T18342] bond_slave_1: left promiscuous mode [ 712.852138][T15959] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.859366][T15959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.872165][ T5143] usb 4-1: USB disconnect, device number 48 [ 712.968054][T15959] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.973235][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.975231][T15959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.018800][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.134562][ T5104] udevd[5104]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 713.324609][T15858] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 713.379901][T15858] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz1 [ 713.520684][T18175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.602452][ T169] bridge_slave_1: left allmulticast mode [ 713.602480][ T169] bridge_slave_1: left promiscuous mode [ 713.602692][ T169] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.605159][ T169] bridge_slave_0: left allmulticast mode [ 713.605182][ T169] bridge_slave_0: left promiscuous mode [ 713.605395][ T169] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.441963][ T169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.460879][ T169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.482821][ T169] bond0 (unregistering): Released all slaves [ 714.606913][ T5142] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 714.749468][T18222] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 714.814067][ T5142] usb 1-1: Using ep0 maxpacket: 32 [ 714.830378][ T5142] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 714.863951][ T5142] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 714.875311][ T5142] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 714.889599][ T5142] usb 1-1: Product: syz [ 714.904043][ T5142] usb 1-1: Manufacturer: syz [ 714.908690][ T5142] usb 1-1: SerialNumber: syz [ 714.913392][T18222] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 714.932773][ T5142] usb 1-1: config 0 descriptor?? [ 714.943533][T18222] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 714.958442][T18397] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 715.009723][ T169] hsr_slave_0: left promiscuous mode [ 715.027680][ T169] hsr_slave_1: left promiscuous mode [ 715.041253][ T169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.067841][ T169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.078346][ T169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.090544][ T169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.117571][ T169] veth1_macvtap: left promiscuous mode [ 715.127404][ T169] veth0_macvtap: left promiscuous mode [ 715.134121][ T169] veth1_vlan: left promiscuous mode [ 715.143226][ T169] veth0_vlan: left promiscuous mode [ 715.710074][T18412] xt_l2tp: v2 sid > 0xffff: 100663296 [ 715.969822][T18414] kvm: kvm [18413]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x1900000019 [ 715.989415][T18414] kvm: kvm [18413]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x1a0000002d [ 716.000297][T18414] kvm: kvm [18413]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x1900000053 [ 716.016278][T18414] kvm: kvm [18413]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x200000065 [ 716.180436][ T169] team0 (unregistering): Port device team_slave_1 removed [ 716.268553][ T169] team0 (unregistering): Port device team_slave_0 removed [ 716.874412][T18222] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 716.956074][T18175] veth0_vlan: entered promiscuous mode [ 716.998879][T18175] veth1_vlan: entered promiscuous mode [ 717.128902][T18432] netlink: 'syz.1.3101': attribute type 2 has an invalid length. [ 717.148742][T18432] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3101'. [ 717.229906][T18175] veth0_macvtap: entered promiscuous mode [ 717.307813][T18175] veth1_macvtap: entered promiscuous mode [ 717.369353][T15829] usb 1-1: USB disconnect, device number 42 [ 717.412683][T18175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.452952][T18175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.489038][T18175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.504801][T18445] xt_l2tp: v2 sid > 0xffff: 100663296 [ 717.508558][T18175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.520532][T18175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.533040][ T5134] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 717.533377][T18175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.565966][T18175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.581182][T18175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.623114][T18175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.651657][T18175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.664712][T18175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.674777][T18175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.685337][T18175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.697787][T18175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.729620][T18175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.743449][ T5134] usb 4-1: Using ep0 maxpacket: 16 [ 717.745074][T18175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.759381][T18175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.764650][ T5134] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 717.768246][T15858] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 717.787134][T18175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.794327][ T5134] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 717.855026][ T5134] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 717.877233][ T5134] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 717.895147][ T5134] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 717.937092][ T5134] usb 4-1: Product: syz [ 717.949480][ T5134] usb 4-1: Manufacturer: syz [ 717.962558][ T5134] usb 4-1: SerialNumber: syz [ 717.976291][ T5134] usb 4-1: config 0 descriptor?? [ 717.985568][T15858] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.989704][ T5134] usb 4-1: NFC: intf ffff88801c6cd000 id ffffffff8ecac5a0 [ 718.004161][T15858] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 718.031515][T15858] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 718.041323][T15858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 718.052228][T18222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.070090][T15858] usb 2-1: SerialNumber: syz [ 718.140107][ T8737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.164213][ T8737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.202589][T18222] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.241280][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.248406][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.309165][T15858] usb 2-1: cannot find UAC_HEADER [ 718.318067][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.337225][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.342593][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.344395][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.412005][T15858] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 718.425733][T15858] usb 2-1: USB disconnect, device number 36 [ 718.505314][T18222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.560458][T18222] veth0_vlan: entered promiscuous mode [ 718.597984][T18222] veth1_vlan: entered promiscuous mode [ 718.640063][ T5104] udevd[5104]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 718.701205][T18222] veth0_macvtap: entered promiscuous mode [ 718.746823][T18222] veth1_macvtap: entered promiscuous mode [ 718.821742][T18222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.860132][T18222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.890152][T18222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.912840][T18222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.928976][T18222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.951056][T18222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.961600][T18222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.977425][T18222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.989149][T18222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.996720][ T5134] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 719.010501][T18222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.024204][T18222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.035866][T18222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.046483][T18222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.057937][T18222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.069820][T18222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.081668][T18222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.094213][T18222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.105988][T18222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 719.125925][T18222] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.142451][ T5143] usb 4-1: USB disconnect, device number 49 [ 719.150992][T18222] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.168087][T18222] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.178253][T18222] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.210122][ T5134] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 719.223354][ T5138] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 719.237366][ T5134] usb 5-1: New USB device found, idVendor=04da, idProduct=104d, bcdDevice= 0.40 [ 719.248856][ T5134] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.265453][ T5134] usb 5-1: Product: syz [ 719.269729][ T5134] usb 5-1: Manufacturer: syz [ 719.278427][ T5134] usb 5-1: SerialNumber: syz [ 719.311113][ T5134] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 719.380317][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.404436][ T5138] usb 1-1: Using ep0 maxpacket: 32 [ 719.412545][ T5138] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 719.415791][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.437262][ T5138] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 719.449100][ T5138] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 719.471876][ T5138] usb 1-1: Product: syz [ 719.478917][ T5138] usb 1-1: Manufacturer: syz [ 719.493006][ T5138] usb 1-1: SerialNumber: syz [ 719.525550][ T5143] usb 5-1: USB disconnect, device number 42 [ 719.535507][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.537632][ T5138] usb 1-1: config 0 descriptor?? [ 719.570847][T18473] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 719.587918][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.734539][ C1] hrtimer: interrupt took 15337142 ns [ 719.769126][T18487] xt_l2tp: v2 sid > 0xffff: 100663296 [ 726.218904][T15703] usb 1-1: USB disconnect, device number 43 [ 727.324479][T18522] netlink: 'syz.2.3131': attribute type 1 has an invalid length. [ 728.213071][T18505] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 729.117750][T18530] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 737.930799][ T4490] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 737.941771][ T4490] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 737.949782][ T4490] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 737.958386][ T4490] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 737.967040][ T4490] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 737.975188][ T4490] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 742.650592][ T5093] Bluetooth: hci5: command tx timeout [ 746.238876][ T4490] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 746.291045][ T4490] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 746.305478][T18603] chnl_net:caif_netlink_parms(): no params data found [ 746.305941][ T4490] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 746.465250][ T4490] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 746.473646][ T4490] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 746.481002][ T4490] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 748.994004][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.000336][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.003209][ T5093] Bluetooth: hci5: command tx timeout [ 753.447655][T18609] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 754.142389][ T5093] Bluetooth: hci5: command tx timeout [ 757.264799][ T5093] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 757.342751][ T5093] Bluetooth: hci5: command tx timeout [ 757.350436][ T4490] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 759.767918][T18634] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 767.813498][ T4490] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 775.243106][T14278] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 775.267769][ T5099] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 775.313000][ T5099] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 775.342987][ T5099] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 775.426624][ T5099] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 775.443786][ T5099] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 775.451165][ T5099] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 776.706491][ T4490] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 776.765383][T14278] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 776.777176][T14278] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 776.786095][T18650] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 776.794518][T18650] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 776.803706][T18650] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 776.811057][T18650] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 776.846430][T18650] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 776.856183][T18650] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 776.864400][T18650] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 776.872061][T18650] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 783.725295][T18650] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 783.753620][T18650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 783.765139][ T4490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 783.788344][ T4490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 786.902917][ T4490] Bluetooth: hci6: command tx timeout [ 786.910835][T18650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 786.918532][T18650] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 786.925890][T18650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 789.319582][ T5099] Bluetooth: hci6: command tx timeout [ 791.477717][ T4490] Bluetooth: hci0: command tx timeout [ 791.484797][ T4490] Bluetooth: hci7: command tx timeout [ 791.491113][ T4490] Bluetooth: hci6: command tx timeout [ 791.497134][ T4490] Bluetooth: hci8: command tx timeout [ 791.549896][T18603] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.557104][T18603] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.564340][T18603] bridge_slave_0: entered allmulticast mode [ 791.571027][T18603] bridge_slave_0: entered promiscuous mode [ 793.841116][T18603] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.849188][T18603] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.856436][T18603] bridge_slave_1: entered allmulticast mode [ 793.863769][T18603] bridge_slave_1: entered promiscuous mode [ 793.885932][ T5093] Bluetooth: hci8: command tx timeout [ 793.891361][ T5093] Bluetooth: hci6: command tx timeout [ 793.898075][ T5093] Bluetooth: hci7: command tx timeout [ 793.904117][ T5093] Bluetooth: hci0: command tx timeout [ 796.581084][ T4490] Bluetooth: hci0: command tx timeout [ 796.586525][ T4490] Bluetooth: hci7: command tx timeout [ 796.588396][ T5093] Bluetooth: hci8: command tx timeout [ 799.814963][T18650] Bluetooth: hci8: command tx timeout [ 799.814983][ T5093] Bluetooth: hci7: command tx timeout [ 799.820455][T18650] Bluetooth: hci0: command tx timeout [ 807.465685][ T4490] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 807.504731][ T4490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 812.188505][T18659] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 812.196453][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 812.202768][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 821.367170][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.664768][T18650] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 821.676619][T18650] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 821.686440][T18650] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 821.695466][T18650] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 821.703453][T18650] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 821.710805][T18650] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 823.773315][T18650] Bluetooth: hci1: command tx timeout [ 825.152390][ T4490] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 825.164582][ T4490] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 828.480243][ T4490] Bluetooth: hci1: command tx timeout [ 828.491900][ T5093] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 828.501947][ T5093] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 828.515626][ T5093] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 828.530148][ T5093] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 828.816253][T18652] chnl_net:caif_netlink_parms(): no params data found [ 830.553508][ T5093] Bluetooth: hci1: command tx timeout [ 831.655131][ T5093] Bluetooth: hci2: command tx timeout [ 834.793178][T18650] Bluetooth: hci1: command tx timeout [ 834.798628][T18650] Bluetooth: hci2: command tx timeout [ 834.957338][T18655] chnl_net:caif_netlink_parms(): no params data found [ 835.087813][T18651] chnl_net:caif_netlink_parms(): no params data found [ 835.199430][T18650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 835.210889][T18650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 835.230788][T18650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 835.239646][T18650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 835.247800][T18650] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 835.256465][T18650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 835.946500][ T5093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 835.956465][ T5093] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 835.967230][ T5093] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 835.976173][ T5093] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 835.993086][ T5093] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 836.001666][ T5093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 836.073699][T18650] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 836.083478][T18650] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 836.091360][T18650] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 836.100394][T18650] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 836.109456][T18650] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 836.118639][T18650] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 836.893412][T18650] Bluetooth: hci2: command tx timeout [ 837.343227][T18650] Bluetooth: hci3: command tx timeout [ 838.083177][T18650] Bluetooth: hci4: command tx timeout [ 838.133286][T18650] Bluetooth: hci5: command tx timeout [ 838.497370][T18670] chnl_net:caif_netlink_parms(): no params data found [ 842.008254][T18650] Bluetooth: hci2: command tx timeout [ 842.013715][T18650] Bluetooth: hci3: command tx timeout [ 845.994987][T18650] Bluetooth: hci4: command tx timeout [ 846.000423][T18650] Bluetooth: hci5: command tx timeout [ 851.439764][ T5093] Bluetooth: hci5: command tx timeout [ 851.446112][ T5093] Bluetooth: hci4: command tx timeout [ 851.451527][ T5093] Bluetooth: hci3: command tx timeout [ 857.212907][T18650] Bluetooth: hci3: command tx timeout [ 857.219739][T18650] Bluetooth: hci4: command tx timeout [ 857.225264][T18650] Bluetooth: hci5: command tx timeout [ 871.137098][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.143429][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 889.246123][ T4490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 900.355514][T18650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 900.365222][T18650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 900.373387][T18650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 900.382623][T18650] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 900.390167][T18650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 937.592847][ T4490] Bluetooth: hci6: command 0x0406 tx timeout [ 937.621081][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.627541][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.614944][T14278] Bluetooth: hci2: command 0x0406 tx timeout [ 1015.521690][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1015.528022][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1015.535945][T14278] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1015.992916][ T30] INFO: task kworker/0:4:5138 blocked for more than 158 seconds. [ 1016.000680][ T30] Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 1016.008461][ T4490] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1016.082835][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1016.091535][ T30] task:kworker/0:4 state:D stack:19224 pid:5138 tgid:5138 ppid:2 flags:0x00004000 [ 1016.189843][ T30] Workqueue: events linkwatch_event [ 1016.212818][ T30] Call Trace: [ 1016.216123][ T30] [ 1016.219062][ T30] __schedule+0x17e8/0x4a20 [ 1016.262834][ T30] ? __pfx___schedule+0x10/0x10 [ 1016.267721][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1016.312809][ T30] ? __pfx_lock_release+0x10/0x10 [ 1016.317879][ T30] ? kick_pool+0x45c/0x620 [ 1016.322309][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1016.362810][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1016.368041][ T30] ? schedule+0x90/0x320 [ 1016.372291][ T30] schedule+0x14b/0x320 [ 1016.492815][ T30] schedule_preempt_disabled+0x13/0x30 [ 1016.498320][ T30] __mutex_lock+0x6a4/0xd70 [ 1016.532815][ T30] ? __mutex_lock+0x527/0xd70 [ 1016.537537][ T30] ? linkwatch_event+0xe/0x60 [ 1016.542226][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1016.603125][ T30] ? process_scheduled_works+0x945/0x1830 [ 1016.608884][ T30] linkwatch_event+0xe/0x60 [ 1016.637132][ T30] process_scheduled_works+0xa2c/0x1830 [ 1016.643830][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1016.649838][ T30] ? assign_work+0x364/0x3d0 [ 1016.673527][ T30] worker_thread+0x86d/0xd50 [ 1016.678158][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1016.693127][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1016.698196][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1016.703479][ T30] kthread+0x2f0/0x390 [ 1016.707565][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1016.712683][ T30] ? __pfx_kthread+0x10/0x10 [ 1016.717321][ T30] ret_from_fork+0x4b/0x80 [ 1016.721748][ T30] ? __pfx_kthread+0x10/0x10 [ 1016.726685][ T30] ret_from_fork_asm+0x1a/0x30 [ 1016.731489][ T30] [ 1016.736888][ T30] INFO: task syz-executor:18649 blocked for more than 159 seconds. [ 1016.744843][ T30] Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 1016.752474][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1016.761943][ T30] task:syz-executor state:D stack:25296 pid:18649 tgid:18649 ppid:1 flags:0x00004006 [ 1016.772799][ T30] Call Trace: [ 1016.776089][ T30] [ 1016.779030][ T30] __schedule+0x17e8/0x4a20 [ 1016.783600][ T30] ? __pfx___schedule+0x10/0x10 [ 1016.788462][ T30] ? __pfx_lock_release+0x10/0x10 [ 1016.793529][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1016.799022][ T30] ? schedule+0x90/0x320 [ 1016.803531][ T30] schedule+0x14b/0x320 [ 1016.807704][ T30] schedule_preempt_disabled+0x13/0x30 [ 1016.813204][ T30] __mutex_lock+0x6a4/0xd70 [ 1016.817722][ T30] ? __mutex_lock+0x527/0xd70 [ 1016.822410][ T30] ? ppp_exit_net+0xe3/0x3d0 [ 1016.827044][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1016.832089][ T30] ? net_generic+0x1f/0x240 [ 1016.836644][ T30] ppp_exit_net+0xe3/0x3d0 [ 1016.841077][ T30] ? __pfx_ppp_exit_net+0x10/0x10 [ 1016.846141][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1016.851353][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 1016.858211][ T30] setup_net+0x9a9/0xca0 [ 1016.862472][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 1016.868659][ T30] ? __pfx_setup_net+0x10/0x10 [ 1016.873483][ T30] copy_net_ns+0x4e2/0x7b0 [ 1016.877958][ T30] create_new_namespaces+0x425/0x7b0 [ 1016.883300][ T30] ? bpf_lsm_capable+0x9/0x10 [ 1016.888011][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 1016.893800][ T30] ksys_unshare+0x619/0xc10 [ 1016.898337][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 1016.903521][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1016.909520][ T30] ? do_syscall_64+0x100/0x230 [ 1016.914337][ T30] __x64_sys_unshare+0x38/0x40 [ 1016.919291][ T30] do_syscall_64+0xf3/0x230 [ 1016.923839][ T30] ? clear_bhb_loop+0x35/0x90 [ 1016.928529][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.934470][ T30] RIP: 0033:0x7f9f18f77337 [ 1016.938898][ T30] RSP: 002b:00007f9f1922ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1016.947358][ T30] RAX: ffffffffffffffda RBX: 00007f9f18fe4be6 RCX: 00007f9f18f77337 [ 1016.955494][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1016.964263][ T30] RBP: 0000000000000000 R08: 00007f9f19c37d60 R09: 0000000000000000 [ 1016.972248][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 1016.980888][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 1016.988931][ T30] [ 1016.991964][ T30] INFO: task syz-executor:18651 blocked for more than 159 seconds. [ 1016.999902][ T30] Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 1017.007636][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1017.016341][ T30] task:syz-executor state:D stack:21024 pid:18651 tgid:18651 ppid:1 flags:0x00004006 [ 1017.026556][ T30] Call Trace: [ 1017.029842][ T30] [ 1017.032826][ T30] __schedule+0x17e8/0x4a20 [ 1017.037377][ T30] ? __pfx___schedule+0x10/0x10 [ 1017.042239][ T30] ? __pfx_lock_release+0x10/0x10 [ 1017.047308][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1017.052905][ T30] ? schedule+0x90/0x320 [ 1017.057155][ T30] schedule+0x14b/0x320 [ 1017.062645][ T30] schedule_preempt_disabled+0x13/0x30 [ 1017.068155][ T30] __mutex_lock+0x6a4/0xd70 [ 1017.072677][ T30] ? __mutex_lock+0x527/0xd70 [ 1017.077402][ T30] ? tun_chr_close+0x3e/0x1b0 [ 1017.082094][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1017.087174][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1017.093546][ T30] tun_chr_close+0x3e/0x1b0 [ 1017.098057][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 1017.103323][ T30] __fput+0x24a/0x8a0 [ 1017.107329][ T30] task_work_run+0x24f/0x310 [ 1017.111948][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1017.117107][ T30] ? do_exit+0xa22/0x27e0 [ 1017.121445][ T30] ? kmem_cache_free+0x145/0x350 [ 1017.126435][ T30] do_exit+0xa27/0x27e0 [ 1017.130614][ T30] ? __pfx_do_exit+0x10/0x10 [ 1017.135246][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1017.140633][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1017.146656][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1017.153046][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1017.158171][ T30] do_group_exit+0x207/0x2c0 [ 1017.163619][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1017.168827][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1017.174680][ T30] get_signal+0x16a1/0x1740 [ 1017.179219][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 1017.184290][ T30] ? __pfx_get_signal+0x10/0x10 [ 1017.189166][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1017.194755][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1017.200918][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1017.207175][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 1017.212946][ T30] syscall_exit_to_user_mode+0xc9/0x360 [ 1017.218513][ T30] do_syscall_64+0x100/0x230 [ 1017.223148][ T30] ? clear_bhb_loop+0x35/0x90 [ 1017.227834][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.233776][ T30] RIP: 0033:0x7fbfb437796c [ 1017.238197][ T30] RSP: 002b:00007fbfb462f6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1017.246655][ T30] RAX: 000000000000003c RBX: 00007fbfb5034620 RCX: 00007fbfb437796c [ 1017.254765][ T30] RDX: 000000000000003c RSI: 00007fbfb5034670 RDI: 0000000000000003 [ 1017.262746][ T30] RBP: 0000000000000000 R08: 00007fbfb462f704 R09: 000000000000000c [ 1017.272123][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1017.282489][ T30] R13: 0000000000000000 R14: 00007fbfb5034670 R15: 0000000000000000 [ 1017.290537][ T30] [ 1017.293600][ T30] INFO: task syz-executor:18655 blocked for more than 160 seconds. [ 1017.301489][ T30] Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 1017.322804][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1017.331487][ T30] task:syz-executor state:D stack:21024 pid:18655 tgid:18655 ppid:1 flags:0x00004006 [ 1017.343982][ T30] Call Trace: [ 1017.347271][ T30] [ 1017.350212][ T30] __schedule+0x17e8/0x4a20 [ 1017.355220][ T30] ? __pfx___schedule+0x10/0x10 [ 1017.360086][ T30] ? __pfx_lock_release+0x10/0x10 [ 1017.365156][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1017.372001][ T30] ? schedule+0x90/0x320 [ 1017.376338][ T30] schedule+0x14b/0x320 [ 1017.380507][ T30] schedule_preempt_disabled+0x13/0x30 [ 1017.386006][ T30] __mutex_lock+0x6a4/0xd70 [ 1017.390525][ T30] ? __mutex_lock+0x527/0xd70 [ 1017.395242][ T30] ? tun_chr_close+0x3e/0x1b0 [ 1017.399933][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1017.405104][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1017.411446][ T30] tun_chr_close+0x3e/0x1b0 [ 1017.415993][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 1017.421127][ T30] __fput+0x24a/0x8a0 [ 1017.425186][ T30] task_work_run+0x24f/0x310 [ 1017.429797][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1017.434957][ T30] ? do_exit+0xa22/0x27e0 [ 1017.439295][ T30] ? kmem_cache_free+0x145/0x350 [ 1017.444279][ T30] do_exit+0xa27/0x27e0 [ 1017.448457][ T30] ? __pfx_do_exit+0x10/0x10 [ 1017.453569][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1017.458960][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1017.464980][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1017.472629][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1017.477796][ T30] do_group_exit+0x207/0x2c0 [ 1017.482398][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1017.487631][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1017.492873][ T30] get_signal+0x16a1/0x1740 [ 1017.497407][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 1017.502443][ T30] ? __pfx_get_signal+0x10/0x10 [ 1017.507430][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1017.522816][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1017.528996][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1017.549177][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 1017.555341][ T30] syscall_exit_to_user_mode+0xc9/0x360 [ 1017.560912][ T30] do_syscall_64+0x100/0x230 [ 1017.565551][ T30] ? clear_bhb_loop+0x35/0x90 [ 1017.570238][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.576887][ T30] RIP: 0033:0x7f3382d7796c [ 1017.581309][ T30] RSP: 002b:00007f338302f6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1017.590387][ T30] RAX: 000000000000002c RBX: 00007f3383a34620 RCX: 00007f3382d7796c [ 1017.598402][ T30] RDX: 000000000000002c RSI: 00007f3383a34670 RDI: 0000000000000003 [ 1017.606729][ T30] RBP: 0000000000000000 R08: 00007f338302f704 R09: 000000000000000c [ 1017.614741][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1017.622716][ T30] R13: 0000000000000000 R14: 00007f3383a34670 R15: 0000000000000000 [ 1017.630740][ T30] [ 1017.633801][ T30] INFO: task syz-executor:18670 blocked for more than 160 seconds. [ 1017.641689][ T30] Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 1017.650297][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1017.659186][ T30] task:syz-executor state:D stack:21024 pid:18670 tgid:18670 ppid:1 flags:0x00000004 [ 1017.669402][ T30] Call Trace: [ 1017.672685][ T30] [ 1017.676372][ T30] __schedule+0x17e8/0x4a20 [ 1017.680915][ T30] ? __pfx___schedule+0x10/0x10 [ 1017.686440][ T30] ? __pfx_lock_release+0x10/0x10 [ 1017.691481][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1017.696994][ T30] ? schedule+0x90/0x320 [ 1017.701245][ T30] schedule+0x14b/0x320 [ 1017.705548][ T30] schedule_preempt_disabled+0x13/0x30 [ 1017.711014][ T30] __mutex_lock+0x6a4/0xd70 [ 1017.715561][ T30] ? __mutex_lock+0x527/0xd70 [ 1017.720251][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 1017.725491][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1017.730541][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 1017.735611][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1017.740827][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1017.746328][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 1017.751628][ T30] ? __pfx_validate_chain+0x10/0x10 [ 1017.757214][ T30] ? __pfx_validate_chain+0x10/0x10 [ 1017.762425][ T30] ? arch_stack_walk+0x16d/0x1b0 [ 1017.767425][ T30] ? mark_lock+0x9a/0x350 [ 1017.771771][ T30] ? __pfx_validate_chain+0x10/0x10 [ 1017.782966][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1017.788032][ T30] ? mark_lock+0x9a/0x350 [ 1017.792373][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1017.797459][ T30] netlink_rcv_skb+0x1e3/0x430 [ 1017.802234][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1017.807842][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1017.813199][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1017.818409][ T30] netlink_unicast+0x7ea/0x980 [ 1017.823220][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1017.828514][ T30] ? __virt_addr_valid+0x183/0x520 [ 1017.833665][ T30] ? __check_object_size+0x49c/0x900 [ 1017.838963][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 1017.844119][ T30] netlink_sendmsg+0x8db/0xcb0 [ 1017.848906][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1017.854552][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 1017.859508][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1017.865072][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 1017.870547][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1017.875880][ T30] __sock_sendmsg+0x221/0x270 [ 1017.881909][ T30] __sys_sendto+0x3a4/0x4f0 [ 1017.886475][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 1017.891523][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1017.896759][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 1017.903072][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1017.909065][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1017.915444][ T30] __x64_sys_sendto+0xde/0x100 [ 1017.920223][ T30] do_syscall_64+0xf3/0x230 [ 1017.924771][ T30] ? clear_bhb_loop+0x35/0x90 [ 1017.929455][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.935434][ T30] RIP: 0033:0x7f66bf77796c [ 1017.939859][ T30] RSP: 002b:00007f66bfa2f6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1017.948313][ T30] RAX: ffffffffffffffda RBX: 00007f66c0434620 RCX: 00007f66bf77796c [ 1017.956408][ T30] RDX: 000000000000003c RSI: 00007f66c0434670 RDI: 0000000000000003 [ 1017.964413][ T30] RBP: 0000000000000000 R08: 00007f66bfa2f704 R09: 000000000000000c [ 1017.972389][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1017.980391][ T30] R13: 0000000000000000 R14: 00007f66c0434670 R15: 0000000000000000 [ 1017.989162][ T30] [ 1017.992197][ T30] INFO: task syz-executor:18699 blocked for more than 160 seconds. [ 1018.000681][ T30] Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 1018.008475][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1018.017173][ T30] task:syz-executor state:D stack:25824 pid:18699 tgid:18699 ppid:1 flags:0x00000004 [ 1018.027381][ T30] Call Trace: [ 1018.030665][ T30] [ 1018.033629][ T30] __schedule+0x17e8/0x4a20 [ 1018.038164][ T30] ? __pfx___schedule+0x10/0x10 [ 1018.043054][ T30] ? __pfx_lock_release+0x10/0x10 [ 1018.048089][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1018.053712][ T30] ? schedule+0x90/0x320 [ 1018.057960][ T30] schedule+0x14b/0x320 [ 1018.062122][ T30] schedule_preempt_disabled+0x13/0x30 [ 1018.067615][ T30] __mutex_lock+0x6a4/0xd70 [ 1018.072129][ T30] ? __mutex_lock+0x527/0xd70 [ 1018.076850][ T30] ? __tun_chr_ioctl+0x48f/0x2400 [ 1018.081885][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1018.087667][ T30] ? __might_fault+0xc6/0x120 [ 1018.092364][ T30] __tun_chr_ioctl+0x48f/0x2400 [ 1018.097849][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1018.103243][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1018.109248][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1018.114223][ T30] ? security_file_ioctl+0x87/0xb0 [ 1018.119342][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1018.124493][ T30] __se_sys_ioctl+0xfc/0x170 [ 1018.129094][ T30] do_syscall_64+0xf3/0x230 [ 1018.133636][ T30] ? clear_bhb_loop+0x35/0x90 [ 1018.138324][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.144259][ T30] RIP: 0033:0x7f8157f757db [ 1018.148680][ T30] RSP: 002b:00007f815822fe90 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1018.157319][ T30] RAX: ffffffffffffffda RBX: 00007f8157fe4be6 RCX: 00007f8157f757db [ 1018.165328][ T30] RDX: 00007f815822ff10 RSI: 00000000400454ca RDI: 00000000000000c8 [ 1018.173334][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1018.181308][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 1018.190039][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 1018.198659][ T30] [ 1018.201700][ T30] [ 1018.201700][ T30] Showing all locks held in the system: [ 1018.210757][ T30] 3 locks held by kworker/u8:0/11: [ 1018.215917][ T30] #0: ffff88802a24e148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1018.227551][ T30] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1018.241259][ T30] #2: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1018.250806][ T30] 6 locks held by kworker/u8:1/12: [ 1018.256167][ T30] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1018.267178][ T30] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1018.277764][ T30] #2: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1018.287224][ T30] #3: ffff88806a53f0e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 1018.298018][ T30] #4: ffff88802e598250 (&devlink->lock_key#83){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 1018.309710][ T30] #5: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 1018.318659][ T30] 1 lock held by khungtaskd/30: [ 1018.323539][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1018.333463][ T30] 3 locks held by kworker/u9:1/4490: [ 1018.338749][ T30] #0: ffff8880558ba148 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1018.349608][ T30] #1: ffffc9000dbb7d00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1018.361764][ T30] #2: ffff8880558b0d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x1bf/0x6b0 [ 1018.371237][ T30] 2 locks held by getty/4845: [ 1018.375942][ T30] #0: ffff88802ae120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1018.385745][ T30] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1018.412808][ T30] 3 locks held by kworker/u9:5/5093: [ 1018.418109][ T30] 5 locks held by kworker/u9:8/5099: [ 1018.431036][ T30] #0: ffff88805fb8e148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1018.441995][ T30] #1: ffffc900039a7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1018.457041][ T30] #2: ffff888022210d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1018.467275][ T30] #3: ffff888022210078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 1018.478571][ T30] #4: ffffffff8f751508 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x185/0x340 [ 1018.488437][ T30] 2 locks held by kworker/0:3/5134: [ 1018.493704][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1018.521632][ T30] #1: ffffc9000433fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1018.534402][ T30] 3 locks held by kworker/0:4/5138: [ 1018.539616][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1018.572812][ T30] #1: ffffc9000444fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1018.602809][ T30] #2: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1018.611826][ T30] 3 locks held by kworker/0:6/5142: [ 1018.628539][ T30] 3 locks held by kworker/0:7/5143: [ 1018.633789][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1018.644822][ T30] #1: ffffc900044afd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1018.656280][ T30] #2: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1018.667062][ T30] 4 locks held by kworker/u8:10/8737: [ 1018.672439][ T30] 3 locks held by kworker/u9:0/14278: [ 1018.677862][ T30] 1 lock held by syz.2.3132/18532: [ 1018.683006][ T30] #0: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x89e/0x1000 [ 1018.692358][ T30] 2 locks held by syz-executor/18649: [ 1018.697771][ T30] #0: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1018.707990][ T30] #1: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: ppp_exit_net+0xe3/0x3d0 [ 1018.717913][ T30] 6 locks held by kworker/u9:2/18650: [ 1018.723337][ T30] #0: ffff888024b5e148 ((wq_completion)hci1#3){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1018.734374][ T30] #1: ffffc9000977fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1018.746964][ T30] #2: ffff888018338d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1018.756860][ T30] #3: ffff888018338078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 1018.766619][ T30] #4: ffffffff8f751508 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x185/0x340 [ 1018.776432][ T30] #5: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1018.787374][ T30] 1 lock held by syz-executor/18651: [ 1018.792661][ T30] #0: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1018.802439][ T30] 1 lock held by syz-executor/18652: [ 1018.808357][ T30] #0: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1018.817755][ T30] 5 locks held by kworker/u9:3/18654: [ 1018.823162][ T30] #0: ffff88801fe23948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1018.834015][ T30] #1: ffffc900048efd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1018.846604][ T30] #2: ffff88805220cd88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1018.856505][ T30] #3: ffff88805220c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 1018.866648][ T30] #4: ffffffff8f751508 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x185/0x340 [ 1018.876650][ T30] 1 lock held by syz-executor/18655: [ 1018.881942][ T30] #0: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1018.890979][ T30] 1 lock held by syz-executor/18670: [ 1018.896296][ T30] #0: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 1018.906566][ T30] 1 lock held by syz-executor/18682: [ 1018.911864][ T30] #0: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48f/0x2400 [ 1018.922180][ T30] 1 lock held by syz-executor/18693: [ 1018.927506][ T30] #0: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48f/0x2400 [ 1018.936889][ T30] 1 lock held by syz-executor/18697: [ 1018.942174][ T30] #0: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48f/0x2400 [ 1018.951553][ T30] 1 lock held by syz-executor/18699: [ 1018.956865][ T30] #0: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48f/0x2400 [ 1018.966290][ T30] 1 lock held by syz-executor/18720: [ 1018.971576][ T30] #0: ffff88805eb6cd88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1018.981564][ T30] 5 locks held by kworker/u9:4/18733: [ 1018.986962][ T30] #0: ffff888077531948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1018.997813][ T30] #1: ffffc900033c7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1019.011132][ T30] #2: ffff88806ad08d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1019.021752][ T30] #3: ffff88806ad08078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 1019.031484][ T30] #4: ffffffff8f751508 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x185/0x340 [ 1019.041290][ T30] 3 locks held by kworker/u9:6/18736: [ 1019.046691][ T30] #0: ffff888057a32148 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1019.057543][ T30] #1: ffffc900033a7d00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1019.069742][ T30] #2: ffff8880558b4d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x1bf/0x6b0 [ 1019.079202][ T30] 2 locks held by dhcpcd/18738: [ 1019.084082][ T30] #0: ffff88805c172258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 1019.093801][ T30] #1: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1019.104741][ T30] 1 lock held by dhcpcd/18739: [ 1019.110812][ T30] #0: ffff88805c174258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 1019.120683][ T30] 1 lock held by dhcpcd/18743: [ 1019.125484][ T30] #0: ffff888063036258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 1019.135201][ T30] [ 1019.137527][ T30] ============================================= [ 1019.137527][ T30] [ 1019.145969][ T30] NMI backtrace for cpu 0 [ 1019.150294][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 1019.160183][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1019.170235][ T30] Call Trace: [ 1019.173515][ T30] [ 1019.176446][ T30] dump_stack_lvl+0x241/0x360 [ 1019.181138][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1019.186348][ T30] ? __pfx__printk+0x10/0x10 [ 1019.190944][ T30] ? vprintk_emit+0x631/0x770 [ 1019.195631][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1019.200667][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1019.205619][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1019.211078][ T30] ? _printk+0xd5/0x120 [ 1019.215240][ T30] ? __pfx__printk+0x10/0x10 [ 1019.219845][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1019.224709][ T30] ? __pfx__printk+0x10/0x10 [ 1019.229307][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1019.234340][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1019.240324][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1019.246309][ T30] watchdog+0xfde/0x1020 [ 1019.250557][ T30] ? watchdog+0x1ea/0x1020 [ 1019.254984][ T30] ? __pfx_watchdog+0x10/0x10 [ 1019.259665][ T30] kthread+0x2f0/0x390 [ 1019.263744][ T30] ? __pfx_watchdog+0x10/0x10 [ 1019.268422][ T30] ? __pfx_kthread+0x10/0x10 [ 1019.273016][ T30] ret_from_fork+0x4b/0x80 [ 1019.277437][ T30] ? __pfx_kthread+0x10/0x10 [ 1019.282030][ T30] ret_from_fork_asm+0x1a/0x30 [ 1019.286817][ T30] [ 1019.290530][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1019.296624][ C1] NMI backtrace for cpu 1 [ 1019.296637][ C1] CPU: 1 PID: 8737 Comm: kworker/u8:10 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 1019.296656][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1019.296667][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 1019.296692][ C1] RIP: 0010:__netif_schedule+0x5/0x310 [ 1019.296712][ C1] Code: f8 eb b8 e8 ed 28 3f f8 41 be 01 00 00 00 eb da 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec a0 00 00 [ 1019.296727][ C1] RSP: 0018:ffffc90000a18c80 EFLAGS: 00000046 [ 1019.296741][ C1] RAX: ffffffff898f5144 RBX: ffffffff898f5102 RCX: ffff88802a8f9e00 [ 1019.296754][ C1] RDX: 0000000000010001 RSI: ffffffff8c1fe9a0 RDI: ffff888029415000 [ 1019.296766][ C1] RBP: 0000000000000001 R08: ffffffff898f5132 R09: 1ffffffff25f4eb0 [ 1019.296779][ C1] R10: dffffc0000000000 R11: fffffbfff25f4eb1 R12: dffffc0000000000 [ 1019.296791][ C1] R13: ffff88802beb6c08 R14: ffff88802beb6c00 R15: ffff888029415360 [ 1019.296804][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 1019.296819][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1019.296831][ C1] CR2: 00005592932e27f0 CR3: 000000000e132000 CR4: 00000000003506f0 [ 1019.296846][ C1] Call Trace: [ 1019.296853][ C1] [ 1019.296861][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1019.296878][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1019.296897][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1019.296913][ C1] ? nmi_handle+0x2a/0x5a0 [ 1019.296942][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1019.296959][ C1] ? nmi_handle+0x14f/0x5a0 [ 1019.296979][ C1] ? nmi_handle+0x2a/0x5a0 [ 1019.297000][ C1] ? __netif_schedule+0x5/0x310 [ 1019.297016][ C1] ? default_do_nmi+0x63/0x160 [ 1019.297034][ C1] ? exc_nmi+0x123/0x1f0 [ 1019.297050][ C1] ? end_repeat_nmi+0xf/0x53 [ 1019.297072][ C1] ? advance_sched+0xa02/0xca0 [ 1019.297093][ C1] ? advance_sched+0xa32/0xca0 [ 1019.297112][ C1] ? advance_sched+0xa44/0xca0 [ 1019.297132][ C1] ? __netif_schedule+0x5/0x310 [ 1019.297149][ C1] ? __netif_schedule+0x5/0x310 [ 1019.297167][ C1] ? __netif_schedule+0x5/0x310 [ 1019.297183][ C1] [ 1019.297189][ C1] [ 1019.297195][ C1] advance_sched+0xaa9/0xca0 [ 1019.297223][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1019.297244][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 1019.297264][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1019.297290][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1019.297315][ C1] hrtimer_interrupt+0x396/0x990 [ 1019.297346][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 1019.297369][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1019.297389][ C1] [ 1019.297395][ C1] [ 1019.297402][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1019.297423][ C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x18/0x90 [ 1019.297445][ C1] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 65 48 8b 0c 25 c0 d4 03 00 65 8b 05 a0 aa 6d 7e 00 01 ff 00 74 10 a9 00 01 00 00 74 57 83 b9 1c 16 00 00 00 74 [ 1019.297458][ C1] RSP: 0018:ffffc90003266a80 EFLAGS: 00000283 [ 1019.297472][ C1] RAX: 0000000080000001 RBX: ffffffff81000000 RCX: ffff88802a8f9e00 [ 1019.297484][ C1] RDX: ffffc90003266b95 RSI: ffffffff81000000 RDI: ffffffff8ad5826b [ 1019.297497][ C1] RBP: ffffffff8ad5826b R08: ffffffff8140f1c9 R09: ffffc90003266c50 [ 1019.297509][ C1] R10: 0000000000000003 R11: ffffffff8181dd90 R12: ffffc90003266b60 [ 1019.297521][ C1] R13: ffffc90003266bb0 R14: dffffc0000000000 R15: ffffffff8ad5826c [ 1019.297533][ C1] ? cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 1019.297553][ C1] ? cfg80211_inform_bss_frame_data+0x3bb/0x720 [ 1019.297570][ C1] ? 0xffffffff81000000 [ 1019.297582][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1019.297604][ C1] ? unwind_next_frame+0x1d9/0x2a00 [ 1019.297624][ C1] ? 0xffffffff81000000 [ 1019.297635][ C1] ? cfg80211_inform_bss_frame_data+0x3bb/0x720 [ 1019.297655][ C1] unwind_next_frame+0x1d9/0x2a00 [ 1019.297679][ C1] ? cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 1019.297697][ C1] ? cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 1019.297715][ C1] ? __kernel_text_address+0xd/0x40 [ 1019.297734][ C1] ? cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 1019.297751][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1019.297773][ C1] arch_stack_walk+0x151/0x1b0 [ 1019.297797][ C1] ? cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 1019.297818][ C1] stack_trace_save+0x118/0x1d0 [ 1019.297838][ C1] ? worker_thread+0x86d/0xd50 [ 1019.297853][ C1] ? kthread+0x2f0/0x390 [ 1019.297869][ C1] ? ret_from_fork+0x4b/0x80 [ 1019.297888][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1019.297917][ C1] kasan_save_track+0x3f/0x80 [ 1019.297933][ C1] ? kasan_save_track+0x3f/0x80 [ 1019.297949][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 1019.297965][ C1] ? __kmalloc_noprof+0x1f9/0x400 [ 1019.297985][ C1] ? cfg80211_inform_single_bss_data+0xd78/0x2360 [ 1019.298003][ C1] ? cfg80211_inform_bss_data+0x3dd/0x5a70 [ 1019.298019][ C1] ? cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 1019.298061][ C1] __kasan_kmalloc+0x98/0xb0 [ 1019.298079][ C1] ? cfg80211_inform_single_bss_data+0xd78/0x2360 [ 1019.298097][ C1] __kmalloc_noprof+0x1f9/0x400 [ 1019.298120][ C1] cfg80211_inform_single_bss_data+0xd78/0x2360 [ 1019.298138][ C1] ? __read_once_word_nocheck+0x9/0x20 [ 1019.298162][ C1] ? __read_once_word_nocheck+0x9/0x20 [ 1019.298182][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1019.298210][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1019.298230][ C1] ? __kernel_text_address+0xd/0x40 [ 1019.298248][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1019.298267][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1019.298288][ C1] ? cfg80211_inform_bss_data+0x3c5/0x5a70 [ 1019.298309][ C1] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 1019.298326][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1019.298356][ C1] ? __pfx_validate_chain+0x10/0x10 [ 1019.298388][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1019.298410][ C1] ? mark_lock+0x9a/0x350 [ 1019.298433][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 1019.298464][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1019.298480][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 1019.298504][ C1] cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 1019.298527][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 1019.298547][ C1] ieee80211_bss_info_update+0x8a7/0xbc0 [ 1019.298570][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1019.298590][ C1] ? __pfx_lock_release+0x10/0x10 [ 1019.298615][ C1] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 1019.298644][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 1019.298664][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1019.298688][ C1] ? mark_lock+0x9a/0x350 [ 1019.298706][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1019.298725][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1019.298742][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1019.298770][ C1] ieee80211_iface_work+0x8a3/0xf10 [ 1019.298795][ C1] cfg80211_wiphy_work+0x221/0x260 [ 1019.298817][ C1] ? process_scheduled_works+0x945/0x1830 [ 1019.298833][ C1] process_scheduled_works+0xa2c/0x1830 [ 1019.298863][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1019.298884][ C1] ? assign_work+0x364/0x3d0 [ 1019.298903][ C1] worker_thread+0x86d/0xd50 [ 1019.298927][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1019.298946][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1019.298962][ C1] kthread+0x2f0/0x390 [ 1019.298979][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1019.298995][ C1] ? __pfx_kthread+0x10/0x10 [ 1019.299013][ C1] ret_from_fork+0x4b/0x80 [ 1019.299031][ C1] ? __pfx_kthread+0x10/0x10 [ 1019.299049][ C1] ret_from_fork_asm+0x1a/0x30 [ 1019.299076][ C1] [ 1020.068316][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1020.075194][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 1020.085082][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1020.095137][ T30] Call Trace: [ 1020.098414][ T30] [ 1020.101345][ T30] dump_stack_lvl+0x241/0x360 [ 1020.106037][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1020.111244][ T30] ? __pfx__printk+0x10/0x10 [ 1020.115838][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1020.121830][ T30] ? vscnprintf+0x5d/0x90 [ 1020.126162][ T30] panic+0x349/0x860 [ 1020.130064][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1020.136218][ T30] ? __pfx_panic+0x10/0x10 [ 1020.140639][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1020.146016][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1020.151567][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1020.156939][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1020.163096][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1020.169256][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1020.175413][ T30] watchdog+0x101d/0x1020 [ 1020.179745][ T30] ? watchdog+0x1ea/0x1020 [ 1020.184168][ T30] ? __pfx_watchdog+0x10/0x10 [ 1020.188846][ T30] kthread+0x2f0/0x390 [ 1020.192917][ T30] ? __pfx_watchdog+0x10/0x10 [ 1020.197594][ T30] ? __pfx_kthread+0x10/0x10 [ 1020.202188][ T30] ret_from_fork+0x4b/0x80 [ 1020.206608][ T30] ? __pfx_kthread+0x10/0x10 [ 1020.211200][ T30] ret_from_fork_asm+0x1a/0x30 [ 1020.215984][ T30] [ 1021.332778][ T30] Shutting down cpus with NMI [ 1021.337704][ T30] Kernel Offset: disabled [ 1021.342023][ T30] Rebooting in 86400 seconds..