last executing test programs: 10m5.93149721s ago: executing program 0 (id=1): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)) pselect6(0x40, &(0x7f00000001c0)={0x20, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) 10m2.675455511s ago: executing program 0 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10m2.219147238s ago: executing program 0 (id=11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) write(r2, &(0x7f0000000500)="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", 0x654) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a3200000000280003802400008009002640"], 0xd8}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r6], 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r11], 0x50}}, 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20042, 0x8}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10008054}, 0x200000d0) connect$can_j1939(r8, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x3}, 0xff}, 0x18) r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r13, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) 9m50.420039657s ago: executing program 4 (id=19): r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x8c0, 0x80000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = getpid() syz_pidfd_open(r5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 9m46.98402407s ago: executing program 32 (id=11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) write(r2, &(0x7f0000000500)="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", 0x654) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a3200000000280003802400008009002640"], 0xd8}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r6], 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r11], 0x50}}, 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20042, 0x8}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10008054}, 0x200000d0) connect$can_j1939(r8, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x3}, 0xff}, 0x18) r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r13, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) 9m41.27189339s ago: executing program 4 (id=35): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xf803, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = syz_open_dev$mouse(0x0, 0x0, 0x2) readv(r5, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) 9m40.263969207s ago: executing program 4 (id=37): socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) io_uring_enter(0xffffffffffffffff, 0x26c8, 0x0, 0x1, 0x0, 0x10) 9m39.987119626s ago: executing program 4 (id=38): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x15, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$int_in(r1, 0x40000000af01, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000340)={0x1, 0x6}, 0x8) r5 = fsopen(&(0x7f0000000280)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x26) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xb75}}, './file0/file0\x00'}) sendmsg$802154_raw(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)="739be4d07f7ecc0544", 0x9}, 0x1, 0x0, 0x0, 0x4000}, 0x844) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='hfsplus\x00', 0x410, &(0x7f0000000100)='barrier') 9m30.234352833s ago: executing program 4 (id=49): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) write(r2, &(0x7f0000000500)="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", 0x654) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a3200000000280003802400008009002640"], 0xd8}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r6], 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r11], 0x50}}, 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20042, 0x8}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10008054}, 0x200000d0) connect$can_j1939(r8, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x3}, 0xff}, 0x18) r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r13, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r13, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x80, 0x3, 0xef, '\x00', 0x3}) 9m26.996475273s ago: executing program 4 (id=55): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) write(r2, &(0x7f0000000500)="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", 0x654) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a3200000000280003802400008009002640"], 0xd8}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r6], 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r11], 0x50}}, 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20042, 0x8}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10008054}, 0x200000d0) connect$can_j1939(r8, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x3}, 0xff}, 0x18) r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r13, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x1000, @private1, 0x9}}, [0x40, 0xd, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0xe, 0x5, 0x80000001, 0xfff, 0x6, 0xe0000000, 0x5, 0x8000000000000000, 0x4f3]}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r13, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x80, 0x3, 0xef, '\x00', 0x3}) 9m11.821794082s ago: executing program 33 (id=55): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) write(r2, &(0x7f0000000500)="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", 0x654) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a3200000000280003802400008009002640"], 0xd8}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r6], 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r11], 0x50}}, 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20042, 0x8}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10008054}, 0x200000d0) connect$can_j1939(r8, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x3}, 0xff}, 0x18) r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r13, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x1000, @private1, 0x9}}, [0x40, 0xd, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0xe, 0x5, 0x80000001, 0xfff, 0x6, 0xe0000000, 0x5, 0x8000000000000000, 0x4f3]}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r13, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x80, 0x3, 0xef, '\x00', 0x3}) 7m32.659857545s ago: executing program 2 (id=138): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x4, 0x0, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x612a, 0x17e, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/136, 0x88}], 0x1) 7m31.63238657s ago: executing program 2 (id=141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) write(r2, &(0x7f0000000500)="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", 0x654) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a3200000000280003802400008009002640"], 0xd8}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r6], 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r11], 0x50}}, 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20042, 0x8}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10008054}, 0x200000d0) connect$can_j1939(r8, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x3}, 0xff}, 0x18) r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r13, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r13, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x80, 0x3, 0xef, '\x00', 0x3}) 7m26.105818854s ago: executing program 2 (id=148): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)=""/141, 0x1a, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaa"], 0x72) 7m23.382751747s ago: executing program 2 (id=153): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x174}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7m20.930579372s ago: executing program 2 (id=159): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x4, 0x0, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x612a, 0x17e, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/136, 0x88}], 0x1) 7m19.899929484s ago: executing program 2 (id=160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) write(r2, &(0x7f0000000500)="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", 0x654) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a3200000000280003802400008009002640"], 0xd8}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r6], 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r11], 0x50}}, 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20042, 0x8}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10008054}, 0x200000d0) connect$can_j1939(r8, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x3}, 0xff}, 0x18) r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r13, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x80, 0x3, 0xef, '\x00', 0x3}) 7m2.954604229s ago: executing program 34 (id=160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) write(r2, &(0x7f0000000500)="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", 0x654) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a3200000000280003802400008009002640"], 0xd8}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r6], 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r11], 0x50}}, 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20042, 0x8}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10008054}, 0x200000d0) connect$can_j1939(r8, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x3}, 0xff}, 0x18) r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r13, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x80, 0x3, 0xef, '\x00', 0x3}) 1m29.455819925s ago: executing program 1 (id=552): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r0) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r0}, 0x8) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000008000000", @ANYRES32, @ANYBLOB="000000000060000000000000000000f0ffffffff", @ANYRES32=r0, @ANYBLOB="0000000000200000000000000010000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES64=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="0000000000f0ffffffffffff0010000000000000", @ANYRES32=r0, @ANYBLOB="000000000080000000000000000000f0ffffffff", @ANYRES32=r0, @ANYBLOB="0000000000f0ffffffffffff00d0000001000000", @ANYRES32=r3, @ANYRESHEX=r1]) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x9}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@pktinfo={{0x20, 0x29, 0x32, {@loopback, r6}}}], 0x20}}], 0x2, 0x4001c00) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x2, {0x0, 0x2d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfce1, 0xe, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0xb, 0x0, 0x0, @u64}]}, 0x24}, 0x1, 0xe0ffff}, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r11 = dup(r10) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0xfffffd2c) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x101, 0x2, 0xbd, 0x1, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0, 0x3, 0x1, 0x3, 0xd}, 0x50) r12 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r12, 0x0, 0x0) 1m28.663268267s ago: executing program 1 (id=554): r0 = socket(0xa, 0x3, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x20) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000003030101000000000000000000000c000200"/32], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x1b, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x53, 0x103, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0x4, 0x1, 0xfffffff7, [{0x3, 0x4, 0x443}]}]}, {0x0, [0x30, 0x61, 0x5f, 0x3e, 0x61, 0x2e, 0x30, 0x5f]}}, 0x0, 0x3a, 0x0, 0x1}, 0x28) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000073, 0x0, 0x386}]}) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000080)='./file0\x00', 0x424) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r10, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000000140)='i', 0x1, 0xfffffffc}]) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_lifetime={0x4, 0x4, 0x2f}]}, 0xc0}}, 0x0) sendto$inet_nvme_pdu(r0, &(0x7f0000000000)=@icresp={{0x1, 0x0, 0x80, 0x6, 0x6}, 0x0, 0x0, 0x2, 0x7}, 0x80, 0x0, 0x0, 0x0) 1m28.309266709s ago: executing program 1 (id=555): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) pipe2(&(0x7f0000000980), 0x4800) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@generic={0x80, 0x4, 0x3, 0x40, 0xffffffff}, @jmp={0x5, 0x0, 0xd, 0x4, 0x3, 0xffffffffffffffff, 0x1}, @exit]}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x66, &(0x7f00000003c0)=""/102, 0x41100, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xa, 0x8, 0x9}, 0x10, 0x0, r0, 0x3, &(0x7f00000009c0), &(0x7f0000000a00)=[{0x1, 0x2, 0x2, 0xc}, {0x4, 0x3, 0x5, 0x9}, {0x5, 0x2, 0x6, 0xa}], 0x10, 0x2}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 1m22.294844004s ago: executing program 3 (id=559): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0x1, 0x100005, 0x5, 0x7, 0x1}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) syz_clone(0xa8140180, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000040)="cb", 0xfffffdef) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x400) 1m17.649394001s ago: executing program 3 (id=560): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001340)=0x0) move_pages(r2, 0x0, 0x0, &(0x7f00000013c0)=[0x6], &(0x7f0000001400)=[0x0, 0x0], 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r6, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0], 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) 1m16.539127892s ago: executing program 1 (id=561): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000600)=0xc) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x30}, 0x0, 0x1, 0x1, 0xc}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) 1m16.506412997s ago: executing program 3 (id=562): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r0 = creat(0x0, 0xa8) acct(&(0x7f0000000100)='./file0/bus\x00') close(r0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 1m16.149776201s ago: executing program 3 (id=563): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x6}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r7, 0x10000000005, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x80, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(r8, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 1m13.414289022s ago: executing program 3 (id=564): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000005000000040000000900000001000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) 1m11.598980977s ago: executing program 3 (id=565): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000600)=0xc) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x30}, 0x0, 0x1, 0x1, 0xc}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) socket(0x1e, 0x4, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x9200000000000000) 1m8.626798816s ago: executing program 1 (id=566): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4) r2 = io_uring_setup(0x4505, &(0x7f0000000840)={0x0, 0x9a3d, 0x40, 0x1, 0x151, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000002400)={0x1, 0xa07591455de6853f, 0x0, &(0x7f0000002340)=[{0x0}], 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}, @window={0x3, 0x5}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) 1m8.474882975s ago: executing program 1 (id=567): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_usbip_server_init(0xaa7f3cec63cbb9d) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1, 0x0, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x2, 0x84) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4008890) listen(r3, 0xfffffffc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa3f9af153fdb406d4239bd6e9a6e4528fac61995a8adea5ecd4c963e665e8bf87e69d3c8460f5a82de13cbcc0bfa79084cdbfa47774027d3b57b6c57a6d8a5438cff46e3e42cc1b1f34ce72ceefc798493f7bec2acae4b75d4b58a4bef07ddec3c19d30658dffb6"], 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r9, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12.748434994s ago: executing program 35 (id=567): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_usbip_server_init(0xaa7f3cec63cbb9d) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1, 0x0, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x2, 0x84) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4008890) listen(r3, 0xfffffffc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa3f9af153fdb406d4239bd6e9a6e4528fac61995a8adea5ecd4c963e665e8bf87e69d3c8460f5a82de13cbcc0bfa79084cdbfa47774027d3b57b6c57a6d8a5438cff46e3e42cc1b1f34ce72ceefc798493f7bec2acae4b75d4b58a4bef07ddec3c19d30658dffb6"], 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r9, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 36 (id=565): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000600)=0xc) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x30}, 0x0, 0x1, 0x1, 0xc}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) socket(0x1e, 0x4, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x9200000000000000) kernel console output (not intermixed with test programs): [ 120.799845][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 126.303661][ T990] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 128.399090][ T990] usb 5-1: Using ep0 maxpacket: 8 [ 128.455982][ T990] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 128.456029][ T990] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 128.456094][ T990] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.456171][ T990] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.456292][ T990] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 128.457323][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.169859][ T990] usb 5-1: can't set config #16, error -71 [ 130.309120][ T990] usb 5-1: USB disconnect, device number 2 [ 130.504882][ T6008] hsr_slave_1 (unregistering): left promiscuous mode [ 131.317657][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22'. [ 133.765052][ T6062] warning: `syz.4.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 136.942131][ T1231] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 137.657628][ T1231] usb 2-1: Using ep0 maxpacket: 8 [ 137.867099][ T1231] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 137.867126][ T1231] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 137.867145][ T1231] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.867162][ T1231] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.867194][ T1231] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 137.867210][ T1231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.233783][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.233864][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.239607][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.241674][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.242657][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.244645][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.245441][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.286509][ T1231] usb 2-1: GET_CAPABILITIES returned 0 [ 139.286648][ T1231] usbtmc 2-1:16.0: can't read capabilities [ 140.400256][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 140.618650][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.753494][ T6104] syz.3.33 (6104) used greatest stack depth: 14152 bytes left [ 141.181388][ T9] usb 2-1: USB disconnect, device number 2 [ 141.447173][ T5852] Bluetooth: hci1: command tx timeout [ 143.652767][ T5852] Bluetooth: hci1: command tx timeout [ 145.021979][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.662435][ T5845] Bluetooth: hci1: command tx timeout [ 147.302826][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43'. [ 148.326687][ T5845] Bluetooth: hci1: command tx timeout [ 149.841167][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.846358][ T6171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.49'. [ 150.846381][ T6171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.49'. [ 150.952456][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.091950][ T6174] vlan2: entered promiscuous mode [ 151.092177][ T6174] vlan2: entered allmulticast mode [ 151.092192][ T6174] hsr_slave_1: entered allmulticast mode [ 151.119205][ T5999] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 151.119434][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 151.146722][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.49'. [ 151.289303][ T5999] usb 3-1: Using ep0 maxpacket: 8 [ 151.289478][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 151.295954][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 151.296047][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 151.296074][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 151.296098][ T31] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.296142][ T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 151.296230][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.299687][ T5999] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 151.299726][ T5999] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 151.299754][ T5999] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 151.299784][ T5999] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.299833][ T5999] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 151.299859][ T5999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.413356][ T6177] syz.3.52 uses obsolete (PF_INET,SOCK_PACKET) [ 151.590468][ T31] usb 2-1: GET_CAPABILITIES returned 0 [ 151.590518][ T31] usbtmc 2-1:16.0: can't read capabilities [ 151.602953][ T5999] usb 3-1: GET_CAPABILITIES returned 0 [ 151.603008][ T5999] usbtmc 3-1:16.0: can't read capabilities [ 153.300605][ T13] bridge_slave_1: left allmulticast mode [ 153.301004][ T13] bridge_slave_1: left promiscuous mode [ 153.312315][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.402581][ T13] bridge_slave_0: left allmulticast mode [ 153.402606][ T13] bridge_slave_0: left promiscuous mode [ 153.402825][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.061458][ T6197] netlink: 20 bytes leftover after parsing attributes in process `syz.4.55'. [ 155.061602][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.55'. [ 155.460030][ T5956] usb 3-1: USB disconnect, device number 2 [ 156.494105][ T9] usb 2-1: USB disconnect, device number 3 [ 156.809158][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55'. [ 163.460171][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.005395][ T6240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.64'. [ 169.005419][ T6240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.64'. [ 169.367122][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 170.700741][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 170.743117][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 170.746819][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 170.760084][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 170.763082][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 172.858890][ T5852] Bluetooth: hci5: command tx timeout [ 173.060887][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.321233][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.343536][ T13] bond0 (unregistering): Released all slaves [ 174.884078][ T6099] chnl_net:caif_netlink_parms(): no params data found [ 174.949276][ T5852] Bluetooth: hci5: command tx timeout [ 177.018940][ T5852] Bluetooth: hci5: command tx timeout [ 179.098888][ T5852] Bluetooth: hci5: command tx timeout [ 189.370285][ T5851] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 189.609416][ T5851] usb 3-1: Using ep0 maxpacket: 8 [ 189.665100][ T5851] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 189.665136][ T5851] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 189.665171][ T5851] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 189.665196][ T5851] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.665240][ T5851] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 189.665263][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.523546][ T5851] usb 3-1: GET_CAPABILITIES returned 0 [ 191.523583][ T5851] usbtmc 3-1:16.0: can't read capabilities [ 197.118940][ T9] usb 3-1: USB disconnect, device number 3 [ 198.745008][ T6354] capability: warning: `syz.3.85' uses deprecated v2 capabilities in a way that may be insecure [ 199.395184][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.679228][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.679323][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.980999][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.994606][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.996990][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.000364][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.002581][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.008853][ T990] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 200.169989][ T990] usb 2-1: Using ep0 maxpacket: 8 [ 200.197403][ T990] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 200.197429][ T990] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 200.197447][ T990] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.197464][ T990] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.197494][ T990] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.197511][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.489817][ T990] usb 2-1: GET_CAPABILITIES returned 0 [ 200.489885][ T990] usbtmc 2-1:16.0: can't read capabilities [ 201.919087][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.950460][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.139004][ T5852] Bluetooth: hci0: command tx timeout [ 202.919412][ T13] hsr_slave_0: left promiscuous mode [ 202.925757][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.925865][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.988656][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.988682][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.255635][ T13] veth1_macvtap: left promiscuous mode [ 203.255882][ T13] veth0_macvtap: left promiscuous mode [ 203.256823][ T13] veth1_vlan: left promiscuous mode [ 203.257215][ T13] veth0_vlan: left promiscuous mode [ 203.912879][ T9] usb 2-1: USB disconnect, device number 4 [ 204.220672][ T5852] Bluetooth: hci0: command tx timeout [ 206.299177][ T5852] Bluetooth: hci0: command tx timeout [ 208.383914][ T5852] Bluetooth: hci0: command tx timeout [ 210.617104][ T6416] netlink: 20 bytes leftover after parsing attributes in process `syz.2.95'. [ 210.617130][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.95'. [ 211.045423][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 211.601970][ T6427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.97'. [ 211.601986][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.97'. [ 211.873532][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.97'. [ 213.290305][ T13] team0 (unregistering): Port device team_slave_1 removed [ 213.513580][ T13] team0 (unregistering): Port device team_slave_0 removed [ 215.759155][ T6414] vlan2: entered promiscuous mode [ 215.759331][ T6414] vlan2: entered allmulticast mode [ 215.759346][ T6414] hsr_slave_1: entered allmulticast mode [ 216.420764][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.612911][ T6425] vlan2: entered promiscuous mode [ 216.613240][ T6425] vlan2: entered allmulticast mode [ 216.613254][ T6425] hsr_slave_1: entered allmulticast mode [ 224.738370][ T6451] netlink: 20 bytes leftover after parsing attributes in process `syz.3.101'. [ 224.738394][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.101'. [ 225.058336][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 227.128809][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 227.128853][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 228.581583][ T6249] chnl_net:caif_netlink_parms(): no params data found [ 228.888106][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.132586][ T6249] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 229.606173][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.528594][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.594049][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.874200][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.179008][ T990] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 231.349816][ T990] usb 2-1: Using ep0 maxpacket: 8 [ 231.356413][ T990] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 231.356448][ T990] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 231.356474][ T990] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.356498][ T990] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.356541][ T990] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 231.356565][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.357502][ T990] usb 2-1: GET_CAPABILITIES returned 0 [ 232.357552][ T990] usbtmc 2-1:16.0: can't read capabilities [ 233.603687][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 233.715535][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 233.740182][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 233.765721][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 233.800476][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 234.406094][ T990] usb 2-1: USB disconnect, device number 5 [ 234.741150][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 235.679672][ T6372] chnl_net:caif_netlink_parms(): no params data found [ 235.978838][ T5845] Bluetooth: hci1: command tx timeout [ 238.711440][ T5845] Bluetooth: hci1: command tx timeout [ 238.865402][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.978298][ T5845] Bluetooth: hci1: command tx timeout [ 246.335691][ T6539] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 246.781012][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.022823][ T5845] Bluetooth: hci1: command tx timeout [ 248.823104][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.857872][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.754309][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.261785][ T6566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.124'. [ 253.261809][ T6566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.124'. [ 253.503840][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.633782][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'. [ 253.956853][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.021185][ T6372] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.021404][ T6372] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.021655][ T6372] bridge_slave_0: entered allmulticast mode [ 254.035045][ T6372] bridge_slave_0: entered promiscuous mode [ 254.086016][ T6372] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.086185][ T6372] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.086434][ T6372] bridge_slave_1: entered allmulticast mode [ 254.120452][ T6372] bridge_slave_1: entered promiscuous mode [ 254.612806][ T6372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.655851][ T6372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.455192][ T6372] team0: Port device team_slave_0 added [ 256.489132][ T6372] team0: Port device team_slave_1 added [ 256.796513][ T6597] netlink: 20 bytes leftover after parsing attributes in process `syz.1.131'. [ 256.796538][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.131'. [ 257.195155][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.131'. [ 257.295837][ T6372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.295855][ T6372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.295883][ T6372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.348863][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 257.350836][ T6372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.350958][ T6372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.350987][ T6372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.538961][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 257.544698][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 257.544734][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 257.544760][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 257.544785][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.544828][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 257.544850][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.919767][ T13] bridge_slave_1: left allmulticast mode [ 257.919802][ T13] bridge_slave_1: left promiscuous mode [ 257.920377][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.929992][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 257.930058][ T10] usbtmc 4-1:16.0: can't read capabilities [ 258.125329][ T10] usb 4-1: USB disconnect, device number 2 [ 258.223493][ T13] bridge_slave_0: left allmulticast mode [ 258.223529][ T13] bridge_slave_0: left promiscuous mode [ 258.223791][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.138755][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.139119][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.184652][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 266.793819][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 266.809482][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 266.813332][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 266.814761][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 266.845864][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 267.185644][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.438480][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.638712][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.833223][ T13] bond0 (unregistering): Released all slaves [ 268.541754][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 268.718915][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 268.722454][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 268.722489][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 268.722515][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.722547][ T31] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.722592][ T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 268.722616][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.119390][ T5856] Bluetooth: hci5: command tx timeout [ 269.155311][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.195715][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.220139][ T6649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.141'. [ 270.220163][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'. [ 270.472032][ T31] usb 2-1: GET_CAPABILITIES returned 0 [ 270.472089][ T31] usbtmc 2-1:16.0: can't read capabilities [ 270.557180][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 270.833409][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.845356][ T31] usb 2-1: USB disconnect, device number 6 [ 272.221966][ T5856] Bluetooth: hci5: command tx timeout [ 272.715213][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'. [ 272.715241][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'. [ 273.777444][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.879445][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.926725][ T13] bond0 (unregistering): Released all slaves [ 274.300530][ T5845] Bluetooth: hci5: command tx timeout [ 275.478906][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.388125][ T5845] Bluetooth: hci5: command 0x0419 tx timeout [ 276.788920][ T46] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 276.968888][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 276.971178][ T46] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 276.971201][ T46] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 276.971218][ T46] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.971234][ T46] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.971263][ T46] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 276.971279][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.263422][ T46] usb 4-1: GET_CAPABILITIES returned 0 [ 277.263792][ T46] usbtmc 4-1:16.0: can't read capabilities [ 277.424790][ T46] usb 4-1: USB disconnect, device number 3 [ 277.827284][ T6714] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 278.033537][ T6506] chnl_net:caif_netlink_parms(): no params data found [ 278.467534][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.474260][ T5856] Bluetooth: hci5: command 0x0419 tx timeout [ 278.625106][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.155'. [ 279.502279][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.783727][ T13] hsr_slave_0: left promiscuous mode [ 280.786379][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.786416][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.004959][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.004991][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.263106][ T13] veth1_macvtap: left promiscuous mode [ 281.263242][ T13] veth0_macvtap: left promiscuous mode [ 281.263567][ T13] veth1_vlan: left promiscuous mode [ 281.263804][ T13] veth0_vlan: left promiscuous mode [ 281.320535][ T6745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.160'. [ 281.320558][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.160'. [ 281.645549][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.723933][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 284.048991][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 284.211694][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 284.231028][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 284.231064][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 284.231089][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 284.231115][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.231160][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 284.231184][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.500207][ T10] usb 4-1: usb_control_msg returned -71 [ 284.500256][ T10] usbtmc 4-1:16.0: can't read capabilities [ 284.562377][ T10] usb 4-1: USB disconnect, device number 4 [ 285.342126][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.492050][ T6766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 286.403788][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.701626][ T38] audit: type=1326 audit(1756100436.124:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6767 comm="syz.3.166" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0a205ebe9 code=0x0 [ 287.400083][ T13] team0 (unregistering): Port device team_slave_1 removed [ 287.741726][ T13] team0 (unregistering): Port device team_slave_0 removed [ 291.264698][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.287489][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.313985][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.318387][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.331242][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.078165][ T6506] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 294.167243][ T5856] Bluetooth: hci0: command tx timeout [ 296.219523][ T5856] Bluetooth: hci0: command tx timeout [ 298.895000][ T5856] Bluetooth: hci0: command tx timeout [ 300.953623][ T5856] Bluetooth: hci0: command tx timeout [ 303.805344][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.824676][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.826870][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.842221][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.844614][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.514413][ T5845] Bluetooth: hci1: command tx timeout [ 308.538828][ T5845] Bluetooth: hci1: command tx timeout [ 310.290857][ T0] sched: DL replenish lagged too much [ 310.484491][ T6624] chnl_net:caif_netlink_parms(): no params data found [ 310.618771][ T5845] Bluetooth: hci1: command tx timeout [ 312.709373][ T5845] Bluetooth: hci1: command tx timeout [ 313.108883][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 313.183498][ T6624] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.184075][ T6624] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.184297][ T6624] bridge_slave_0: entered allmulticast mode [ 313.187483][ T6624] bridge_slave_0: entered promiscuous mode [ 313.215184][ T6781] chnl_net:caif_netlink_parms(): no params data found [ 313.245576][ T6624] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.246122][ T6624] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.246336][ T6624] bridge_slave_1: entered allmulticast mode [ 313.254575][ T6624] bridge_slave_1: entered promiscuous mode [ 313.271727][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 313.289596][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 313.289630][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 313.289656][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 313.289681][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.289723][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 313.289744][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.588301][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 313.588351][ T9] usbtmc 2-1:16.0: can't read capabilities [ 313.688391][ T6624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.712309][ T6624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.888274][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 313.899007][ T6896] usbtmc 2-1:16.0: Unable to send data, error -71 [ 314.275959][ T6624] team0: Port device team_slave_0 added [ 314.376711][ T5851] usb 2-1: USB disconnect, device number 7 [ 314.751523][ T6624] team0: Port device team_slave_1 added [ 314.826046][ T6781] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.826192][ T6781] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.826452][ T6781] bridge_slave_0: entered allmulticast mode [ 314.860619][ T6781] bridge_slave_0: entered promiscuous mode [ 316.341161][ T6781] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.341316][ T6781] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.341577][ T6781] bridge_slave_1: entered allmulticast mode [ 316.344563][ T6781] bridge_slave_1: entered promiscuous mode [ 317.053342][ T6624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.053360][ T6624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.053387][ T6624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.135215][ T6921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.194'. [ 318.603945][ T6624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.603963][ T6624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.603993][ T6624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.052183][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.244298][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.265573][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.276713][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.303994][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.318146][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 319.477176][ T6781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.643912][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.198'. [ 319.773001][ T6781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.974823][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.558937][ T5845] Bluetooth: hci3: command tx timeout [ 321.973547][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.048422][ T6781] team0: Port device team_slave_0 added [ 322.055004][ T6848] chnl_net:caif_netlink_parms(): no params data found [ 322.161287][ T6781] team0: Port device team_slave_1 added [ 322.547677][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.547760][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.581037][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.929743][ T6781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.929761][ T6781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.929790][ T6781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.013549][ T6781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.013569][ T6781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.013598][ T6781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.648094][ T5856] Bluetooth: hci3: command tx timeout [ 323.926592][ T6970] netlink: 20 bytes leftover after parsing attributes in process `syz.3.207'. [ 325.463162][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.463425][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.463682][ T6848] bridge_slave_0: entered allmulticast mode [ 325.498337][ T6848] bridge_slave_0: entered promiscuous mode [ 325.541947][ T6781] hsr_slave_0: entered promiscuous mode [ 325.563976][ T6781] hsr_slave_1: entered promiscuous mode [ 325.630740][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.630889][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.631138][ T6848] bridge_slave_1: entered allmulticast mode [ 325.659055][ T5856] Bluetooth: hci3: command tx timeout [ 325.672048][ T6848] bridge_slave_1: entered promiscuous mode [ 326.754364][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.209'. [ 327.730333][ T6848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.888826][ T5856] Bluetooth: hci3: command tx timeout [ 328.075629][ T6848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.561573][ T6998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.211'. [ 329.657974][ T13] bridge_slave_1: left allmulticast mode [ 329.658009][ T13] bridge_slave_1: left promiscuous mode [ 329.659721][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.821068][ T13] bridge_slave_0: left allmulticast mode [ 329.821104][ T13] bridge_slave_0: left promiscuous mode [ 329.823604][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.984557][ T13] bridge_slave_1: left allmulticast mode [ 329.984594][ T13] bridge_slave_1: left promiscuous mode [ 329.984916][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.137524][ T13] bridge_slave_0: left allmulticast mode [ 330.137548][ T13] bridge_slave_0: left promiscuous mode [ 330.137734][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.685616][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.695815][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.770869][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.816796][ T13] bond0 (unregistering): Released all slaves [ 346.522870][ T13] bond0 (unregistering): Released all slaves [ 347.213686][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.342200][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.411700][ T13] bond0 (unregistering): Released all slaves [ 347.802891][ T13] bond0 (unregistering): Released all slaves [ 348.109515][ T6848] team0: Port device team_slave_0 added [ 348.202205][ T6848] team0: Port device team_slave_1 added [ 348.432230][ T7071] netlink: 128 bytes leftover after parsing attributes in process `syz.1.231'. [ 348.432519][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 351.729551][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.729565][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.729585][ T6848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.529270][ T7084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.234'. [ 353.499778][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 353.502398][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 353.503762][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 353.534943][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 353.538336][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 353.620096][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.620114][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.620143][ T6848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.058962][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 354.124783][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.208831][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 354.211519][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 354.211556][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 354.211590][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 354.211615][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.211661][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 354.211685][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.500796][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 354.500847][ T9] usbtmc 2-1:16.0: can't read capabilities [ 354.872777][ T5928] usb 2-1: USB disconnect, device number 8 [ 355.365129][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.568879][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.662890][ T5845] Bluetooth: hci5: command tx timeout [ 356.402705][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.415215][ T6929] chnl_net:caif_netlink_parms(): no params data found [ 356.806887][ T7112] netlink: 128 bytes leftover after parsing attributes in process `syz.1.240'. [ 356.807403][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 357.052585][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.473564][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.009415][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.089801][ T5845] Bluetooth: hci5: command tx timeout [ 358.241471][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.521804][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.574750][ T6848] hsr_slave_0: entered promiscuous mode [ 358.593940][ T6848] hsr_slave_1: entered promiscuous mode [ 358.606476][ T6848] debugfs: 'hsr0' already exists in 'hsr' [ 358.606506][ T6848] Cannot create hsr debugfs directory [ 360.178736][ T5845] Bluetooth: hci5: command tx timeout [ 361.082526][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.090730][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.221486][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.223631][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.224461][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.420382][ T13] hsr_slave_0: left promiscuous mode [ 361.421471][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.421500][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.469887][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.469920][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.495844][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.518702][ T5856] Bluetooth: hci5: command tx timeout [ 362.539628][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.611418][ T13] veth1_macvtap: left promiscuous mode [ 362.611549][ T13] veth0_macvtap: left promiscuous mode [ 362.613340][ T13] veth1_vlan: left promiscuous mode [ 362.613567][ T13] veth0_vlan: left promiscuous mode [ 362.952220][ T5851] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 363.099152][ T5851] usb 4-1: Using ep0 maxpacket: 8 [ 363.101624][ T5851] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 363.101664][ T5851] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 363.101690][ T5851] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 363.101714][ T5851] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.101756][ T5851] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 363.101779][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.341723][ T5856] Bluetooth: hci0: command tx timeout [ 363.576506][ T5851] usb 4-1: usb_control_msg returned -71 [ 363.576554][ T5851] usbtmc 4-1:16.0: can't read capabilities [ 363.659191][ T5851] usb 4-1: USB disconnect, device number 5 [ 364.577303][ T13] team0 (unregistering): Port device team_slave_1 removed [ 364.762682][ T13] team0 (unregistering): Port device team_slave_0 removed [ 365.419130][ T5856] Bluetooth: hci0: command tx timeout [ 366.584911][ T7158] netlink: 128 bytes leftover after parsing attributes in process `syz.3.250'. [ 366.584954][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 367.677521][ T5856] Bluetooth: hci0: command tx timeout [ 368.074045][ T13] team0 (unregistering): Port device team_slave_1 removed [ 368.234881][ T13] team0 (unregistering): Port device team_slave_0 removed [ 369.738855][ T5856] Bluetooth: hci0: command tx timeout [ 371.961812][ T7187] ipvlan0: entered promiscuous mode [ 371.961851][ T7187] ipvlan0: entered allmulticast mode [ 371.961866][ T7187] veth0_vlan: entered allmulticast mode [ 371.992444][ T6929] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.992590][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.992828][ T6929] bridge_slave_0: entered allmulticast mode [ 371.995685][ T6929] bridge_slave_0: entered promiscuous mode [ 372.038206][ T6929] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.038357][ T6929] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.038584][ T6929] bridge_slave_1: entered allmulticast mode [ 372.042682][ T6929] bridge_slave_1: entered promiscuous mode [ 372.278796][ T6020] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 372.438961][ T6020] usb 2-1: Using ep0 maxpacket: 8 [ 372.441617][ T6020] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 372.441650][ T6020] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 372.441676][ T6020] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 372.441699][ T6020] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.441750][ T6020] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 372.441772][ T6020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.610103][ T6929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.684702][ T6020] usb 2-1: GET_CAPABILITIES returned 0 [ 372.684749][ T6020] usbtmc 2-1:16.0: can't read capabilities [ 372.698833][ T6929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.022379][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 373.027229][ T7204] usbtmc 2-1:16.0: Unable to send data, error -71 [ 373.249816][ T6929] team0: Port device team_slave_0 added [ 373.281302][ T6929] team0: Port device team_slave_1 added [ 373.748359][ T6929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.748376][ T6929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.748403][ T6929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.973653][ T6929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.973670][ T6929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.973698][ T6929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.312348][ T7085] chnl_net:caif_netlink_parms(): no params data found [ 374.687467][ T6929] hsr_slave_0: entered promiscuous mode [ 374.715116][ T6929] hsr_slave_1: entered promiscuous mode [ 374.749040][ T6929] debugfs: 'hsr0' already exists in 'hsr' [ 374.749071][ T6929] Cannot create hsr debugfs directory [ 375.069965][ T31] usb 2-1: USB disconnect, device number 9 [ 378.566743][ T7085] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.567087][ T7085] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.567286][ T7085] bridge_slave_0: entered allmulticast mode [ 378.593736][ T7085] bridge_slave_0: entered promiscuous mode [ 378.606861][ T7137] chnl_net:caif_netlink_parms(): no params data found [ 378.633071][ T7085] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.633236][ T7085] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.633443][ T7085] bridge_slave_1: entered allmulticast mode [ 378.638372][ T7085] bridge_slave_1: entered promiscuous mode [ 379.633376][ T7085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.984447][ T7085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.901710][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 380.923974][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 380.925591][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 380.927476][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 380.928460][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.104300][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 381.525011][ T7085] team0: Port device team_slave_0 added [ 381.643965][ T7085] team0: Port device team_slave_1 added [ 381.646342][ T7137] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.646566][ T7137] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.646833][ T7137] bridge_slave_0: entered allmulticast mode [ 381.662414][ T7137] bridge_slave_0: entered promiscuous mode [ 381.794121][ T7137] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.794296][ T7137] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.794511][ T7137] bridge_slave_1: entered allmulticast mode [ 381.822118][ T7137] bridge_slave_1: entered promiscuous mode [ 382.153515][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.153533][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.153562][ T7085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.343440][ T7278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.270'. [ 382.343463][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.270'. [ 382.481179][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.481197][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.481225][ T7085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.512124][ T7137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.602646][ T7137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.726846][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 383.020795][ T5845] Bluetooth: hci1: command tx timeout [ 384.005088][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.005167][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.942772][ T7137] team0: Port device team_slave_0 added [ 385.099223][ T5845] Bluetooth: hci1: command tx timeout [ 385.185396][ T7137] team0: Port device team_slave_1 added [ 385.233225][ T7085] hsr_slave_0: entered promiscuous mode [ 385.236086][ T7085] hsr_slave_1: entered promiscuous mode [ 385.238382][ T7085] debugfs: 'hsr0' already exists in 'hsr' [ 385.238408][ T7085] Cannot create hsr debugfs directory [ 385.551770][ T13] bridge_slave_1: left allmulticast mode [ 385.551804][ T13] bridge_slave_1: left promiscuous mode [ 385.552128][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.807774][ T13] bridge_slave_0: left allmulticast mode [ 385.807810][ T13] bridge_slave_0: left promiscuous mode [ 385.808116][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.986407][ T13] bridge_slave_1: left allmulticast mode [ 385.986436][ T13] bridge_slave_1: left promiscuous mode [ 385.986700][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.103483][ T13] bridge_slave_0: left allmulticast mode [ 386.103520][ T13] bridge_slave_0: left promiscuous mode [ 386.103802][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.211371][ T13] bridge_slave_1: left allmulticast mode [ 386.219506][ T990] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 386.224406][ T13] bridge_slave_1: left promiscuous mode [ 386.227820][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.317784][ T13] bridge_slave_0: left allmulticast mode [ 386.317818][ T13] bridge_slave_0: left promiscuous mode [ 386.318088][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.378069][ T990] usb 4-1: Using ep0 maxpacket: 8 [ 386.398926][ T990] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 386.398959][ T990] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 386.398992][ T990] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 386.399016][ T990] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.399058][ T990] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 386.399080][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.533895][ T13] bridge_slave_1: left allmulticast mode [ 386.533928][ T13] bridge_slave_1: left promiscuous mode [ 386.536808][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.660827][ T990] usb 4-1: GET_CAPABILITIES returned 0 [ 386.660875][ T990] usbtmc 4-1:16.0: can't read capabilities [ 386.735082][ T13] bridge_slave_0: left allmulticast mode [ 386.735118][ T13] bridge_slave_0: left promiscuous mode [ 386.735426][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.911578][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 386.929340][ T7314] usbtmc 4-1:16.0: Unable to send data, error -71 [ 386.931990][ T990] usb 4-1: USB disconnect, device number 6 [ 388.190094][ T5845] Bluetooth: hci1: command tx timeout [ 390.009824][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.104624][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.281'. [ 390.712102][ T5845] Bluetooth: hci1: command tx timeout [ 390.999530][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.142263][ T13] bond0 (unregistering): Released all slaves [ 391.503310][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.589804][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.657661][ T13] bond0 (unregistering): Released all slaves [ 391.942314][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.061706][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.153245][ T13] bond0 (unregistering): Released all slaves [ 393.070810][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.331840][ T7354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.285'. [ 393.331866][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.285'. [ 393.463300][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.742579][ T13] bond0 (unregistering): Released all slaves [ 394.788896][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'. [ 395.657475][ T7137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.657490][ T7137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.657511][ T7137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.013749][ T7137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.013767][ T7137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.013794][ T7137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.095153][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'. [ 397.441464][ T7137] hsr_slave_0: entered promiscuous mode [ 397.443199][ T7137] hsr_slave_1: entered promiscuous mode [ 397.444336][ T7137] debugfs: 'hsr0' already exists in 'hsr' [ 397.444362][ T7137] Cannot create hsr debugfs directory [ 397.548860][ T13] hsr_slave_0: left promiscuous mode [ 397.589276][ T13] hsr_slave_1: left promiscuous mode [ 397.590386][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.624986][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.678797][ T13] hsr_slave_0: left promiscuous mode [ 397.730402][ T13] hsr_slave_1: left promiscuous mode [ 397.733831][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.772021][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.779585][ T13] hsr_slave_0: left promiscuous mode [ 399.875779][ T13] hsr_slave_1: left promiscuous mode [ 399.879564][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.936340][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.275097][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.533113][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.110111][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 405.359840][ T13] team0 (unregistering): Port device team_slave_1 removed [ 405.527247][ T13] team0 (unregistering): Port device team_slave_0 removed [ 408.020346][ T13] team0 (unregistering): Port device team_slave_1 removed [ 409.137769][ T13] team0 (unregistering): Port device team_slave_0 removed [ 412.106493][ T13] team0 (unregistering): Port device team_slave_1 removed [ 412.740392][ T13] team0 (unregistering): Port device team_slave_0 removed [ 414.956778][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 414.984507][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 414.998576][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 415.025607][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 415.037433][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 415.599223][ T6020] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 415.774903][ T6020] usb 4-1: Using ep0 maxpacket: 8 [ 415.804226][ T6020] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 415.804293][ T6020] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 415.804671][ T6020] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 415.805101][ T6020] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.806434][ T6020] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 415.806974][ T6020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.999738][ T6020] usb 4-1: GET_CAPABILITIES returned 0 [ 416.999789][ T6020] usbtmc 4-1:16.0: can't read capabilities [ 417.151116][ T13] team0 (unregistering): Port device team_slave_1 removed [ 417.209055][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 417.210206][ T7463] usbtmc 4-1:16.0: Unable to send data, error -71 [ 417.213169][ T5956] usb 4-1: USB disconnect, device number 7 [ 417.339013][ T5849] Bluetooth: hci3: command tx timeout [ 417.419741][ T13] team0 (unregistering): Port device team_slave_0 removed [ 419.243283][ T7269] chnl_net:caif_netlink_parms(): no params data found [ 419.419402][ T5849] Bluetooth: hci3: command tx timeout [ 421.291934][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 421.303323][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 421.305063][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 421.306288][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 421.321568][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 421.499006][ T5856] Bluetooth: hci3: command tx timeout [ 423.422201][ T5856] Bluetooth: hci5: command tx timeout [ 423.579958][ T5856] Bluetooth: hci3: command tx timeout [ 425.498892][ T5856] Bluetooth: hci5: command tx timeout [ 426.012657][ T7269] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.016731][ T7269] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.016984][ T7269] bridge_slave_0: entered allmulticast mode [ 426.028707][ T7269] bridge_slave_0: entered promiscuous mode [ 426.062512][ T7269] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.062680][ T7269] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.062916][ T7269] bridge_slave_1: entered allmulticast mode [ 426.065802][ T7269] bridge_slave_1: entered promiscuous mode [ 427.578891][ T5856] Bluetooth: hci5: command tx timeout [ 427.674828][ T7269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.174543][ T7269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.850377][ T5856] Bluetooth: hci5: command tx timeout [ 430.017180][ T7269] team0: Port device team_slave_0 added [ 430.126194][ T7269] team0: Port device team_slave_1 added [ 431.401871][ T7269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.401889][ T7269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.401928][ T7269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.458476][ T7269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.458492][ T7269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.458521][ T7269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.504548][ T7458] chnl_net:caif_netlink_parms(): no params data found [ 432.196924][ T7269] hsr_slave_0: entered promiscuous mode [ 432.198336][ T7269] hsr_slave_1: entered promiscuous mode [ 432.360603][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 432.360632][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 433.236513][ T7458] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.236785][ T7458] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.237035][ T7458] bridge_slave_0: entered allmulticast mode [ 433.251537][ T7458] bridge_slave_0: entered promiscuous mode [ 433.308343][ T7458] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.308499][ T7458] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.315490][ T7458] bridge_slave_1: entered allmulticast mode [ 433.325537][ T7458] bridge_slave_1: entered promiscuous mode [ 434.155451][ T7458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.303572][ T7458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.704068][ T7588] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 437.171784][ T7458] team0: Port device team_slave_0 added [ 437.394192][ T7458] team0: Port device team_slave_1 added [ 437.430951][ T7493] chnl_net:caif_netlink_parms(): no params data found [ 437.709410][ T13] bridge_slave_1: left allmulticast mode [ 437.709447][ T13] bridge_slave_1: left promiscuous mode [ 437.709754][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.191553][ T13] bridge_slave_0: left allmulticast mode [ 438.191577][ T13] bridge_slave_0: left promiscuous mode [ 438.191771][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.251901][ T13] bridge_slave_1: left allmulticast mode [ 438.251925][ T13] bridge_slave_1: left promiscuous mode [ 438.252104][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.352292][ T13] bridge_slave_0: left allmulticast mode [ 438.352318][ T13] bridge_slave_0: left promiscuous mode [ 438.352516][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.680331][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.767915][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.842913][ T13] bond0 (unregistering): Released all slaves [ 439.073655][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.170882][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.243019][ T13] bond0 (unregistering): Released all slaves [ 439.803983][ T7458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.803997][ T7458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.804016][ T7458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.806362][ T7458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.806375][ T7458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.806401][ T7458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.535667][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 442.571031][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 442.573553][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 442.576583][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 442.577712][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 442.728950][ T13] hsr_slave_0: left promiscuous mode [ 442.752782][ T13] hsr_slave_1: left promiscuous mode [ 442.757964][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.961047][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.201220][ T13] hsr_slave_0: left promiscuous mode [ 443.219227][ T13] hsr_slave_1: left promiscuous mode [ 443.220486][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.262626][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.711209][ T5856] Bluetooth: hci0: command tx timeout [ 445.430716][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.430818][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.732706][ T13] team0 (unregistering): Port device team_slave_1 removed [ 445.879519][ T13] team0 (unregistering): Port device team_slave_0 removed [ 446.781757][ T5856] Bluetooth: hci0: command tx timeout [ 446.999793][ T13] team0 (unregistering): Port device team_slave_1 removed [ 447.144701][ T13] team0 (unregistering): Port device team_slave_0 removed [ 447.785132][ T7458] hsr_slave_0: entered promiscuous mode [ 447.804081][ T7458] hsr_slave_1: entered promiscuous mode [ 447.804990][ T7458] debugfs: 'hsr0' already exists in 'hsr' [ 447.805014][ T7458] Cannot create hsr debugfs directory [ 448.198811][ T6020] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 448.328796][ T6020] usb 4-1: device descriptor read/64, error -71 [ 448.578936][ T6020] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 448.680727][ T7493] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.680837][ T7493] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.680977][ T7493] bridge_slave_0: entered allmulticast mode [ 448.682831][ T7493] bridge_slave_0: entered promiscuous mode [ 448.708838][ T6020] usb 4-1: device descriptor read/64, error -71 [ 448.763375][ T7493] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.763519][ T7493] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.763737][ T7493] bridge_slave_1: entered allmulticast mode [ 448.800881][ T7493] bridge_slave_1: entered promiscuous mode [ 448.821850][ T6020] usb usb4-port1: attempt power cycle [ 448.888764][ T5856] Bluetooth: hci0: command tx timeout [ 449.158948][ T6020] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 449.179766][ T6020] usb 4-1: device descriptor read/8, error -71 [ 449.403029][ T7493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.418891][ T6020] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 449.440304][ T6020] usb 4-1: device descriptor read/8, error -71 [ 449.505266][ T7493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.549274][ T6020] usb usb4-port1: unable to enumerate USB device [ 449.912187][ T7493] team0: Port device team_slave_0 added [ 450.038397][ T7493] team0: Port device team_slave_1 added [ 451.008754][ T5856] Bluetooth: hci0: command tx timeout [ 451.440254][ T7493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.440267][ T7493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.440287][ T7493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.521920][ T7493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.521935][ T7493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.521959][ T7493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.715550][ T7493] hsr_slave_0: entered promiscuous mode [ 453.721492][ T7493] hsr_slave_1: entered promiscuous mode [ 453.728989][ T7493] debugfs: 'hsr0' already exists in 'hsr' [ 453.729022][ T7493] Cannot create hsr debugfs directory [ 454.619580][ T13] bridge_slave_1: left allmulticast mode [ 454.619614][ T13] bridge_slave_1: left promiscuous mode [ 454.619881][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.702697][ T13] bridge_slave_0: left allmulticast mode [ 454.702722][ T13] bridge_slave_0: left promiscuous mode [ 454.702921][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.799477][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.422194][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.610328][ T13] bond0 (unregistering): Released all slaves [ 458.398809][ T7458] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 458.816971][ T7638] chnl_net:caif_netlink_parms(): no params data found [ 458.850880][ T7458] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 459.147724][ T7458] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 459.460863][ T13] hsr_slave_0: left promiscuous mode [ 459.504091][ T13] hsr_slave_1: left promiscuous mode [ 459.505045][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.534582][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.726964][ T1231] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 461.743957][ T7749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.364'. [ 461.743979][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.364'. [ 461.868824][ T1231] usb 4-1: Using ep0 maxpacket: 32 [ 461.871417][ T1231] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 461.877774][ T1231] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 461.877802][ T1231] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 461.877823][ T1231] usb 4-1: Product: syz [ 461.877838][ T1231] usb 4-1: Manufacturer: syz [ 461.877852][ T1231] usb 4-1: SerialNumber: syz [ 461.892505][ T1231] usb 4-1: config 0 descriptor?? [ 461.894706][ T7746] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 461.905838][ T1231] hub 4-1:0.0: bad descriptor, ignoring hub [ 461.905884][ T1231] hub 4-1:0.0: probe with driver hub failed with error -5 [ 462.049559][ T13] team0 (unregistering): Port device team_slave_1 removed [ 462.052079][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'. [ 462.221361][ T13] team0 (unregistering): Port device team_slave_0 removed [ 462.249361][ T1231] usb 4-1: USB disconnect, device number 12 [ 462.959480][ T7458] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 464.353529][ T7763] bridge0: entered promiscuous mode [ 464.353737][ T7763] macvlan2: entered promiscuous mode [ 466.505570][ T7638] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.505911][ T7638] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.509365][ T7799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.369'. [ 466.509386][ T7799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.369'. [ 466.546192][ T7638] bridge_slave_0: entered allmulticast mode [ 466.559568][ T7638] bridge_slave_0: entered promiscuous mode [ 466.594810][ T7638] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.595011][ T7638] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.595221][ T7638] bridge_slave_1: entered allmulticast mode [ 466.598159][ T7638] bridge_slave_1: entered promiscuous mode [ 466.953528][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.369'. [ 467.376725][ T7638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.480806][ T7638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.950019][ T7638] team0: Port device team_slave_0 added [ 467.999512][ T7638] team0: Port device team_slave_1 added [ 468.198274][ T7493] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 468.508982][ T7493] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 468.603548][ T7638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.603567][ T7638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.603593][ T7638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.898251][ T7493] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 468.965384][ T7638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.965402][ T7638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.965430][ T7638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.016805][ T7493] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 471.817090][ T7638] hsr_slave_0: entered promiscuous mode [ 471.818518][ T7638] hsr_slave_1: entered promiscuous mode [ 476.050612][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 476.060154][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 476.086460][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 476.097814][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 476.108466][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 478.119039][ T7493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.124825][ T7638] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 478.218820][ T5849] Bluetooth: hci1: command tx timeout [ 478.658144][ T7638] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 478.956586][ T7638] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 479.170078][ T7638] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 480.239840][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 480.242940][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 480.244975][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 480.247452][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 480.250155][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 480.299433][ T5856] Bluetooth: hci1: command tx timeout [ 482.167121][ T7930] bridge0: entered promiscuous mode [ 482.167216][ T7930] macvlan2: entered promiscuous mode [ 482.378918][ T5856] Bluetooth: hci3: command tx timeout [ 482.379974][ T5849] Bluetooth: hci1: command tx timeout [ 482.407331][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 482.407359][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 484.684823][ T5849] Bluetooth: hci1: command tx timeout [ 484.684859][ T5849] Bluetooth: hci3: command tx timeout [ 486.516748][ T69] bridge_slave_1: left allmulticast mode [ 486.516810][ T69] bridge_slave_1: left promiscuous mode [ 486.517121][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.621695][ T69] bridge_slave_0: left allmulticast mode [ 486.621730][ T69] bridge_slave_0: left promiscuous mode [ 486.622055][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.846030][ T5856] Bluetooth: hci3: command tx timeout [ 488.918862][ T5856] Bluetooth: hci3: command tx timeout [ 491.639739][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.721174][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.791605][ T69] bond0 (unregistering): Released all slaves [ 491.841750][ T7885] chnl_net:caif_netlink_parms(): no params data found [ 492.670910][ T69] hsr_slave_0: left promiscuous mode [ 492.999424][ T69] hsr_slave_1: left promiscuous mode [ 493.000909][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.621593][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.080650][ T69] team0 (unregistering): Port device team_slave_1 removed [ 495.980266][ T69] team0 (unregistering): Port device team_slave_0 removed [ 497.257061][ T7885] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.257207][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.257426][ T7885] bridge_slave_0: entered allmulticast mode [ 497.280485][ T7885] bridge_slave_0: entered promiscuous mode [ 497.316416][ T7885] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.316552][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.317300][ T7885] bridge_slave_1: entered allmulticast mode [ 497.344898][ T7885] bridge_slave_1: entered promiscuous mode [ 498.146347][ T7885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.410547][ T7914] chnl_net:caif_netlink_parms(): no params data found [ 498.466702][ T7885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.663700][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 498.887077][ T7885] team0: Port device team_slave_0 added [ 499.060561][ T7885] team0: Port device team_slave_1 added [ 499.880761][ T7638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.984654][ T7885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.984672][ T7885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.984699][ T7885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.088854][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 500.229276][ T10] usb 4-1: device descriptor read/64, error -71 [ 500.236143][ T7885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.236156][ T7885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.236175][ T7885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.468776][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 500.608827][ T10] usb 4-1: device descriptor read/64, error -71 [ 500.732063][ T10] usb usb4-port1: attempt power cycle [ 500.944353][ T7914] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.949170][ T7914] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.949473][ T7914] bridge_slave_0: entered allmulticast mode [ 500.952691][ T7914] bridge_slave_0: entered promiscuous mode [ 501.161455][ T7914] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.161622][ T7914] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.161837][ T7914] bridge_slave_1: entered allmulticast mode [ 501.164062][ T7914] bridge_slave_1: entered promiscuous mode [ 501.238764][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 501.261157][ T10] usb 4-1: device descriptor read/8, error -71 [ 501.498784][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 501.519691][ T10] usb 4-1: device descriptor read/8, error -71 [ 501.629673][ T10] usb usb4-port1: unable to enumerate USB device [ 501.632087][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 501.634831][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 501.637974][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 501.675636][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 501.677033][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 504.546424][ T5849] Bluetooth: hci5: command tx timeout [ 504.865484][ T7914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.900977][ T7885] hsr_slave_0: entered promiscuous mode [ 504.902493][ T7885] hsr_slave_1: entered promiscuous mode [ 504.903534][ T7885] debugfs: 'hsr0' already exists in 'hsr' [ 504.903560][ T7885] Cannot create hsr debugfs directory [ 504.920367][ T7914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.124955][ T6020] Process accounting resumed [ 506.536186][ T7914] team0: Port device team_slave_0 added [ 506.619302][ T5849] Bluetooth: hci5: command tx timeout [ 506.679201][ T7914] team0: Port device team_slave_1 added [ 506.864969][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.865045][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.906943][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'. [ 506.906969][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'. [ 507.748979][ T7914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.748997][ T7914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.749025][ T7914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.825448][ T7914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.825465][ T7914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.825492][ T7914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.698746][ T5849] Bluetooth: hci5: command tx timeout [ 508.727950][ T7914] hsr_slave_0: entered promiscuous mode [ 508.755960][ T7914] hsr_slave_1: entered promiscuous mode [ 508.756921][ T7914] debugfs: 'hsr0' already exists in 'hsr' [ 508.756947][ T7914] Cannot create hsr debugfs directory [ 510.216823][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 510.779075][ T5849] Bluetooth: hci5: command tx timeout [ 511.102277][ T10] Process accounting resumed [ 511.227754][ T69] bridge_slave_1: left allmulticast mode [ 511.227790][ T69] bridge_slave_1: left promiscuous mode [ 511.228059][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.336723][ T69] bridge_slave_0: left allmulticast mode [ 511.336755][ T69] bridge_slave_0: left promiscuous mode [ 511.337069][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.456720][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.529702][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.591989][ T69] bond0 (unregistering): Released all slaves [ 514.208946][ T69] hsr_slave_0: left promiscuous mode [ 514.250002][ T69] hsr_slave_1: left promiscuous mode [ 514.251010][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.276903][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.970823][ T69] team0 (unregistering): Port device team_slave_1 removed [ 515.099955][ T69] team0 (unregistering): Port device team_slave_0 removed [ 515.923489][ T8082] chnl_net:caif_netlink_parms(): no params data found [ 516.844987][ T8082] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.845134][ T8082] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.919250][ T8082] bridge_slave_0: entered allmulticast mode [ 516.922327][ T8082] bridge_slave_0: entered promiscuous mode [ 516.971847][ T8082] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.972040][ T8082] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.972308][ T8082] bridge_slave_1: entered allmulticast mode [ 517.017954][ T8082] bridge_slave_1: entered promiscuous mode [ 518.896947][ T7885] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 518.932964][ T8082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.164416][ T7885] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 519.326388][ T8082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.327125][ T7885] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 519.612393][ T7885] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 519.911094][ T8082] team0: Port device team_slave_0 added [ 520.027346][ T8082] team0: Port device team_slave_1 added [ 520.586731][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'. [ 520.586757][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'. [ 520.788863][ T8082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.788876][ T8082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.788895][ T8082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.117927][ T8082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.117941][ T8082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.117960][ T8082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.266715][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 521.266740][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 523.237829][ T8082] hsr_slave_0: entered promiscuous mode [ 523.260586][ T8082] hsr_slave_1: entered promiscuous mode [ 523.261524][ T8082] debugfs: 'hsr0' already exists in 'hsr' [ 523.261548][ T8082] Cannot create hsr debugfs directory [ 523.841360][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 525.762852][ T8245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 526.417494][ T8258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.445'. [ 526.417517][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.445'. [ 526.647131][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'. [ 526.723003][ T7914] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 526.798287][ T7914] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 526.865579][ T7914] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 526.946658][ T7914] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 527.175171][ T8271] netlink: 20 bytes leftover after parsing attributes in process `syz.3.448'. [ 527.175194][ T8271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.448'. [ 527.397975][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.448'. [ 527.447543][ T8277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.449'. [ 527.456089][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.449'. [ 527.656241][ T2979] bridge_slave_1: left allmulticast mode [ 527.656275][ T2979] bridge_slave_1: left promiscuous mode [ 527.656582][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.702042][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.449'. [ 527.719564][ T2979] bridge_slave_0: left allmulticast mode [ 527.719606][ T2979] bridge_slave_0: left promiscuous mode [ 527.719906][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.407532][ T2979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.539873][ T2979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.622522][ T2979] bond0 (unregistering): Released all slaves [ 530.348778][ T2979] hsr_slave_0: left promiscuous mode [ 530.400140][ T2979] hsr_slave_1: left promiscuous mode [ 530.401392][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.505552][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.691589][ T2979] team0 (unregistering): Port device team_slave_1 removed [ 532.822876][ T2979] team0 (unregistering): Port device team_slave_0 removed [ 533.696042][ T7885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.632350][ T7885] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.976348][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.976519][ T6023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.379847][ T7914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.538856][ T8082] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 535.602094][ T8082] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 535.713956][ T8082] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 535.801719][ T7914] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.818751][ T8082] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 536.135944][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.136049][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.155448][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.156026][ T6023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.651207][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 537.675493][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 537.677316][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 537.694953][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 537.695897][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 538.145944][ T8322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.458'. [ 539.898793][ T5849] Bluetooth: hci0: command tx timeout [ 541.706854][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 541.721596][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 541.722857][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 541.724968][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 541.726789][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 542.005348][ T5849] Bluetooth: hci0: command tx timeout [ 542.913295][ T5956] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 543.818885][ T5849] Bluetooth: hci1: command tx timeout [ 544.068897][ T5849] Bluetooth: hci0: command tx timeout [ 545.898709][ T5849] Bluetooth: hci1: command tx timeout [ 546.138864][ T5849] Bluetooth: hci0: command tx timeout [ 546.961017][ T8082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.013945][ T3591] bridge_slave_1: left allmulticast mode [ 547.013971][ T3591] bridge_slave_1: left promiscuous mode [ 547.014160][ T3591] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.978841][ T5849] Bluetooth: hci1: command tx timeout [ 548.020338][ T3591] bridge_slave_0: left allmulticast mode [ 548.020374][ T3591] bridge_slave_0: left promiscuous mode [ 548.022356][ T3591] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.389549][ T3591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.469817][ T3591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.545123][ T3591] bond0 (unregistering): Released all slaves [ 549.658805][ T8317] chnl_net:caif_netlink_parms(): no params data found [ 550.198621][ T5849] Bluetooth: hci1: command tx timeout [ 551.430432][ T8334] chnl_net:caif_netlink_parms(): no params data found [ 551.479785][ T8082] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.720439][ T3591] hsr_slave_0: left promiscuous mode [ 552.042185][ T3591] hsr_slave_1: left promiscuous mode [ 552.043081][ T3591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.089818][ T3591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.429944][ T8383] netlink: 20 bytes leftover after parsing attributes in process `syz.1.469'. [ 553.449128][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.470'. [ 553.697391][ T3591] team0 (unregistering): Port device team_slave_1 removed [ 553.799309][ T3591] team0 (unregistering): Port device team_slave_0 removed [ 554.268899][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 554.428921][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 554.431410][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 554.431443][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 554.431468][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 554.431491][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 554.431534][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 554.431556][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.772232][ T9] usb 4-1: usb_control_msg returned -71 [ 554.772273][ T9] usbtmc 4-1:16.0: can't read capabilities [ 554.841677][ T9] usb 4-1: USB disconnect, device number 18 [ 555.730565][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 555.796207][ T8395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.472'. [ 556.080210][ T6025] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.080430][ T6025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.082778][ T8317] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.082899][ T8317] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.083080][ T8317] bridge_slave_0: entered allmulticast mode [ 556.136685][ T8317] bridge_slave_0: entered promiscuous mode [ 556.432690][ T8317] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.432850][ T8317] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.433096][ T8317] bridge_slave_1: entered allmulticast mode [ 556.442231][ T8317] bridge_slave_1: entered promiscuous mode [ 556.558718][ T5999] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 556.681251][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.682208][ T6021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.725385][ T5999] usb 4-1: device descriptor read/64, error -71 [ 557.008798][ T5999] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 557.148747][ T5999] usb 4-1: device descriptor read/64, error -71 [ 557.228306][ T8317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.259105][ T5999] usb usb4-port1: attempt power cycle [ 557.291490][ T8334] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.291633][ T8334] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.291936][ T8334] bridge_slave_0: entered allmulticast mode [ 557.297122][ T8334] bridge_slave_0: entered promiscuous mode [ 557.344894][ T8317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.347024][ T8334] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.347175][ T8334] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.347373][ T8334] bridge_slave_1: entered allmulticast mode [ 557.359630][ T8334] bridge_slave_1: entered promiscuous mode [ 557.628774][ T5999] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 557.654317][ T5999] usb 4-1: device descriptor read/8, error -71 [ 557.894234][ T5999] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 557.909521][ T5999] usb 4-1: device descriptor read/8, error -71 [ 558.019370][ T5999] usb usb4-port1: unable to enumerate USB device [ 558.117632][ T8317] team0: Port device team_slave_0 added [ 558.124869][ T8334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.143758][ T8317] team0: Port device team_slave_1 added [ 558.171520][ T8334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.785686][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.785705][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.785733][ T8317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.796213][ T8334] team0: Port device team_slave_0 added [ 558.870740][ T8334] team0: Port device team_slave_1 added [ 558.872061][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.872075][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.872107][ T8317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.227755][ T8334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.227775][ T8334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.227814][ T8334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.103776][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 560.489482][ T8334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.489511][ T8334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.489541][ T8334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.958437][ T8439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 561.627249][ T8317] hsr_slave_0: entered promiscuous mode [ 561.628903][ T8317] hsr_slave_1: entered promiscuous mode [ 565.128057][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 565.146661][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 565.147892][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 565.291931][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 565.292833][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 567.594862][ T5849] Bluetooth: hci3: command tx timeout [ 568.313583][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.313684][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.468811][ T5956] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 568.590484][ T8334] hsr_slave_0: entered promiscuous mode [ 568.591950][ T8334] hsr_slave_1: entered promiscuous mode [ 568.593025][ T8334] debugfs: 'hsr0' already exists in 'hsr' [ 568.593051][ T8334] Cannot create hsr debugfs directory [ 568.599068][ T5956] usb 4-1: device descriptor read/64, error -71 [ 568.838780][ T5956] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 568.969174][ T5956] usb 4-1: device descriptor read/64, error -71 [ 569.079850][ T5956] usb usb4-port1: attempt power cycle [ 569.418768][ T5956] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 571.078066][ T5856] Bluetooth: hci3: command tx timeout [ 571.141608][ T5956] usb 4-1: device descriptor read/8, error -71 [ 571.379029][ T5956] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 571.404034][ T5956] usb 4-1: device descriptor read/8, error -71 [ 571.509243][ T5956] usb usb4-port1: unable to enumerate USB device [ 573.222339][ T5856] Bluetooth: hci3: command tx timeout [ 575.240088][ T8510] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 575.258672][ T5856] Bluetooth: hci3: command tx timeout [ 575.259445][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'. [ 575.403251][ T3591] bridge_slave_1: left allmulticast mode [ 575.403285][ T3591] bridge_slave_1: left promiscuous mode [ 575.403582][ T3591] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.481118][ T3591] bridge_slave_0: left allmulticast mode [ 575.481152][ T3591] bridge_slave_0: left promiscuous mode [ 575.481441][ T3591] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.214035][ T3591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.293428][ T3591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.313682][ T3591] bond0 (unregistering): Released all slaves [ 579.404675][ T8510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.627038][ T8510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.742318][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 579.868761][ T9] usb 4-1: device descriptor read/64, error -71 [ 580.108761][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 581.160838][ T9] usb 4-1: device descriptor read/64, error -71 [ 581.269539][ T9] usb usb4-port1: attempt power cycle [ 581.290549][ T3591] hsr_slave_0: left promiscuous mode [ 581.328834][ T3591] hsr_slave_1: left promiscuous mode [ 581.329785][ T3591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.355774][ T3591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.624494][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 581.669593][ T9] usb 4-1: device descriptor read/8, error -71 [ 581.949408][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 581.987888][ T9] usb 4-1: device descriptor read/8, error -71 [ 582.029645][ T3591] team0 (unregistering): Port device team_slave_1 removed [ 582.111535][ T9] usb usb4-port1: unable to enumerate USB device [ 582.159342][ T3591] team0 (unregistering): Port device team_slave_0 removed [ 586.224833][ T8549] macvlan3: entered promiscuous mode [ 586.395513][ T8455] chnl_net:caif_netlink_parms(): no params data found [ 588.352923][ T8455] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.353140][ T8455] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.353387][ T8455] bridge_slave_0: entered allmulticast mode [ 588.356410][ T8455] bridge_slave_0: entered promiscuous mode [ 588.373311][ T8455] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.373480][ T8455] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.373775][ T8455] bridge_slave_1: entered allmulticast mode [ 588.378406][ T8455] bridge_slave_1: entered promiscuous mode [ 588.539020][ T5928] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 588.848746][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 588.852245][ T5928] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 588.852304][ T5928] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 588.852332][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.976023][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 588.994810][ T8455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.541627][ T8570] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 589.610932][ T8455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.142853][ T8455] team0: Port device team_slave_0 added [ 591.345855][ T6020] usb 4-1: USB disconnect, device number 31 [ 594.491329][ T8455] team0: Port device team_slave_1 added [ 595.237759][ T46] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 597.155267][ T8455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.155286][ T8455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.155316][ T8455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.319828][ T8455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.319855][ T8455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.320772][ T8455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.735563][ T8607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.518'. [ 599.735589][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.518'. [ 600.006666][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'. [ 600.130144][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 600.134265][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 600.141220][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 600.151952][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 600.155549][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 600.431919][ T8455] hsr_slave_0: entered promiscuous mode [ 600.433283][ T8455] hsr_slave_1: entered promiscuous mode [ 600.434243][ T8455] debugfs: 'hsr0' already exists in 'hsr' [ 600.434268][ T8455] Cannot create hsr debugfs directory [ 600.892594][ T8618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.519'. [ 600.892620][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.519'. [ 601.231696][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.519'. [ 601.333978][ T8621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.520'. [ 601.395964][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 601.401811][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 601.414049][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 601.415537][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 601.418209][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 602.027252][ T3591] bridge_slave_1: left allmulticast mode [ 602.027276][ T3591] bridge_slave_1: left promiscuous mode [ 602.027483][ T3591] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.134928][ T3591] bridge_slave_0: left allmulticast mode [ 602.134967][ T3591] bridge_slave_0: left promiscuous mode [ 602.135276][ T3591] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.300319][ T5849] Bluetooth: hci5: command tx timeout [ 602.765137][ T8640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.525'. [ 603.499081][ T5849] Bluetooth: hci0: command tx timeout [ 604.568858][ T5849] Bluetooth: hci5: command tx timeout [ 605.100744][ T3591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.159609][ T3591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.184650][ T3591] bond0 (unregistering): Released all slaves [ 605.579059][ T5849] Bluetooth: hci0: command tx timeout [ 606.618925][ T5849] Bluetooth: hci5: command tx timeout [ 607.129576][ T3591] hsr_slave_0: left promiscuous mode [ 607.609030][ T3591] hsr_slave_1: left promiscuous mode [ 607.610005][ T3591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.658896][ T5849] Bluetooth: hci0: command tx timeout [ 607.659926][ T3591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.698977][ T5849] Bluetooth: hci5: command tx timeout [ 609.799952][ T5849] Bluetooth: hci0: command tx timeout [ 610.901721][ T3591] team0 (unregistering): Port device team_slave_1 removed [ 611.089668][ T3591] team0 (unregistering): Port device team_slave_0 removed [ 615.317004][ T8613] chnl_net:caif_netlink_parms(): no params data found [ 618.599060][ T8712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.540'. [ 620.729328][ T8721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.541'. [ 620.729403][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'. [ 621.564890][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 622.060643][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.331155][ T8739] macvlan3: entered promiscuous mode [ 623.041030][ T8626] chnl_net:caif_netlink_parms(): no params data found [ 623.061501][ T8613] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.061650][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.061862][ T8613] bridge_slave_0: entered allmulticast mode [ 623.069943][ T8613] bridge_slave_0: entered promiscuous mode [ 623.226258][ C0] vkms_vblank_simulate: vblank timer overrun [ 623.269207][ T8613] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.269364][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.269631][ T8613] bridge_slave_1: entered allmulticast mode [ 623.277904][ T8613] bridge_slave_1: entered promiscuous mode [ 623.763241][ T8613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.812454][ T8613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.983643][ T8749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.544'. [ 623.984494][ T8749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.544'. [ 624.190356][ T8745] Process accounting resumed [ 624.484896][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.545'. [ 625.005657][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 625.011894][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 625.013367][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 625.015405][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 625.025154][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 625.905248][ C0] vkms_vblank_simulate: vblank timer overrun [ 626.067799][ T8613] team0: Port device team_slave_0 added [ 626.105001][ T8613] team0: Port device team_slave_1 added [ 626.810338][ T8626] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.812289][ T8626] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.836939][ T8626] bridge_slave_0: entered allmulticast mode [ 626.879291][ T8626] bridge_slave_0: entered promiscuous mode [ 627.606961][ T8626] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.607134][ T8626] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.607401][ T8626] bridge_slave_1: entered allmulticast mode [ 627.633791][ T8626] bridge_slave_1: entered promiscuous mode [ 627.659824][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.659842][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.659870][ T8613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.923043][ T5849] Bluetooth: hci1: command tx timeout [ 628.000067][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.000086][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.000115][ T8613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.266774][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 628.864960][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.549'. [ 629.758422][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.758502][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.781762][ T8773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 629.978827][ T5849] Bluetooth: hci1: command tx timeout [ 631.086345][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 631.332392][ T8626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.444303][ T8782] netlink: 'syz.1.552': attribute type 11 has an invalid length. [ 631.446462][ T8626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.960470][ T8788] netlink: 20 bytes leftover after parsing attributes in process `syz.3.553'. [ 631.960494][ T8788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.553'. [ 632.060112][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.554'. [ 632.060523][ T5849] Bluetooth: hci1: command tx timeout [ 632.060683][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.554'. [ 632.090713][ T8791] overlayfs: failed to clone upperpath [ 632.112614][ T8626] team0: Port device team_slave_0 added [ 632.142058][ T8613] hsr_slave_0: entered promiscuous mode [ 632.143544][ T8613] hsr_slave_1: entered promiscuous mode [ 632.144534][ T8613] debugfs: 'hsr0' already exists in 'hsr' [ 632.144558][ T8613] Cannot create hsr debugfs directory [ 632.186594][ T8626] team0: Port device team_slave_1 added [ 632.232287][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 632.855065][ T8626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.855084][ T8626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.855114][ T8626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.019389][ T8626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.019408][ T8626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.019438][ T8626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.879272][ T8626] hsr_slave_0: entered promiscuous mode [ 633.880710][ T8626] hsr_slave_1: entered promiscuous mode [ 633.881715][ T8626] debugfs: 'hsr0' already exists in 'hsr' [ 633.881740][ T8626] Cannot create hsr debugfs directory [ 634.140274][ T5849] Bluetooth: hci1: command tx timeout [ 637.876238][ T8757] chnl_net:caif_netlink_parms(): no params data found [ 643.972144][ T8757] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.972395][ T8757] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.972631][ T8757] bridge_slave_0: entered allmulticast mode [ 643.976920][ T8757] bridge_slave_0: entered promiscuous mode [ 644.015654][ T8757] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.015883][ T8757] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.016164][ T8757] bridge_slave_1: entered allmulticast mode [ 644.039673][ T8757] bridge_slave_1: entered promiscuous mode [ 644.392224][ C0] vkms_vblank_simulate: vblank timer overrun [ 644.544390][ T3591] bridge_slave_1: left allmulticast mode [ 644.544419][ T3591] bridge_slave_1: left promiscuous mode [ 644.544628][ T3591] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.692831][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'. [ 644.937499][ T3591] bridge_slave_0: left allmulticast mode [ 644.937526][ T3591] bridge_slave_0: left promiscuous mode [ 644.937734][ T3591] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.023904][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.046403][ T3591] bridge_slave_1: left allmulticast mode [ 646.046429][ T3591] bridge_slave_1: left promiscuous mode [ 646.046658][ T3591] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.092589][ T3591] bridge_slave_0: left allmulticast mode [ 646.092614][ T3591] bridge_slave_0: left promiscuous mode [ 646.092794][ T3591] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.303855][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.405513][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.588401][ T3591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.629513][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.702224][ T3591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.742251][ T3591] bond0 (unregistering): Released all slaves [ 646.791000][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.864469][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.944194][ T3591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.037066][ T3591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.079583][ T3591] bond0 (unregistering): Released all slaves [ 647.258270][ T8757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.439075][ T8837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 649.553820][ T8757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.676881][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.565'. [ 652.018789][ T8852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 652.285219][ T8757] team0: Port device team_slave_0 added [ 652.382536][ T8757] team0: Port device team_slave_1 added [ 680.678968][ T8868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 680.682058][ T8868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 680.683394][ T8868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 680.684656][ T8868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 680.685811][ T8868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 688.631553][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 690.005587][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 690.024217][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 690.039698][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 690.040605][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 699.526276][ T8868] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 700.306178][ T8868] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 701.271112][ T8868] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 701.279979][ T8868] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 701.280931][ T8868] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 703.047272][ T8868] Bluetooth: hci3: command tx timeout [ 704.783024][ T8868] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 704.809777][ T8868] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 704.823643][ T8868] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 704.824932][ T8868] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 705.278604][ T5856] Bluetooth: hci3: command tx timeout [ 706.810623][ T8868] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 708.124722][ T8868] Bluetooth: hci3: command tx timeout [ 710.977442][ T8868] Bluetooth: hci3: command tx timeout [ 715.437577][ T5849] Bluetooth: hci6: command tx timeout [ 718.244344][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 720.598569][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 725.055346][ T8868] Bluetooth: hci6: command tx timeout [ 729.136023][ T5856] Bluetooth: hci5: command 0x0406 tx timeout [ 729.136069][ T5856] Bluetooth: hci6: command tx timeout [ 731.426646][ T8868] Bluetooth: hci6: command tx timeout [ 731.426739][ T8878] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 742.769469][ T8878] Bluetooth: hci0: command 0x0406 tx timeout [ 744.480040][ T8883] Bluetooth: hci7: Opcode 0x0c03 failed: -4 [ 749.952124][ T5856] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 752.250444][ T5856] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 752.495498][ T5856] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 752.497912][ T5856] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 752.558030][ T5856] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 761.845371][ T3591] hsr_slave_0: left promiscuous mode [ 761.877008][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 761.897188][ T8898] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 761.897783][ T8898] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 761.898681][ T8898] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 761.900001][ T8899] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 761.900892][ T8899] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 762.340731][ T5845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 762.348787][ T5845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 763.353023][ T5845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 767.147933][ T5856] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 767.698737][ T5856] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 771.146882][ T5856] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 771.552397][ T5845] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 771.558738][ T5845] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 771.560167][ T5845] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 771.561095][ T5845] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 773.558296][ T5856] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 773.582089][ T5856] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 775.533476][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 775.550162][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 775.562578][ T8878] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 778.575724][ T8878] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 778.576619][ T8878] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 781.003813][ T5845] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 781.009478][ T5845] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 781.009950][ T5845] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 781.011240][ T5845] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 781.012099][ T5845] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 792.087407][ T39] INFO: task syz-executor:8626 blocked for more than 145 seconds. [ 792.087449][ T39] Not tainted syzkaller #0 [ 792.087461][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 792.087477][ T39] task:syz-executor state:D stack:21336 pid:8626 tgid:8626 ppid:1 task_flags:0x400140 flags:0x00004004 [ 792.087555][ T39] Call Trace: [ 792.087563][ T39] [ 792.087579][ T39] __schedule+0x16f3/0x4c20 [ 792.087650][ T39] ? __pfx___schedule+0x10/0x10 [ 792.087704][ T39] rt_mutex_schedule+0x77/0xf0 [ 792.087727][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 792.087764][ T39] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 792.087792][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 792.087818][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 792.087848][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 792.087869][ T39] ? __lock_acquire+0xab9/0xd20 [ 792.087910][ T39] ? del_device_store+0xd1/0x360 [ 792.087939][ T39] ? __pfx_sscanf+0x10/0x10 [ 792.087967][ T39] ? del_device_store+0xd1/0x360 [ 792.087985][ T39] mutex_lock_nested+0x16a/0x1d0 [ 792.088014][ T39] del_device_store+0xd1/0x360 [ 792.088034][ T39] ? sysfs_file_kobj+0x1a/0x230 [ 792.088069][ T39] ? __pfx_del_device_store+0x10/0x10 [ 792.088089][ T39] ? sysfs_file_kobj+0x1e4/0x230 [ 792.088122][ T39] ? sysfs_kf_write+0x166/0x260 [ 792.088159][ T39] ? __pfx_sysfs_kf_write+0x10/0x10 [ 792.088188][ T39] kernfs_fop_write_iter+0x379/0x4f0 [ 792.088237][ T39] vfs_write+0x5d2/0xb40 [ 792.088270][ T39] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 792.088317][ T39] ? __pfx_vfs_write+0x10/0x10 [ 792.088348][ T39] ? do_sys_openat2+0x154/0x1c0 [ 792.088369][ T39] ? kmem_cache_free+0x195/0x510 [ 792.088417][ T39] ksys_write+0x14b/0x260 [ 792.088448][ T39] ? __pfx_ksys_write+0x10/0x10 [ 792.088527][ T39] ? rcu_is_watching+0x15/0xb0 [ 792.088568][ T39] ? do_syscall_64+0xbe/0x3b0 [ 792.088603][ T39] do_syscall_64+0xfa/0x3b0 [ 792.088635][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.088657][ T39] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 792.088679][ T39] ? clear_bhb_loop+0x60/0xb0 [ 792.088706][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.088736][ T39] RIP: 0033:0x7efde4c2d69f [ 792.088760][ T39] RSP: 002b:00007ffca4dc2240 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 792.088783][ T39] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007efde4c2d69f [ 792.088800][ T39] RDX: 0000000000000001 RSI: 00007ffca4dc2290 RDI: 0000000000000005 [ 792.088815][ T39] RBP: 00007efde4cb30c1 R08: 0000000000000000 R09: 00007ffca4dc2097 [ 792.088830][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 792.088854][ T39] R13: 00007ffca4dc2290 R14: 00007efde5984620 R15: 0000000000000003 [ 792.088882][ T39] [ 792.088921][ T39] [ 792.088921][ T39] Showing all locks held in the system: [ 792.088933][ T39] 4 locks held by kworker/0:1/10: [ 792.088946][ T39] #0: ffff88805c4eb538 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.089012][ T39] #1: ffffc900000f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.089091][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.089148][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.089205][ T39] 7 locks held by kworker/u8:0/12: [ 792.089218][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.089275][ T39] #1: ffffc90000117bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.089334][ T39] #2: ffff88805e3d6300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 792.089398][ T39] #3: ffff88805f657520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 792.089457][ T39] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 792.089507][ T39] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.089563][ T39] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.089619][ T39] 4 locks held by kworker/u8:1/13: [ 792.089632][ T39] #0: ffff88814d8b6938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.089689][ T39] #1: ffffc90000127bc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.089747][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.089801][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.089867][ T39] 2 locks held by ksoftirqd/0/15: [ 792.089879][ T39] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.089935][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.089993][ T39] 2 locks held by rcuc/0/20: [ 792.090005][ T39] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.090061][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.090118][ T39] 7 locks held by ktimers/1/29: [ 792.090130][ T39] 2 locks held by ksoftirqd/1/30: [ 792.090143][ T39] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.090199][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.090255][ T39] 2 locks held by kworker/1:0/31: [ 792.090268][ T39] 3 locks held by kworker/u8:2/37: [ 792.090280][ T39] #0: ffff88814d603138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.090337][ T39] #1: ffffc90000ac7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.090396][ T39] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 792.090446][ T39] 1 lock held by khungtaskd/39: [ 792.090458][ T39] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 792.090511][ T39] 6 locks held by kworker/u8:3/57: [ 792.090523][ T39] #0: ffff88805c89b938 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.090580][ T39] #1: ffffc9000123fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.090638][ T39] #2: ffff888035be15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 792.090706][ T39] #3: ffff88805e3bb8f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 792.090771][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.090826][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.090892][ T39] 7 locks held by kworker/u8:5/69: [ 792.090905][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.090962][ T39] #1: ffffc9000154fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.091022][ T39] #2: ffff88802177c300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 792.091086][ T39] #3: ffff88805e998120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 792.091145][ T39] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 792.091195][ T39] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.091250][ T39] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.091315][ T39] 4 locks held by kworker/0:2/990: [ 792.091327][ T39] #0: ffff88805c6e7138 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.091390][ T39] #1: ffffc90004777bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.091469][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.091524][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.091583][ T39] 7 locks held by irq/32-virtio1-/1185: [ 792.091597][ T39] 3 locks held by kworker/1:2/1231: [ 792.091610][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.091667][ T39] #1: ffffc90004ddfbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.091723][ T39] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 792.091785][ T39] 2 locks held by aoe_tx0/1318: [ 792.091798][ T39] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.091861][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.091930][ T39] 5 locks held by kworker/u8:9/3492: [ 792.091943][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.092000][ T39] #1: ffffc9000ce9fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.092057][ T39] #2: ffff888060090898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 792.092113][ T39] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.092169][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.092226][ T39] 5 locks held by kworker/u8:11/3571: [ 792.092239][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.092296][ T39] #1: ffffc9000d08fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.092354][ T39] #2: ffff888048f50898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 792.092408][ T39] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.092463][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.092520][ T39] 4 locks held by kworker/u8:12/3591: [ 792.092533][ T39] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.092590][ T39] #1: ffffc9000d21fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.092645][ T39] #2: ffffffff8ecc4f80 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 792.092701][ T39] #3: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 792.092758][ T39] 6 locks held by kworker/u8:13/4469: [ 792.092773][ T39] 7 locks held by udevd/5206: [ 792.092785][ T39] 2 locks held by dhcpcd/5502: [ 792.092797][ T39] #0: ffff888060a42908 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xbd/0xe90 [ 792.092859][ T39] #1: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 792.092915][ T39] 2 locks held by getty/5598: [ 792.092927][ T39] #0: ffff88823bf768a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 792.092987][ T39] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 792.093041][ T39] 3 locks held by syz-executor/5825: [ 792.093054][ T39] #0: ffff888027e34050 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_recvmsg+0xd3/0x560 [ 792.093107][ T39] #1: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.093164][ T39] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.093221][ T39] 3 locks held by syz-executor/5838: [ 792.093234][ T39] #0: ffff8880320bce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 792.093286][ T39] #1: ffff8880320bc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 792.093342][ T39] #2: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 792.093399][ T39] 3 locks held by syz-executor/5840: [ 792.093410][ T39] #0: ffff888032580e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 792.093458][ T39] #1: ffff8880325800a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 792.093511][ T39] #2: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 792.093568][ T39] 4 locks held by kworker/u9:3/5845: [ 792.093580][ T39] #0: ffff88804eceb938 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.093642][ T39] #1: ffffc90004c3fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.093698][ T39] #2: ffff88804fa7c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 792.093750][ T39] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 792.093801][ T39] 4 locks held by kworker/u9:5/5849: [ 792.093813][ T39] #0: ffff88802e7f1138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.093886][ T39] #1: ffffc90004c8fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.093936][ T39] #2: ffff888023ee0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 792.093992][ T39] #3: ffff888023ee00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 792.094065][ T39] 4 locks held by kworker/1:5/5851: [ 792.094077][ T39] #0: ffff88805c6e5d38 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.094134][ T39] #1: ffffc90004cafbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.094212][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.094267][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.094321][ T39] 4 locks held by kworker/u9:8/5856: [ 792.094333][ T39] #0: ffff888037afa938 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.094391][ T39] #1: ffffc90004cffbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.094448][ T39] #2: ffff8880664980a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 792.094498][ T39] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 792.094552][ T39] 2 locks held by kworker/R-wg-cr/5888: [ 792.094566][ T39] 5 locks held by kworker/0:4/5927: [ 792.094578][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.094635][ T39] #1: ffffc900059bfbc0 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.094693][ T39] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x13f0 [ 792.094743][ T39] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.094799][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.094888][ T39] 5 locks held by kworker/1:7/5999: [ 792.094900][ T39] #0: ffff88805c6e5938 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.094962][ T39] #1: ffffc90005c47bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.095040][ T39] #2: ffff88803b12d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x1c7/0xb00 [ 792.095095][ T39] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.095151][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.095208][ T39] 3 locks held by kworker/1:8/6020: [ 792.095221][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.095278][ T39] #1: ffffc90005d07bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.095335][ T39] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 792.095393][ T39] 5 locks held by kworker/u8:14/6021: [ 792.095407][ T39] 7 locks held by kworker/u8:15/6022: [ 792.095419][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.095476][ T39] #1: ffffc90005b1fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.095536][ T39] #2: ffff88805df24300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 792.095595][ T39] #3: ffff888031de6d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 792.095654][ T39] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 792.095704][ T39] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.095760][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.095817][ T39] 7 locks held by kworker/u8:16/6023: [ 792.095829][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.095892][ T39] #1: ffffc90005be7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.095951][ T39] #2: ffff88805ebf2300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 792.096014][ T39] #3: ffff88805f275d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 792.096074][ T39] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 792.096124][ T39] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.096180][ T39] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.096237][ T39] 6 locks held by kworker/u8:17/6024: [ 792.096249][ T39] #0: ffff88805ca0f138 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.096311][ T39] #1: ffffc90005b5fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.096368][ T39] #2: ffff888035ea15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 792.096434][ T39] #3: ffff88805e3bf880 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 792.096510][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.096564][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.096619][ T39] 5 locks held by kworker/u8:18/6025: [ 792.096631][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.096686][ T39] #1: ffffc90005c37bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.096741][ T39] #2: ffff888048dc0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 792.096794][ T39] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.096854][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.096914][ T39] 7 locks held by syz-executor/8613: [ 792.096926][ T39] #0: ffff888034820488 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 792.096988][ T39] #1: ffff888034ca0c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e1/0x4f0 [ 792.097063][ T39] #2: ffff888145b2d5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x204/0x4f0 [ 792.097137][ T39] #3: ffffffff8e541ed8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 792.097186][ T39] #4: ffff888028e860d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 792.097251][ T39] #5: ffff888028e82300 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 792.097310][ T39] #6: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 792.097365][ T39] 4 locks held by syz-executor/8626: [ 792.097378][ T39] #0: ffff888034820488 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 792.097438][ T39] #1: ffff88805cf42078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e1/0x4f0 [ 792.097494][ T39] #2: ffff888145b2d5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x204/0x4f0 [ 792.097555][ T39] #3: ffffffff8e541ed8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 792.097607][ T39] 2 locks held by syz-executor/8757: [ 792.097619][ T39] #0: ffffffff8e43a940 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 792.097681][ T39] #1: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 792.097736][ T39] 6 locks held by kworker/u8:4/8864: [ 792.097749][ T39] #0: ffff88805ca0e138 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.097806][ T39] #1: ffffc9000497fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.097870][ T39] #2: ffff88803b12d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 792.097936][ T39] #3: ffff88805e3bc388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 792.098002][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.098058][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.098115][ T39] 4 locks held by kworker/u8:6/8865: [ 792.098128][ T39] #0: ffff88805c89c138 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.098190][ T39] #1: ffffc90003c47bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.098248][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.098304][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.098360][ T39] 1 lock held by syz-executor/8867: [ 792.098373][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 792.098436][ T39] 6 locks held by kworker/u9:0/8868: [ 792.098578][ T39] #0: ffff88805f07b938 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.098639][ T39] #1: ffffc90004157bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.098697][ T39] #2: ffff888052e30e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 792.098758][ T39] #3: ffff888052e300a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 792.098813][ T39] #4: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 792.098879][ T39] #5: ffff88803ac7d358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 792.098943][ T39] 2 locks held by kworker/u8:7/8870: [ 792.098956][ T39] 4 locks held by kworker/1:3/8871: [ 792.098968][ T39] #0: ffff888036749138 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.099031][ T39] #1: ffffc90003ce7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.099108][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.099164][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.099222][ T39] 4 locks held by kworker/1:4/8872: [ 792.099234][ T39] #0: ffff88805c4eb538 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.099296][ T39] #1: ffffc90003c77bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.099373][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.099429][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.099486][ T39] 4 locks held by kworker/0:3/8873: [ 792.099499][ T39] #0: ffff888036749138 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.099561][ T39] #1: ffffc90004167bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.099639][ T39] #2: ffff8880397715f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 792.099691][ T39] #3: ffff888035f87880 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 792.099745][ T39] 1 lock held by syz-executor/8875: [ 792.099758][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 792.099819][ T39] 5 locks held by kworker/u9:1/8877: [ 792.099832][ T39] #0: ffff888063292138 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.099896][ T39] #1: ffffc90003bf7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.099954][ T39] #2: ffff88803f3e4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 792.100016][ T39] #3: ffff88803f3e40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 792.100072][ T39] #4: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 792.100129][ T39] 4 locks held by kworker/u9:2/8878: [ 792.100141][ T39] #0: ffff88802ed68138 ((wq_completion)hci7#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.100203][ T39] #1: ffffc90003bd7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.100259][ T39] #2: ffff88806cef40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 792.100322][ T39] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 792.100373][ T39] 7 locks held by kworker/u8:10/8885: [ 792.100386][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.100440][ T39] #1: ffffc90000107bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.100497][ T39] #2: ffff88805e21e300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 792.100559][ T39] #3: ffff88805e1d1920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 792.100615][ T39] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 792.100663][ T39] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.100717][ T39] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.100773][ T39] 6 locks held by kworker/u8:19/8888: [ 792.100786][ T39] #0: ffff88805ca0e138 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.100846][ T39] #1: ffffc90003ff7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.100903][ T39] #2: ffff88803b12d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 792.100967][ T39] #3: ffff888035f81928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 792.101030][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.101084][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.101140][ T39] 1 lock held by syz-executor/8890: [ 792.101152][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 792.101212][ T39] 3 locks held by udevd/8893: [ 792.101225][ T39] #0: ffff88803de1bf38 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 792.101279][ T39] #1: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.101331][ T39] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.101387][ T39] 4 locks held by kworker/1:9/8894: [ 792.101399][ T39] #0: ffff88805c6e7538 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.101458][ T39] #1: ffffc9000491fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.101515][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.101568][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.101624][ T39] 2 locks held by syz-executor/8895: [ 792.101638][ T39] 4 locks held by kworker/u9:6/8899: [ 792.101649][ T39] #0: ffff88814d77e938 ((wq_completion)krxrpcd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.101704][ T39] #1: ffffc90003fa7bc0 ((work_completion)(&rxnet->peer_keepalive_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.101758][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.101812][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.101873][ T39] 4 locks held by kworker/u8:20/8900: [ 792.101885][ T39] #0: ffff88805cbdb138 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 792.101941][ T39] #1: ffffc9000156fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 792.101996][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.102050][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.102107][ T39] 3 locks held by udevd/8901: [ 792.102118][ T39] #0: ffff88803ded0278 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 792.102191][ T39] #1: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 792.102246][ T39] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 792.102304][ T39] 3 locks held by syz-executor/8904: [ 792.102320][ T39] [ 792.102326][ T39] ============================================= [ 792.102326][ T39] [ 792.102348][ T39] NMI backtrace for cpu 1 [ 792.102376][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 792.102400][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 792.102413][ T39] Call Trace: [ 792.102422][ T39] [ 792.102432][ T39] dump_stack_lvl+0x189/0x250 [ 792.102470][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 792.102503][ T39] ? __pfx__printk+0x10/0x10 [ 792.102539][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 792.102566][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 792.102592][ T39] ? __pfx__printk+0x10/0x10 [ 792.102620][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 792.102651][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 792.102677][ T39] watchdog+0xf93/0xfe0 [ 792.102712][ T39] ? watchdog+0x1de/0xfe0 [ 792.102746][ T39] kthread+0x711/0x8a0 [ 792.102783][ T39] ? __pfx_watchdog+0x10/0x10 [ 792.102810][ T39] ? __pfx_kthread+0x10/0x10 [ 792.102854][ T39] ? __pfx_kthread+0x10/0x10 [ 792.102887][ T39] ret_from_fork+0x3fc/0x770 [ 792.102919][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 792.102954][ T39] ? __switch_to_asm+0x39/0x70 [ 792.102974][ T39] ? __switch_to_asm+0x33/0x70 [ 792.102993][ T39] ? __pfx_kthread+0x10/0x10 [ 792.103026][ T39] ret_from_fork_asm+0x1a/0x30 [ 792.103064][ T39] [ 792.103072][ T39] Sending NMI from CPU 1 to CPUs 0: [ 792.103101][ C0] NMI backtrace for cpu 0 [ 792.103116][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 792.103137][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 792.103149][ C0] RIP: 0010:arch_stack_walk+0x123/0x150 [ 792.103179][ C0] Code: 25 09 00 48 85 c0 74 24 48 89 df 48 89 c6 4d 89 f3 2e e8 dc a8 96 1e 84 c0 74 11 4c 89 ff e8 a4 26 09 00 83 bd 78 ff ff ff 00 <75> cf 65 48 8b 05 f3 55 8c 10 48 3b 45 d8 75 12 48 83 c4 68 5b 41 [ 792.103195][ C0] RSP: 0018:ffffc90000156a68 EFLAGS: 00000202 [ 792.103211][ C0] RAX: 000000008faab701 RBX: ffffc90000156b20 RCX: bb4886f4e4cf7100 [ 792.103225][ C0] RDX: 0000000000000006 RSI: ffffffff8d2185e9 RDI: ffff88801c2a5940 [ 792.103238][ C0] RBP: ffffc90000156af0 R08: ffffc90000156ba0 R09: 0000000000000000 [ 792.103251][ C0] R10: ffffc90000156ab8 R11: fffff5200002ad59 R12: ffff88801c2a5940 [ 792.103265][ C0] R13: 1ffff9200002add0 R14: ffffffff81aae030 R15: ffffc90000156a68 [ 792.103279][ C0] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 792.103294][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 792.103307][ C0] CR2: 0000557f12d05a10 CR3: 000000006ad6a000 CR4: 00000000003526f0 [ 792.103324][ C0] Call Trace: [ 792.103330][ C0] [ 792.103341][ C0] ? kasan_save_stack+0x3e/0x60 [ 792.103364][ C0] stack_trace_save+0x9c/0xe0 [ 792.103384][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 792.103402][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 792.103428][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 792.103454][ C0] kasan_save_stack+0x3e/0x60 [ 792.103502][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 792.103519][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 792.103546][ C0] call_rcu+0x157/0x9c0 [ 792.103568][ C0] ? rcuref_put+0x1b7/0x210 [ 792.103605][ C0] ? __pfx_call_rcu+0x10/0x10 [ 792.103621][ C0] ? percpu_counter_add_batch+0xea/0x1e0 [ 792.103645][ C0] ? dst_release+0x126/0x1b0 [ 792.103672][ C0] skb_release_head_state+0x71/0x250 [ 792.103698][ C0] consume_skb+0x60/0xf0 [ 792.103721][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 792.103751][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 792.103778][ C0] ? nf_ip_checksum+0x13c/0x510 [ 792.103807][ C0] nft_synproxy_do_eval+0x345/0x570 [ 792.103836][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 792.103872][ C0] nft_do_chain+0x40c/0x1920 [ 792.103897][ C0] ? unwind_next_frame+0xa5/0x2390 [ 792.103929][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 792.103958][ C0] ? rtlock_slowlock_locked+0xd8/0x4010 [ 792.103991][ C0] nft_do_chain_inet+0x25d/0x340 [ 792.104017][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 792.104042][ C0] ? __lock_acquire+0xab9/0xd20 [ 792.104070][ C0] ? NF_HOOK+0x9a/0x3a0 [ 792.104097][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 792.104123][ C0] nf_hook_slow+0xc5/0x220 [ 792.104147][ C0] NF_HOOK+0x206/0x3a0 [ 792.104168][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 792.104188][ C0] ? NF_HOOK+0x9a/0x3a0 [ 792.104207][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 792.104225][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 792.104247][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 792.104269][ C0] ? skb_dst+0x4f/0xd0 [ 792.104289][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 792.104310][ C0] NF_HOOK+0x309/0x3a0 [ 792.104331][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 792.104350][ C0] ? NF_HOOK+0x9a/0x3a0 [ 792.104369][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 792.104390][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 792.104415][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 792.104434][ C0] __netif_receive_skb+0x143/0x380 [ 792.104452][ C0] ? rt_spin_unlock+0x65/0x80 [ 792.104471][ C0] ? process_backlog+0x27b/0x900 [ 792.104489][ C0] process_backlog+0x31e/0x900 [ 792.104515][ C0] __napi_poll+0xb6/0x540 [ 792.104535][ C0] net_rx_action+0x707/0xe00 [ 792.104554][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 792.104584][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 792.104621][ C0] handle_softirqs+0x22c/0x710 [ 792.104647][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 792.104674][ C0] run_ktimerd+0xcf/0x190 [ 792.104698][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 792.104723][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 792.104744][ C0] ? smpboot_thread_fn+0x5f4/0xa60 [ 792.104765][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 792.104785][ C0] smpboot_thread_fn+0x542/0xa60 [ 792.104807][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 792.104832][ C0] kthread+0x711/0x8a0 [ 792.104861][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 792.104882][ C0] ? __pfx_kthread+0x10/0x10 [ 792.104910][ C0] ? __pfx_kthread+0x10/0x10 [ 792.104936][ C0] ret_from_fork+0x3fc/0x770 [ 792.104960][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 792.104985][ C0] ? __switch_to_asm+0x39/0x70 [ 792.105001][ C0] ? __switch_to_asm+0x33/0x70 [ 792.105016][ C0] ? __pfx_kthread+0x10/0x10 [ 792.105042][ C0] ret_from_fork_asm+0x1a/0x30 [ 792.105067][ C0] [ 792.105101][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 792.105116][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 792.105139][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 792.105152][ T39] Call Trace: [ 792.105160][ T39] [ 792.105168][ T39] dump_stack_lvl+0x99/0x250 [ 792.105200][ T39] ? __asan_memcpy+0x40/0x70 [ 792.105223][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 792.105272][ T39] ? __pfx__printk+0x10/0x10 [ 792.105309][ T39] vpanic+0x281/0x750 [ 792.105345][ T39] ? __pfx_vpanic+0x10/0x10 [ 792.105374][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 792.105397][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 792.105436][ T39] panic+0xb9/0xc0 [ 792.105467][ T39] ? __pfx_panic+0x10/0x10 [ 792.105502][ T39] ? irq_work_queue+0xc3/0x140 [ 792.105533][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 792.105559][ T39] watchdog+0xfd2/0xfe0 [ 792.105593][ T39] ? watchdog+0x1de/0xfe0 [ 792.105626][ T39] kthread+0x711/0x8a0 [ 792.105663][ T39] ? __pfx_watchdog+0x10/0x10 [ 792.105690][ T39] ? __pfx_kthread+0x10/0x10 [ 792.105728][ T39] ? __pfx_kthread+0x10/0x10 [ 792.105762][ T39] ret_from_fork+0x3fc/0x770 [ 792.105795][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 792.105830][ T39] ? __switch_to_asm+0x39/0x70 [ 792.105859][ T39] ? __switch_to_asm+0x33/0x70 [ 792.105878][ T39] ? __pfx_kthread+0x10/0x10 [ 792.105913][ T39] ret_from_fork_asm+0x1a/0x30 [ 792.105952][ T39] [ 792.106308][ T39] Kernel Offset: disabled