last executing test programs: 30.347096372s ago: executing program 1 (id=1586): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000074746ae340c8d5"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40641, 0x0) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[], 0x1558) cachestat(r2, &(0x7f0000000040)={0x3f00, 0x45}, &(0x7f0000000080), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0x69}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x34, r7, 0x10, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x996}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f0000000300)={0x7, 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r11, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 29.762461898s ago: executing program 1 (id=1588): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x3000000) 28.822081719s ago: executing program 1 (id=1590): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000002c0)=0xb27, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000ac0)={'vxcan1\x00', 0x0}) bind$can_raw(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000480)=""/238, 0xee}, {0x0}], 0x2}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7b00008f28aaf0"}, 0x10}}, 0x0) 27.841875258s ago: executing program 1 (id=1597): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000c40)=""/4105, 0x1009}, {&(0x7f0000000140)=""/37, 0x25}], 0x2}}], 0x1, 0x0, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0100001000130700000000000000002001000dc23de42fcff9d206cdfc88d300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000a0000000000000000000000000024000900"/292], 0x16c}}, 0x0) 27.556332958s ago: executing program 1 (id=1599): syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000040)={r3, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000140)=0x100) 27.342207301s ago: executing program 1 (id=1600): r0 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x2000a041) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x4, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) setxattr$incfs_id(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)={'0000000000000000000000000000000', 0x31}, 0x20, 0x1) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001500010000000000fbdbdf2502780000", @ANYRES32=0x0, @ANYBLOB="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"], 0x34}}, 0x0) 24.186237419s ago: executing program 0 (id=1610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000280)={r2, 0x0, 0x30}, &(0x7f0000000480)=0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = syz_io_uring_setup(0x160c, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) r11 = inotify_init1(0x0) r12 = dup(r11) readv(r12, &(0x7f00000000c0)=[{&(0x7f0000000bc0)=""/210, 0xd2}], 0x1) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "8fd5fde0c7b7f97e0c5335f92e460f771b1d7a6ee420ff937267840ad0d1171082dda5db14ee2322041b96c448b30a8c0b8188f330199ef00d2240d4a3aa1b48", "8c550e7c0174995dbe9e316a88c2d90e6430c988b8feed8b8435e6f2635429b4"}) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) r14 = socket(0x2a, 0x2, 0x0) getsockname$packet(r14, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x1c, r13, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc004) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000400)={0x58, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @action={{{}, {}, @broadcast, @device_a, @initial, {0x0, 0xb}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x14, {0x0, 0x0, @void, @void, @val="ee7bfbc5191c3ca7d825d735cfd13d65"}}}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) r16 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r16, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r16, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev}, 0x1c) 23.030661602s ago: executing program 0 (id=1611): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="340200000200000005f3fd0000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e05"], 0x234) 22.748306931s ago: executing program 0 (id=1612): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket(0x2b, 0x1, 0x1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) sendmsg$tipc(r0, 0x0, 0x0) signalfd(r1, &(0x7f0000000040)={[0x5]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) 22.21225497s ago: executing program 0 (id=1613): openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) io_uring_setup(0x2e34, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1b2}) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000040)=0xffffffffffffffff, 0x200, 0x2) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={0x0}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000006340)={0x2020}, 0x2020) r2 = socket(0x10, 0x80803, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000015c32458d000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000002800128008000100677265001c0002800600100000000000060011"], 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r6, 0x29, 0x50, &(0x7f0000000000), &(0x7f0000000280)=0x4) syz_emit_ethernet(0x2c8, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x292, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0xa, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d12980"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xa, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62a"}]}}}}}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r7, &(0x7f0000000b80)=[{{&(0x7f0000000080)=@phonet={0x23, 0x0, 0x0, 0xa}, 0x80, 0x0}}], 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x9, &(0x7f0000000340)=0xe8, 0x4) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x5b5fcc73e665c487}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x15c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x100, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x81}}, {0xbc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xb8, 0x1a, '&:)%\\([\x00g\f\xde?\x0e\x86\"\xe0\xbd.\xf5\x8d\xb0\xa0\xc4\xf3\x9f\xc5\x955^\x8eg^]\xcau\xe8f\xf8w\xbd\xc6\x88\xbf\x9f\xccx{:~\n\xb0\xe5\x95%\xf9O\xdc\xe6\xd8=\x9b&>\xea\xf0`\x1a\xb9\\\x8f\xb2\xb0D\x04\xfek\xf7\x18\x1f!\xa0[B\xb3\xf8)\xdbA\xf7\xb7\xc0$d\xd5\x8fQ\xb4\x9a\xeb*\xa4\xad\x8c\xbd\x94n\xd8P~o\x02\x17\xd2\x87\xe2\xbc\xd7j\x89\xc4~\x1b:<\xe4\x11F\x97\xe8m\a\xc4\xca\x87\'\x15\xad\xc8\xcb\x0e\xc1a8\x86\xc1\xdc\xa3\xc7\x15\x8e\xd8m\xe1\x86\"4_\xfc\xfe\\\xde\xc6h`\xb5\a\xa7#~\xc7\b\xa5\xb8Y\xce\xcd\xf7#@\x9f'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x401}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x358}}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x80000000}}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7f}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x19, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) 18.878886499s ago: executing program 0 (id=1627): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x230, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0xfffffffd}, @filter_kind_options=@f_route={{0xa}, {0x1f0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x1dc, 0x6, [@m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x15c, 0x1, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x4c4}, @IFE_META_PRIO={0x8, 0x3, @val=0x2000400}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_SKBMARK={0xffffff7f, 0x1, @val=0x2}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xdd}, @IFE_META_PRIO={0x0, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x7967, 0x20000000, 0x3ff, 0x6}}}, @TCA_IFE_DMAC={0xa}]}, {0xb5, 0x6, "0a18b56aa0decc94a65cb09be049d75f7ee7b1a2819f56920d3c90949fb2adfd1c712c36c01e5caea1d50cb847fbf9d8b2351f47c6e5f73f4965fe7800c4eeb477a17a69a6cb30c9e3b183e39a2edd77e2ed84261f2ef3d589c7480d5544e96da80a38c5d0973b22ebbb49248b923e8d73aeff7bdd5db9bb3a6d9420c0d1ea4c0d679990f3d2e92afe10af988741f23cc87b8f26303d4ef1c7d1cb7e64d2855b4e7637a98e48f8048de41f3186d6caef60"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x230}}, 0x0) (async) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x4f}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r2 = dup2(r0, r0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x100, 0x453, 0x400, 0x70bd28, 0x25dfdbfd, "29869d9f48efaf3929bb0c7f62684573603aaac98f4b8794efba0c519c7c56590830c38097080fdcd525cfb73cde1ec37f1e7029346079ef534d7f000136cfae7c571c048356b36e59e99b1c26e4c4a368f226d70cabbed171b56a11a5b826b02e6275e0ba7757ac230302f96e2ee3ab65a47399f97b7d663eca61bde98634a33554874f435414a9af511ecc13214415c53bbb06af39fe129c113189888e44aad57412ee345a7c3ce64b44e066e4977d080895351d43ed641fe68e54f52574bb723a417b73008d2521b9f29d40d3bc00a296f084a3131f0637257e8a31653a5c06628fe6dfa6da9c14b729b4a11b", ["", ""]}, 0x100}, 0x1, 0x0, 0x0, 0x2c00c056}, 0x90) 18.482608816s ago: executing program 0 (id=1631): syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f00000001c0)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000040)={r3, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000140)=0x100) 10.132619757s ago: executing program 2 (id=1649): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x400000, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0x10, 0x10}}, [@TCA_CHAIN={0x5, 0xb, 0x4}]}, 0x2c}}, 0x4014890) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.010488288s ago: executing program 2 (id=1650): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c00000010000104000000000000fe0f00000000", @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x4c}}, 0x0) 9.621295974s ago: executing program 2 (id=1653): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x13) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000001c0)={0x100000, 0x0, 0x20, 0x453, 0xfffffffffffffe7d}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a200000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r'], 0x28}}, 0x0) 9.105247745s ago: executing program 2 (id=1655): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}], {0x14}}, 0xe8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000018008bad0400000000000d00020000000000fe020c00000008000400", @ANYRES32=r5], 0x24}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) creat(0x0, 0x1de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r2, &(0x7f0000000040)={0x9, {"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", 0x1000}}, 0x1006) 7.610221346s ago: executing program 4 (id=1659): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x13) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000507000000070000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100627269646765000004000280", @ANYRES32=r4], 0x3c}}, 0x0) 6.941625463s ago: executing program 4 (id=1661): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x150, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8}, @TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x150}, 0x1, 0x0, 0x1f}, 0x8000) 6.659852547s ago: executing program 4 (id=1662): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000600)={0x22000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r1], 0x1}, 0x58) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) syz_usb_control_io(r0, 0x0, 0x0) creat(0x0, 0x1de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="18000000160001626bf5d8582545386ceb247900", @ANYRES32=0x0], 0x18}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r3, &(0x7f0000000040)={0x9, {"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", 0x1000}}, 0x1006) 5.553511526s ago: executing program 3 (id=1665): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$random(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() timer_create(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, 0x0) pipe(0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x731c, 0x0, 0x0, 0x13f}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r3 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) futex(0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0) mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0x40000000, 0x50794894, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000001f9efcb9b33a84b3ef18b9790d60cf677dfbfc72a137467c1ab6c2c6986a20c93cab041feb6833967629c1c74e53b47f9e37e605b79779e6a171050e71fc170617"], 0x8, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 5.401637253s ago: executing program 2 (id=1666): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '(#\a', 0x54, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x22, 0xa}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3}, @timestamp={0x8, 0xa}, @generic={0x2, 0x4, "67ca"}, @mptcp=@synack={0x1e, 0x10, 0x0, 0x2, 0x0, 0xe00000000000000}, @mptcp=@synack={0x1e, 0x10}]}}}}}}}}, 0x0) 5.158759193s ago: executing program 2 (id=1667): r0 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x2000a041) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 4.474592607s ago: executing program 3 (id=1668): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$random(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() timer_create(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, 0x0) pipe(0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x731c, 0x0, 0x0, 0x13f}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r3 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) futex(0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0) mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0x40000000, 0x50794894, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000001f9efcb9b33a84b3ef18b9790d60cf677dfbfc72a137467c1ab6c2c6986a20c93cab041feb6833967629c1c74e53b47f9e37e605b79779e6a171050e71fc170617"], 0x8, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 3.600208399s ago: executing program 3 (id=1669): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x280, 0xa, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, {0x0, 0x0, 0x20}, {}, {0x0, 0x5}, {}, 0x0, 0x100, 0x0, 0x0, 0x1, 0xffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}) 3.307879483s ago: executing program 3 (id=1670): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x280, 0xa, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, {0x40000000}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) 3.205432802s ago: executing program 4 (id=1671): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="170900000000e00000000100000005000700000000000800090003000000060002000100000008000a000000000008001800e0000002080019"], 0x44}}, 0x0) 3.057962836s ago: executing program 4 (id=1672): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0xe0ff}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 3.037111934s ago: executing program 3 (id=1673): io_setup(0x3, &(0x7f0000000140)=0x0) r1 = socket(0x840000000002, 0x3, 0x100) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000480), 0x24, 0x0) fremovexattr(r4, &(0x7f0000002340)=@known='system.posix_acl_access\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x7fff, 0x2, 0x87, 0x3, r3}, &(0x7f0000000280)=0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x264e33, 0x0) io_submit(r0, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 2.13474829s ago: executing program 3 (id=1674): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000002c0)=0xb27, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000ac0)={'vxcan1\x00'}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000480)=""/238, 0xee}], 0x1}, 0x0) 0s ago: executing program 4 (id=1675): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x375, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x8], [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2, 0x80805, 0x0) sendmmsg(r2, &(0x7f0000000f40)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x38}}, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000540)={0x24, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00ed030000000c0300d2dadd15dd2c06a29ad96b6c6796fdd73e8e465246ee6097eb90c99a9b2165f6f17b75dd004bf47f4837a719c400594d5b9213de93fee759cb17a0b1750eea08b2c9e7d5a210d720bbb89f0fa0c0d0b37f42ca4b7834e43d593a6775f44470936169457c6079371b1e78dd4ba3c1ca66552590cafd8ddece0997a96257c8ee4710a3970947b409a57db00b97fee2d7c0708bbb6631982dfd447a112953af9263dcdfc1c5"], 0x0, 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02035c000000040311dc"], 0x0, 0x0, 0x0}, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xb, 0x9fd, 0x84}, 0x48) r4 = syz_open_procfs(0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000000780)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x35) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="14000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc91", 0xf0}, {&(0x7f0000001480)="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", 0x1001}], 0x3) kernel console output (not intermixed with test programs): ck_release+0x10/0x10 [ 509.095796][T11572] ? __pfx_vfs_read+0x10/0x10 [ 509.100495][T11572] ? __fget_files+0x29/0x470 [ 509.105119][T11572] ? __fget_files+0x3f6/0x470 [ 509.109833][T11572] ksys_read+0x1a0/0x2c0 [ 509.114123][T11572] ? __pfx_ksys_read+0x10/0x10 [ 509.118917][T11572] ? do_syscall_64+0x100/0x230 [ 509.123715][T11572] ? do_syscall_64+0xb6/0x230 [ 509.128415][T11572] do_syscall_64+0xf3/0x230 [ 509.132937][T11572] ? clear_bhb_loop+0x35/0x90 [ 509.137766][T11572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.143689][T11572] RIP: 0033:0x7f331a1788fc [ 509.148135][T11572] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 509.167760][T11572] RSP: 002b:00007f331b007030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 509.176197][T11572] RAX: ffffffffffffffda RBX: 00007f331a316058 RCX: 00007f331a1788fc [ 509.184303][T11572] RDX: 000000000000000f RSI: 00007f331b0070a0 RDI: 0000000000000005 [ 509.192292][T11572] RBP: 00007f331b007090 R08: 0000000000000000 R09: 0000000000000000 [ 509.200294][T11572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.208313][T11572] R13: 0000000000000001 R14: 00007f331a316058 R15: 00007f331a43fa28 [ 509.216323][T11572] [ 509.219435][ C1] vkms_vblank_simulate: vblank timer overrun [ 509.271753][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.294804][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.315129][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.352645][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.377544][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.388987][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.399457][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.410529][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.426305][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.437845][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.450442][T11312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.497060][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.516818][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.544759][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.557787][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.575554][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.591817][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.608779][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.643139][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.659678][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.677003][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.695617][T11312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.739772][T11312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.761136][T11312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.782227][T11312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.815312][T11312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.947981][ T46] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 510.031141][ T9596] usb 5-1: USB disconnect, device number 37 [ 510.083192][T10005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.123484][T10005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.169490][ T46] usb 4-1: config 0 has an invalid interface number: 124 but max is 0 [ 510.191184][ T46] usb 4-1: config 0 has no interface number 0 [ 510.228819][ T46] usb 4-1: config 0 interface 124 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 510.228964][T11596] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1456'. [ 510.271485][ T46] usb 4-1: config 0 interface 124 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 510.271541][ T46] usb 4-1: config 0 interface 124 altsetting 0 endpoint 0xD has invalid maxpacket 1552, setting to 64 [ 510.271573][ T46] usb 4-1: config 0 interface 124 altsetting 0 has an endpoint descriptor with address 0x96, changing to 0x86 [ 510.271604][ T46] usb 4-1: config 0 interface 124 altsetting 0 endpoint 0x86 has invalid maxpacket 59461, setting to 64 [ 510.271636][ T46] usb 4-1: config 0 interface 124 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 510.286226][ T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.335923][ T46] usb 4-1: New USB device found, idVendor=058f, idProduct=9720, bcdDevice=ec.28 [ 510.386599][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.400072][ T46] usb 4-1: Product: syz [ 510.400680][ T46] usb 4-1: Manufacturer: syz [ 510.400704][ T46] usb 4-1: SerialNumber: syz [ 510.423157][ T46] usb 4-1: config 0 descriptor?? [ 510.425961][T11584] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 510.426128][T11584] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 510.426419][T11584] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 510.512046][ T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.626646][T11602] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1457'. [ 510.683215][ T5289] usb 2-1: USB disconnect, device number 47 [ 510.691992][ T46] pl2303 4-1:0.124: required interrupt-in endpoint missing [ 510.740028][ T46] usb 4-1: USB disconnect, device number 58 [ 511.249232][T11620] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 511.464284][T11627] loop8: detected capacity change from 0 to 7 [ 511.484803][T11627] Dev loop8: unable to read RDB block 7 [ 511.492510][T11627] loop8: unable to read partition table [ 511.510230][T11627] loop8: partition table beyond EOD, truncated [ 511.535848][T11627] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 511.535848][T11627] ) failed (rc=-5) [ 511.587677][ T944] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 511.721221][ T58] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 511.797696][ T944] usb 5-1: Using ep0 maxpacket: 8 [ 511.811579][ T944] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 511.837722][ T944] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 511.847216][ T46] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 511.872080][ T944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 511.892370][ T944] usb 5-1: SerialNumber: syz [ 511.912103][ T944] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 511.921104][ T58] usb 2-1: Using ep0 maxpacket: 16 [ 511.942162][ T58] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.973194][ T58] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 512.015089][ T58] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 512.027635][ T46] usb 1-1: device descriptor read/64, error -71 [ 512.038117][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.056623][ T58] usb 2-1: Product: syz [ 512.069625][ T58] usb 2-1: Manufacturer: syz [ 512.096255][ T58] usb 2-1: SerialNumber: syz [ 512.304103][ T46] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 512.318296][ T5289] usb 5-1: USB disconnect, device number 38 [ 512.347155][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1464'. [ 512.477101][T11628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.525863][T11628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.547874][ T46] usb 1-1: device descriptor read/64, error -71 [ 512.681161][ T46] usb usb1-port1: attempt power cycle [ 512.770428][T11656] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1467'. [ 513.118682][ T46] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 513.169463][ T46] usb 1-1: device descriptor read/8, error -71 [ 513.228840][T11664] FAULT_INJECTION: forcing a failure. [ 513.228840][T11664] name failslab, interval 1, probability 0, space 0, times 0 [ 513.242639][T11664] CPU: 1 UID: 0 PID: 11664 Comm: syz.4.1468 Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0 [ 513.253465][T11664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 513.263616][T11664] Call Trace: [ 513.267048][T11664] [ 513.270053][T11664] dump_stack_lvl+0x241/0x360 [ 513.274797][T11664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.280069][T11664] ? __pfx__printk+0x10/0x10 [ 513.284736][T11664] should_fail_ex+0x3b0/0x4e0 [ 513.289491][T11664] should_failslab+0xac/0x100 [ 513.294246][T11664] ? __alloc_skb+0x1c3/0x440 [ 513.299080][T11664] kmem_cache_alloc_node_noprof+0x71/0x320 [ 513.304963][T11664] __alloc_skb+0x1c3/0x440 [ 513.309473][T11664] ? __pfx___alloc_skb+0x10/0x10 [ 513.314485][T11664] xfrm_send_acquire+0x14d/0x1240 [ 513.319671][T11664] ? lockdep_init_map_type+0xa1/0x910 [ 513.325227][T11664] ? __pfx_xfrm_send_acquire+0x10/0x10 [ 513.330754][T11664] ? xfrm_init_tempstate+0x9a3/0x1240 [ 513.336197][T11664] ? km_query+0x30/0x220 [ 513.340479][T11664] km_query+0x120/0x220 [ 513.344706][T11664] ? km_query+0x30/0x220 [ 513.348983][T11664] xfrm_state_find+0x3294/0x4d70 [ 513.353991][T11664] ? xfrm_state_find+0x42f/0x4d70 [ 513.359045][T11664] ? __pfx_xfrm_state_find+0x10/0x10 [ 513.364395][T11664] ? __pfx_validate_chain+0x10/0x10 [ 513.369651][T11664] ? ip6_pol_route+0x198/0x15d0 [ 513.374642][T11664] ? __lock_acquire+0x137a/0x2040 [ 513.379740][T11664] xfrm_resolve_and_create_bundle+0x6d2/0x2c90 [ 513.385977][T11664] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 513.392819][T11664] ? xfrm_sk_policy_lookup+0x7ef/0x840 [ 513.398337][T11664] ? xfrm_sk_policy_lookup+0x93/0x840 [ 513.403756][T11664] ? xfrm_expand_policies+0x3fb/0x690 [ 513.409181][T11664] xfrm_lookup_with_ifid+0x334/0x1ee0 [ 513.414697][T11664] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 513.420553][T11664] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 513.426236][T11664] ? __pfx_lock_release+0x10/0x10 [ 513.431291][T11664] ? up_write+0x1a9/0x590 [ 513.435656][T11664] xfrm_lookup_route+0x3c/0x1c0 [ 513.440902][T11664] ip6_dst_lookup_flow+0x13e/0x180 [ 513.446062][T11664] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 513.451750][T11664] ? aa_label_sk_perm+0x4f0/0x6d0 [ 513.456799][T11664] ? rawv6_sendmsg+0xfe9/0x23c0 [ 513.461690][T11664] rawv6_sendmsg+0x1283/0x23c0 [ 513.466520][T11664] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 513.471929][T11664] ? aa_sk_perm+0x96d/0xab0 [ 513.476730][T11664] ? iovec_from_user+0x61/0x240 [ 513.481888][T11664] ? inet_sendmsg+0x330/0x390 [ 513.486600][T11664] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 513.491905][T11664] ? security_socket_sendmsg+0x87/0xb0 [ 513.497553][T11664] __sock_sendmsg+0x1a6/0x270 [ 513.502281][T11664] ____sys_sendmsg+0x525/0x7d0 [ 513.507314][T11664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.513520][T11664] __sys_sendmmsg+0x3b2/0x740 [ 513.518270][T11664] ? __pfx___sys_sendmmsg+0x10/0x10 [ 513.523645][T11664] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 513.529594][T11664] ? ksys_write+0x23e/0x2c0 [ 513.534130][T11664] ? __pfx_lock_release+0x10/0x10 [ 513.539379][T11664] ? vfs_write+0x7c4/0xc90 [ 513.543940][T11664] ? __mutex_unlock_slowpath+0x21d/0x750 [ 513.549634][T11664] ? __pfx_vfs_write+0x10/0x10 [ 513.554449][T11664] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 513.560487][T11664] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 513.566849][T11664] ? do_syscall_64+0x100/0x230 [ 513.571648][T11664] __x64_sys_sendmmsg+0xa0/0xb0 [ 513.576525][T11664] do_syscall_64+0xf3/0x230 [ 513.581056][T11664] ? clear_bhb_loop+0x35/0x90 [ 513.585759][T11664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.591669][T11664] RIP: 0033:0x7f331a179eb9 [ 513.596272][T11664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.616001][T11664] RSP: 002b:00007f331b007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 513.624460][T11664] RAX: ffffffffffffffda RBX: 00007f331a316058 RCX: 00007f331a179eb9 [ 513.632452][T11664] RDX: 0000000000000021 RSI: 0000000020000480 RDI: 0000000000000006 [ 513.640526][T11664] RBP: 00007f331b007090 R08: 0000000000000000 R09: 0000000000000000 [ 513.648513][T11664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.656518][T11664] R13: 0000000000000000 R14: 00007f331a316058 R15: 00007f331a43fa28 [ 513.664528][T11664] [ 513.978020][ T46] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 514.018588][ T46] usb 1-1: device descriptor read/8, error -71 [ 514.148329][ T46] usb usb1-port1: unable to enumerate USB device [ 514.590343][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 514.609501][ T58] usb 2-1: 0:2 : does not exist [ 514.772603][ T58] usb 2-1: USB disconnect, device number 48 [ 514.899155][ T5334] udevd[5334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.144278][T11701] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1475'. [ 515.631147][T11707] bond0: entered promiscuous mode [ 515.636842][T11707] bond_slave_0: entered promiscuous mode [ 515.663553][T11707] bond_slave_1: entered promiscuous mode [ 516.581236][T11715] vlan2: entered promiscuous mode [ 516.737872][T11732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1483'. [ 516.894461][T11706] bond0: left promiscuous mode [ 516.902219][T11706] bond_slave_0: left promiscuous mode [ 516.917351][T11706] bond_slave_1: left promiscuous mode [ 516.929489][T11746] netlink: 'syz.3.1486': attribute type 11 has an invalid length. [ 516.953257][T10441] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 516.964710][T10441] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 516.974141][T10441] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 516.984982][T10441] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 516.994721][T10441] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 517.004003][T10441] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 517.167341][T10005] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.385212][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1487'. [ 517.600008][T10005] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.660555][T11760] netlink: 'syz.2.1490': attribute type 10 has an invalid length. [ 517.757049][T11760] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 517.889750][T10005] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.115755][T10005] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.168591][T11766] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1494'. [ 518.431931][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 518.446880][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 518.458918][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 518.469754][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 518.488886][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 518.497785][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 518.559198][ T46] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 518.652514][T11776] vlan2: entered promiscuous mode [ 518.667539][T11776] team_slave_0: entered promiscuous mode [ 518.673351][T11776] team_slave_1: entered promiscuous mode [ 518.684637][T11776] team0: entered promiscuous mode [ 518.695315][T11776] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 518.720731][T11749] chnl_net:caif_netlink_parms(): no params data found [ 518.757957][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 518.769942][ T46] usb 4-1: config 0 has no interfaces? [ 518.777021][ T46] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 518.800379][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.849242][ T46] usb 4-1: config 0 descriptor?? [ 518.934499][T11785] loop8: detected capacity change from 0 to 7 [ 518.955473][T11785] Dev loop8: unable to read RDB block 7 [ 518.964149][T11785] loop8: unable to read partition table [ 518.994203][T11785] loop8: partition table beyond EOD, truncated [ 519.014479][T11785] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 519.014479][T11785] ) failed (rc=-5) [ 519.045953][ T54] Bluetooth: hci0: command tx timeout [ 519.126336][ T944] usb 4-1: USB disconnect, device number 59 [ 519.924628][T10005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.936414][T10005] bond_slave_0: left promiscuous mode [ 519.960253][T10005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.968904][T10005] bond_slave_1: left promiscuous mode [ 520.028216][T10005] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 520.079521][T10005] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 520.080443][T10005] macvlan2: left promiscuous mode [ 520.080475][T10005] team0: left promiscuous mode [ 520.089947][T10005] team0: left allmulticast mode [ 520.121427][T10005] team_slave_0: left allmulticast mode [ 520.121625][T10005] team_slave_1: left allmulticast mode [ 520.121697][T10005] team_slave_0: left promiscuous mode [ 520.121761][T10005] team_slave_1: left promiscuous mode [ 520.129148][T10005] bond0 (unregistering): Released all slaves [ 520.289032][T10005] tipc: Left network mode [ 520.472380][T11749] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.493226][T11749] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.521577][T11749] bridge_slave_0: entered allmulticast mode [ 520.529896][T11749] bridge_slave_0: entered promiscuous mode [ 520.557827][ T54] Bluetooth: hci1: command tx timeout [ 520.621757][T11749] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.651633][T11749] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.707910][T11749] bridge_slave_1: entered allmulticast mode [ 520.726212][T11749] bridge_slave_1: entered promiscuous mode [ 520.892859][T11749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.095327][T11749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.117737][ T54] Bluetooth: hci0: command tx timeout [ 521.411304][T10005] hsr_slave_0: left promiscuous mode [ 521.430406][T10005] hsr_slave_1: left promiscuous mode [ 521.457913][T10005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.473318][T10005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.485523][T10005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.499153][T10005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.567273][T10005] veth1_macvtap: left promiscuous mode [ 521.588518][T10005] veth0_macvtap: left promiscuous mode [ 521.602633][T10005] veth1_vlan: left promiscuous mode [ 521.632592][T10005] veth0_vlan: left promiscuous mode [ 522.656428][ T54] Bluetooth: hci1: command tx timeout [ 522.802281][T10005] batadv_slave_0 (unregistering): left allmulticast mode [ 522.878462][T10005] team0 (unregistering): Port device team_slave_1 removed [ 522.950399][T10005] team0 (unregistering): Port device team_slave_0 removed [ 523.221823][ T54] Bluetooth: hci0: command tx timeout [ 523.723975][T11749] team0: Port device team_slave_0 added [ 523.749079][T11860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1515'. [ 523.798180][T11860] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 523.922124][T11749] team0: Port device team_slave_1 added [ 524.024573][T11749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.033678][T11749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.064705][T11749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.117071][T11749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.128267][T11749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.157829][T11749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.333605][T11777] chnl_net:caif_netlink_parms(): no params data found [ 524.422851][T11881] xt_connbytes: Forcing CT accounting to be enabled [ 524.422874][T11881] Cannot find add_set index 0 as target [ 524.494156][T11749] hsr_slave_0: entered promiscuous mode [ 524.519146][T11749] hsr_slave_1: entered promiscuous mode [ 524.536898][T11749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 524.574005][T11749] Cannot create hsr debugfs directory [ 524.719349][ T54] Bluetooth: hci1: command tx timeout [ 525.280853][ T54] Bluetooth: hci0: command tx timeout [ 525.376379][T11777] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.394032][T11777] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.406759][T11777] bridge_slave_0: entered allmulticast mode [ 525.438184][T11777] bridge_slave_0: entered promiscuous mode [ 525.489241][T11777] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.567689][T11777] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.634798][T11777] bridge_slave_1: entered allmulticast mode [ 525.650864][T11777] bridge_slave_1: entered promiscuous mode [ 525.731236][T11913] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1525'. [ 525.874308][T11915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1526'. [ 525.991639][T11777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.048655][T11777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.237129][T10005] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.435271][T11777] team0: Port device team_slave_0 added [ 526.498746][T10005] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.523164][T11777] team0: Port device team_slave_1 added [ 526.568582][ T1173] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 526.689062][T10005] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.777752][ T1173] usb 4-1: Using ep0 maxpacket: 32 [ 526.795298][ T1173] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 76, changing to 10 [ 526.798529][ T54] Bluetooth: hci1: command tx timeout [ 526.836892][ T1173] usb 4-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.868864][T11777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.876209][ T1173] usb 4-1: config 1 interface 0 has no altsetting 0 [ 526.892376][T11777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.927968][ T1173] usb 4-1: New USB device found, idVendor=18d1, idProduct=502d, bcdDevice= 0.40 [ 526.946741][ T1173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.955014][T11777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.966262][ T1173] usb 4-1: Product: 䆄쾬彵訓墔ë•ê‡ç®°êŠˆà¨¹èŒ“Ӭ➸촱䚞㑢ë£î‘½î¿„ꦓ籧퓠룆꛿ἕ◩䆋픆Ꞻ륊è…塖ƀ헃븞ꑉé§âš®Â·ì…¯è†³è¦¢é›žåªªîµ«ã¯žê”¶á†¼ïŽ‡ë®‰ëŸŠì¶ªä¯®å‰¾Ý³â‘ꚻ齊⃠ì­åš–᭛៺᜔ꖻج츯锰죤⃗鬽찱ï¶í•ë¦²á²ª [ 526.983003][T11939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1533'. [ 527.043574][ T1173] usb 4-1: Manufacturer: ç–俤ꚮￜ紫풱⡅줈謽乼ã¼ç™²á²»îº°ï¬±ë… ê»”繂듔çŠçŒ¬ê±šê§Œç©ºè«¥ã½®ãˆ“æ’ശ歽췮㰧㲉è¾æ±¢íž—å·‹ï‡ë½«ï¤½ã±ºè§‡å‘£í‚„߻鯻贾丵䡟ퟃá«î£œï‡¨è£¹ä”“桧럧ïžèº®áž½ [ 527.079631][T10005] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.090353][ T1173] usb 4-1: SerialNumber: syz [ 527.253384][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'. [ 527.301869][T11777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.309646][T11777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.335580][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.347704][ T1173] usbhid 4-1:1.0: can't add hid device: -71 [ 527.378316][ T1173] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 527.380081][T11777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.407748][T11958] tipc: Started in network mode [ 527.412964][T11958] tipc: Node identity :, cluster identity 4711 [ 527.415812][ T1173] usb 4-1: USB disconnect, device number 60 [ 527.432253][T11958] tipc: Enabling of bearer rejected, failed to enable media [ 527.534909][T11960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1536'. [ 527.665379][T11930] tipc: Started in network mode [ 527.688031][T11930] tipc: Node identity :, cluster identity 4711 [ 527.700861][T11930] tipc: Enabling of bearer rejected, failed to enable media [ 527.899387][T11777] hsr_slave_0: entered promiscuous mode [ 527.919688][T11777] hsr_slave_1: entered promiscuous mode [ 527.926283][T11777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.937616][T11777] Cannot create hsr debugfs directory [ 528.148112][T10005] gretap0: left allmulticast mode [ 528.153231][T10005] gretap0: left promiscuous mode [ 528.168159][T10005] bridge0: port 3(gretap0) entered disabled state [ 528.177289][T10005] bridge_slave_1: left allmulticast mode [ 528.183275][T10005] bridge_slave_1: left promiscuous mode [ 528.194755][T10005] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.210861][T10005] bridge_slave_0: left allmulticast mode [ 528.216600][T10005] bridge_slave_0: left promiscuous mode [ 528.222617][T10005] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.109324][T10005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.140309][T10005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.162632][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1544'. [ 529.176288][T10005] bond0 (unregistering): Released all slaves [ 529.279131][T11980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1542'. [ 529.319732][T11749] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 529.448599][T11749] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 529.459604][T11749] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 529.490917][T11995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1546'. [ 529.575922][T11749] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 529.983452][T10005] hsr_slave_0: left promiscuous mode [ 529.992824][T10005] hsr_slave_1: left promiscuous mode [ 530.005733][ C1] sd 0:0:1:0: [sda] tag#6646 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 530.016233][ C1] sd 0:0:1:0: [sda] tag#6646 CDB: Read(6) 08 00 0c 6a 08 48 [ 530.135559][T10005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.183156][T10005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.231351][T10005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.256594][T10005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.355451][T10005] veth1_macvtap: left promiscuous mode [ 530.375030][T10005] veth0_macvtap: left promiscuous mode [ 530.394020][T10005] veth1_vlan: left promiscuous mode [ 530.416813][T10005] veth0_vlan: left promiscuous mode [ 532.211630][T10005] team0 (unregistering): Port device team_slave_1 removed [ 532.304806][T10005] team0 (unregistering): Port device team_slave_0 removed [ 533.230007][T12038] FAULT_INJECTION: forcing a failure. [ 533.230007][T12038] name failslab, interval 1, probability 0, space 0, times 0 [ 533.243250][T12038] CPU: 0 UID: 0 PID: 12038 Comm: syz.3.1555 Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0 [ 533.254082][T12038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 533.264190][T12038] Call Trace: [ 533.267512][T12038] [ 533.270511][T12038] dump_stack_lvl+0x241/0x360 [ 533.275345][T12038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.280609][T12038] ? __pfx__printk+0x10/0x10 [ 533.285293][T12038] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 533.291332][T12038] ? __pfx___might_resched+0x10/0x10 [ 533.296678][T12038] should_fail_ex+0x3b0/0x4e0 [ 533.301478][T12038] should_failslab+0xac/0x100 [ 533.306267][T12038] ? __alloc_skb+0x1c3/0x440 [ 533.310908][T12038] kmem_cache_alloc_node_noprof+0x71/0x320 [ 533.316830][T12038] __alloc_skb+0x1c3/0x440 [ 533.321300][T12038] ? __pfx___alloc_skb+0x10/0x10 [ 533.326549][T12038] ? netlink_autobind+0xd6/0x2f0 [ 533.331525][T12038] ? netlink_autobind+0x2b0/0x2f0 [ 533.336581][T12038] netlink_sendmsg+0x638/0xcb0 [ 533.341403][T12038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.346711][T12038] ? __import_iovec+0x536/0x820 [ 533.351608][T12038] ? aa_sock_msg_perm+0x91/0x160 [ 533.356576][T12038] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 533.361898][T12038] ? security_socket_sendmsg+0x87/0xb0 [ 533.367388][T12038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.372776][T12038] __sock_sendmsg+0x221/0x270 [ 533.377618][T12038] ____sys_sendmsg+0x525/0x7d0 [ 533.382452][T12038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.387790][T12038] __sys_sendmmsg+0x3b2/0x740 [ 533.392538][T12038] ? __pfx___sys_sendmmsg+0x10/0x10 [ 533.397791][T12038] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 533.404173][T12038] ? ksys_write+0x23e/0x2c0 [ 533.408714][T12038] ? __pfx_lock_release+0x10/0x10 [ 533.413771][T12038] ? vfs_write+0x7c4/0xc90 [ 533.418232][T12038] ? __mutex_unlock_slowpath+0x21d/0x750 [ 533.423900][T12038] ? __pfx_vfs_write+0x10/0x10 [ 533.428705][T12038] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 533.434720][T12038] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 533.441207][T12038] ? do_syscall_64+0x100/0x230 [ 533.446142][T12038] __x64_sys_sendmmsg+0xa0/0xb0 [ 533.451155][T12038] do_syscall_64+0xf3/0x230 [ 533.455713][T12038] ? clear_bhb_loop+0x35/0x90 [ 533.460449][T12038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.466465][T12038] RIP: 0033:0x7f5b08579eb9 [ 533.470901][T12038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.490716][T12038] RSP: 002b:00007f5b09437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 533.499263][T12038] RAX: ffffffffffffffda RBX: 00007f5b08715f80 RCX: 00007f5b08579eb9 [ 533.507339][T12038] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000003 [ 533.515332][T12038] RBP: 00007f5b09437090 R08: 0000000000000000 R09: 0000000000000000 [ 533.523349][T12038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.531425][T12038] R13: 0000000000000000 R14: 00007f5b08715f80 R15: 00007f5b0883fa28 [ 533.539430][T12038] [ 533.952978][T11749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.004057][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1553'. [ 534.040786][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1553'. [ 534.130615][T11749] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.198070][ T129] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.205287][ T129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.352299][T10003] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.359668][T10003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.498382][T11777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 534.528950][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 534.528971][ T29] audit: type=1326 audit(1725117524.088:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12045 comm="syz.1.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecd979eb9 code=0x7ffc0000 [ 534.580358][ T29] audit: type=1326 audit(1725117524.118:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12045 comm="syz.1.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f8ecd979eb9 code=0x7ffc0000 [ 534.625423][ T29] audit: type=1326 audit(1725117524.118:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12045 comm="syz.1.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecd979eb9 code=0x7ffc0000 [ 534.658194][ T29] audit: type=1326 audit(1725117524.118:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12045 comm="syz.1.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecd979eb9 code=0x7ffc0000 [ 534.702970][ T29] audit: type=1326 audit(1725117524.118:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12045 comm="syz.1.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f8ecd979eb9 code=0x7ffc0000 [ 534.736762][ T29] audit: type=1326 audit(1725117524.118:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12045 comm="syz.1.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecd979eb9 code=0x7ffc0000 [ 534.761607][ T29] audit: type=1326 audit(1725117524.118:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12045 comm="syz.1.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecd979eb9 code=0x7ffc0000 [ 534.786992][ T29] audit: type=1326 audit(1725117524.128:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12045 comm="syz.1.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8ecd979eb9 code=0x7ffc0000 [ 534.812711][ T29] audit: type=1326 audit(1725117524.128:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12045 comm="syz.1.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecd979eb9 code=0x7ffc0000 [ 534.838552][ T29] audit: type=1326 audit(1725117524.128:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12045 comm="syz.1.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8ecd978757 code=0x7ffc0000 [ 534.909041][ T129] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.946745][T11777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 535.091448][ T129] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.155694][T11777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 535.195353][T11777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 535.300468][ T129] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.438123][T10441] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 535.453500][T10441] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 535.464060][T10441] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 535.498018][T10441] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 535.509761][T10441] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 535.517324][T10441] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 535.672002][ T129] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.790452][T11749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.855610][T12068] binder: 12066:12068 ioctl c0306201 0 returned -14 [ 535.898291][T12068] binder: 12066:12068 ioctl c0306201 20000240 returned -11 [ 536.059411][T12070] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.1563'. [ 536.069482][T12070] openvswitch: netlink: Actions may not be safe on all matching packets [ 536.150669][T12074] vlan2: entered promiscuous mode [ 536.181069][T12074] team_slave_0: entered promiscuous mode [ 536.186914][T12074] team_slave_1: entered promiscuous mode [ 536.199689][T12074] team0: entered promiscuous mode [ 536.267372][T12074] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 536.353342][T12079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1565'. [ 536.464700][T12081] bridge0: port 4(bond2) entered blocking state [ 536.488953][T12081] bridge0: port 4(bond2) entered disabled state [ 536.495860][T12081] bond2: entered allmulticast mode [ 536.550095][T12081] bond2: entered promiscuous mode [ 536.659168][T11749] veth0_vlan: entered promiscuous mode [ 536.715559][ T129] bridge_slave_1: left allmulticast mode [ 536.738480][ T129] bridge_slave_1: left promiscuous mode [ 536.744413][ T129] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.773572][ T129] bridge_slave_0: left allmulticast mode [ 536.788064][ T129] bridge_slave_0: left promiscuous mode [ 536.794020][ T129] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.616050][ T54] Bluetooth: hci2: command tx timeout [ 537.749966][ T129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.776905][ T129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.801110][ T129] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 537.824477][ T129] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 537.843103][ T129] team0: left promiscuous mode [ 537.853273][ T129] team_slave_0: left promiscuous mode [ 537.858867][ T129] team_slave_1: left promiscuous mode [ 537.875397][ T129] bond0 (unregistering): Released all slaves [ 537.894185][ T129] bond1 (unregistering): Released all slaves [ 538.000201][T12106] netlink: 'syz.3.1570': attribute type 20 has an invalid length. [ 538.046235][T11749] veth1_vlan: entered promiscuous mode [ 538.280495][T11777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.483726][T11777] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.691614][T10003] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.698886][T10003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.780877][T10003] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.788234][T10003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.833338][T12058] chnl_net:caif_netlink_parms(): no params data found [ 538.962452][T11749] veth0_macvtap: entered promiscuous mode [ 539.055818][T11749] veth1_macvtap: entered promiscuous mode [ 539.149702][ T129] hsr_slave_0: left promiscuous mode [ 539.208049][ T129] hsr_slave_1: left promiscuous mode [ 539.231250][ T129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.268045][ T129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.301803][ T129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.325126][ T129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.387524][ T129] veth1_macvtap: left promiscuous mode [ 539.405072][ T129] veth0_macvtap: left promiscuous mode [ 539.416078][ T129] veth1_vlan: left promiscuous mode [ 539.430817][ T129] veth0_vlan: left promiscuous mode [ 539.678050][ T54] Bluetooth: hci2: command tx timeout [ 541.371433][ T129] team0 (unregistering): Port device team_slave_1 removed [ 541.461065][ T129] team0 (unregistering): Port device team_slave_0 removed [ 541.778380][ T54] Bluetooth: hci2: command tx timeout [ 541.791099][T12190] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1578'. [ 542.322825][T12159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1576'. [ 542.574838][T12058] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.603327][T12058] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.612127][T12058] bridge_slave_0: entered allmulticast mode [ 542.632853][T12058] bridge_slave_0: entered promiscuous mode [ 542.654528][T12058] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.662423][T12058] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.670765][T12058] bridge_slave_1: entered allmulticast mode [ 542.679318][T12058] bridge_slave_1: entered promiscuous mode [ 542.746569][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.759281][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.771438][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.782263][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.792417][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.817051][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.840240][T11749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.909678][T12058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.952087][T12058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.024883][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.054737][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.075838][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.094069][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.119647][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.138722][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.164793][T11749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.187230][T11749] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.207157][T11749] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.220196][T11749] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.231259][T11749] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.368450][T12058] team0: Port device team_slave_0 added [ 543.410601][T12058] team0: Port device team_slave_1 added [ 543.698418][T12058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.705437][T12058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.783433][T12058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.814687][T11777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.826585][T12058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.836539][T12058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.870911][ T54] Bluetooth: hci2: command tx timeout [ 543.876880][T12058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.024597][T12058] hsr_slave_0: entered promiscuous mode [ 544.046813][T12058] hsr_slave_1: entered promiscuous mode [ 544.054878][T12058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 544.067907][T12058] Cannot create hsr debugfs directory [ 544.089592][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.103941][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.138094][ T25] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 544.257042][T10001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.287907][T10001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.340110][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 544.356892][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.396356][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.437011][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 544.479935][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 544.502131][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.534976][ T25] usb 4-1: Product: syz [ 544.556388][ T25] usb 4-1: Manufacturer: syz [ 544.576212][ T25] usb 4-1: SerialNumber: syz [ 544.604805][ T25] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input65 [ 544.626007][T12238] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1484'. [ 544.657441][T12238] tipc: Invalid UDP bearer configuration [ 544.658048][T12238] tipc: Enabling of bearer rejected, failed to enable media [ 544.691588][T11777] veth0_vlan: entered promiscuous mode [ 544.817770][T11777] veth1_vlan: entered promiscuous mode [ 545.050626][T12248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.084507][T12248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.108238][T12247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1587'. [ 545.154648][T12253] netlink: 'syz.1.1588': attribute type 10 has an invalid length. [ 545.245719][T12253] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 545.497876][ T5289] usb 4-1: USB disconnect, device number 61 [ 545.501049][ T4675] bcm5974 4-1:1.0: could not read from device [ 545.542320][ T4675] bcm5974 4-1:1.0: could not read from device [ 545.551036][T11777] veth0_macvtap: entered promiscuous mode [ 545.565623][T11777] veth1_macvtap: entered promiscuous mode [ 545.587019][ T5308] bcm5974 4-1:1.0: could not read from device [ 545.746516][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.762305][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.775077][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.787811][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.797791][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.808510][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.819144][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.829836][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.841633][T11777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.876596][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.895427][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.911008][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.928023][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.944707][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.965594][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.983659][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.994331][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.014202][T11777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.042434][T11777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.075660][T11777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.112189][T11777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.144653][T11777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.243394][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 546.243418][ T29] audit: type=1326 audit(1725117535.778:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.4.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c5b79eb9 code=0x7fc00000 [ 546.427208][T12058] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 546.461618][T12058] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 546.503493][T12058] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 546.549333][T12277] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1593'. [ 546.552310][T12058] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 546.662349][T10003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.701402][T10003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.929722][T10001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.952637][T10001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.254988][T12058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.422622][T12058] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.456720][T10001] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.464034][T10001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.591047][ T58] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 547.629574][ T9991] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.636810][ T9991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.867608][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 547.879676][ T58] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.922432][ T58] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 547.975249][ T58] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 548.006069][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.027199][T12058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.044739][ T58] usb 1-1: Product: syz [ 548.061930][ T58] usb 1-1: Manufacturer: syz [ 548.078611][ T58] usb 1-1: SerialNumber: syz [ 548.118779][ T58] usb 1-1: config 0 descriptor?? [ 548.236684][T12058] veth0_vlan: entered promiscuous mode [ 548.322112][T12058] veth1_vlan: entered promiscuous mode [ 548.352923][ T54] Bluetooth: hci1: unknown advertising packet type: 0x14 [ 548.353061][ T54] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 548.361205][ T54] Bluetooth: hci1: unknown advertising packet type: 0x08 [ 548.364095][ T25] usb 1-1: USB disconnect, device number 63 [ 548.368833][ T54] Bluetooth: hci1: Malformed LE Event: 0x02 [ 548.443867][T12058] veth0_macvtap: entered promiscuous mode [ 548.486066][T12058] veth1_macvtap: entered promiscuous mode [ 548.544636][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.581478][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.598170][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.613405][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.628028][ T1173] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 548.646158][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.668190][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.691439][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.706617][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.723942][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.735993][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.766560][T12058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.793127][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.814664][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.835971][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.858074][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.871454][ T1173] usb 4-1: Using ep0 maxpacket: 8 [ 548.888210][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.902152][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.912917][ T1173] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 548.923638][ T1173] usb 4-1: config 179 has no interface number 0 [ 548.932778][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.949901][ T1173] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 548.967010][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.985467][ T1173] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 548.996894][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.996922][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.999061][T12058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.017385][ T1173] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 549.059662][ T1173] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 549.070913][ T1173] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 549.085149][ T1173] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 549.095638][ T1173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.131502][T12058] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.143547][T12319] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 549.158540][T12058] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.175205][T12058] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.178293][ T1173] xpad 4-1:179.65: probe with driver xpad failed with error -5 [ 549.190680][T12058] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.414748][T12319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.481040][T12319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.558434][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.602370][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.603034][ T5289] usb 4-1: USB disconnect, device number 62 [ 549.710531][ T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.728225][ T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.838841][ T46] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 549.974754][T12341] netlink: 'syz.2.1558': attribute type 11 has an invalid length. [ 550.076682][ T46] usb 5-1: too many endpoints for config 0 interface 0 altsetting 49: 56, using maximum allowed: 30 [ 550.096802][ T46] usb 5-1: config 0 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 550.115524][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 550.144728][ T46] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 550.194734][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.218399][ T46] usb 5-1: Product: syz [ 550.235973][ T46] usb 5-1: Manufacturer: syz [ 550.257814][ T46] usb 5-1: SerialNumber: syz [ 550.279212][ T46] usb 5-1: config 0 descriptor?? [ 550.438073][ T58] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 550.607712][ T58] usb 3-1: device descriptor read/64, error -71 [ 550.668212][ T5289] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 550.891007][ T5289] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 550.897881][ T58] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 550.932193][ T5289] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.950279][ T5289] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 550.979817][ T5289] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.001029][ T5289] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 551.010904][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 551.020528][ T5289] usb 4-1: Product: syz [ 551.024823][ T5289] usb 4-1: Manufacturer: syz [ 551.036447][ T5289] cdc_wdm 4-1:1.0: skipping garbage [ 551.061449][ T5289] cdc_wdm 4-1:1.0: skipping garbage [ 551.078017][ T58] usb 3-1: device descriptor read/64, error -71 [ 551.091596][ T5289] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 551.104679][ T5289] cdc_wdm 4-1:1.0: Unknown control protocol [ 551.218301][ T58] usb usb3-port1: attempt power cycle [ 551.639328][ T58] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 551.738599][ T58] usb 3-1: device descriptor read/8, error -71 [ 552.030037][ T58] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 552.100201][ T58] usb 3-1: device descriptor read/8, error -71 [ 552.229447][ T58] usb usb3-port1: unable to enumerate USB device [ 552.820469][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'. [ 552.913972][ T46] ch341 5-1:0.0: ch341-uart converter detected [ 552.959449][ T46] usb 5-1: failed to receive control message: -71 [ 552.987850][ T46] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 553.030701][ T46] usb 5-1: USB disconnect, device number 39 [ 553.072178][ T46] ch341 5-1:0.0: device disconnected [ 553.157691][ T58] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 553.369123][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 553.374743][ T58] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 553.374770][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.383213][ T58] usb 1-1: config 0 descriptor?? [ 553.425021][ T9596] usb 4-1: USB disconnect, device number 63 [ 553.770387][T12371] loop8: detected capacity change from 0 to 7 [ 553.823444][T12371] Dev loop8: unable to read RDB block 7 [ 553.859109][T12371] loop8: unable to read partition table [ 553.887911][T12371] loop8: partition table beyond EOD, truncated [ 553.903760][T12371] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 553.903760][T12371] ) failed (rc=-5) [ 554.470637][T12378] netlink: 'syz.3.1619': attribute type 10 has an invalid length. [ 554.816589][T12385] tipc: Started in network mode [ 554.847680][T12385] tipc: Node identity 3a00000000030000400000000000402d, cluster identity 4711 [ 554.856675][T12385] tipc: Enabling of bearer rejected, failed to enable media [ 555.183703][T12389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1623'. [ 555.301775][T12394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1624'. [ 555.488724][ T9596] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 555.497053][T12396] bridge0: port 5(bond4) entered blocking state [ 555.517086][T12396] bridge0: port 5(bond4) entered disabled state [ 555.537854][T12396] bond4: entered allmulticast mode [ 555.545239][T12396] bond4: entered promiscuous mode [ 555.680029][ T9596] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 555.695704][ T9596] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.740124][ T9596] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.771307][ T58] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 555.774564][ T9596] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 555.791898][ T58] asix 1-1:0.0: probe with driver asix failed with error -71 [ 555.833764][ T9596] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 555.843016][ T58] usb 1-1: USB disconnect, device number 64 [ 555.870395][ T9596] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 555.889911][ T9596] usb 5-1: Manufacturer: syz [ 555.909110][ T9596] usb 5-1: config 0 descriptor?? [ 556.052236][T12400] Cannot find add_set index 0 as target [ 556.352495][ T9596] usbhid 5-1:0.0: can't add hid device: -71 [ 556.372458][ T9596] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 556.376088][T10001] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.421544][ T9596] usb 5-1: USB disconnect, device number 40 [ 556.427743][ T25] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 556.581518][T10001] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.608291][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 556.633870][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 556.654296][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 556.693451][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 556.717767][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.736125][ T25] usb 3-1: Product: syz [ 556.767628][ T25] usb 3-1: Manufacturer: syz [ 556.777557][ T25] usb 3-1: SerialNumber: syz [ 556.809704][T10001] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.037069][ T25] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 89 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 557.080056][T10001] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.286839][T12413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.355623][T12413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.452219][T10441] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 557.468015][T10441] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 557.480518][T10441] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 557.492838][T10441] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 557.503764][T10441] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 557.511479][T10441] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 557.811492][T10001] bridge_slave_1: left allmulticast mode [ 557.827653][T10001] bridge_slave_1: left promiscuous mode [ 557.833569][T10001] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.908465][T10001] bridge_slave_0: left allmulticast mode [ 557.914233][T10001] bridge_slave_0: left promiscuous mode [ 557.948500][T10001] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.782420][T10441] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 558.795803][T10441] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 558.807883][T10441] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 558.816555][T10441] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 558.828236][T10441] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 558.837871][T10441] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 559.170329][ T5289] usb 3-1: USB disconnect, device number 89 [ 559.208371][ T5289] usblp0: removed [ 559.269848][T12450] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1641'. [ 559.587783][T10001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.597868][ T54] Bluetooth: hci1: command tx timeout [ 559.613860][T10001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.628992][T10001] bond0 (unregistering): Released all slaves [ 559.651430][T12438] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1639'. [ 559.678238][T12446] tipc: Enabling of bearer rejected, failed to enable media [ 559.894478][T12452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1642'. [ 559.916900][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'. [ 559.942373][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1642'. [ 560.117625][ T5289] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 560.201225][T12461] netlink: 'syz.2.1645': attribute type 7 has an invalid length. [ 560.209778][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1645'. [ 560.321429][ T5289] usb 4-1: Using ep0 maxpacket: 32 [ 560.360391][ T5289] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 560.393825][ T5289] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 560.417742][T10001] hsr_slave_0: left promiscuous mode [ 560.434350][T10001] hsr_slave_1: left promiscuous mode [ 560.437577][ T5289] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 560.462124][T10001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.463541][ T5289] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 560.483528][T10001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.512507][ T5289] usb 4-1: config 0 interface 0 has no altsetting 0 [ 560.512566][T10001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.541222][ T5289] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 560.551950][T10001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.567791][ T5289] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 560.595523][ T5289] usb 4-1: Product: syz [ 560.599993][ T5289] usb 4-1: Manufacturer: syz [ 560.605763][ T5289] usb 4-1: SerialNumber: syz [ 560.626114][ T5289] usb 4-1: config 0 descriptor?? [ 560.641493][ T5289] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 560.657016][T10001] veth1_macvtap: left promiscuous mode [ 560.670001][ T5289] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 560.681927][T10001] veth0_macvtap: left promiscuous mode [ 560.706874][T10001] veth1_vlan: left promiscuous mode [ 560.722056][T10001] veth0_vlan: left promiscuous mode [ 560.850913][ T5293] usb 4-1: USB disconnect, device number 64 [ 560.850976][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 560.918791][ T5293] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 560.958003][ T54] Bluetooth: hci5: command tx timeout [ 561.143382][T12472] ldusb: No device or device unplugged -19 [ 561.688824][ T54] Bluetooth: hci1: command tx timeout [ 562.630405][T10001] team0 (unregistering): Port device team_slave_1 removed [ 562.753078][T10001] team0 (unregistering): Port device team_slave_0 removed [ 563.047879][ T54] Bluetooth: hci5: command tx timeout [ 563.293975][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.301452][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.757604][ T54] Bluetooth: hci1: command tx timeout [ 564.230823][T12465] bond0: entered promiscuous mode [ 564.235940][T12465] bond_slave_0: entered promiscuous mode [ 564.268727][T12465] bond_slave_1: entered promiscuous mode [ 564.274833][T12465] bond0: left promiscuous mode [ 564.296372][T12465] bond_slave_0: left promiscuous mode [ 564.302965][T12465] bond_slave_1: left promiscuous mode [ 564.354200][T12467] bond_slave_0: entered promiscuous mode [ 564.360607][T12467] bond_slave_1: entered promiscuous mode [ 564.383901][T12467] vlan2: entered promiscuous mode [ 564.402150][T12467] bond0: entered promiscuous mode [ 564.419017][T12467] bond0: left promiscuous mode [ 564.424632][T12467] bond_slave_0: left promiscuous mode [ 564.430196][T12467] bond_slave_1: left promiscuous mode [ 564.682234][T12494] netlink: 'syz.2.1649': attribute type 11 has an invalid length. [ 564.859581][T12497] vlan2: entered promiscuous mode [ 564.880947][T12497] team_slave_0: entered promiscuous mode [ 564.886845][T12497] team_slave_1: entered promiscuous mode [ 564.931640][T12497] team0: entered promiscuous mode [ 564.952271][T12497] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 565.040880][T12415] chnl_net:caif_netlink_parms(): no params data found [ 565.117696][ T54] Bluetooth: hci5: command tx timeout [ 565.233392][T12508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1653'. [ 565.332735][T12508] bridge0: port 3(veth1_to_bridge) entered blocking state [ 565.347815][T12508] bridge0: port 3(veth1_to_bridge) entered disabled state [ 565.420259][T12508] veth1_to_bridge: entered allmulticast mode [ 565.462646][T12508] veth1_to_bridge: entered promiscuous mode [ 565.482706][T12508] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 565.516441][T12508] bridge0: port 3(veth1_to_bridge) entered blocking state [ 565.523849][T12508] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 565.617190][T12445] chnl_net:caif_netlink_parms(): no params data found [ 565.725374][T12415] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.779441][T12415] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.809321][T12415] bridge_slave_0: entered allmulticast mode [ 565.828040][T12415] bridge_slave_0: entered promiscuous mode [ 565.838174][ T54] Bluetooth: hci1: command tx timeout [ 565.838877][T12415] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.875709][T12415] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.893906][T12415] bridge_slave_1: entered allmulticast mode [ 565.918331][T12415] bridge_slave_1: entered promiscuous mode [ 565.987779][ T5289] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 566.133275][T12415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.187576][ T5289] usb 3-1: Using ep0 maxpacket: 16 [ 566.195350][ T5289] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 566.195741][T12415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.232888][ T5289] usb 3-1: config 0 has no interface number 0 [ 566.265219][ T5289] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 566.284073][ T5289] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 566.348185][ T5289] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 566.369956][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 566.383628][ T5289] usb 3-1: Product: syz [ 566.388148][ T5289] usb 3-1: SerialNumber: syz [ 566.395663][ T5289] usb 3-1: config 0 descriptor?? [ 566.441304][ T5289] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 566.460947][ T5289] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input66 [ 566.496622][T12415] team0: Port device team_slave_0 added [ 566.515287][T12445] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.537731][T12445] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.627962][T12445] bridge_slave_0: entered allmulticast mode [ 566.677798][T12445] bridge_slave_0: entered promiscuous mode [ 566.701301][T12445] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.737936][T12445] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.745347][T12445] bridge_slave_1: entered allmulticast mode [ 566.760275][T12445] bridge_slave_1: entered promiscuous mode [ 566.833549][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 566.845894][T10001] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.876789][T12415] team0: Port device team_slave_1 added [ 566.990906][T12542] netlink: 'syz.3.1658': attribute type 10 has an invalid length. [ 567.166346][T10001] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.211722][ T54] Bluetooth: hci5: command tx timeout [ 567.307656][T12445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.382054][T12415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.382080][T12415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.382110][T12415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.392222][T12415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.392244][T12415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.392274][T12415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.525726][T10001] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.624199][T12445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.624358][T12551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1659'. [ 567.624540][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1659'. [ 567.931315][T10001] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.960629][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1660'. [ 568.105580][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1660'. [ 568.115339][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1660'. [ 568.274812][T12415] hsr_slave_0: entered promiscuous mode [ 568.319538][T12415] hsr_slave_1: entered promiscuous mode [ 568.346246][T12415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 568.374855][T12415] Cannot create hsr debugfs directory [ 568.469475][T12445] team0: Port device team_slave_0 added [ 568.537954][ T5291] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 568.611010][T12445] team0: Port device team_slave_1 added [ 568.673360][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1664'. [ 568.737614][ T5291] usb 5-1: Using ep0 maxpacket: 16 [ 568.746324][ T5291] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 568.755623][ T5291] usb 5-1: config 0 has no interface number 0 [ 568.762473][ T5291] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 568.774118][ T5291] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 568.787044][ T5291] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 568.797641][ T5291] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 568.805931][ T5291] usb 5-1: Product: syz [ 568.811483][ T5291] usb 5-1: SerialNumber: syz [ 568.821976][ T5291] usb 5-1: config 0 descriptor?? [ 568.832305][ T5291] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 568.842878][ T5291] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input67 [ 568.924469][T12572] bridge0: port 6(bond6) entered blocking state [ 568.950430][T12572] bridge0: port 6(bond6) entered disabled state [ 568.976343][T12572] bond6: entered allmulticast mode [ 568.999494][T12572] bond6: entered promiscuous mode [ 569.254068][ C1] cm109_urb_ctl_callback: 254 callbacks suppressed [ 569.254094][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 569.254943][ T9596] usb 3-1: USB disconnect, device number 90 [ 569.260739][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 569.313835][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 569.326627][T12445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.333773][T12445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.405717][T12579] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 569.425781][T12445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.430086][ T9596] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 569.449427][T12445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.464779][T12445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.545308][T12445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.847105][T12445] hsr_slave_0: entered promiscuous mode [ 569.855383][T12445] hsr_slave_1: entered promiscuous mode [ 569.858914][T12445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 569.859053][T12445] Cannot create hsr debugfs directory [ 570.066174][T10001] bridge_slave_1: left allmulticast mode [ 570.066218][T10001] bridge_slave_1: left promiscuous mode [ 570.066515][T10001] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.075766][T10001] bridge_slave_0: left allmulticast mode [ 570.075800][T10001] bridge_slave_0: left promiscuous mode [ 570.076007][T10001] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.398261][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 571.398976][ T9596] usb 5-1: USB disconnect, device number 41 [ 571.405638][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 571.474665][ T9596] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 572.027856][ T9596] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 572.149157][T10001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.184771][T10001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.229296][T10001] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 572.230573][ T9596] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 572.260128][T10001] team0: left promiscuous mode [ 572.280762][T10001] team_slave_0: left promiscuous mode [ 572.286348][T10001] team_slave_1: left promiscuous mode [ 572.307874][ T9596] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.329770][T10001] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 572.358007][ T9596] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.369261][ T9596] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 572.384058][ T9596] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 572.393477][ T9596] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 572.402858][ T9596] usb 5-1: Manufacturer: syz [ 572.411039][ T9596] usb 5-1: config 0 descriptor?? [ 572.423112][T10001] bond0 (unregistering): Released all slaves [ 572.448141][T10001] bond1 (unregistering): Released all slaves [ 572.696370][T10001] tipc: Left network mode [ 572.876152][ T9596] appleir 0003:05AC:8243.0028: unknown main item tag 0x0 [ 572.895143][ T9596] appleir 0003:05AC:8243.0028: No inputs registered, leaving [ 572.925798][ T9596] appleir 0003:05AC:8243.0028: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 573.560713][T10001] hsr_slave_0: left promiscuous mode [ 573.583876][T10001] hsr_slave_1: left promiscuous mode [ 573.627658][T10001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.645398][T10001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.675864][T10001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.705987][T10001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.787153][T10001] veth1_macvtap: left promiscuous mode [ 573.797257][T10001] veth0_macvtap: left promiscuous mode [ 573.815820][T10001] veth1_vlan: left promiscuous mode [ 573.828886][T10001] veth0_vlan: left promiscuous mode [ 575.317832][ T9596] usb 5-1: reset high-speed USB device number 42 using dummy_hcd [ 575.451001][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 575.458576][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.463673][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 575.475531][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.487745][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 575.500079][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.511902][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 575.524118][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.536215][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 575.548262][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.457652][ C1] net_ratelimit: 21669 callbacks suppressed [ 580.457679][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 580.457801][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.464113][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 580.476136][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.488134][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 580.500138][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.512222][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 580.524442][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.536352][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 580.548343][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.467500][ C0] net_ratelimit: 14587 callbacks suppressed [ 585.467527][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.468143][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.468587][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 585.468716][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.469048][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 585.469269][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.469826][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.470376][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.470561][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 585.470964][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.305798][ T9596] usb 5-1: device descriptor read/all, error -110 [ 590.477610][ C0] net_ratelimit: 15429 callbacks suppressed [ 590.477636][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.477848][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 590.478158][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.478620][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.479075][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.479469][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 590.479539][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.479937][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 590.479998][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.480494][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.487511][ C0] net_ratelimit: 15868 callbacks suppressed [ 595.487537][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.488006][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.488094][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 595.488434][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.488689][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 595.488852][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.489285][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.489740][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.490172][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 595.490204][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.497667][ C0] net_ratelimit: 16931 callbacks suppressed [ 600.497693][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.497949][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 600.498139][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.498402][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 600.498581][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.498996][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.499409][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.499828][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.499874][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 600.500297][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.507795][ C1] net_ratelimit: 16331 callbacks suppressed [ 605.507821][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 605.508052][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.508513][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.508953][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.509297][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 605.509385][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.509726][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 605.509829][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.510191][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 605.510284][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.517666][ C1] net_ratelimit: 17721 callbacks suppressed [ 610.517693][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 610.517864][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.518115][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 610.518314][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.518767][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.519189][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.519558][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 610.519622][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.519975][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 610.520047][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.527554][ C0] net_ratelimit: 17686 callbacks suppressed [ 615.527578][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.528015][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.528448][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.528872][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.529205][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 615.529650][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.529657][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 615.530086][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.530154][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 615.530536][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.537862][ C0] net_ratelimit: 16768 callbacks suppressed [ 620.537888][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.537907][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 620.538314][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.538739][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.539177][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.539586][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 620.539582][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.540012][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.540049][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 620.540454][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.953615][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.966411][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.547794][ C0] net_ratelimit: 16282 callbacks suppressed [ 625.547822][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.548236][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.548502][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 625.548669][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.548939][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 625.549082][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.549385][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 625.549492][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.549932][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.550340][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.557670][ C0] net_ratelimit: 16286 callbacks suppressed [ 630.557704][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.558171][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.558632][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.558833][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 630.559254][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.559271][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 630.559766][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.559770][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 630.560265][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.560799][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.567785][ C0] net_ratelimit: 16245 callbacks suppressed [ 635.567810][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.568258][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.568748][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.568769][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 635.569187][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.569196][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 635.569619][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 635.569633][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.570068][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.570756][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.579386][ C0] net_ratelimit: 16187 callbacks suppressed [ 640.579410][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.579841][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.580032][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 640.580262][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.580677][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.581111][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.581524][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 640.581530][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.581961][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.581982][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 642.957104][T10441] Bluetooth: hci0: command 0x0406 tx timeout [ 645.587709][ C0] net_ratelimit: 16240 callbacks suppressed [ 645.587738][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.588170][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.588586][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.588816][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 645.589129][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.589568][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.589995][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.590256][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 645.590431][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.590672][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 650.597588][ C1] net_ratelimit: 16218 callbacks suppressed [ 650.597615][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 650.597851][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.598085][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 650.598311][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.598595][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 650.598774][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.599230][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.599742][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.600207][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.600674][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.607505][ C1] net_ratelimit: 15956 callbacks suppressed [ 655.607530][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 655.607633][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.608001][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 655.608053][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.608479][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.608899][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.609323][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.609580][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 655.609789][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.610206][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.617833][ C1] net_ratelimit: 16101 callbacks suppressed [ 660.617859][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 660.618266][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.618682][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.619106][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.619445][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 660.619524][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.619906][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 660.619980][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.620396][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.620405][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 663.420264][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 665.627887][ C0] net_ratelimit: 15993 callbacks suppressed [ 665.627913][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.628108][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 665.628382][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.628865][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.629320][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.629717][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 665.629785][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.630178][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 665.630270][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.630657][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 670.637596][ C0] net_ratelimit: 16619 callbacks suppressed [ 670.637622][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.638076][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.638519][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.638998][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.639023][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 670.639440][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.639456][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 670.639881][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.640354][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.640795][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.647761][ C0] net_ratelimit: 16947 callbacks suppressed [ 675.647786][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.648205][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.648616][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.649051][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.649186][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 675.649480][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.649634][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 675.649923][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.650087][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 675.650338][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.657581][ C0] net_ratelimit: 17426 callbacks suppressed [ 680.657607][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.658080][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.658389][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 680.658551][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.658914][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 680.659020][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.659824][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.660271][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.660677][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 680.660708][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.667657][ C0] net_ratelimit: 16389 callbacks suppressed [ 685.667683][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.667814][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 685.668132][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.668251][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 685.668584][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.669000][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.669742][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 685.669830][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.670205][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 685.670255][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.421685][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.435883][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.467718][ T5293] usb 5-1: USB disconnect, device number 42 [ 690.677578][ C1] net_ratelimit: 17179 callbacks suppressed [ 690.677603][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 690.677672][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.678097][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.678205][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 690.678518][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.678931][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.679361][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.679775][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.680199][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.680206][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 692.745303][T10441] Bluetooth: hci5: command tx timeout [ 693.781086][T10441] Bluetooth: hci1: command tx timeout [ 695.687531][ C1] net_ratelimit: 16382 callbacks suppressed [ 695.687557][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 695.687792][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.688478][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.688970][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.689171][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 695.689427][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.689628][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 695.689916][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.690374][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.690862][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.697533][ C1] net_ratelimit: 16842 callbacks suppressed [ 700.697562][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 700.697659][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.698154][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.698605][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.699041][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.699164][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 700.699479][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.699617][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 700.699930][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.700379][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.707512][ C1] net_ratelimit: 16842 callbacks suppressed [ 705.707537][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 705.707798][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.707987][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 705.708234][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.708699][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.709156][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.709421][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 705.709598][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.709836][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 705.710042][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.717552][ C0] net_ratelimit: 16304 callbacks suppressed [ 710.717578][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.717620][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 710.718040][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 710.718062][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.718553][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.719014][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.719482][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.719490][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 710.719949][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.720074][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 715.727539][ C1] net_ratelimit: 16360 callbacks suppressed [ 715.727565][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 715.727997][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 715.728019][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.728521][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.729011][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.729395][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 715.729510][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.729820][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 715.730002][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.730540][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.737648][ C0] net_ratelimit: 16102 callbacks suppressed [ 720.737675][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.738139][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.738480][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 720.738573][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.738900][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 720.739013][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.739463][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.739929][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.740290][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 720.740384][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.747715][ C0] net_ratelimit: 16553 callbacks suppressed [ 725.747740][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.748025][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 725.748182][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.748445][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 725.748611][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.749085][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.749520][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.749883][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 725.750009][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.750302][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:07:08:62:49:50, vlan:0) [ 726.560693][ T30] INFO: task kworker/u8:2:35 blocked for more than 143 seconds. [ 726.560725][ T30] Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0 [ 726.560742][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 726.560756][ T30] task:kworker/u8:2 state:D stack:21008 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 726.560803][ T30] Workqueue: events_unbound linkwatch_event [ 726.560840][ T30] Call Trace: [ 726.560851][ T30] [ 726.560877][ T30] __schedule+0x1800/0x4a60 [ 726.560943][ T30] ? __pfx___schedule+0x10/0x10 [ 726.560985][ T30] ? __pfx_lock_release+0x10/0x10 [ 726.561021][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 726.561050][ T30] ? kthread_data+0x52/0xd0 [ 726.561084][ T30] ? schedule+0x90/0x320 [ 726.561119][ T30] ? wq_worker_sleeping+0x66/0x240 [ 726.561156][ T30] ? schedule+0x90/0x320 [ 726.561193][ T30] schedule+0x14b/0x320 [ 726.561233][ T30] schedule_preempt_disabled+0x13/0x30 [ 726.561270][ T30] __mutex_lock+0x6a4/0xd70 [ 726.561303][ T30] ? __mutex_lock+0x527/0xd70 [ 726.561333][ T30] ? linkwatch_event+0xe/0x60 [ 726.561362][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 726.561408][ T30] ? process_scheduled_works+0x945/0x1830 [ 726.561440][ T30] linkwatch_event+0xe/0x60 [ 726.561466][ T30] process_scheduled_works+0xa2c/0x1830 [ 726.561531][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 726.561576][ T30] ? assign_work+0x364/0x3d0 [ 726.561614][ T30] worker_thread+0x86d/0xd10 [ 726.561666][ T30] ? __kthread_parkme+0x169/0x1d0 [ 726.561705][ T30] ? __pfx_worker_thread+0x10/0x10 [ 726.561739][ T30] kthread+0x2f0/0x390 [ 726.561775][ T30] ? __pfx_worker_thread+0x10/0x10 [ 726.561808][ T30] ? __pfx_kthread+0x10/0x10 [ 726.561846][ T30] ret_from_fork+0x4b/0x80 [ 726.561888][ T30] ? __pfx_kthread+0x10/0x10 [ 726.561925][ T30] ret_from_fork_asm+0x1a/0x30 [ 726.561979][ T30] [ 726.562068][ T30] INFO: task dhcpcd:4904 blocked for more than 143 seconds. [ 726.562087][ T30] Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0 [ 726.562103][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 726.562115][ T30] task:dhcpcd state:D stack:20672 pid:4904 tgid:4904 ppid:4903 flags:0x00000002 [ 726.562236][ T30] Call Trace: [ 726.562247][ T30] [ 726.562264][ T30] __schedule+0x1800/0x4a60 [ 726.562329][ T30] ? __pfx___schedule+0x10/0x10 [ 726.562372][ T30] ? __pfx_lock_release+0x10/0x10 [ 726.562407][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 726.562448][ T30] ? schedule+0x90/0x320 [ 726.562484][ T30] schedule+0x14b/0x320 [ 726.562524][ T30] schedule_preempt_disabled+0x13/0x30 [ 726.562561][ T30] __mutex_lock+0x6a4/0xd70 [ 726.562594][ T30] ? __mutex_lock+0x527/0xd70 [ 726.562624][ T30] ? devinet_ioctl+0x2ce/0x1bc0 [ 726.562656][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 726.562691][ T30] ? bpf_lsm_capable+0x9/0x10 [ 726.562718][ T30] ? security_capable+0x90/0xb0 [ 726.562757][ T30] devinet_ioctl+0x2ce/0x1bc0 [ 726.562795][ T30] ? get_user_ifreq+0x1bb/0x200 [ 726.562833][ T30] inet_ioctl+0x3d7/0x4f0 [ 726.562880][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 726.562955][ T30] sock_do_ioctl+0x158/0x460 [ 726.562999][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 726.563041][ T30] ? __pfx_lock_release+0x10/0x10 [ 726.563091][ T30] sock_ioctl+0x629/0x8e0 [ 726.563130][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 726.563171][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 726.563214][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 726.563248][ T30] ? security_file_ioctl+0x87/0xb0 [ 726.563283][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 726.563321][ T30] __se_sys_ioctl+0xfc/0x170 [ 726.563354][ T30] do_syscall_64+0xf3/0x230 [ 726.563381][ T30] ? clear_bhb_loop+0x35/0x90 [ 726.563418][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.563450][ T30] RIP: 0033:0x7f839ec32d49 [ 726.563473][ T30] RSP: 002b:00007ffd3bd11998 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 726.563502][ T30] RAX: ffffffffffffffda RBX: 00007f839eb646c0 RCX: 00007f839ec32d49 [ 726.563522][ T30] RDX: 00007ffd3bd21b88 RSI: 0000000000008914 RDI: 0000000000000018 [ 726.563540][ T30] RBP: 00007ffd3bd31d48 R08: 00007ffd3bd21b48 R09: 00007ffd3bd21af8 [ 726.563559][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.563576][ T30] R13: 00007ffd3bd21b88 R14: 0000000000000028 R15: 0000000000008914 [ 726.563613][ T30] [ 726.563656][ T30] INFO: task syz-executor:12415 blocked for more than 143 seconds. [ 726.563676][ T30] Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0 [ 726.563691][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 726.563703][ T30] task:syz-executor state:D stack:21728 pid:12415 tgid:12415 ppid:12405 flags:0x00004002 [ 726.563746][ T30] Call Trace: [ 726.563757][ T30] [ 726.563774][ T30] __schedule+0x1800/0x4a60 [ 726.563837][ T30] ? __pfx___schedule+0x10/0x10 [ 726.563885][ T30] ? __pfx_lock_release+0x10/0x10 [ 726.563922][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 726.563962][ T30] ? schedule+0x90/0x320 [ 726.563998][ T30] schedule+0x14b/0x320 [ 726.564039][ T30] schedule_preempt_disabled+0x13/0x30 [ 726.564076][ T30] __mutex_lock+0x6a4/0xd70 [ 726.564104][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 726.564137][ T30] ? __mutex_lock+0x527/0xd70 [ 726.564167][ T30] ? nsim_destroy+0x71/0x5c0 [ 726.564200][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 726.564233][ T30] ? __pfx_mntput_no_expire+0x10/0x10 [ 726.564263][ T30] ? _raw_spin_unlock+0x28/0x50 [ 726.564298][ T30] ? simple_release_fs+0x9c/0xd0 [ 726.564327][ T30] nsim_destroy+0x71/0x5c0 [ 726.564366][ T30] __nsim_dev_port_del+0x14b/0x1b0 [ 726.564405][ T30] nsim_dev_reload_destroy+0x28a/0x490 [ 726.564447][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 726.564476][ T30] nsim_drv_remove+0x58/0x160 [ 726.564513][ T30] device_release_driver_internal+0x4a9/0x7c0 [ 726.564554][ T30] bus_remove_device+0x34f/0x420 [ 726.564596][ T30] device_del+0x57a/0x9b0 [ 726.564631][ T30] ? __pfx_device_del+0x10/0x10 [ 726.564668][ T30] device_unregister+0x20/0xc0 [ 726.564694][ T30] del_device_store+0x363/0x480 [ 726.564730][ T30] ? __pfx_del_device_store+0x10/0x10 [ 726.564765][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 726.564799][ T30] ? bus_attr_store+0x4f/0xa0 [ 726.564837][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 726.564878][ T30] kernfs_fop_write_iter+0x3a1/0x500 [ 726.564919][ T30] vfs_write+0xa72/0xc90 [ 726.564953][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 726.564987][ T30] ? __pfx_vfs_write+0x10/0x10 [ 726.565030][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 726.565065][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 726.565109][ T30] ksys_write+0x1a0/0x2c0 [ 726.565144][ T30] ? __pfx_ksys_write+0x10/0x10 [ 726.565173][ T30] ? do_syscall_64+0x100/0x230 [ 726.565204][ T30] ? do_syscall_64+0xb6/0x230 [ 726.565234][ T30] do_syscall_64+0xf3/0x230 [ 726.565261][ T30] ? clear_bhb_loop+0x35/0x90 [ 726.565296][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.565327][ T30] RIP: 0033:0x7f93c417899f [ 726.565349][ T30] RSP: 002b:00007f93c443f220 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 726.565376][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f93c417899f [ 726.565395][ T30] RDX: 0000000000000001 RSI: 00007f93c443f270 RDI: 0000000000000005 [ 726.565412][ T30] RBP: 00007f93c41e89dd R08: 0000000000000000 R09: 00007f93c443f077 [ 726.565431][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 726.565448][ T30] R13: 00007f93c443f270 R14: 00007f93c4e44620 R15: 0000000000000003 [ 726.565485][ T30] [ 726.565497][ T30] INFO: task syz-executor:12445 blocked for more than 143 seconds. [ 726.565515][ T30] Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0 [ 726.565531][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 726.565544][ T30] task:syz-executor state:D stack:21136 pid:12445 tgid:12445 ppid:12418 flags:0x00004000 [ 726.565586][ T30] Call Trace: [ 726.565596][ T30] [ 726.565613][ T30] __schedule+0x1800/0x4a60 [ 726.565676][ T30] ? __pfx___schedule+0x10/0x10 [ 726.565718][ T30] ? __pfx_lock_release+0x10/0x10 [ 726.565755][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 726.565823][ T30] ? schedule+0x90/0x320 [ 726.565859][ T30] schedule+0x14b/0x320 [ 726.565906][ T30] schedule_preempt_disabled+0x13/0x30 [ 726.565943][ T30] __mutex_lock+0x6a4/0xd70 [ 726.565975][ T30] ? __mutex_lock+0x527/0xd70 [ 726.566006][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 726.566046][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 726.566093][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 726.566131][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 726.566170][ T30] ? __lock_acquire+0x137a/0x2040 [ 726.566206][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 726.566263][ T30] netlink_rcv_skb+0x1e3/0x430 [ 726.566292][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 726.566332][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 726.566386][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 726.566416][ T30] netlink_unicast+0x7f6/0x990 [ 726.566464][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 726.566497][ T30] ? __virt_addr_valid+0x183/0x530 [ 726.566527][ T30] ? __check_object_size+0x49c/0x900 [ 726.566561][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 726.566596][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 726.566639][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.566669][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 726.566699][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 726.566731][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 726.566768][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.566793][ T30] __sock_sendmsg+0x221/0x270 [ 726.566836][ T30] __sys_sendto+0x3a4/0x4f0 [ 726.566880][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 726.566926][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 726.566961][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 726.567008][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 726.567047][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 726.567089][ T30] __x64_sys_sendto+0xde/0x100 [ 726.567124][ T30] do_syscall_64+0xf3/0x230 [ 726.567151][ T30] ? clear_bhb_loop+0x35/0x90 [ 726.567187][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.567219][ T30] RIP: 0033:0x7f7e8697bd4c [ 726.567240][ T30] RSP: 002b:00007f7e86c3f670 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 726.567267][ T30] RAX: ffffffffffffffda RBX: 00007f7e87644620 RCX: 00007f7e8697bd4c [ 726.567287][ T30] RDX: 000000000000005c RSI: 00007f7e87644670 RDI: 0000000000000003 [ 726.567305][ T30] RBP: 0000000000000000 R08: 00007f7e86c3f6c4 R09: 000000000000000c [ 726.567323][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 726.567339][ T30] R13: 0000000000000000 R14: 00007f7e87644670 R15: 0000000000000000 [ 726.581423][ T30] [ 726.581451][ T30] INFO: task syz.3.1674:12605 blocked for more than 143 seconds. [ 726.581472][ T30] Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0 [ 726.581488][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 726.581501][ T30] task:syz.3.1674 state:D stack:27128 pid:12605 tgid:12603 ppid:10449 flags:0x00004006 [ 726.581548][ T30] Call Trace: [ 726.581558][ T30] [ 726.581574][ T30] __schedule+0x1800/0x4a60 [ 726.581642][ T30] ? __pfx___schedule+0x10/0x10 [ 726.581685][ T30] ? __pfx_lock_release+0x10/0x10 [ 726.581721][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 726.581762][ T30] ? schedule+0x90/0x320 [ 726.581798][ T30] schedule+0x14b/0x320 [ 726.581839][ T30] schedule_preempt_disabled+0x13/0x30 [ 726.581884][ T30] __mutex_lock+0x6a4/0xd70 [ 726.581917][ T30] ? __mutex_lock+0x527/0xd70 [ 726.581948][ T30] ? raw_release+0x1b8/0x8b0 [ 726.581978][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 726.582015][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 726.582055][ T30] raw_release+0x1b8/0x8b0 [ 726.582085][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 726.582122][ T30] sock_close+0xbc/0x240 [ 726.582157][ T30] ? __pfx_sock_close+0x10/0x10 [ 726.582195][ T30] __fput+0x24a/0x8a0 [ 726.582247][ T30] task_work_run+0x24f/0x310 [ 726.582282][ T30] ? __pfx_task_work_run+0x10/0x10 [ 726.582315][ T30] ? __sys_recvmsg+0x319/0x3e0 [ 726.582352][ T30] get_signal+0x15e6/0x1740 [ 726.582381][ T30] ? fput+0x19a/0x210 [ 726.582428][ T30] ? __pfx___sys_recvmsg+0x10/0x10 [ 726.582463][ T30] ? __pfx_get_signal+0x10/0x10 [ 726.582504][ T30] arch_do_signal_or_restart+0x96/0x860 [ 726.582543][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 726.582574][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 726.582625][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 726.582656][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 726.582687][ T30] do_syscall_64+0x100/0x230 [ 726.582715][ T30] ? clear_bhb_loop+0x35/0x90 [ 726.582752][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.582783][ T30] RIP: 0033:0x7f5b08579eb9 [ 726.582805][ T30] RSP: 002b:00007f5b09416038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 726.582833][ T30] RAX: fffffffffffffe00 RBX: 00007f5b08716058 RCX: 00007f5b08579eb9 [ 726.582854][ T30] RDX: 0000000000000000 RSI: 0000000020000a00 RDI: 0000000000000003 [ 726.582879][ T30] RBP: 00007f5b085e793e R08: 0000000000000000 R09: 0000000000000000 [ 726.582896][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.582912][ T30] R13: 0000000000000001 R14: 00007f5b08716058 R15: 00007f5b0883fa28 [ 726.582950][ T30] [ 726.582963][ T30] [ 726.582963][ T30] Showing all locks held in the system: [ 726.582976][ T30] 1 lock held by kthreadd/2: [ 726.582994][ T30] 4 locks held by kworker/0:0/8: [ 726.583009][ T30] 2 locks held by kworker/0:1/9: [ 726.583024][ T30] 1 lock held by kworker/R-mm_pe/13: [ 726.583042][ T30] 2 locks held by kworker/1:0/25: [ 726.583059][ T30] 1 lock held by khungtaskd/30: [ 726.583073][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 726.583157][ T30] 3 locks held by kworker/u8:2/35: [ 726.583172][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 726.583246][ T30] #1: ffffc90000ab7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 726.583318][ T30] #2: ffffffff8fc8bc48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 726.583387][ T30] 4 locks held by kworker/1:1/46: [ 726.583404][ T30] 2 locks held by kworker/1:2/58: [ 726.583420][ T30] 2 locks held by kworker/u8:4/63: [ 726.583441][ T30] 3 locks held by kworker/u8:5/129: [ 726.583461][ T30] 5 locks held by kworker/1:3/944: [ 726.583478][ T30] 4 locks held by kworker/u8:6/1063: [ 726.583494][ T30] 3 locks held by kworker/0:2/1173: [ 726.583522][ T30] 1 lock held by kworker/R-dm_bu/2376: [ 726.583537][ T30] #0: ffffffff8e7e2c08 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 726.583616][ T30] 3 locks held by kworker/u8:10/2573: [ 726.583636][ T30] 2 locks held by syslogd/4672: [ 726.583652][ T30] 3 locks held by udevd/4690: [ 726.583668][ T30] 1 lock held by dhcpcd/4904: [ 726.583682][ T30] #0: ffffffff8fc8bc48 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1bc0 [ 726.583753][ T30] 2 locks held by getty/4998: [ 726.583768][ T30] #0: ffff888034e910a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 726.583840][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 726.583914][ T30] 2 locks held by syz-executor/5226: [ 726.583931][ T30] 5 locks held by kworker/0:3/5289: [ 726.583946][ T30] 3 locks held by kworker/1:4/5290: [ 726.583962][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 726.584035][ T30] #1: ffffc90004257d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 726.584108][ T30] #2: ffffffff8fc8bc48 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 726.584184][ T30] 4 locks held by kworker/0:4/5291: [ 726.584200][ T30] 9 locks held by kworker/1:5/5293: [ 726.584216][ T30] 1 lock held by kworker/1:6/5294: [ 726.584231][ T30] #0: ffffffff8e7e2c08 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 726.584306][ T30] 4 locks held by kworker/1:7/5307: [ 726.584322][ T30] 2 locks held by kworker/0:6/5356: [ 726.584340][ T30] 1 lock held by kworker/R-wg-cr/6472: [ 726.584355][ T30] #0: ffffffff8e7e2c08 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 726.584429][ T30] 1 lock held by kworker/R-wg-cr/6474: [ 726.584445][ T30] #0: ffffffff8e7e2c08 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 726.584519][ T30] 1 lock held by kworker/R-wg-cr/6475: [ 726.584535][ T30] #0: ffffffff8e7e2c08 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 726.584609][ T30] 2 locks held by kworker/0:5/9596: [ 726.584624][ T30] 3 locks held by kworker/u8:0/9985: [ 726.584640][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 726.584713][ T30] #1: ffffc90009627d00 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 726.584785][ T30] #2: ffffffff8e7e2c08 (wq_pool_attach_mutex){+.+.}-{3:3}, at: idle_cull_fn+0xd5/0x760 [ 726.584857][ T30] 3 locks held by kworker/u8:7/9988: [ 726.584880][ T30] 3 locks held by kworker/u8:9/9991: [ 726.584896][ T30] 3 locks held by kworker/u8:13/9999: [ 726.584911][ T30] #0: ffff88802fdaa948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 726.584985][ T30] #1: ffffc900096a7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 726.585059][ T30] #2: ffffffff8fc8bc48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 726.585137][ T30] 7 locks held by kworker/u8:14/10001: [ 726.585153][ T30] 3 locks held by kworker/u8:15/10003: [ 726.585180][ T30] 3 locks held by kworker/u8:16/10005: [ 726.585198][ T30] 2 locks held by syz-executor/11749: [ 726.585215][ T30] 1 lock held by kworker/R-wg-cr/11786: [ 726.585230][ T30] #0: ffffffff8e7e2c08 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 726.585304][ T30] 1 lock held by kworker/R-wg-cr/11819: [ 726.585320][ T30] #0: ffffffff8e7e2c08 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 726.585392][ T30] 1 lock held by kworker/R-wg-cr/11820: [ 726.585408][ T30] #0: ffffffff8e7e2c08 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 726.585483][ T30] 1 lock held by kworker/R-wg-cr/12192: [ 726.585499][ T30] #0: ffffffff8e7e2c08 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 726.585571][ T30] 1 lock held by kworker/R-wg-cr/12194: [ 726.585587][ T30] #0: ffffffff8e7e2c08 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 726.585662][ T30] 7 locks held by syz-executor/12415: [ 726.585677][ T30] #0: ffff88807d95c420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 726.585750][ T30] #1: ffff888050640488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 726.585849][ T30] #2: ffff888027afe4b8 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 726.585933][ T30] #3: ffffffff8f526248 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 726.586004][ T30] #4: ffff8880269fe0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 726.586072][ T30] #5: ffff88805f577250 (&devlink->lock_key#31){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 726.586154][ T30] #6: ffffffff8fc8bc48 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 726.586224][ T30] 1 lock held by syz-executor/12445: [ 726.586240][ T30] #0: ffffffff8fc8bc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 726.586319][ T30] 1 lock held by syz.2.1667/12584: [ 726.586335][ T30] 2 locks held by syz.3.1674/12605: [ 726.586350][ T30] #0: ffff8880785b3808 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 726.586433][ T30] #1: ffffffff8fc8bc48 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8b0 [ 726.586500][ T30] 5 locks held by kworker/0:7/12623: [ 726.586516][ T30] [ 726.586525][ T30] ============================================= [ 726.586525][ T30] [ 726.586548][ T30] NMI backtrace for cpu 0 [ 726.586563][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0 [ 726.586589][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 726.586603][ T30] Call Trace: [ 726.586615][ T30] [ 726.586626][ T30] dump_stack_lvl+0x241/0x360 [ 726.586656][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 726.586683][ T30] ? __pfx__printk+0x10/0x10 [ 726.586703][ T30] ? vprintk_emit+0x667/0x7c0 [ 726.586732][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 726.586765][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 726.586802][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 726.586831][ T30] ? _printk+0xd5/0x120 [ 726.586853][ T30] ? __pfx__printk+0x10/0x10 [ 726.586882][ T30] ? __wake_up_klogd+0xcc/0x110 [ 726.586911][ T30] ? __pfx__printk+0x10/0x10 [ 726.586940][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 726.586972][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 726.587008][ T30] watchdog+0xff4/0x1040 [ 726.587044][ T30] ? watchdog+0x1ea/0x1040 [ 726.587084][ T30] ? __pfx_watchdog+0x10/0x10 [ 726.587117][ T30] kthread+0x2f0/0x390 [ 726.587153][ T30] ? __pfx_watchdog+0x10/0x10 [ 726.587185][ T30] ? __pfx_kthread+0x10/0x10 [ 726.587221][ T30] ret_from_fork+0x4b/0x80 [ 726.587254][ T30] ? __pfx_kthread+0x10/0x10 [ 726.587290][ T30] ret_from_fork_asm+0x1a/0x30 [ 726.587340][ T30] [ 726.587350][ T30] Sending NMI from CPU 0 to CPUs 1: [ 726.600570][ C1] NMI backtrace for cpu 1 [ 726.600588][ C1] CPU: 1 UID: 0 PID: 1063 Comm: kworker/u8:6 Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0 [ 726.600611][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 726.600624][ C1] Workqueue: bat_events batadv_dat_purge [ 726.600654][ C1] RIP: 0010:rcu_read_lock_held+0x19/0x50 [ 726.600685][ C1] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 e8 b6 33 41 0a 85 c0 74 26 31 db e8 ab 54 01 00 84 c0 74 20 92 a7 01 00 84 c0 74 17 48 c7 c7 20 83 93 8e be ff ff ff ff 5b [ 726.600701][ C1] RSP: 0018:ffffc90000a17370 EFLAGS: 00000202 [ 726.600717][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff888027948000 [ 726.600731][ C1] RDX: ffff888027948000 RSI: ffffffff8c608d20 RDI: ffffffff8c608ce0 [ 726.600746][ C1] RBP: ffff88803426ccb8 R08: ffffffff898d7286 R09: ffffc90000a176b0 [ 726.600760][ C1] R10: ffffc90000a176a0 R11: fffff52000142ea2 R12: ffff888079dac000 [ 726.600775][ C1] R13: ffff88803426cccf R14: 1ffff1100684d999 R15: 1ffff1100684d997 [ 726.600789][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 726.600805][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 726.600819][ C1] CR2: 0000000020c40030 CR3: 000000000e734000 CR4: 00000000003506f0 [ 726.600836][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 726.600848][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 726.600860][ C1] Call Trace: [ 726.600868][ C1] [ 726.600876][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 726.600900][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 726.600928][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 726.600951][ C1] ? nmi_handle+0x2a/0x5a0 [ 726.600979][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 726.601002][ C1] ? nmi_handle+0x14f/0x5a0 [ 726.601020][ C1] ? nmi_handle+0x2a/0x5a0 [ 726.601039][ C1] ? rcu_read_lock_held+0x19/0x50 [ 726.601065][ C1] ? default_do_nmi+0x63/0x160 [ 726.601090][ C1] ? exc_nmi+0x123/0x1f0 [ 726.601113][ C1] ? end_repeat_nmi+0xf/0x53 [ 726.601147][ C1] ? lockdep_rtnl_is_held+0x26/0x40 [ 726.601169][ C1] ? rcu_read_lock_held+0x19/0x50 [ 726.601197][ C1] ? rcu_read_lock_held+0x19/0x50 [ 726.601224][ C1] ? rcu_read_lock_held+0x19/0x50 [ 726.601252][ C1] [ 726.601258][ C1] [ 726.601265][ C1] find_match+0xf9/0xc10 [ 726.601291][ C1] __find_rr_leaf+0x275/0x8e0 [ 726.601320][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 726.601340][ C1] ? __pfx_fib6_node_lookup+0x10/0x10 [ 726.601374][ C1] fib6_table_lookup+0x413/0xbb0 [ 726.601410][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 726.601435][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 726.601543][ C1] ip6_pol_route+0x273/0x15d0 [ 726.601570][ C1] ? ip6_pol_route+0x198/0x15d0 [ 726.601605][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 726.601628][ C1] ? br_nf_dev_queue_xmit+0x4f8/0x22e0 [ 726.601661][ C1] fib6_rule_lookup+0x58c/0x790 [ 726.601685][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 726.601704][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 726.601729][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 726.601758][ C1] ? __pfx_validate_chain+0x10/0x10 [ 726.601776][ C1] ? __pfx_lock_release+0x10/0x10 [ 726.601805][ C1] ip6_route_input+0x859/0xd90 [ 726.601829][ C1] ? mark_lock+0x9a/0x350 [ 726.601860][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 726.601901][ C1] ? ip6_rcv_finish_core+0x20f/0x410 [ 726.601923][ C1] ip6_rcv_finish+0x144/0x180 [ 726.601942][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 726.601961][ C1] ip_sabotage_in+0x203/0x290 [ 726.601984][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 726.602003][ C1] nf_hook_slow+0xc3/0x220 [ 726.602029][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 726.602047][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 726.602065][ C1] NF_HOOK+0x29e/0x450 [ 726.602083][ C1] ? skb_orphan+0xae/0xd0 [ 726.602103][ C1] ? NF_HOOK+0x9a/0x450 [ 726.602127][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 726.602147][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 726.602170][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 726.602190][ C1] __netif_receive_skb+0x1ea/0x650 [ 726.602218][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 726.602242][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 726.602277][ C1] ? netif_receive_skb+0x131/0x890 [ 726.602302][ C1] ? netif_receive_skb+0x131/0x890 [ 726.602327][ C1] netif_receive_skb+0x1e8/0x890 [ 726.602353][ C1] ? __pfx_lock_release+0x10/0x10 [ 726.602378][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 726.602407][ C1] ? br_netif_receive_skb+0x130/0x1a0 [ 726.602432][ C1] NF_HOOK+0x9e/0x400 [ 726.602452][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 726.602474][ C1] ? NF_HOOK+0xfc/0x400 [ 726.602493][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 726.602515][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 726.602540][ C1] ? br_pass_frame_up+0x297/0x430 [ 726.602564][ C1] br_handle_frame_finish+0x18ed/0x1fe0 [ 726.602595][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 726.602615][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 726.602638][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 726.602661][ C1] ? ip6t_do_table+0x205/0x18a0 [ 726.602686][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 726.602709][ C1] ? nf_conntrack_in+0x15e9/0x1890 [ 726.602728][ C1] ? ipv6_ext_hdr+0x71/0x80 [ 726.602746][ C1] ? ip6t_do_table+0x205/0x18a0 [ 726.602773][ C1] ? nf_hook_slow+0x175/0x220 [ 726.602798][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 726.602820][ C1] br_nf_hook_thresh+0x472/0x590 [ 726.602845][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 726.602867][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 726.602894][ C1] ? skb_push+0x97/0x100 [ 726.602921][ C1] br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0 [ 726.602943][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 726.602972][ C1] br_nf_pre_routing_ipv6+0x379/0x770 [ 726.602995][ C1] ? br_nf_pre_routing_ipv6+0x41e/0x770 [ 726.603017][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 726.603042][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 726.603064][ C1] ? br_nf_pre_routing+0x70e/0x1470 [ 726.603083][ C1] ? NF_HOOK+0x3a4/0x450 [ 726.603104][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 726.603130][ C1] br_handle_frame+0x9fd/0x1530 [ 726.603157][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 726.603180][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 726.603207][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 726.603228][ C1] __netif_receive_skb_core+0x13e8/0x4570 [ 726.603255][ C1] ? kasan_quarantine_put+0xdc/0x230 [ 726.603279][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 726.603311][ C1] ? ip6_mc_input+0xa1f/0xc30 [ 726.603329][ C1] ? kmem_cache_free+0x145/0x350 [ 726.603352][ C1] ? ip6_mc_input+0xa1f/0xc30 [ 726.603374][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 726.603404][ C1] ? mark_lock+0x9a/0x350 [ 726.603432][ C1] ? __lock_acquire+0x137a/0x2040 [ 726.603475][ C1] __netif_receive_skb+0x12f/0x650 [ 726.603502][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 726.603527][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 726.603553][ C1] ? __pfx_lock_release+0x10/0x10 [ 726.603588][ C1] process_backlog+0x662/0x15b0 [ 726.603618][ C1] ? process_backlog+0x33b/0x15b0 [ 726.603651][ C1] ? __pfx_process_backlog+0x10/0x10 [ 726.603678][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 726.603705][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 726.603732][ C1] __napi_poll+0xcb/0x490 [ 726.603760][ C1] net_rx_action+0x89b/0x1240 [ 726.603801][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 726.603828][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 726.603876][ C1] handle_softirqs+0x2c4/0x970 [ 726.603902][ C1] ? do_softirq+0x11b/0x1e0 [ 726.603927][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 726.603957][ C1] do_softirq+0x11b/0x1e0 [ 726.603979][ C1] [ 726.603986][ C1] [ 726.603993][ C1] ? __pfx_do_softirq+0x10/0x10 [ 726.604016][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 726.604042][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 726.604067][ C1] ? rcu_is_watching+0x15/0xb0 [ 726.604095][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 726.604125][ C1] ? batadv_dat_purge+0x2de/0x3c0 [ 726.604151][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 726.604174][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 726.604201][ C1] batadv_dat_purge+0x2de/0x3c0 [ 726.604231][ C1] ? process_scheduled_works+0x945/0x1830 [ 726.604255][ C1] process_scheduled_works+0xa2c/0x1830 [ 726.604296][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 726.604326][ C1] ? assign_work+0x364/0x3d0 [ 726.604352][ C1] worker_thread+0x86d/0xd10 [ 726.604386][ C1] ? __kthread_parkme+0x169/0x1d0 [ 726.604413][ C1] ? __pfx_worker_thread+0x10/0x10 [ 726.604438][ C1] kthread+0x2f0/0x390 [ 726.604465][ C1] ? __pfx_worker_thread+0x10/0x10 [ 726.604489][ C1] ? __pfx_kthread+0x10/0x10 [ 726.604516][ C1] ret_from_fork+0x4b/0x80 [ 726.604541][ C1] ? __pfx_kthread+0x10/0x10 [ 726.604569][ C1] ret_from_fork_asm+0x1a/0x30 [ 726.604604][ C1] [ 727.485818][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 727.485844][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0 [ 727.485874][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 727.485889][ T30] Call Trace: [ 727.485900][ T30] [ 727.485911][ T30] dump_stack_lvl+0x241/0x360 [ 727.485946][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 727.485973][ T30] ? __pfx__printk+0x10/0x10 [ 727.485994][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 727.486037][ T30] ? vscnprintf+0x5d/0x90 [ 727.486068][ T30] panic+0x349/0x860 [ 727.486093][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 727.486126][ T30] ? __pfx_panic+0x10/0x10 [ 727.486159][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 727.486187][ T30] ? __irq_work_queue_local+0x137/0x410 [ 727.486221][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 727.486247][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 727.486277][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 727.486311][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 727.486346][ T30] watchdog+0x1033/0x1040 [ 727.486382][ T30] ? watchdog+0x1ea/0x1040 [ 727.486422][ T30] ? __pfx_watchdog+0x10/0x10 [ 727.486455][ T30] kthread+0x2f0/0x390 [ 727.486490][ T30] ? __pfx_watchdog+0x10/0x10 [ 727.486521][ T30] ? __pfx_kthread+0x10/0x10 [ 727.486557][ T30] ret_from_fork+0x4b/0x80 [ 727.486589][ T30] ? __pfx_kthread+0x10/0x10 [ 727.486625][ T30] ret_from_fork_asm+0x1a/0x30 [ 727.486674][ T30] [ 727.486923][ T30] Kernel Offset: disabled