last executing test programs: 30.829292695s ago: executing program 1 (id=254): getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r0, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 30.26785167s ago: executing program 0 (id=257): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="620ac4ff0000000071104a00000000009500"], &(0x7f0000000480)='GPL\x00'}, 0x94) 30.267384874s ago: executing program 1 (id=258): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) 29.992688039s ago: executing program 0 (id=260): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 29.949162795s ago: executing program 1 (id=262): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff250100100000000000e1ffe000000108000a00"], 0x5c}, 0x1, 0x6c}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="050000000000fcdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="54002380080014"], 0x84}}, 0x0) 29.77315511s ago: executing program 0 (id=264): syz_emit_ethernet(0xad, &(0x7f0000000580)={@multicast, @local, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x7, 0x1, 0x2}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x6f, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x6f, 0x0, @wg=@data={0x4, 0x8be, 0x7, "ae0a5b60d99ce15253bde9c1c7d3d4ec1e0377ca754d6cc759d6af68d1899e564fbee4cf0cd640f1c34909b86c660eb58dac59df99bd191809bbc3f26e2b4f1f3d84e988ea2c9851c812c9421088db0388a5985b2eeba5"}}}}}}}, 0x0) 29.67070705s ago: executing program 1 (id=265): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x1, 0x0, {0xa}}, 0x14}}, 0x0) 29.549455074s ago: executing program 0 (id=267): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 27.444987556s ago: executing program 3 (id=269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x24008004) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) 27.258345202s ago: executing program 3 (id=270): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'wlan1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000100)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0xc, r2}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000180)=0x2) ioctl$PPPIOCATTCHAN(r4, 0x40047438, 0x0) 27.053314908s ago: executing program 4 (id=271): syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 27.009757096s ago: executing program 1 (id=272): epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) connect$can_bcm(r1, 0x0, 0x0) sendmsg$can_bcm(r1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 26.990359905s ago: executing program 4 (id=273): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB="22e2cf8975608d18d91a17cb3776054e081dabffa7f6d27fde1ce1430ce08e97c0b5b8f7c62feaf4d6a382197b0c779680ea688b149c8f8f0743684688243db3cbf65e6217f0"], 0xf0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x34, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}]}}}}}}}, 0x0) 26.909414204s ago: executing program 3 (id=274): sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000040)="17fb68838c55865346549eec2d069856d8b84ce9484825241fa9daacaead04ad30d113c7735e8c4ab562e8d313c7142c6bfc767eb788f44734fc7a1ca157bdce137f90719b801c4869539be412c6053c9cd510aea5430db03ef1bd7fc7006b78c4b9d432888f05946dd741178430", 0x6e}, 0x1, 0x0, 0x0, 0x4004084}, 0x4008800) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000780)) 26.600004283s ago: executing program 0 (id=275): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000054}, 0x40000) 26.599452398s ago: executing program 2 (id=276): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r1, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x20048054) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, 0x0, 0x0) 26.583877651s ago: executing program 4 (id=277): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 26.2734855s ago: executing program 0 (id=278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000040000000aaff02000000000000000000000000000106"], 0xffe) 26.273263358s ago: executing program 2 (id=279): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @bcast, @bpq0, 0x9, 'syz0\x00', @default, 0x1, 0x1, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) 26.273115626s ago: executing program 4 (id=280): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$l2tp6(r1, &(0x7f0000000200)={0xa, 0x0, 0x8, @local, 0x200000, 0x2}, 0x20) socket$netlink(0x10, 0x3, 0x38363dae868731b3) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x3, @loopback, 0xfffffffc}, 0x1c) 25.941395844s ago: executing program 2 (id=281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x24000071) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0xc}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c004}, 0x4000) 25.807674362s ago: executing program 3 (id=282): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x1, 0x0, {0xa}}, 0x14}}, 0x0) 25.53401703s ago: executing program 2 (id=283): shutdown(0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000010c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000001a40)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001780)={0x58, r2, 0x101, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="37ff31051be6"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x800, 0x1, 0x2, 0x0, {0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x2, 0x20}}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x24000084) 25.457469777s ago: executing program 4 (id=284): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840) 25.425125899s ago: executing program 3 (id=285): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(r0, 0x0, 0x20008814) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 25.133662469s ago: executing program 2 (id=286): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="020702090400000028bd7000fcdbdf25020010000f47000004d500000000cbd998fab821780bb27467c5050000001335a7c937f0870c0b77709e8c6ab62ebdc5f22730f88a418e83e17ae4b5eed09f01519b3c68fba5a3a9f959d25232c47d302f67384e029db4499737f0040fae76dba37f95df1ebbb625e8fbcccb835d5acfbc80e0d72886ab31a121bb1dd9bbd972c4ab9f2e6a9869bddb1a15d91f2cae52c1ea21c18d08c21050fef245da48108b712386b893d68faecb146dfcbe6af342790fac6919ef00cffcfe6d5c24532a9fb878ae6bc97a5660472e21a5b02d27ed41ecdfefcc"], 0x20}}, 0x4000810) 24.978458976s ago: executing program 3 (id=287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x18c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x45, 0xe, {{{}, {}, @broadcast, @device_a, @random="8e742f592bf6"}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x7f, 0x1, 0x7}}, @void, @val={0x5, 0x3, {0xeb, 0x3a, 0xb0}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x9, 0x11, 0x979}}}}, @NL80211_ATTR_BEACON_TAIL={0x10e, 0xf, [@perr={0x84, 0x108, {0x1, 0x10, [{{}, @broadcast, 0x7c, @void, 0x7e}, {{}, @device_a, 0x90, @void, 0x25}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x22}, {{0x0, 0x1}, @device_b, 0x5, @value, 0x30}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x1d}, {{}, @device_a, 0x6, @void, 0x3e}, {{}, @broadcast, 0x38000000, @void, 0x1d}, {{0x0, 0x1}, @broadcast, 0x7, @value, 0x3c}, {{}, @device_b, 0x0, @void, 0x26}, {{0x0, 0x1}, @device_b, 0x8ec, @value, 0xb}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x40}, {{0x0, 0x1}, @device_a, 0x400, @value=@device_b, 0x1e}, {{0x0, 0x1}, @device_a, 0x7, @value, 0x33}, {{}, @broadcast, 0xdfb421f, @void, 0x3c}, {{0x0, 0x1}, @device_a, 0x8000, @value=@device_b, 0xa}, {{}, @device_a, 0x7a, @void, 0x32}]}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x18c}}, 0xc010) 24.978309138s ago: executing program 4 (id=288): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6050}]}, 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 24.849988794s ago: executing program 1 (id=289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd01000000000014"], 0xfdef) 15.870240693s ago: executing program 2 (id=290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x34, r1, 0x101, 0x70bd26, 0x40000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80) 11.057733588s ago: executing program 32 (id=278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000040000000aaff02000000000000000000000000000106"], 0xffe) 9.251193528s ago: executing program 33 (id=287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x18c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x45, 0xe, {{{}, {}, @broadcast, @device_a, @random="8e742f592bf6"}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x7f, 0x1, 0x7}}, @void, @val={0x5, 0x3, {0xeb, 0x3a, 0xb0}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x9, 0x11, 0x979}}}}, @NL80211_ATTR_BEACON_TAIL={0x10e, 0xf, [@perr={0x84, 0x108, {0x1, 0x10, [{{}, @broadcast, 0x7c, @void, 0x7e}, {{}, @device_a, 0x90, @void, 0x25}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x22}, {{0x0, 0x1}, @device_b, 0x5, @value, 0x30}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x1d}, {{}, @device_a, 0x6, @void, 0x3e}, {{}, @broadcast, 0x38000000, @void, 0x1d}, {{0x0, 0x1}, @broadcast, 0x7, @value, 0x3c}, {{}, @device_b, 0x0, @void, 0x26}, {{0x0, 0x1}, @device_b, 0x8ec, @value, 0xb}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x40}, {{0x0, 0x1}, @device_a, 0x400, @value=@device_b, 0x1e}, {{0x0, 0x1}, @device_a, 0x7, @value, 0x33}, {{}, @broadcast, 0xdfb421f, @void, 0x3c}, {{0x0, 0x1}, @device_a, 0x8000, @value=@device_b, 0xa}, {{}, @device_a, 0x7a, @void, 0x32}]}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x18c}}, 0xc010) 9.068944054s ago: executing program 34 (id=289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd01000000000014"], 0xfdef) 8.939105609s ago: executing program 35 (id=288): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6050}]}, 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 0s ago: executing program 36 (id=290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x34, r1, 0x101, 0x70bd26, 0x40000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.17' (ED25519) to the list of known hosts. [ 80.867804][ T5824] cgroup: Unknown subsys name 'net' [ 81.168071][ T5824] cgroup: Unknown subsys name 'cpuset' [ 81.203352][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.949061][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.605490][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.606842][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.621128][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.623569][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.624318][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.625987][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.626771][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.627380][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.628968][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.633368][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.633608][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.653085][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.656127][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.684223][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.701806][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.711328][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.732954][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.735497][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.739675][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.740719][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.792067][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.806104][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.809323][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.812386][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.817402][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.711454][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 86.767635][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 86.777555][ T989] cfg80211: failed to load regulatory.db [ 86.803977][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 86.824460][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 86.970292][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 87.670203][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.671297][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.671650][ T5836] bridge_slave_0: entered allmulticast mode [ 87.675073][ T5836] bridge_slave_0: entered promiscuous mode [ 87.795019][ T5849] Bluetooth: hci2: command tx timeout [ 87.795498][ T5849] Bluetooth: hci3: command tx timeout [ 87.795594][ T5849] Bluetooth: hci1: command tx timeout [ 87.795663][ T5849] Bluetooth: hci0: command tx timeout [ 87.874475][ T5852] Bluetooth: hci4: command tx timeout [ 87.980812][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.980983][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.981130][ T5836] bridge_slave_1: entered allmulticast mode [ 87.983507][ T5836] bridge_slave_1: entered promiscuous mode [ 88.076350][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.076547][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.076719][ T5843] bridge_slave_0: entered allmulticast mode [ 88.078465][ T5843] bridge_slave_0: entered promiscuous mode [ 88.314395][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.314554][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.314723][ T5842] bridge_slave_0: entered allmulticast mode [ 88.317444][ T5842] bridge_slave_0: entered promiscuous mode [ 88.318890][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.319016][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.319190][ T5843] bridge_slave_1: entered allmulticast mode [ 88.321113][ T5843] bridge_slave_1: entered promiscuous mode [ 88.324217][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.324352][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.324529][ T5834] bridge_slave_0: entered allmulticast mode [ 88.327205][ T5834] bridge_slave_0: entered promiscuous mode [ 88.555295][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.555502][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.555700][ T5842] bridge_slave_1: entered allmulticast mode [ 88.558540][ T5842] bridge_slave_1: entered promiscuous mode [ 88.645858][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.646111][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.646315][ T5834] bridge_slave_1: entered allmulticast mode [ 88.648348][ T5834] bridge_slave_1: entered promiscuous mode [ 88.654266][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.655542][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.655672][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.655837][ T5853] bridge_slave_0: entered allmulticast mode [ 88.659356][ T5853] bridge_slave_0: entered promiscuous mode [ 88.936724][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.937017][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.937115][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.937263][ T5853] bridge_slave_1: entered allmulticast mode [ 88.938743][ T5853] bridge_slave_1: entered promiscuous mode [ 89.017378][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.229500][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.232269][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.254271][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.406221][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.484765][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.486445][ T5836] team0: Port device team_slave_0 added [ 89.489881][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.709194][ T5836] team0: Port device team_slave_1 added [ 89.711605][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.777512][ T5843] team0: Port device team_slave_0 added [ 89.873518][ T5852] Bluetooth: hci0: command tx timeout [ 89.873550][ T5852] Bluetooth: hci1: command tx timeout [ 89.873570][ T5852] Bluetooth: hci3: command tx timeout [ 89.873590][ T5852] Bluetooth: hci2: command tx timeout [ 89.953080][ T5849] Bluetooth: hci4: command tx timeout [ 90.086462][ T5842] team0: Port device team_slave_0 added [ 90.088528][ T5843] team0: Port device team_slave_1 added [ 90.348209][ T5834] team0: Port device team_slave_0 added [ 90.502090][ T5842] team0: Port device team_slave_1 added [ 90.566982][ T5834] team0: Port device team_slave_1 added [ 90.568112][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.568122][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.568136][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.571129][ T5853] team0: Port device team_slave_0 added [ 90.805658][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.805669][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.805682][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.807477][ T5853] team0: Port device team_slave_1 added [ 90.904602][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.904617][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.904640][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.094211][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.094222][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.094235][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.095286][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.095299][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.095321][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.096393][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.096402][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.096414][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.307474][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.307490][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.307513][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.331153][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.331170][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.331192][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.445890][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.445907][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.445931][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.564426][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.564437][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.564450][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.749791][ T5836] hsr_slave_0: entered promiscuous mode [ 91.751962][ T5836] hsr_slave_1: entered promiscuous mode [ 91.952989][ T5849] Bluetooth: hci2: command tx timeout [ 91.953022][ T5849] Bluetooth: hci3: command tx timeout [ 91.953043][ T5849] Bluetooth: hci1: command tx timeout [ 91.953062][ T5849] Bluetooth: hci0: command tx timeout [ 92.033163][ T5852] Bluetooth: hci4: command tx timeout [ 92.068797][ T5843] hsr_slave_0: entered promiscuous mode [ 92.069594][ T5843] hsr_slave_1: entered promiscuous mode [ 92.070269][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 92.070353][ T5843] Cannot create hsr debugfs directory [ 92.259514][ T5842] hsr_slave_0: entered promiscuous mode [ 92.260351][ T5842] hsr_slave_1: entered promiscuous mode [ 92.260850][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 92.260869][ T5842] Cannot create hsr debugfs directory [ 92.361932][ T5834] hsr_slave_0: entered promiscuous mode [ 92.364602][ T5834] hsr_slave_1: entered promiscuous mode [ 92.365678][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 92.365701][ T5834] Cannot create hsr debugfs directory [ 92.632486][ T5853] hsr_slave_0: entered promiscuous mode [ 92.634284][ T5853] hsr_slave_1: entered promiscuous mode [ 92.635080][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 92.635102][ T5853] Cannot create hsr debugfs directory [ 94.032919][ T5155] Bluetooth: hci3: command tx timeout [ 94.032948][ T5155] Bluetooth: hci2: command tx timeout [ 94.032997][ T5849] Bluetooth: hci1: command tx timeout [ 94.033029][ T5852] Bluetooth: hci0: command tx timeout [ 94.112882][ T5852] Bluetooth: hci4: command tx timeout [ 94.234019][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.272562][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.300178][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.332371][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.450712][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.480777][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.530896][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.581453][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.730578][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.768009][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.806298][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.863936][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.044046][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.085995][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.134272][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.197424][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.337688][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.371425][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.385415][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.440134][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.486417][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.604280][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.628611][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.661939][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.662424][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.722389][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.722600][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.784021][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.839843][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.839978][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.871409][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.905721][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.905891][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.008930][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.012114][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.074047][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.074190][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.145689][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.145834][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.191473][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.229375][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.256418][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.257044][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.309076][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.309738][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.404661][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.489733][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.489975][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.564561][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.564720][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.676244][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.905041][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.092020][ T5836] veth0_vlan: entered promiscuous mode [ 97.105120][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.194274][ T5836] veth1_vlan: entered promiscuous mode [ 97.440433][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.510291][ T5836] veth0_macvtap: entered promiscuous mode [ 97.547880][ T5842] veth0_vlan: entered promiscuous mode [ 97.581495][ T5836] veth1_macvtap: entered promiscuous mode [ 97.636583][ T5842] veth1_vlan: entered promiscuous mode [ 97.679507][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.709696][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.742621][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.800631][ T5834] veth0_vlan: entered promiscuous mode [ 97.809151][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.828318][ T3656] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.846960][ T3656] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.865285][ T3656] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.866534][ T5843] veth0_vlan: entered promiscuous mode [ 97.876366][ T5842] veth0_macvtap: entered promiscuous mode [ 97.931141][ T5834] veth1_vlan: entered promiscuous mode [ 97.951137][ T5842] veth1_macvtap: entered promiscuous mode [ 98.041733][ T5843] veth1_vlan: entered promiscuous mode [ 98.172046][ T5853] veth0_vlan: entered promiscuous mode [ 98.185779][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.241092][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.266670][ T5853] veth1_vlan: entered promiscuous mode [ 98.270989][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.271016][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.322299][ T5834] veth0_macvtap: entered promiscuous mode [ 98.329824][ T1037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.340721][ T1037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.352541][ T1037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.387648][ T1037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.389536][ T5834] veth1_macvtap: entered promiscuous mode [ 98.426015][ T5843] veth0_macvtap: entered promiscuous mode [ 98.429911][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.429924][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.509766][ T5843] veth1_macvtap: entered promiscuous mode [ 98.658729][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.731163][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.817388][ T5853] veth0_macvtap: entered promiscuous mode [ 98.835056][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.995695][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.009517][ T5853] veth1_macvtap: entered promiscuous mode [ 99.019586][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.019674][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.019687][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.037636][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.038614][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.054998][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.098978][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.170900][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.195865][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.241092][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.272872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.952736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.343974][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.343994][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.353838][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.508572][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.799816][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.799862][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.593454][ T3656] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.607646][ T3656] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.644324][ T3656] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.650231][ T3656] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.672579][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.034347][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.070442][ T1530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.070462][ T1530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.238656][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.238675][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.396110][ T5980] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9'. [ 102.422857][ T5980] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9'. [ 102.502634][ T1530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.502653][ T1530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.690414][ T5983] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.719525][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.787336][ T5986] capability: warning: `syz.0.11' uses deprecated v2 capabilities in a way that may be insecure [ 102.811456][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.811476][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.063225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.065821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.192766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.193029][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.343247][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 103.391489][ T10] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 103.391516][ T10] usb 1-1: config 0 has no interface number 0 [ 103.424481][ T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 103.424509][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.424528][ T10] usb 1-1: Product: syz [ 103.424541][ T10] usb 1-1: Manufacturer: syz [ 103.424553][ T10] usb 1-1: SerialNumber: syz [ 103.462768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.464958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.486274][ T10] usb 1-1: config 0 descriptor?? [ 103.504342][ T10] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 103.687694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.687977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.688049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.759648][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.759668][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.922075][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 104.019095][ T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 104.107869][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.122408][ T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 104.223157][ T10] usb 1-1: USB disconnect, device number 2 [ 104.263312][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 104.266136][ T31] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 104.266161][ T31] usb 5-1: config 0 has no interface number 0 [ 104.266209][ T31] usb 5-1: config 0 interface 184 has no altsetting 0 [ 104.308878][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 104.308907][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.308925][ T31] usb 5-1: Product: syz [ 104.308938][ T31] usb 5-1: Manufacturer: syz [ 104.308952][ T31] usb 5-1: SerialNumber: syz [ 104.326684][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 104.506137][ T31] usb 5-1: config 0 descriptor?? [ 104.777820][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.883333][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 104.884397][ T10] quatech2 1-1:0.51: device disconnected [ 104.892389][ T31] smsc75xx v1.0.0 [ 105.141760][ T6004] batadv_slave_1: entered promiscuous mode [ 105.237595][ T6004] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.3'. [ 105.248121][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.602113][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.155496][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.287905][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.903104][ T1231] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.914795][ T5846] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.961741][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 107.053059][ T1231] usb 4-1: Using ep0 maxpacket: 32 [ 107.060400][ T1231] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 107.060484][ T1231] usb 4-1: config 0 has no interface number 0 [ 107.085957][ T1231] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 107.086046][ T1231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.086066][ T1231] usb 4-1: Product: syz [ 107.086080][ T1231] usb 4-1: Manufacturer: syz [ 107.086094][ T1231] usb 4-1: SerialNumber: syz [ 107.087928][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 107.090480][ T5846] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 107.090504][ T5846] usb 3-1: config 0 has no interface number 0 [ 107.090550][ T5846] usb 3-1: config 0 interface 230 has no altsetting 0 [ 107.100854][ T5846] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 107.100883][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.100901][ T5846] usb 3-1: Product: syz [ 107.100914][ T5846] usb 3-1: Manufacturer: syz [ 107.100927][ T5846] usb 3-1: SerialNumber: syz [ 107.290624][ T5846] usb 3-1: config 0 descriptor?? [ 107.374653][ T1231] usb 4-1: config 0 descriptor?? [ 107.377712][ T6017] fuse: Bad value for 'user_id' [ 107.377731][ T6017] fuse: Bad value for 'user_id' [ 107.426524][ T5846] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 107.442001][ T1231] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 107.460147][ T6008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.515469][ T5846] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 107.588225][ T69] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.588506][ T6001] batadv_slave_1: left promiscuous mode [ 107.625413][ T69] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.630360][ T69] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.630988][ T1530] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.697798][ T1231] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 107.724300][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 107.724330][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 107.724349][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 107.724437][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 107.725806][ T31] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 107.813021][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 107.856743][ T1231] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 107.857351][ T5846] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 107.889664][ T31] usb 5-1: USB disconnect, device number 2 [ 107.905553][ T1231] usb 4-1: USB disconnect, device number 2 [ 108.068756][ T5846] usb 3-1: USB disconnect, device number 2 [ 108.129957][ T1231] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 108.194584][ T1231] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 108.196111][ T1231] quatech2 4-1:0.51: device disconnected [ 109.175572][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.424638][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 109.513584][ T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 109.513620][ T10] usb 5-1: config 0 has no interface number 0 [ 109.590078][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 109.590111][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.590129][ T10] usb 5-1: Product: syz [ 109.590142][ T10] usb 5-1: Manufacturer: syz [ 109.590155][ T10] usb 5-1: SerialNumber: syz [ 109.912998][ T10] usb 5-1: config 0 descriptor?? [ 109.935792][ T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 110.208094][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 110.268234][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 110.567728][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 110.668395][ T10] usb 5-1: USB disconnect, device number 3 [ 111.068061][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 111.099614][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 111.119917][ T10] quatech2 5-1:0.51: device disconnected [ 112.183809][ T6053] Bluetooth: MGMT ver 1.23 [ 114.194284][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 114.194615][ T6062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.461445][ T6069] netlink: 88 bytes leftover after parsing attributes in process `syz.2.28'. [ 114.749673][ T1231] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.030890][ T6072] NILFS (loop2): device size too small [ 115.375465][ T1231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 115.375495][ T1231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 115.375533][ T1231] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 115.375555][ T1231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.474571][ T1231] usb 2-1: config 0 descriptor?? [ 115.666350][ T6074] netlink: 88 bytes leftover after parsing attributes in process `syz.0.29'. [ 115.684757][ T6061] warning: `syz.1.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.903584][ T5927] usb 2-1: USB disconnect, device number 2 [ 116.013772][ T6077] NILFS (loop0): device size too small [ 120.575993][ T6108] fuse: Bad value for 'fd' [ 123.638282][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 123.676358][ T6135] batadv_slave_1: entered promiscuous mode [ 123.744324][ T6135] netlink: 159784 bytes leftover after parsing attributes in process `syz.4.44'. [ 124.002832][ T44] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 124.232824][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 124.265995][ T44] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 124.266024][ T44] usb 5-1: config 0 has no interface number 0 [ 124.266073][ T44] usb 5-1: config 0 interface 230 has no altsetting 0 [ 124.274524][ T44] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 124.274551][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.274571][ T44] usb 5-1: Product: syz [ 124.274584][ T44] usb 5-1: Manufacturer: syz [ 124.274597][ T44] usb 5-1: SerialNumber: syz [ 124.320231][ T44] usb 5-1: config 0 descriptor?? [ 124.359326][ T44] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 124.430312][ T44] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 124.902205][ T6134] batadv_slave_1: left promiscuous mode [ 128.620618][ T44] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 128.822425][ T44] usb 5-1: USB disconnect, device number 4 [ 129.207181][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 129.207295][ T6169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.551591][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 130.202817][ T989] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.362885][ T989] usb 1-1: Using ep0 maxpacket: 32 [ 130.401287][ T989] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 130.401315][ T989] usb 1-1: config 0 has no interface number 0 [ 130.401362][ T989] usb 1-1: config 0 interface 184 has no altsetting 0 [ 130.447054][ T989] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 130.447084][ T989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.447103][ T989] usb 1-1: Product: syz [ 130.447117][ T989] usb 1-1: Manufacturer: syz [ 130.447130][ T989] usb 1-1: SerialNumber: syz [ 130.517864][ T989] usb 1-1: config 0 descriptor?? [ 130.569640][ T989] smsc75xx v1.0.0 [ 131.890833][ T989] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 132.226859][ T6197] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.309789][ T1502] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.309882][ T1502] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.309913][ T1502] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.309931][ T1502] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.360568][ T989] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 132.360586][ T989] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 132.360596][ T989] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 132.360606][ T989] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 132.360776][ T989] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 132.445867][ T989] usb 1-1: USB disconnect, device number 3 [ 132.474312][ T6201] batadv_slave_1: entered promiscuous mode [ 132.543853][ T6201] netlink: 37548 bytes leftover after parsing attributes in process `syz.4.60'. [ 132.855211][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.855307][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.904826][ T1231] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 133.920977][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 133.921164][ T6210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.943929][ T1231] usb 5-1: Using ep0 maxpacket: 32 [ 133.997504][ T1231] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 133.997531][ T1231] usb 5-1: config 0 has no interface number 0 [ 133.997575][ T1231] usb 5-1: config 0 interface 230 has no altsetting 0 [ 134.062882][ T1231] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 134.062912][ T1231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.062930][ T1231] usb 5-1: Product: syz [ 134.062944][ T1231] usb 5-1: Manufacturer: syz [ 134.062957][ T1231] usb 5-1: SerialNumber: syz [ 134.094890][ T1231] usb 5-1: config 0 descriptor?? [ 134.105506][ T1231] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 134.129322][ T1231] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 134.350987][ T6217] fuse: Bad value for 'fd' [ 134.444725][ T6200] batadv_slave_1: left promiscuous mode [ 134.652780][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.67'. [ 134.736481][ T1231] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 134.741397][ T1231] usb 5-1: USB disconnect, device number 5 [ 137.792819][ T989] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 138.192983][ T989] usb 4-1: Using ep0 maxpacket: 32 [ 138.195539][ T989] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 138.195564][ T989] usb 4-1: config 0 has no interface number 0 [ 138.195609][ T989] usb 4-1: config 0 interface 184 has no altsetting 0 [ 138.212464][ T989] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 138.212491][ T989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.212509][ T989] usb 4-1: Product: syz [ 138.212522][ T989] usb 4-1: Manufacturer: syz [ 138.212536][ T989] usb 4-1: SerialNumber: syz [ 138.222299][ T989] usb 4-1: config 0 descriptor?? [ 139.056037][ T989] smsc75xx v1.0.0 [ 140.692882][ T5846] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 140.864897][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 140.879875][ T5846] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 140.879901][ T5846] usb 3-1: config 0 has no interface number 0 [ 140.880891][ T5846] usb 3-1: config 0 interface 184 has no altsetting 0 [ 140.909522][ T5846] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 140.909609][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.909629][ T5846] usb 3-1: Product: syz [ 140.909643][ T5846] usb 3-1: Manufacturer: syz [ 140.909656][ T5846] usb 3-1: SerialNumber: syz [ 140.925615][ T989] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 141.001639][ T5846] usb 3-1: config 0 descriptor?? [ 141.049330][ T5846] smsc75xx v1.0.0 [ 141.954368][ T6250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.060412][ T6046] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.077525][ T6046] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.078818][ T43] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.078857][ T43] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.332060][ T989] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 142.332151][ T989] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 142.332171][ T989] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 142.332189][ T989] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 142.332793][ T989] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 142.513259][ T989] usb 4-1: USB disconnect, device number 3 [ 142.866810][ T5846] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 143.458564][ T6273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.470574][ T6046] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.471252][ T6046] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.472822][ T1044] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.472861][ T1044] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.546881][ T5846] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 143.546911][ T5846] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 143.546937][ T5846] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 143.546955][ T5846] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 143.547252][ T5846] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 143.662577][ T5846] usb 3-1: USB disconnect, device number 3 [ 145.184838][ T6293] batadv_slave_1: entered promiscuous mode [ 145.204554][ T6293] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.83'. [ 145.378323][ T6295] netlink: 20 bytes leftover after parsing attributes in process `syz.3.82'. [ 145.378641][ T6295] netlink: 20 bytes leftover after parsing attributes in process `syz.3.82'. [ 145.482908][ T6000] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 145.632909][ T6000] usb 3-1: Using ep0 maxpacket: 32 [ 145.635233][ T6000] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 145.635258][ T6000] usb 3-1: config 0 has no interface number 0 [ 145.635307][ T6000] usb 3-1: config 0 interface 230 has no altsetting 0 [ 145.640400][ T6000] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 145.640427][ T6000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.640446][ T6000] usb 3-1: Product: syz [ 145.640460][ T6000] usb 3-1: Manufacturer: syz [ 145.640474][ T6000] usb 3-1: SerialNumber: syz [ 145.674680][ T6000] usb 3-1: config 0 descriptor?? [ 145.689100][ T6000] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 145.709673][ T6301] batadv_slave_1: entered promiscuous mode [ 145.713798][ T6000] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 145.932211][ T6292] batadv_slave_1: left promiscuous mode [ 146.099841][ T6000] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 146.112807][ T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 146.163207][ T6000] usb 3-1: USB disconnect, device number 4 [ 146.212918][ T989] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 146.270888][ T44] usb 2-1: config 6 has an invalid interface number: 57 but max is 0 [ 146.270916][ T44] usb 2-1: config 6 has no interface number 0 [ 146.270948][ T44] usb 2-1: config 6 interface 57 has no altsetting 0 [ 146.279056][ T44] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 0.00 [ 146.279086][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.279104][ T44] usb 2-1: Product: syz [ 146.279119][ T44] usb 2-1: Manufacturer: syz [ 146.279132][ T44] usb 2-1: SerialNumber: syz [ 146.402856][ T989] usb 5-1: Using ep0 maxpacket: 32 [ 146.406859][ T989] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 146.406887][ T989] usb 5-1: config 0 has no interface number 0 [ 146.406935][ T989] usb 5-1: config 0 interface 230 has no altsetting 0 [ 146.448419][ T989] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 146.448450][ T989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.448469][ T989] usb 5-1: Product: syz [ 146.448483][ T989] usb 5-1: Manufacturer: syz [ 146.448497][ T989] usb 5-1: SerialNumber: syz [ 146.495028][ T989] usb 5-1: config 0 descriptor?? [ 146.514512][ T989] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 146.536779][ T989] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 146.747228][ T6300] batadv_slave_1: left promiscuous mode [ 146.821596][ T989] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 146.848502][ T989] usb 5-1: USB disconnect, device number 6 [ 147.088660][ T44] usb 2-1: USB disconnect, device number 3 [ 147.235842][ T6310] overlayfs: failed to resolve './file1': -2 [ 147.542840][ T989] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 148.225335][ T989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 148.225371][ T989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 148.225408][ T989] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 148.225431][ T989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.235095][ T989] usb 3-1: config 0 descriptor?? [ 148.635348][ T44] usb 3-1: USB disconnect, device number 5 [ 149.042809][ T5906] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 149.272897][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 149.332162][ T5906] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 149.332188][ T5906] usb 4-1: config 0 has no interface number 0 [ 149.332232][ T5906] usb 4-1: config 0 interface 184 has no altsetting 0 [ 149.347522][ T5906] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 149.347549][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.347567][ T5906] usb 4-1: Product: syz [ 149.347581][ T5906] usb 4-1: Manufacturer: syz [ 149.347591][ T5906] usb 4-1: SerialNumber: syz [ 149.392244][ T5906] usb 4-1: config 0 descriptor?? [ 149.395387][ T5906] smsc75xx v1.0.0 [ 153.248034][ T5906] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 153.248115][ T5906] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 153.262983][ T5906] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 153.263210][ T5906] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 153.263261][ T5906] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 153.263328][ T5906] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 153.466412][ T5906] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 153.749516][ T5906] usb 4-1: USB disconnect, device number 4 [ 153.853460][ T6351] Zero length message leads to an empty skb [ 160.862957][ T5907] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 161.284313][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 161.720637][ T5907] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 161.720666][ T5907] usb 1-1: config 0 has no interface number 0 [ 161.720738][ T5907] usb 1-1: config 0 interface 184 has no altsetting 0 [ 161.976036][ T5907] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 161.976067][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.976086][ T5907] usb 1-1: Product: syz [ 161.976100][ T5907] usb 1-1: Manufacturer: syz [ 161.976114][ T5907] usb 1-1: SerialNumber: syz [ 162.045048][ T5907] usb 1-1: config 0 descriptor?? [ 162.077904][ T5907] smsc75xx v1.0.0 [ 162.329780][ T6422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.115'. [ 162.329933][ T6422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.115'. [ 163.630136][ T989] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 164.282775][ T989] usb 3-1: device descriptor read/64, error -71 [ 164.297424][ T5907] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 164.534210][ T989] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 164.559081][ T6403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.648649][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'. [ 164.654028][ T5907] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 164.654057][ T5907] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 164.654075][ T5907] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 164.654092][ T5907] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 164.654377][ T5907] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 164.692820][ T989] usb 3-1: device descriptor read/64, error -71 [ 164.702931][ T5907] usb 1-1: USB disconnect, device number 4 [ 164.803491][ T989] usb usb3-port1: attempt power cycle [ 166.072985][ T989] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 166.282906][ T989] usb 3-1: device not accepting address 8, error -71 [ 173.827523][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.244966][ T31] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 178.663726][ T6485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.134'. [ 178.663881][ T6485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.134'. [ 179.603585][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 179.603690][ T6496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.192904][ T5846] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 180.355805][ T5846] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 180.355922][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.704612][ T5846] usb 3-1: config 0 descriptor?? [ 181.963366][ T5846] usb 3-1: string descriptor 0 read error: -71 [ 181.963444][ T5846] ldusb 3-1:0.0: Interrupt in endpoint not found [ 181.997533][ T5846] usb 3-1: USB disconnect, device number 10 [ 185.469280][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.539519][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.823209][ T6562] netlink: 88 bytes leftover after parsing attributes in process `syz.2.154'. [ 186.218234][ T6565] NILFS (loop2): device size too small [ 187.122244][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.155'. [ 187.566993][ T1231] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 188.663374][ T1231] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 188.663404][ T1231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.673733][ T1231] usb 2-1: config 0 descriptor?? [ 189.058899][ T6000] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 189.073327][ T1231] usb 2-1: string descriptor 0 read error: -71 [ 189.073407][ T1231] ldusb 2-1:0.0: Interrupt in endpoint not found [ 189.078942][ T1231] usb 2-1: USB disconnect, device number 4 [ 189.106788][ T6000] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 189.711557][ T6595] batadv_slave_1: entered promiscuous mode [ 190.236151][ T6595] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.164'. [ 190.512936][ T44] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 190.664561][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 190.667328][ T44] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 190.667352][ T44] usb 1-1: config 0 has no interface number 0 [ 190.667420][ T44] usb 1-1: config 0 interface 230 has no altsetting 0 [ 190.711211][ T44] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 190.711241][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.711260][ T44] usb 1-1: Product: syz [ 190.711274][ T44] usb 1-1: Manufacturer: syz [ 190.711287][ T44] usb 1-1: SerialNumber: syz [ 190.761879][ T44] usb 1-1: config 0 descriptor?? [ 190.892336][ T44] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 190.923202][ T6601] fuse: Unknown parameter '0x000000000000000600000000000000000000' [ 191.155945][ T6591] batadv_slave_1: left promiscuous mode [ 191.333839][ T44] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 191.568094][ T44] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 191.655584][ T6609] netlink: 88 bytes leftover after parsing attributes in process `syz.4.167'. [ 191.678108][ T44] usb 1-1: USB disconnect, device number 5 [ 191.989839][ T6611] NILFS (loop4): device size too small [ 194.283351][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.283520][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.808641][ T6648] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 195.012897][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'. [ 195.409087][ T6628] infiniband syz0: set down [ 195.422804][ T6628] infiniband syz0: added ipvlan1 [ 195.428674][ T6628] syz0: rxe_create_cq: returned err = -12 [ 195.428835][ T6628] infiniband syz0: Couldn't create ib_mad CQ [ 195.429028][ T6628] infiniband syz0: Couldn't open port 1 [ 195.667348][ T6648] syz.3.180 (6648) used greatest stack depth: 17800 bytes left [ 195.737925][ T6657] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 195.749516][ T6628] RDS/IB: syz0: added [ 195.750250][ T6628] smc: adding ib device syz0 with port count 1 [ 195.750562][ T6628] smc: ib device syz0 port 1 has pnetid [ 195.941799][ T6663] netlink: 28 bytes leftover after parsing attributes in process `syz.4.189'. [ 196.170164][ T6667] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 199.008884][ T6718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.822575][ T6729] block nbd0: not configured, cannot reconfigure [ 200.187865][ T6738] syz.3.217 uses obsolete (PF_INET,SOCK_PACKET) [ 200.502322][ T6744] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 200.502470][ T6744] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 202.156275][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.233'. [ 202.156307][ T6774] netlink: 56 bytes leftover after parsing attributes in process `syz.3.233'. [ 202.156323][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 202.232955][ T6778] netlink: 'syz.4.231': attribute type 10 has an invalid length. [ 202.465901][ T6778] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 204.698614][ T6824] netlink: 'syz.1.254': attribute type 10 has an invalid length. [ 204.824982][ T6824] syz_tun: entered promiscuous mode [ 204.873527][ T6824] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 205.092838][ T6829] netlink: 'syz.3.256': attribute type 1 has an invalid length. [ 205.092860][ T6829] netlink: 244 bytes leftover after parsing attributes in process `syz.3.256'. [ 205.574036][ T6841] netlink: 20 bytes leftover after parsing attributes in process `syz.1.262'. [ 205.608848][ T31] hid-generic 0005:16C0:5501.0004: unknown main item tag 0x0 [ 205.656251][ T31] hid-generic 0005:16C0:5501.0004: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 207.420716][ T6846] team0 (unregistering): Port device team_slave_0 removed [ 207.474656][ T6846] team0 (unregistering): Port device team_slave_1 removed [ 207.587674][ T6852] tipc: Started in network mode [ 207.587705][ T6852] tipc: Node identity 0a5b0f00bfa2, cluster identity 4711 [ 207.588565][ T6852] tipc: Enabled bearer , priority 0 [ 207.638820][ T6856] syzkaller0: entered promiscuous mode [ 207.638851][ T6856] syzkaller0: entered allmulticast mode [ 207.692608][ T6872] tipc: Resetting bearer [ 207.776105][ T6848] tipc: Resetting bearer [ 207.937287][ T6848] tipc: Disabling bearer [ 208.463432][ T6884] netlink: 168 bytes leftover after parsing attributes in process `syz.1.272'. [ 208.609295][ T6690] Set syz1 is full, maxelem 65536 reached [ 210.055137][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.284'. [ 210.074617][ T6911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.284'. [ 211.718029][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 211.718069][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 211.793062][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 211.793110][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 217.272677][ C0] sched: DL replenish lagged too much [ 225.119614][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 225.159244][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 225.160803][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 225.161995][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 225.196307][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 226.118505][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 226.136404][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 226.137522][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 226.138684][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 226.140710][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 227.514095][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 227.544931][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 227.547833][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 227.549883][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 227.550795][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 227.800284][ T5851] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 227.812012][ T5851] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 227.820529][ T5851] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 227.830806][ T5851] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 227.839980][ T5851] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 232.513109][ T5155] Bluetooth: hci7: command tx timeout [ 232.513432][ T5155] Bluetooth: hci6: command tx timeout [ 232.513550][ T5155] Bluetooth: hci5: command tx timeout [ 232.543399][ T5849] Bluetooth: hci8: command tx timeout [ 232.688893][ T6919] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 234.593089][ T5845] Bluetooth: hci8: command tx timeout [ 234.593121][ T5845] Bluetooth: hci6: command tx timeout [ 234.593141][ T5845] Bluetooth: hci5: command tx timeout [ 234.593160][ T5845] Bluetooth: hci7: command tx timeout [ 235.969705][ T5849] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 235.986776][ T5849] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 235.987939][ T5849] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 235.989091][ T5849] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 235.989914][ T5849] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 236.672907][ T5849] Bluetooth: hci5: command tx timeout [ 236.672939][ T5849] Bluetooth: hci7: command tx timeout [ 236.672960][ T5849] Bluetooth: hci6: command tx timeout [ 236.672978][ T5849] Bluetooth: hci8: command tx timeout [ 238.033066][ T5849] Bluetooth: hci9: command tx timeout [ 238.752957][ T5845] Bluetooth: hci6: command tx timeout [ 238.752990][ T5845] Bluetooth: hci7: command tx timeout [ 238.753010][ T5845] Bluetooth: hci5: command tx timeout [ 238.753069][ T5849] Bluetooth: hci8: command tx timeout [ 240.112947][ T5849] Bluetooth: hci9: command tx timeout [ 242.192860][ T5849] Bluetooth: hci9: command tx timeout [ 244.272957][ T5849] Bluetooth: hci9: command tx timeout [ 255.734609][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.734695][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 285.294826][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.316584][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.319850][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.321096][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.321896][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.393235][ T5155] Bluetooth: hci0: command tx timeout [ 287.987132][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 288.011810][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 288.021995][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 288.030757][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 288.031983][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 288.067490][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.070445][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 288.071523][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 288.095912][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 288.124581][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.504747][ T5155] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 288.521136][ T5155] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 288.530387][ T5155] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 288.542822][ T5155] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 288.554430][ T5155] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 289.472797][ T5155] Bluetooth: hci0: command tx timeout [ 290.113838][ T5155] Bluetooth: hci3: command tx timeout [ 290.192928][ T5155] Bluetooth: hci4: command tx timeout [ 290.592898][ T5155] Bluetooth: hci10: command tx timeout [ 291.553108][ T5155] Bluetooth: hci0: command tx timeout [ 292.193027][ T5155] Bluetooth: hci3: command tx timeout [ 292.272765][ T5155] Bluetooth: hci4: command tx timeout [ 292.681245][ T5155] Bluetooth: hci10: command tx timeout [ 293.632832][ T5155] Bluetooth: hci0: command tx timeout [ 294.272803][ T5155] Bluetooth: hci3: command tx timeout [ 294.353129][ T5155] Bluetooth: hci4: command tx timeout [ 294.752844][ T5155] Bluetooth: hci10: command tx timeout [ 296.352777][ T5155] Bluetooth: hci3: command tx timeout [ 296.432800][ T5155] Bluetooth: hci4: command tx timeout [ 296.842791][ T5155] Bluetooth: hci10: command tx timeout [ 297.270785][ T5849] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 297.288593][ T5849] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 297.289718][ T5849] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 297.290943][ T5849] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 297.292147][ T5849] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 299.402753][ T5155] Bluetooth: hci11: command tx timeout [ 301.472958][ T5155] Bluetooth: hci11: command tx timeout [ 303.552860][ T5155] Bluetooth: hci11: command tx timeout [ 305.632769][ T5155] Bluetooth: hci11: command tx timeout [ 317.174509][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.174588][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 345.541352][ T5849] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 345.564952][ T5849] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 345.566113][ T5849] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 345.567784][ T5849] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 345.570463][ T5849] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 348.537444][ T5845] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 348.571634][ T5845] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 348.591552][ T5845] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 348.615914][ T5845] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 348.616768][ T5845] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 348.703844][ T5852] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 348.736925][ T5852] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 348.738943][ T5852] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 348.740516][ T5852] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 348.741356][ T5852] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 348.926160][ T5841] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 348.943431][ T5841] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 348.944633][ T5841] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 348.946448][ T5841] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 348.947566][ T5841] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 357.854259][ T5838] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 357.871543][ T5838] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 357.883240][ T5838] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 357.885626][ T5838] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 357.888487][ T5838] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 379.101618][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.101725][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.042776][ T38] INFO: task syz.0.278:6895 blocked for more than 143 seconds. [ 392.042804][ T38] Not tainted syzkaller #0 [ 392.042814][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 392.042825][ T38] task:syz.0.278 state:D stack:25128 pid:6895 tgid:6895 ppid:5842 task_flags:0x400040 flags:0x00004006 [ 392.042883][ T38] Call Trace: [ 392.042890][ T38] [ 392.042903][ T38] __schedule+0x16f3/0x4c20 [ 392.042966][ T38] ? __lock_acquire+0xab9/0xd20 [ 392.042991][ T38] ? __pfx___schedule+0x10/0x10 [ 392.043032][ T38] ? schedule+0x91/0x360 [ 392.043059][ T38] schedule+0x165/0x360 [ 392.043084][ T38] schedule_timeout+0x9a/0x270 [ 392.043108][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 392.043145][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.043169][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.043191][ T38] ? wait_for_completion+0x267/0x5d0 [ 392.043217][ T38] wait_for_completion+0x2bf/0x5d0 [ 392.043255][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 392.043287][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 392.043373][ T38] rcu_barrier+0x463/0x570 [ 392.043401][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 392.043426][ T38] netdev_run_todo+0x327/0xea0 [ 392.043450][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 392.043473][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 392.043490][ T38] ? kasan_quarantine_put+0xdd/0x220 [ 392.043510][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.043543][ T38] ? netdev_state_change+0x1ca/0x220 [ 392.043567][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 392.043591][ T38] tun_chr_close+0x13f/0x1c0 [ 392.043617][ T38] __fput+0x458/0xa80 [ 392.043648][ T38] task_work_run+0x1d4/0x260 [ 392.043670][ T38] ? __pfx_task_work_run+0x10/0x10 [ 392.043694][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 392.043721][ T38] exit_to_user_mode_loop+0xec/0x110 [ 392.043744][ T38] do_syscall_64+0x2bd/0x3b0 [ 392.043760][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.043784][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.043802][ T38] ? clear_bhb_loop+0x60/0xb0 [ 392.043825][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.043848][ T38] RIP: 0033:0x7fc7e627eba9 [ 392.043867][ T38] RSP: 002b:00007fff456000a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 392.043886][ T38] RAX: 0000000000000000 RBX: 0000000000033014 RCX: 00007fc7e627eba9 [ 392.043899][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 392.043910][ T38] RBP: 00007fc7e64c7da0 R08: 0000000000000001 R09: 000000044560039f [ 392.043922][ T38] R10: 0000001b30520000 R11: 0000000000000246 R12: 00007fc7e64c5fac [ 392.043934][ T38] R13: 00007fc7e64c5fa0 R14: ffffffffffffffff R15: 00007fff456001c0 [ 392.043965][ T38] [ 392.043991][ T38] [ 392.043991][ T38] Showing all locks held in the system: [ 392.044000][ T38] 3 locks held by kworker/u8:1/13: [ 392.044010][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 392.044058][ T38] #1: ffffc90000127bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 392.044103][ T38] #2: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 392.044145][ T38] 6 locks held by rcuc/0/20: [ 392.044156][ T38] 1 lock held by khungtaskd/38: [ 392.044166][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 392.044208][ T38] 3 locks held by kworker/u8:2/43: [ 392.044218][ T38] #0: ffff88814d0a2138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 392.044263][ T38] #1: ffffc90000b47bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 392.044313][ T38] #2: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 392.044359][ T38] 3 locks held by kworker/u8:3/57: [ 392.044377][ T38] 3 locks held by kworker/1:2/1231: [ 392.044388][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 392.044432][ T38] #1: ffffc900051afbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 392.044476][ T38] #2: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 392.044532][ T38] 4 locks held by kworker/u9:1/5155: [ 392.044542][ T38] #0: ffff888038081138 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 392.044590][ T38] #1: ffffc90010457bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 392.044635][ T38] #2: ffff88806c5a40a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 392.044682][ T38] #3: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 392.044730][ T38] 2 locks held by getty/5598: [ 392.044739][ T38] #0: ffff88823bf360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 392.044788][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 392.044833][ T38] 4 locks held by kworker/u9:2/5838: [ 392.044843][ T38] #0: ffff88805fc31138 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 392.044891][ T38] #1: ffffc900049efbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 392.044935][ T38] #2: ffff88804da300a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 392.044981][ T38] #3: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 392.045026][ T38] 4 locks held by kworker/u9:3/5841: [ 392.045036][ T38] #0: ffff888031d17138 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 392.045084][ T38] #1: ffffc90004a1fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 392.045128][ T38] #2: ffff888033c680a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 392.045174][ T38] #3: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 392.045221][ T38] 4 locks held by kworker/u9:4/5845: [ 392.045231][ T38] #0: ffff888055753138 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 392.045279][ T38] #1: ffffc90004a3fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 392.045329][ T38] #2: ffff88806a18c0a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 392.045375][ T38] #3: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 392.045419][ T38] 4 locks held by kworker/u9:5/5849: [ 392.045429][ T38] #0: ffff888055757138 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 392.045477][ T38] #1: ffffc90004a7fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 392.045521][ T38] #2: ffff8880700900a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 392.045566][ T38] #3: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 392.045619][ T38] 1 lock held by syz.0.278/6895: [ 392.045629][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 392.045671][ T38] 1 lock held by syz.4.288/6919: [ 392.045681][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 392.045722][ T38] 1 lock held by syz.3.287/6922: [ 392.045732][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 392.045773][ T38] 1 lock held by syz.1.289/6923: [ 392.045782][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 392.045824][ T38] 1 lock held by syz.2.290/6965: [ 392.045833][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 392.045879][ T38] 2 locks held by syz-executor/6968: [ 392.045889][ T38] #0: ffff88805d27ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 392.045933][ T38] #1: ffff88805d27c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 392.045979][ T38] 4 locks held by syz-executor/6978: [ 392.045990][ T38] 2 locks held by kworker/0:13/6995: [ 392.046001][ T38] 4 locks held by syz-executor/7005: [ 392.046010][ T38] #0: ffff888067e70e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 392.046054][ T38] #1: ffff888067e700a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 392.046100][ T38] #2: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 392.046141][ T38] #3: ffff888061b98358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 392.046193][ T38] 1 lock held by syz-executor/7013: [ 392.046202][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 392.046245][ T38] 1 lock held by syz-executor/7014: [ 392.046255][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 392.046297][ T38] 1 lock held by syz-executor/7018: [ 392.046307][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 392.046354][ T38] 1 lock held by syz-executor/7021: [ 392.046363][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 392.046404][ T38] 1 lock held by syz-executor/7035: [ 392.046414][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 392.046455][ T38] 1 lock held by syz-executor/7040: [ 392.046464][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 392.046506][ T38] 1 lock held by syz-executor/7042: [ 392.046515][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 392.046556][ T38] 1 lock held by syz-executor/7045: [ 392.046564][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 392.046606][ T38] 1 lock held by syz-executor/7049: [ 392.046615][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 392.046657][ T38] [ 392.046661][ T38] ============================================= [ 392.046661][ T38] [ 392.046678][ T38] NMI backtrace for cpu 1 [ 392.046705][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 392.046735][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 392.046745][ T38] Call Trace: [ 392.046752][ T38] [ 392.046759][ T38] dump_stack_lvl+0x189/0x250 [ 392.046788][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.046811][ T38] ? __pfx__printk+0x10/0x10 [ 392.046843][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 392.046867][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 392.046891][ T38] ? __pfx__printk+0x10/0x10 [ 392.046914][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 392.046938][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 392.046962][ T38] watchdog+0xf93/0xfe0 [ 392.046989][ T38] ? watchdog+0x1de/0xfe0 [ 392.047015][ T38] kthread+0x70e/0x8a0 [ 392.047043][ T38] ? __pfx_watchdog+0x10/0x10 [ 392.047063][ T38] ? __pfx_kthread+0x10/0x10 [ 392.047093][ T38] ? __pfx_kthread+0x10/0x10 [ 392.047118][ T38] ret_from_fork+0x439/0x7d0 [ 392.047142][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 392.047169][ T38] ? __switch_to_asm+0x39/0x70 [ 392.047185][ T38] ? __switch_to_asm+0x33/0x70 [ 392.047200][ T38] ? __pfx_kthread+0x10/0x10 [ 392.047225][ T38] ret_from_fork_asm+0x1a/0x30 [ 392.047257][ T38] [ 392.047263][ T38] Sending NMI from CPU 1 to CPUs 0: [ 392.047292][ C0] NMI backtrace for cpu 0 [ 392.047308][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 392.047328][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 392.047336][ C0] RIP: 0010:check_preemption_disabled+0x63/0x120 [ 392.047354][ C0] Code: 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d e9 41 95 03 00 cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 <74> c8 65 4c 8b 3c 25 08 40 f6 91 41 f6 47 2f 04 74 0a 41 83 bf 18 [ 392.047367][ C0] RSP: 0018:ffffc90000196578 EFLAGS: 00000046 [ 392.047380][ C0] RAX: 0000000000000000 RBX: 0000000000000206 RCX: 0000000080000000 [ 392.047390][ C0] RDX: ffffc90000196701 RSI: ffffffff8d04deff RDI: ffffffff8b621600 [ 392.047401][ C0] RBP: dffffc0000000000 R08: ffffc90000197850 R09: 0000000000000000 [ 392.047412][ C0] R10: ffffc90000196738 R11: fffff52000032ce9 R12: ffffc90000197860 [ 392.047423][ C0] R13: ffffffff8172c165 R14: ffffffff8d9a8d80 R15: ffff88801c2dd940 [ 392.047434][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 392.047446][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 392.047457][ C0] CR2: 000055cb891b7328 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 392.047471][ C0] Call Trace: [ 392.047476][ C0] [ 392.047485][ C0] lock_release+0xbc/0x3e0 [ 392.047503][ C0] ? deref_stack_reg+0x19f/0x230 [ 392.047524][ C0] ? unwind_next_frame+0xa5/0x2390 [ 392.047542][ C0] unwind_next_frame+0x19a9/0x2390 [ 392.047569][ C0] ? unwind_next_frame+0xa5/0x2390 [ 392.047587][ C0] ? net_rx_action+0x707/0xe00 [ 392.047607][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 392.047624][ C0] arch_stack_walk+0x11c/0x150 [ 392.047646][ C0] ? handle_softirqs+0x22f/0x710 [ 392.047665][ C0] stack_trace_save+0x9c/0xe0 [ 392.047680][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 392.047694][ C0] ? do_raw_spin_lock+0x121/0x290 [ 392.047716][ C0] kasan_save_track+0x3e/0x80 [ 392.047732][ C0] ? kasan_save_track+0x3e/0x80 [ 392.047746][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 392.047762][ C0] ? kmem_cache_alloc_node_noprof+0x14e/0x330 [ 392.047780][ C0] ? kmalloc_reserve+0xbd/0x290 [ 392.047798][ C0] ? __alloc_skb+0x142/0x2d0 [ 392.047815][ C0] ? synproxy_send_client_synack+0x16c/0xe20 [ 392.047835][ C0] ? nft_synproxy_eval_v4+0x36e/0x560 [ 392.047850][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 392.047864][ C0] ? nft_do_chain+0x409/0x1920 [ 392.047877][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 392.047891][ C0] ? nf_hook_slow+0xc2/0x220 [ 392.047910][ C0] ? NF_HOOK+0x206/0x3a0 [ 392.047926][ C0] ? NF_HOOK+0x30c/0x3a0 [ 392.047942][ C0] ? __netif_receive_skb+0x143/0x380 [ 392.047958][ C0] ? process_backlog+0x31e/0x900 [ 392.047975][ C0] ? __napi_poll+0xb3/0x540 [ 392.047989][ C0] ? net_rx_action+0x707/0xe00 [ 392.048023][ C0] ? kmalloc_reserve+0xbd/0x290 [ 392.048043][ C0] __kasan_slab_alloc+0x6c/0x80 [ 392.048060][ C0] ? kmalloc_reserve+0xbd/0x290 [ 392.048077][ C0] kmem_cache_alloc_node_noprof+0x14e/0x330 [ 392.048099][ C0] kmalloc_reserve+0xbd/0x290 [ 392.048120][ C0] __alloc_skb+0x142/0x2d0 [ 392.048140][ C0] synproxy_send_client_synack+0x16c/0xe20 [ 392.048166][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 392.048185][ C0] ? nft_log_eval+0x350/0xab0 [ 392.048202][ C0] ? synproxy_pernet+0x45/0x270 [ 392.048220][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 392.048239][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 392.048255][ C0] ? nf_ip_checksum+0x13c/0x510 [ 392.048272][ C0] nft_synproxy_do_eval+0x345/0x570 [ 392.048290][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 392.048304][ C0] ? sched_balance_rq+0x459/0x5490 [ 392.048324][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 392.048347][ C0] nft_do_chain+0x409/0x1920 [ 392.048369][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 392.048402][ C0] nft_do_chain_inet+0x25d/0x340 [ 392.048416][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 392.048430][ C0] ? __lock_acquire+0xab9/0xd20 [ 392.048453][ C0] ? NF_HOOK+0x9a/0x3a0 [ 392.048470][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 392.048486][ C0] nf_hook_slow+0xc2/0x220 [ 392.048507][ C0] NF_HOOK+0x206/0x3a0 [ 392.048525][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 392.048543][ C0] ? NF_HOOK+0x9a/0x3a0 [ 392.048564][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 392.048580][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 392.048600][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 392.048619][ C0] ? skb_dst+0x4f/0xd0 [ 392.048636][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 392.048656][ C0] NF_HOOK+0x30c/0x3a0 [ 392.048674][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 392.048691][ C0] ? NF_HOOK+0x9a/0x3a0 [ 392.048708][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 392.048726][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 392.048749][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 392.048766][ C0] __netif_receive_skb+0x143/0x380 [ 392.048782][ C0] ? rt_spin_unlock+0x65/0x80 [ 392.048800][ C0] ? process_backlog+0x27b/0x900 [ 392.048817][ C0] process_backlog+0x31e/0x900 [ 392.048840][ C0] __napi_poll+0xb3/0x540 [ 392.048859][ C0] net_rx_action+0x707/0xe00 [ 392.048875][ C0] ? arch_stack_walk+0x11c/0x150 [ 392.048896][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 392.048916][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 392.048935][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 392.048959][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 392.048980][ C0] handle_softirqs+0x22f/0x710 [ 392.049001][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 392.049023][ C0] __local_bh_enable_ip+0x179/0x270 [ 392.049040][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 392.049061][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 392.049081][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 392.049099][ C0] rcu_cpu_kthread+0xc3d/0x1b50 [ 392.049121][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 392.049145][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 392.049165][ C0] ? __lock_acquire+0xab9/0xd20 [ 392.049183][ C0] ? __pfx___schedule+0x10/0x10 [ 392.049209][ C0] ? schedule+0x91/0x360 [ 392.049230][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 392.049247][ C0] smpboot_thread_fn+0x53f/0xa60 [ 392.049264][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 392.049285][ C0] kthread+0x70e/0x8a0 [ 392.049305][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 392.049322][ C0] ? __pfx_kthread+0x10/0x10 [ 392.049343][ C0] ? __pfx_kthread+0x10/0x10 [ 392.049362][ C0] ret_from_fork+0x439/0x7d0 [ 392.049381][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 392.049401][ C0] ? __switch_to_asm+0x39/0x70 [ 392.049414][ C0] ? __switch_to_asm+0x33/0x70 [ 392.049426][ C0] ? __pfx_kthread+0x10/0x10 [ 392.049446][ C0] ret_from_fork_asm+0x1a/0x30 [ 392.049467][ C0] [ 392.050294][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 392.050312][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 392.050331][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 392.050341][ T38] Call Trace: [ 392.050348][ T38] [ 392.050355][ T38] dump_stack_lvl+0x99/0x250 [ 392.050379][ T38] ? __asan_memcpy+0x40/0x70 [ 392.050398][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.050422][ T38] ? __pfx__printk+0x10/0x10 [ 392.050453][ T38] vpanic+0x281/0x750 [ 392.050480][ T38] ? __pfx_vpanic+0x10/0x10 [ 392.050501][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 392.050519][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.050553][ T38] panic+0xb9/0xc0 [ 392.050575][ T38] ? __pfx_panic+0x10/0x10 [ 392.050602][ T38] ? irq_work_queue+0xc3/0x140 [ 392.050627][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 392.050651][ T38] watchdog+0xfd2/0xfe0 [ 392.050677][ T38] ? watchdog+0x1de/0xfe0 [ 392.050704][ T38] kthread+0x70e/0x8a0 [ 392.050731][ T38] ? __pfx_watchdog+0x10/0x10 [ 392.050751][ T38] ? __pfx_kthread+0x10/0x10 [ 392.050781][ T38] ? __pfx_kthread+0x10/0x10 [ 392.050806][ T38] ret_from_fork+0x439/0x7d0 [ 392.050830][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 392.050856][ T38] ? __switch_to_asm+0x39/0x70 [ 392.050872][ T38] ? __switch_to_asm+0x33/0x70 [ 392.050887][ T38] ? __pfx_kthread+0x10/0x10 [ 392.050913][ T38] ret_from_fork_asm+0x1a/0x30 [ 392.050944][ T38] [ 392.051207][ T38] Kernel Offset: disabled