last executing test programs: 30.705553325s ago: executing program 0 (id=1156): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300)={0xa}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x10000000000000, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 30.440407842s ago: executing program 0 (id=1158): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x6, 0x32, 0x0, 0xe}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 29.015054731s ago: executing program 0 (id=1168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 28.511241031s ago: executing program 0 (id=1173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x3a, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, {0x8000, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x0, 0x100}}}}}}}, 0x0) 28.310626733s ago: executing program 0 (id=1175): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x4, 0xc95d, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x49, 0x5, 0x85, 0xffffff01, 0x6, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0xfffffffd, 0x3, 0x9, 0x1, 0x1f461e2c, 0x4, 0xa, 0x4, 0x7, 0x2101, 0x7fff, 0x4c74, 0x451, 0x242, 0x3, 0x4ea2, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0xffffffff, 0x6, 0x30000006, 0x0, 0x5, 0x200, 0x8, 0x0, 0x80, 0x0, 0x9, 0x6, 0x8, 0x20000004, 0x1, 0x9], [0x1000, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff0, 0x129432e6, 0xcb, 0xf9, 0xd, 0x10, 0x6c9, 0x6, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0xff, 0x9, 0x400, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x5f31, 0x8, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x800, 0x6, 0x7, 0x1, 0x1, 0xc, 0xff7f, 0xa, 0x7f, 0x4, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x9, 0x9, 0x48c93690, 0x42, 0xffffff0a], [0x3fc, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x8, 0x5, 0x1, 0x1ef, 0x5, 0x1, 0x87, 0x3, 0xf0000000, 0x3e7, 0x9, 0x5, 0x80002, 0x8, 0x7fffffff, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x4000007, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7fd, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x6, 0x6, 0x120000, 0x3, 0x5, 0x800aaed, 0x8, 0x65], [0x9, 0xbbb1, 0x3, 0xb, 0x5, 0x938, 0xb, 0x6, 0xa, 0x5, 0xce7, 0x1ff, 0x2, 0xfff, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x5, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0xc, 0xe, 0x6, 0x2, 0x80000000, 0x8, 0x8, 0xc8, 0x1a, 0x4, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0xfffffffe, 0x10080, 0x5, 0x6, 0xedf6, 0xfffffff7, 0x335e0ac3, 0x0, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0x40000fff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) 27.780330054s ago: executing program 3 (id=1178): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x6, 0x32, 0x0, 0xe}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 27.338073728s ago: executing program 0 (id=1183): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xc0b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@local, @in6=@empty}, {@in6=@mcast1, 0x0, 0x2b}, @in=@local, {0x20000000000}, {}, {0x10, 0xd29}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x11, r3, 0x5a718000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES8=r1], 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0x814) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r10, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ffb}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 26.70853861s ago: executing program 3 (id=1186): syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a2401ff03040201021324060400060900010000000500010007000009240300ff010000fc0924050300f8431cfd09240300070306040006240504000009040100000102000009040101010102000009050109000004000007250100000001090402000001020009"], 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140ff"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5aa}], 0x1) 25.1659348s ago: executing program 3 (id=1198): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000010) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r1, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 25.114794592s ago: executing program 3 (id=1199): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000006000000000000002e01000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) unshare(0x20000400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r5, @ANYRES16=r6], 0x1000f) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f00000004c0)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1f, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) setsockopt$rose(r1, 0x104, 0x2, &(0x7f0000001bc0)=0xfffffffd, 0x4) r7 = socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffa}, 0x50) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000100)={0x20000014}) 24.510780632s ago: executing program 3 (id=1204): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x0) 24.193923904s ago: executing program 4 (id=1207): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0xc, 0xfc, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 24.156005687s ago: executing program 3 (id=1208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x27, 0x0, &(0x7f0000000100)="02c0bac63597cf8109adae8e21a6f8a33a965151944bbf925370ee84c118d1a1ec7df7241c83c8", 0x0, 0x2, 0x0, 0x1}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x1}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003580)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x4, @loopback, 0x100}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="8ebcaa59876b6fed16f20c8312e7f536bdc4255b0322f2371ffa5921721a5c92244fbac3f28518faed9aa8e719af6b1eac2d151eb41c32ddcaa7438031f38633b913ed476fbcb175915bdd958cc98989f2f459e26881e679d2a75838d0cb845e889a11605d5eea9f90a87d94734483c3d7", 0x71}], 0x1}}], 0x1, 0x900) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}}, 0x0) 24.107139099s ago: executing program 2 (id=1209): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000010) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r1, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 23.99930695s ago: executing program 2 (id=1211): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x4, 0xc95d, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x49, 0x5, 0x85, 0xffffff01, 0x6, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0xfffffffd, 0x3, 0x9, 0x1, 0x1f461e2c, 0x4, 0xa, 0x4, 0x7, 0x2101, 0x7fff, 0x4c74, 0x451, 0x242, 0x3, 0x4ea2, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0xffffffff, 0x6, 0x30000006, 0x0, 0x5, 0x200, 0x8, 0x0, 0x80, 0x0, 0x9, 0x6, 0x8, 0x20000004, 0x1, 0x9], [0x1000, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff0, 0x129432e6, 0xcb, 0xf9, 0xd, 0x10, 0x6c9, 0x6, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0xff, 0x9, 0x400, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x5f31, 0x8, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x800, 0x6, 0x7, 0x1, 0x1, 0xc, 0xff7f, 0xa, 0x7f, 0x4, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x9, 0x9, 0x48c93690, 0x42, 0xffffff0a], [0x3fc, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x8, 0x5, 0x1, 0x1ef, 0x5, 0x1, 0x87, 0x3, 0xf0000000, 0x3e7, 0x9, 0x5, 0x80002, 0x8, 0x7fffffff, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x4000007, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7fd, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x6, 0x6, 0x120000, 0x3, 0x5, 0x800aaed, 0x8, 0x65], [0x9, 0xbbb1, 0x3, 0xb, 0x5, 0x938, 0xb, 0x6, 0xa, 0x5, 0xce7, 0x1ff, 0x2, 0xfff, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x5, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0xc, 0xe, 0x6, 0x2, 0x80000000, 0x8, 0x8, 0xc8, 0x1a, 0x4, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0xfffffffe, 0x10080, 0x5, 0x6, 0xedf6, 0xfffffff7, 0x335e0ac3, 0x0, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0x40000fff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) 23.070002139s ago: executing program 2 (id=1213): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x4e23, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 22.961835835s ago: executing program 2 (id=1214): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x804) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x10000000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x3) close(r1) 22.670206198s ago: executing program 2 (id=1216): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x6, 0x32, 0x0, 0xe}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 22.115688626s ago: executing program 4 (id=1218): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)}], 0x1}}], 0x1, 0x0) 21.885986847s ago: executing program 4 (id=1220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x2, 0x9}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 21.682615827s ago: executing program 2 (id=1221): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r1 = gettid() r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000010) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r1, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 21.633177464s ago: executing program 4 (id=1222): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300)={0xa}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x10000000000000, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 21.514007554s ago: executing program 4 (id=1223): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'ovf\x00', 0x1, 0x10, 0x4}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 21.464655182s ago: executing program 4 (id=1224): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000010000000000000000000000180100002020702500000000002020207baaf8ff00000000bd4106000000000047010000f8ffffffb702000008000000b7030000000000008500002dd10000001801000020786c250000000000202020db1af8ffa1000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000500)={&(0x7f0000000300), 0xc, &(0x7f0000000440)={&(0x7f0000000600)={0x50, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x70}, @IPSET_ATTR_IFACE={0x14, 0x17, 'sit0\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8040) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd22, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, 0x11413, 0x1922b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 17.058437288s ago: executing program 1 (id=1240): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x40040) 16.949814969s ago: executing program 1 (id=1241): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018030000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 16.115684405s ago: executing program 1 (id=1242): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x7ca8e000) writev(r1, &(0x7f0000000080)=[{0x0}], 0x1) 15.848993654s ago: executing program 1 (id=1243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x2, 0x9}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 15.60990907s ago: executing program 1 (id=1244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010100000000000000000a0000040900020073797a310800000008000a40fffffffc0900010073797a3100000000080005400000000b14"], 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 15.474939798s ago: executing program 1 (id=1245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000000), 0x0) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f00000000c0)="2a59a56df8682897c48637b0b62eaad6660a88b37e38c848a0a8473082df87f577e5103ff4333fa640de294a1f5319141fdb937f51370a", 0x37) socket$isdn_base(0x22, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001140), r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001400), 0x200f42, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001240)={'ip6gre0\x00', &(0x7f00000011c0)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x48, 0x100, 0x2b, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x700, 0x7, 0xd, 0x2}}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000001280)=r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x11, 0xb, &(0x7f0000001300)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}], &(0x7f0000001380)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x12, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000012c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001440)=[{0x4, 0x3, 0x0, 0x3}], 0x10, 0xffff}, 0x94) syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001600)={'wpan0\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0x0, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffffffff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfe}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0xfffffffffffffffc, 0x4000910) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2c, 0x803, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="4d7e2abd7000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r10, @ANYBLOB="0600060002"], 0x50}, 0x4, 0x700000000000000}, 0x0) 12.02645634s ago: executing program 32 (id=1183): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xc0b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@local, @in6=@empty}, {@in6=@mcast1, 0x0, 0x2b}, @in=@local, {0x20000000000}, {}, {0x10, 0xd29}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x11, r3, 0x5a718000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES8=r1], 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0x814) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r10, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ffb}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 9.032118294s ago: executing program 33 (id=1208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x27, 0x0, &(0x7f0000000100)="02c0bac63597cf8109adae8e21a6f8a33a965151944bbf925370ee84c118d1a1ec7df7241c83c8", 0x0, 0x2, 0x0, 0x1}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x1}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003580)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x4, @loopback, 0x100}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="8ebcaa59876b6fed16f20c8312e7f536bdc4255b0322f2371ffa5921721a5c92244fbac3f28518faed9aa8e719af6b1eac2d151eb41c32ddcaa7438031f38633b913ed476fbcb175915bdd958cc98989f2f459e26881e679d2a75838d0cb845e889a11605d5eea9f90a87d94734483c3d7", 0x71}], 0x1}}], 0x1, 0x900) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}}, 0x0) 6.510983563s ago: executing program 34 (id=1221): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r1 = gettid() r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000010) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r1, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 5.989122701s ago: executing program 35 (id=1224): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000010000000000000000000000180100002020702500000000002020207baaf8ff00000000bd4106000000000047010000f8ffffffb702000008000000b7030000000000008500002dd10000001801000020786c250000000000202020db1af8ffa1000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000500)={&(0x7f0000000300), 0xc, &(0x7f0000000440)={&(0x7f0000000600)={0x50, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x70}, @IPSET_ATTR_IFACE={0x14, 0x17, 'sit0\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8040) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd22, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, 0x11413, 0x1922b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 0s ago: executing program 36 (id=1245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000000), 0x0) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f00000000c0)="2a59a56df8682897c48637b0b62eaad6660a88b37e38c848a0a8473082df87f577e5103ff4333fa640de294a1f5319141fdb937f51370a", 0x37) socket$isdn_base(0x22, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001140), r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001400), 0x200f42, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001240)={'ip6gre0\x00', &(0x7f00000011c0)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x48, 0x100, 0x2b, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x700, 0x7, 0xd, 0x2}}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000001280)=r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x11, 0xb, &(0x7f0000001300)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}], &(0x7f0000001380)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x12, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000012c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001440)=[{0x4, 0x3, 0x0, 0x3}], 0x10, 0xffff}, 0x94) syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001600)={'wpan0\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0x0, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffffffff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfe}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0xfffffffffffffffc, 0x4000910) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2c, 0x803, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="4d7e2abd7000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r10, @ANYBLOB="0600060002"], 0x50}, 0x4, 0x700000000000000}, 0x0) kernel console output (not intermixed with test programs): yz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e10e6eec9 code=0x7ffc0000 [ 108.118026][ T6223] netlink: 'syz.4.91': attribute type 10 has an invalid length. [ 108.360935][ T6220] bridge_slave_0: left allmulticast mode [ 108.360967][ T6220] bridge_slave_0: left promiscuous mode [ 108.363557][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.380285][ T6228] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 108.453726][ T6220] bridge_slave_1: left allmulticast mode [ 108.453756][ T6220] bridge_slave_1: left promiscuous mode [ 108.454012][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.584366][ T6220] bond0: (slave bond_slave_0): Releasing backup interface [ 108.690756][ T6220] bond0: (slave bond_slave_1): Releasing backup interface [ 108.822735][ T6220] team0: Port device team_slave_0 removed [ 108.881225][ T6220] team0: Port device team_slave_1 removed [ 108.882236][ T6220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.882264][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.951110][ T6220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.951141][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.025686][ T6223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.027661][ T6223] team0: Port device bond0 added [ 110.785077][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.432122][ T6294] syzkaller0: entered promiscuous mode [ 111.432157][ T6294] syzkaller0: entered allmulticast mode [ 114.442939][ T6375] netlink: 28 bytes leftover after parsing attributes in process `syz.4.142'. [ 114.816004][ T5932] IPVS: starting estimator thread 0... [ 114.903379][ T6388] IPVS: using max 7 ests per chain, 16800 per kthread [ 115.817439][ T6419] netlink: 40 bytes leftover after parsing attributes in process `syz.2.162'. [ 117.253641][ T5932] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.410179][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 117.412598][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 117.412627][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 117.416115][ T5932] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 117.416140][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.416159][ T5932] usb 2-1: Product: syz [ 117.416172][ T5932] usb 2-1: Manufacturer: syz [ 117.416186][ T5932] usb 2-1: SerialNumber: syz [ 117.436050][ T6454] netlink: 40 bytes leftover after parsing attributes in process `syz.4.173'. [ 118.350123][ T5932] usb 2-1: config 0 descriptor?? [ 118.391561][ T5932] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 118.391594][ T5932] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 118.983217][ T5932] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 118.984042][ T5932] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 119.396010][ T6483] binder: 6482:6483 ioctl c0306201 0 returned -14 [ 119.591478][ T5932] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 119.594026][ T5932] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 119.594422][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 119.594591][ T5932] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 119.595929][ T5932] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 119.596355][ T5932] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 119.596770][ T5932] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 119.682204][ T5932] usb 2-1: USB disconnect, device number 5 [ 120.921440][ T6506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 120.968985][ T6509] capability: warning: `syz.2.193' uses deprecated v2 capabilities in a way that may be insecure [ 120.991763][ T6510] 9pnet_fd: Insufficient options for proto=fd [ 120.993529][ T6510] overlayfs: overlapping lowerdir path [ 121.490294][ T56] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.640174][ T56] usb 1-1: Using ep0 maxpacket: 16 [ 121.642702][ T56] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.642756][ T56] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.642783][ T56] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.642804][ T56] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 121.644387][ T56] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.644414][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 121.644433][ T56] usb 1-1: SerialNumber: syz [ 121.673757][ T56] hub 1-1:1.0: bad descriptor, ignoring hub [ 121.673792][ T56] hub 1-1:1.0: probe with driver hub failed with error -5 [ 121.678661][ T56] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 121.982744][ T5932] usb 1-1: USB disconnect, device number 4 [ 122.022468][ T6540] netlink: 'syz.2.206': attribute type 1 has an invalid length. [ 122.231992][ T6547] netlink: 56 bytes leftover after parsing attributes in process `syz.2.209'. [ 122.232037][ T6547] netlink: 56 bytes leftover after parsing attributes in process `syz.2.209'. [ 123.097430][ T6576] netlink: 'syz.2.221': attribute type 1 has an invalid length. [ 123.097451][ T6576] netlink: 'syz.2.221': attribute type 2 has an invalid length. [ 123.149866][ T6577] netlink: 'syz.2.221': attribute type 1 has an invalid length. [ 123.152184][ T6577] netlink: 'syz.2.221': attribute type 2 has an invalid length. [ 123.220665][ T6571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.963486][ T56] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.120120][ T56] usb 4-1: Using ep0 maxpacket: 16 [ 124.122516][ T56] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.122569][ T56] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.122594][ T56] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 124.122616][ T56] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 124.127587][ T56] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.127612][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 124.127630][ T56] usb 4-1: SerialNumber: syz [ 124.193350][ T56] hub 4-1:1.0: bad descriptor, ignoring hub [ 124.193395][ T56] hub 4-1:1.0: probe with driver hub failed with error -5 [ 124.195214][ T56] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 124.500364][ T5925] usb 4-1: USB disconnect, device number 4 [ 124.881421][ T6618] netlink: 388 bytes leftover after parsing attributes in process `syz.1.237'. [ 124.881455][ T6618] netlink: 44 bytes leftover after parsing attributes in process `syz.1.237'. [ 125.371180][ T6632] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.809317][ T6643] netlink: 388 bytes leftover after parsing attributes in process `syz.3.248'. [ 125.809344][ T6643] netlink: 44 bytes leftover after parsing attributes in process `syz.3.248'. [ 126.052304][ T6649] netlink: 92 bytes leftover after parsing attributes in process `syz.3.251'. [ 126.360085][ T56] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 126.464869][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.256'. [ 126.520129][ T56] usb 3-1: Using ep0 maxpacket: 16 [ 126.524177][ T56] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.524231][ T56] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.524257][ T56] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 126.524279][ T56] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 126.526704][ T56] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.526730][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 126.526749][ T56] usb 3-1: SerialNumber: syz [ 126.619740][ T56] hub 3-1:1.0: bad descriptor, ignoring hub [ 126.627603][ T56] hub 3-1:1.0: probe with driver hub failed with error -5 [ 126.637459][ T56] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 126.835486][ T6667] tipc: Enabling of bearer rejected, failed to enable media [ 126.941074][ T56] usb 3-1: USB disconnect, device number 3 [ 127.080900][ T6673] netlink: 388 bytes leftover after parsing attributes in process `syz.0.261'. [ 127.080925][ T6673] netlink: 44 bytes leftover after parsing attributes in process `syz.0.261'. [ 127.332606][ T6680] batadv_slave_1: entered promiscuous mode [ 127.363384][ T6680] batman_adv: batadv0: Adding interface: macsec1 [ 127.363406][ T6680] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.369790][ T6680] batman_adv: batadv0: Interface activated: macsec1 [ 127.784638][ T6697] 9pnet_fd: Insufficient options for proto=fd [ 127.808641][ T6698] netlink: 388 bytes leftover after parsing attributes in process `syz.4.273'. [ 127.808665][ T6698] netlink: 44 bytes leftover after parsing attributes in process `syz.4.273'. [ 127.972627][ T5925] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 127.972663][ T5925] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 127.996558][ T5925] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 128.021166][ T5932] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 128.177295][ T5932] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.198532][ T5932] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.198564][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.198583][ T5932] usb 2-1: Product: syz [ 128.198597][ T5932] usb 2-1: Manufacturer: syz [ 128.198611][ T5932] usb 2-1: SerialNumber: syz [ 128.201500][ T6708] netlink: 'syz.0.276': attribute type 4 has an invalid length. [ 128.201518][ T6708] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.276'. [ 128.509856][ T6704] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.993523][ T6704] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.292537][ T56] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.326734][ T5932] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 129.326774][ T5932] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 129.326792][ T5932] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 129.343101][ T6704] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.423248][ T6721] syzkaller0: entered promiscuous mode [ 129.423265][ T6721] syzkaller0: entered allmulticast mode [ 129.450347][ T56] usb 1-1: Using ep0 maxpacket: 16 [ 129.457408][ T56] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.457463][ T56] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.457489][ T56] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.457510][ T56] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 129.459161][ T56] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.459185][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 129.459203][ T56] usb 1-1: SerialNumber: syz [ 129.482062][ T6727] overlayfs: failed to resolve './file0': -2 [ 129.529650][ T5932] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 129.569385][ T56] hub 1-1:1.0: bad descriptor, ignoring hub [ 129.569423][ T56] hub 1-1:1.0: probe with driver hub failed with error -5 [ 129.584312][ T56] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 129.845036][ T5932] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 129.861217][ T5932] usb 2-1: USB disconnect, device number 6 [ 129.863602][ T5932] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 129.953553][ T9] usb 1-1: USB disconnect, device number 5 [ 130.089144][ T6704] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.107489][ T6740] netlink: 32 bytes leftover after parsing attributes in process `syz.4.284'. [ 130.108136][ T6740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.284'. [ 130.116333][ T6739] 9pnet_fd: Insufficient options for proto=fd [ 130.244996][ T6742] netlink: 56 bytes leftover after parsing attributes in process `syz.1.286'. [ 130.364284][ T6742] netlink: 56 bytes leftover after parsing attributes in process `syz.1.286'. [ 130.489720][ T6750] tipc: Started in network mode [ 130.489744][ T6750] tipc: Node identity 2a473b0bbe3c, cluster identity 4711 [ 130.492384][ T6750] tipc: Enabled bearer , priority 0 [ 130.511681][ T6750] syzkaller0: entered promiscuous mode [ 130.511706][ T6750] syzkaller0: entered allmulticast mode [ 130.775050][ T6753] overlayfs: failed to resolve './file0': -2 [ 130.923026][ T6750] tipc: Resetting bearer [ 131.491744][ T5925] tipc: Node number set to 2491104011 [ 131.570174][ T6758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.649629][ T6745] tipc: Resetting bearer [ 131.660180][ T56] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.777253][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 131.820194][ T56] usb 2-1: Using ep0 maxpacket: 16 [ 131.822814][ T56] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 131.822844][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 131.827598][ T56] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 131.827622][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.827641][ T56] usb 2-1: Product: syz [ 131.827654][ T56] usb 2-1: Manufacturer: syz [ 131.827668][ T56] usb 2-1: SerialNumber: syz [ 131.851601][ T6745] tipc: Disabling bearer [ 131.898307][ T56] usb 2-1: config 0 descriptor?? [ 131.925922][ T56] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 131.925954][ T56] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 131.947247][ T6771] 9pnet_fd: Insufficient options for proto=fd [ 132.066908][ T6760] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.293'. [ 132.069211][ T1400] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.163197][ T162] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.235443][ T1400] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.319630][ T162] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.542331][ T56] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 132.543005][ T56] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 132.620052][ T5925] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 132.643036][ T6784] overlayfs: failed to resolve './file0': -2 [ 132.770297][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 132.793319][ T5925] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.793343][ T5925] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 132.837640][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.837804][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.079905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.139923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.319907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.416636][ T5925] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 133.416900][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.416921][ T5925] usb 5-1: Product: syz [ 133.416936][ T5925] usb 5-1: Manufacturer: syz [ 133.416948][ T5925] usb 5-1: SerialNumber: syz [ 133.552666][ T5925] usb 5-1: config 0 descriptor?? [ 133.782644][ T56] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 133.788001][ T56] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 133.789616][ T56] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 133.820157][ T56] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 133.820605][ T56] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 133.821117][ T56] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 133.858064][ T56] usb 2-1: USB disconnect, device number 7 [ 134.165186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 134.167480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 134.169754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 134.230698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.230914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.450551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 134.452374][ T56] usb 5-1: USB disconnect, device number 3 [ 134.643869][ T6803] 9pnet_fd: Insufficient options for proto=fd [ 135.566675][ T6830] binder: BINDER_SET_CONTEXT_MGR already set [ 135.566689][ T6830] binder: 6828:6830 ioctl 4018620d 2000000001c0 returned -16 [ 135.810110][ T5932] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 135.960115][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 135.965741][ T5932] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 135.965775][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.994872][ T5932] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 135.994900][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.994918][ T5932] usb 4-1: Product: syz [ 135.994932][ T5932] usb 4-1: Manufacturer: syz [ 135.994945][ T5932] usb 4-1: SerialNumber: syz [ 136.033428][ T5932] usb 4-1: config 0 descriptor?? [ 136.062713][ T5932] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 136.062744][ T5932] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 136.225931][ T6847] overlayfs: overlapping lowerdir path [ 136.260272][ T989] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 136.423931][ T989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.424347][ T989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.424388][ T989] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 136.424411][ T989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.533313][ T989] usb 2-1: config 0 descriptor?? [ 136.711400][ T5932] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 136.712838][ T5932] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 136.744056][ T6841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.754542][ T6841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.772150][ T989] usbhid 2-1:0.0: can't add hid device: -71 [ 136.772322][ T989] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 136.846023][ T989] usb 2-1: USB disconnect, device number 8 [ 137.560113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.076253][ T6874] overlayfs: overlapping lowerdir path [ 138.275197][ T5932] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 138.276594][ T5932] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 138.277020][ T5932] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 138.277445][ T5932] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 138.277862][ T5932] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 138.278328][ T5932] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 138.293418][ T5932] usb 4-1: USB disconnect, device number 5 [ 138.910038][ T56] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 139.059986][ T56] usb 5-1: Using ep0 maxpacket: 16 [ 139.067820][ T56] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.067900][ T56] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.077624][ T6903] bridge0: entered promiscuous mode [ 139.080989][ T6901] bridge0: left promiscuous mode [ 139.090226][ T56] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.090252][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.090271][ T56] usb 5-1: Product: syz [ 139.090290][ T56] usb 5-1: Manufacturer: syz [ 139.090303][ T56] usb 5-1: SerialNumber: syz [ 139.596226][ T6906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.354'. [ 139.631613][ T56] usb 5-1: USB disconnect, device number 4 [ 139.785586][ T6906] batadv0: entered promiscuous mode [ 139.808955][ T6906] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 139.813465][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.835467][ T6906] batadv0: left promiscuous mode [ 140.721692][ T6942] trusted_key: syz.1.363 sent an empty control message without MSG_MORE. [ 140.960105][ T6947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.048275][ T6949] syz.1.365 uses obsolete (PF_INET,SOCK_PACKET) [ 141.499994][ T5932] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 141.651355][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 141.654083][ T5932] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.654166][ T5932] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 141.657157][ T5932] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.657183][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.657204][ T5932] usb 1-1: Product: syz [ 141.657219][ T5932] usb 1-1: Manufacturer: syz [ 141.657232][ T5932] usb 1-1: SerialNumber: syz [ 142.091478][ T6972] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 142.181768][ T5932] usb 1-1: USB disconnect, device number 6 [ 142.363426][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.675418][ T6982] warning: `syz.0.377' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 143.063085][ T5932] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 143.221286][ T5932] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.241801][ T5932] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.241828][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.241847][ T5932] usb 2-1: Product: syz [ 143.241860][ T5932] usb 2-1: Manufacturer: syz [ 143.241874][ T5932] usb 2-1: SerialNumber: syz [ 143.660642][ T7002] bridge_slave_0: left allmulticast mode [ 143.660678][ T7002] bridge_slave_0: left promiscuous mode [ 143.660898][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.707580][ T7001] netlink: 'syz.0.385': attribute type 10 has an invalid length. [ 143.770077][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 143.773498][ T7002] bridge_slave_1: left allmulticast mode [ 143.773524][ T7002] bridge_slave_1: left promiscuous mode [ 143.773750][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.920095][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 143.926589][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.927283][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.941367][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.941392][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.942304][ T9] usb 5-1: Product: syz [ 143.942319][ T9] usb 5-1: Manufacturer: syz [ 143.942332][ T9] usb 5-1: SerialNumber: syz [ 143.992556][ T7002] bond0: (slave bond_slave_0): Releasing backup interface [ 144.111618][ T7002] bond0: (slave bond_slave_1): Releasing backup interface [ 144.256496][ T7002] team0: Port device team_slave_0 removed [ 144.309485][ T7002] team0: Port device team_slave_1 removed [ 144.317354][ T7002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.317381][ T7002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.364622][ T5932] cdc_ncm 2-1:1.0: failed to get mac address [ 144.370272][ T5932] cdc_ncm 2-1:1.0: bind() failure [ 144.418013][ T7002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.418044][ T7002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.437482][ T5932] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 144.445378][ T5932] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 144.451392][ T5932] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 144.513309][ T5932] usb 2-1: USB disconnect, device number 9 [ 144.543787][ T7005] lo: Caught tx_queue_len zero misconfig [ 144.615686][ T9] usb 5-1: USB disconnect, device number 5 [ 144.719519][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.893235][ T7001] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 144.909479][ T7009] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 144.909521][ T7009] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 144.909540][ T7009] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 144.998776][ T7015] tipc: Started in network mode [ 144.998805][ T7015] tipc: Node identity 465bf39e18c6, cluster identity 4711 [ 144.998998][ T7015] tipc: Enabled bearer , priority 0 [ 145.028468][ T7017] syzkaller0: entered promiscuous mode [ 145.028496][ T7017] syzkaller0: entered allmulticast mode [ 145.046097][ T7023] tipc: Resetting bearer [ 145.128714][ T7012] tipc: Resetting bearer [ 145.242946][ T7012] tipc: Disabling bearer [ 145.437407][ T7040] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.393'. [ 146.288750][ T7071] netlink: 'syz.4.404': attribute type 21 has an invalid length. [ 146.288770][ T7071] netlink: 128 bytes leftover after parsing attributes in process `syz.4.404'. [ 146.288867][ T7071] netlink: 'syz.4.404': attribute type 5 has an invalid length. [ 146.288880][ T7071] netlink: 'syz.4.404': attribute type 6 has an invalid length. [ 146.288892][ T7071] netlink: 3 bytes leftover after parsing attributes in process `syz.4.404'. [ 146.390246][ T5918] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 146.500347][ T5932] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 146.540017][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 146.545941][ T5918] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.546022][ T5918] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 146.557718][ T5918] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.557745][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.557763][ T5918] usb 1-1: Product: syz [ 146.557777][ T5918] usb 1-1: Manufacturer: syz [ 146.557791][ T5918] usb 1-1: SerialNumber: syz [ 146.659801][ T5932] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.663463][ T5932] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.663488][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.663507][ T5932] usb 2-1: Product: syz [ 146.663520][ T5932] usb 2-1: Manufacturer: syz [ 146.663534][ T5932] usb 2-1: SerialNumber: syz [ 146.930657][ T7086] lo: Caught tx_queue_len zero misconfig [ 146.960506][ T989] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 147.020534][ T5918] usb 1-1: USB disconnect, device number 7 [ 147.121981][ T989] usb 4-1: Using ep0 maxpacket: 8 [ 147.127644][ T989] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.127668][ T989] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 147.162080][ T989] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 147.162358][ T989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.162380][ T989] usb 4-1: Product: syz [ 147.162395][ T989] usb 4-1: Manufacturer: syz [ 147.162409][ T989] usb 4-1: SerialNumber: syz [ 147.192848][ T989] usb 4-1: config 0 descriptor?? [ 147.221808][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.882002][ T5932] cdc_ncm 2-1:1.0: failed to get mac address [ 147.883363][ T5932] cdc_ncm 2-1:1.0: bind() failure [ 147.923153][ T5932] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 147.926629][ T5932] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 147.952329][ T5932] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 148.018415][ T9] usb 4-1: USB disconnect, device number 6 [ 148.020730][ T5932] usb 2-1: USB disconnect, device number 10 [ 148.447384][ T7101] binder: 7100:7101 ioctl c0306201 0 returned -14 [ 148.605449][ T7108] tipc: Enabled bearer , priority 0 [ 148.606400][ T7108] syzkaller0: entered promiscuous mode [ 148.606425][ T7108] syzkaller0: entered allmulticast mode [ 148.634088][ T7108] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 148.931424][ T7115] tipc: Resetting bearer [ 150.232142][ T7115] tipc: Disabling bearer [ 150.389987][ T5918] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 150.502358][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.428'. [ 150.549973][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 150.552364][ T5918] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.552449][ T5918] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 150.565807][ T5918] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.565832][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.565851][ T5918] usb 5-1: Product: syz [ 150.565865][ T5918] usb 5-1: Manufacturer: syz [ 150.565878][ T5918] usb 5-1: SerialNumber: syz [ 150.920075][ T5932] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 150.965018][ T5918] usb 5-1: USB disconnect, device number 6 [ 151.070068][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 151.072478][ T5932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.072501][ T5932] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 151.077462][ T5932] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 151.077487][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.077505][ T5932] usb 3-1: Product: syz [ 151.077518][ T5932] usb 3-1: Manufacturer: syz [ 151.077532][ T5932] usb 3-1: SerialNumber: syz [ 151.098095][ T7141] netlink: 'syz.3.429': attribute type 10 has an invalid length. [ 151.100289][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.106112][ T7141] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 151.119171][ T5932] usb 3-1: config 0 descriptor?? [ 151.319181][ T7141] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 151.957017][ T5918] usb 3-1: USB disconnect, device number 4 [ 152.016685][ T7156] binder: 7155:7156 ioctl c0306201 0 returned -14 [ 152.258757][ T7163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.437'. [ 153.230068][ T989] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 153.380019][ T989] usb 1-1: Using ep0 maxpacket: 16 [ 153.382316][ T989] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.382401][ T989] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.385472][ T989] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.385498][ T989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.385516][ T989] usb 1-1: Product: syz [ 153.385530][ T989] usb 1-1: Manufacturer: syz [ 153.385543][ T989] usb 1-1: SerialNumber: syz [ 153.840328][ T989] usb 1-1: USB disconnect, device number 8 [ 153.898933][ T7200] Driver unsupported XDP return value 0 on prog (id 37) dev N/A, expect packet loss! [ 154.040991][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.124730][ T7204] binder: 7203:7204 ioctl c0306201 0 returned -14 [ 155.862335][ T989] IPVS: starting estimator thread 0... [ 155.950241][ T7241] IPVS: using max 7 ests per chain, 16800 per kthread [ 156.721628][ T56] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 156.882697][ T56] usb 3-1: Using ep0 maxpacket: 16 [ 156.887939][ T56] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.888019][ T56] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 156.896946][ T56] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.896973][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.896992][ T56] usb 3-1: Product: syz [ 156.897006][ T56] usb 3-1: Manufacturer: syz [ 156.897019][ T56] usb 3-1: SerialNumber: syz [ 157.282731][ T56] usb 3-1: USB disconnect, device number 5 [ 157.417897][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.816398][ T7284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.474'. [ 158.041945][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 158.424965][ T7307] fuse: Bad value for 'fd' [ 159.490011][ T5933] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 159.640094][ T5933] usb 1-1: Using ep0 maxpacket: 16 [ 159.645821][ T5933] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.645899][ T5933] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.649190][ T5933] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.649215][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.649233][ T5933] usb 1-1: Product: syz [ 159.649246][ T5933] usb 1-1: Manufacturer: syz [ 159.649259][ T5933] usb 1-1: SerialNumber: syz [ 160.120878][ T5933] usb 1-1: USB disconnect, device number 9 [ 160.231775][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.573864][ T7361] dvmrp8: entered allmulticast mode [ 160.607305][ T7361] dvmrp8: left allmulticast mode [ 160.651941][ T7365] block nbd0: shutting down sockets [ 160.679330][ T7366] netlink: 168 bytes leftover after parsing attributes in process `syz.1.493'. [ 161.680855][ T7394] binder: BINDER_SET_CONTEXT_MGR already set [ 161.680869][ T7394] binder: 7392:7394 ioctl 4018620d 2000000001c0 returned -16 [ 162.375590][ T7410] overlayfs: overlapping lowerdir path [ 162.480075][ T5933] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 162.642426][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.642458][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.642495][ T5933] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 162.642516][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.719373][ T5933] usb 5-1: config 0 descriptor?? [ 162.722524][ T7420] !: renamed from dummy0 (while UP) [ 162.815652][ T7423] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 162.828370][ T7423] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 162.936688][ T7403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.937221][ T7403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.958139][ T5933] usbhid 5-1:0.0: can't add hid device: -71 [ 162.958266][ T5933] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 162.978038][ T5933] usb 5-1: USB disconnect, device number 7 [ 163.187685][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.513'. [ 163.450140][ T7438] tipc: Enabled bearer , priority 0 [ 163.450883][ T7438] syzkaller0: entered promiscuous mode [ 163.450908][ T7438] syzkaller0: entered allmulticast mode [ 163.489058][ T7438] tipc: Resetting bearer [ 163.523314][ T7437] tipc: Resetting bearer [ 163.600253][ T5845] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 163.740197][ T5845] usb 1-1: device descriptor read/64, error -71 [ 163.770618][ T7437] tipc: Disabling bearer [ 164.000204][ T5845] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 164.130158][ T5845] usb 1-1: device descriptor read/64, error -71 [ 164.242729][ T5845] usb usb1-port1: attempt power cycle [ 164.600208][ T5845] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 164.620878][ T5845] usb 1-1: device descriptor read/8, error -71 [ 164.860050][ T5845] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 164.881520][ T5845] usb 1-1: device descriptor read/8, error -71 [ 164.990557][ T5845] usb usb1-port1: unable to enumerate USB device [ 165.604416][ T7497] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 165.622731][ T7497] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 166.860095][ T7528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.537'. [ 166.864217][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 167.659328][ T7551] overlayfs: overlapping lowerdir path [ 168.365790][ T7565] syz.2.546 (7565) used greatest stack depth: 16696 bytes left [ 168.551574][ T7572] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 168.553903][ T7572] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 168.990198][ T5925] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 169.140030][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 169.142948][ T5925] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.143029][ T5925] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 169.146170][ T5925] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 169.146195][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.146213][ T5925] usb 3-1: Product: syz [ 169.146227][ T5925] usb 3-1: Manufacturer: syz [ 169.146241][ T5925] usb 3-1: SerialNumber: syz [ 169.512500][ T5925] usb 3-1: USB disconnect, device number 6 [ 169.674695][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.676587][ T7586] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.811139][ T7586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.954842][ T7586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.626141][ T7627] overlayfs: missing 'lowerdir' [ 172.491432][ T1290] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.590486][ T7636] tipc: Enabled bearer , priority 0 [ 172.591530][ T7639] syzkaller0: entered promiscuous mode [ 172.591554][ T7639] syzkaller0: entered allmulticast mode [ 172.595418][ T1290] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.595460][ T1290] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.595494][ T1290] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.748555][ T7631] tipc: Resetting bearer [ 172.802024][ T7656] overlayfs: overlapping lowerdir path [ 172.944538][ T7631] tipc: Disabling bearer [ 173.376379][ T7664] netlink: 40 bytes leftover after parsing attributes in process `syz.3.572'. [ 173.379736][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.572'. [ 173.462790][ T7668] overlayfs: missing 'lowerdir' [ 173.890027][ T7677] dvmrp8: entered allmulticast mode [ 173.894561][ T7677] dvmrp8: left allmulticast mode [ 174.001839][ T7682] netlink: 168 bytes leftover after parsing attributes in process `syz.1.579'. [ 174.430384][ T7688] tipc: Enabled bearer , priority 0 [ 174.460591][ T7688] syzkaller0: entered promiscuous mode [ 174.460617][ T7688] syzkaller0: entered allmulticast mode [ 174.685508][ T7694] netlink: 28 bytes leftover after parsing attributes in process `syz.3.586'. [ 174.685531][ T7694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.586'. [ 174.796642][ T7687] tipc: Resetting bearer [ 175.136600][ T7687] tipc: Disabling bearer [ 175.207519][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 175.207535][ T37] audit: type=1326 audit(1758773227.902:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7699 comm="syz.1.589" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10d7cfeec9 code=0x0 [ 175.793109][ T5857] Bluetooth: hci4: command 0x0405 tx timeout [ 176.144224][ T7705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.653193][ T7713] dvmrp8: entered allmulticast mode [ 176.673065][ T7713] dvmrp8: left allmulticast mode [ 176.738542][ T7714] netlink: 168 bytes leftover after parsing attributes in process `syz.1.594'. [ 178.355946][ T7598] Set syz1 is full, maxelem 65536 reached [ 178.655876][ T37] audit: type=1326 audit(1758773231.352:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7745 comm="syz.4.602" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e10e6eec9 code=0x0 [ 178.656278][ T7736] netlink: 'syz.2.600': attribute type 15 has an invalid length. [ 179.626574][ T7760] dvmrp8: entered allmulticast mode [ 179.732181][ T7763] dvmrp8: left allmulticast mode [ 179.747159][ T7760] netlink: 168 bytes leftover after parsing attributes in process `syz.3.607'. [ 180.299190][ T5845] IPVS: starting estimator thread 0... [ 180.412088][ T7777] IPVS: using max 6 ests per chain, 14400 per kthread [ 180.751382][ T7788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.815643][ T7792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 180.823954][ T37] audit: type=1326 audit(1758773233.512:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7790 comm="syz.4.618" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e10e6eec9 code=0x0 [ 181.053545][ T7801] netlink: 168 bytes leftover after parsing attributes in process `syz.3.621'. [ 181.604325][ T7818] netlink: 'syz.2.630': attribute type 1 has an invalid length. [ 181.819521][ T7818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.630'. [ 182.157270][ T7823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.168203][ T7823] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.232493][ T7823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.255808][ T7826] bond1: (slave geneve2): making interface the new active one [ 182.257564][ T7826] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 182.266748][ T7818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.269247][ T1400] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 182.273693][ T1116] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 182.277348][ T1400] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 182.279793][ T1400] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 182.766992][ T37] audit: type=1326 audit(1758773235.462:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7853 comm="syz.2.644" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f056047eec9 code=0x0 [ 183.260061][ T5845] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 183.388776][ T7873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.652'. [ 183.425680][ T5845] usb 5-1: Using ep0 maxpacket: 16 [ 183.428067][ T5845] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.428144][ T5845] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 183.494249][ T5845] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.494275][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.494294][ T5845] usb 5-1: Product: syz [ 183.494308][ T5845] usb 5-1: Manufacturer: syz [ 183.494321][ T5845] usb 5-1: SerialNumber: syz [ 183.836701][ T5845] usb 5-1: USB disconnect, device number 8 [ 184.103507][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.787132][ T37] audit: type=1326 audit(1758773237.482:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7904 comm="syz.4.664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e10e6eec9 code=0x0 [ 185.370719][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 185.530066][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 185.532478][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.532560][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 185.537309][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.537336][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.537355][ T9] usb 1-1: Product: syz [ 185.537370][ T9] usb 1-1: Manufacturer: syz [ 185.537384][ T9] usb 1-1: SerialNumber: syz [ 185.843275][ T7918] netlink: 52 bytes leftover after parsing attributes in process `syz.0.668'. [ 186.000504][ T7938] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 186.036937][ T9] usb 1-1: USB disconnect, device number 14 [ 186.129214][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.893163][ T7961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.687'. [ 187.005352][ T7962] netlink: 32 bytes leftover after parsing attributes in process `syz.4.689'. [ 187.125159][ T7967] netlink: 32 bytes leftover after parsing attributes in process `syz.4.689'. [ 187.274890][ T7977] netlink: 'syz.0.694': attribute type 5 has an invalid length. [ 187.274908][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.694'. [ 187.490007][ T5932] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 187.640090][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 187.643086][ T5932] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.643172][ T5932] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 187.646312][ T5932] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 187.646339][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.646358][ T5932] usb 4-1: Product: syz [ 187.646372][ T5932] usb 4-1: Manufacturer: syz [ 187.646386][ T5932] usb 4-1: SerialNumber: syz [ 187.946390][ T7976] netlink: 52 bytes leftover after parsing attributes in process `syz.3.693'. [ 188.096247][ T5932] usb 4-1: USB disconnect, device number 7 [ 188.306306][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.510415][ T8004] netlink: 'syz.1.706': attribute type 5 has an invalid length. [ 188.510433][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 188.792386][ T8010] netlink: 'syz.3.709': attribute type 15 has an invalid length. [ 188.798084][ T8007] tipc: Started in network mode [ 188.798112][ T8007] tipc: Node identity f684a7d1885, cluster identity 4711 [ 188.810345][ T8007] tipc: Enabled bearer , priority 0 [ 188.811495][ T8007] syzkaller0: entered promiscuous mode [ 188.811519][ T8007] syzkaller0: entered allmulticast mode [ 188.971049][ T8007] tipc: Resetting bearer [ 189.065205][ T8005] tipc: Resetting bearer [ 189.250250][ T8005] tipc: Disabling bearer [ 189.922709][ T5933] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 190.079073][ T5933] usb 1-1: Using ep0 maxpacket: 16 [ 190.085200][ T5933] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.085281][ T5933] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 190.092232][ T5933] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.092258][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.092275][ T5933] usb 1-1: Product: syz [ 190.092289][ T5933] usb 1-1: Manufacturer: syz [ 190.092301][ T5933] usb 1-1: SerialNumber: syz [ 190.367241][ T8037] netlink: 52 bytes leftover after parsing attributes in process `syz.0.719'. [ 190.520867][ T5933] usb 1-1: USB disconnect, device number 15 [ 190.626232][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.519021][ T8094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.760458][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 191.950087][ T5933] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 192.101573][ T5933] usb 1-1: Using ep0 maxpacket: 16 [ 192.104271][ T5933] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.104354][ T5933] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 192.107679][ T5933] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.107706][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.107725][ T5933] usb 1-1: Product: syz [ 192.107739][ T5933] usb 1-1: Manufacturer: syz [ 192.107752][ T5933] usb 1-1: SerialNumber: syz [ 192.410947][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.747'. [ 192.548869][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.747'. [ 192.565531][ T8130] netlink: 'syz.3.756': attribute type 15 has an invalid length. [ 192.849230][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.747'. [ 193.055645][ T5933] usb 1-1: USB disconnect, device number 16 [ 193.184457][ T8144] dvmrp8: entered allmulticast mode [ 193.217604][ T8144] dvmrp8: left allmulticast mode [ 193.225136][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.378781][ T8149] netlink: 168 bytes leftover after parsing attributes in process `syz.2.761'. [ 194.215857][ T5918] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 194.251544][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.251617][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.370144][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 194.373222][ T5918] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 194.373255][ T5918] usb 3-1: can't read configurations, error -61 [ 194.415597][ T8183] dvmrp8: entered allmulticast mode [ 194.418508][ T8183] dvmrp8: left allmulticast mode [ 194.450037][ T5932] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 194.509745][ T8186] netlink: 168 bytes leftover after parsing attributes in process `syz.0.777'. [ 194.541984][ T5918] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 194.620064][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 194.624029][ T5932] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.624110][ T5932] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 194.627416][ T5932] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.627440][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.627459][ T5932] usb 2-1: Product: syz [ 194.627473][ T5932] usb 2-1: Manufacturer: syz [ 194.627486][ T5932] usb 2-1: SerialNumber: syz [ 194.710325][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 194.743446][ T5918] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 194.743480][ T5918] usb 3-1: can't read configurations, error -61 [ 194.743834][ T5918] usb usb3-port1: attempt power cycle [ 194.962575][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.775'. [ 195.090104][ T5918] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 195.124867][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 195.144110][ T5918] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 195.144154][ T5918] usb 3-1: can't read configurations, error -61 [ 195.231629][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.775'. [ 195.270226][ T5918] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 195.290846][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 195.295815][ T5918] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 195.295848][ T5918] usb 3-1: can't read configurations, error -61 [ 195.296461][ T5918] usb usb3-port1: unable to enumerate USB device [ 195.593797][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.775'. [ 195.850549][ T5932] usb 2-1: USB disconnect, device number 11 [ 195.981246][ T8217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.017583][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.228731][ T8225] dvmrp8: entered allmulticast mode [ 196.229284][ T8216] syzkaller1: entered promiscuous mode [ 196.229308][ T8216] syzkaller1: entered allmulticast mode [ 196.254794][ T8225] dvmrp8: left allmulticast mode [ 196.337125][ T8226] netlink: 168 bytes leftover after parsing attributes in process `syz.3.790'. [ 197.372329][ T8258] dvmrp8: entered allmulticast mode [ 197.384607][ T8258] dvmrp8: left allmulticast mode [ 197.485658][ T8264] netlink: 168 bytes leftover after parsing attributes in process `syz.0.803'. [ 198.380305][ T8268] macvtap1: entered allmulticast mode [ 198.380329][ T8268] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 198.443985][ T8268] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 198.789268][ T8304] netlink: 'syz.4.817': attribute type 15 has an invalid length. [ 200.512703][ T8348] netlink: 'syz.0.833': attribute type 1 has an invalid length. [ 200.619848][ T8354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.833'. [ 200.693394][ T8353] bond1: (slave geneve2): making interface the new active one [ 200.694892][ T8353] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 200.734825][ T1531] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.734867][ T1531] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.734902][ T1531] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.734935][ T1531] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 201.172685][ T8371] netlink: 'syz.2.840': attribute type 15 has an invalid length. [ 201.260313][ T8374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.618298][ T8390] netlink: 7 bytes leftover after parsing attributes in process `syz.4.849'. [ 201.714328][ T8390] erspan0: entered promiscuous mode [ 202.413937][ T8420] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 202.966055][ T8441] netlink: 'syz.1.867': attribute type 15 has an invalid length. [ 203.423899][ T8454] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 204.220647][ T8485] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 204.440125][ T8488] nbd0: detected capacity change from 0 to 63 [ 204.456022][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 204.476017][ T5898] block nbd0: Send control failed (result -22) [ 204.476140][ T5898] block nbd0: Request send failed, requeueing [ 204.504892][ T103] block nbd0: Dead connection, failed to find a fallback [ 204.504913][ T103] block nbd0: shutting down sockets [ 204.505002][ T103] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.505102][ T103] Buffer I/O error on dev nbd0, logical block 0, async page read [ 204.539304][ T5898] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.539330][ T5898] Buffer I/O error on dev nbd0, logical block 1, async page read [ 204.539613][ T5898] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.539635][ T5898] Buffer I/O error on dev nbd0, logical block 2, async page read [ 204.539784][ T5898] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.539804][ T5898] Buffer I/O error on dev nbd0, logical block 3, async page read [ 204.581209][ T5898] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.590710][ T5898] Buffer I/O error on dev nbd0, logical block 0, async page read [ 204.590964][ T5898] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.590987][ T5898] Buffer I/O error on dev nbd0, logical block 1, async page read [ 204.591125][ T5898] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.591145][ T5898] Buffer I/O error on dev nbd0, logical block 2, async page read [ 204.591282][ T5898] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.591302][ T5898] Buffer I/O error on dev nbd0, logical block 3, async page read [ 204.591452][ T5898] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.591472][ T5898] Buffer I/O error on dev nbd0, logical block 0, async page read [ 204.591618][ T5898] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.591637][ T5898] Buffer I/O error on dev nbd0, logical block 1, async page read [ 204.635554][ T5898] ldm_validate_partition_table(): Disk read failed. [ 204.691706][ T5898] Dev nbd0: unable to read RDB block 0 [ 204.694088][ T5898] nbd0: unable to read partition table [ 204.778114][ T5898] ldm_validate_partition_table(): Disk read failed. [ 204.787151][ T5898] Dev nbd0: unable to read RDB block 0 [ 204.789726][ T5898] nbd0: unable to read partition table [ 204.862132][ T8499] tipc: Enabled bearer , priority 0 [ 204.863039][ T8499] syzkaller0: entered promiscuous mode [ 204.863064][ T8499] syzkaller0: entered allmulticast mode [ 205.024426][ T5933] IPVS: starting estimator thread 0... [ 205.037363][ T8505] netlink: 92 bytes leftover after parsing attributes in process `syz.4.894'. [ 205.067030][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.895'. [ 205.096712][ T8499] tipc: Resetting bearer [ 205.110158][ T8510] IPVS: using max 7 ests per chain, 16800 per kthread [ 205.180875][ T8507] team_slave_0: entered promiscuous mode [ 205.180951][ T8507] team_slave_1: entered promiscuous mode [ 205.181291][ T8507] macvtap1: entered promiscuous mode [ 205.181304][ T8507] team0: entered promiscuous mode [ 205.182106][ T8507] macvtap1: entered allmulticast mode [ 205.182120][ T8507] team0: entered allmulticast mode [ 205.182132][ T8507] team_slave_0: entered allmulticast mode [ 205.182153][ T8507] team_slave_1: entered allmulticast mode [ 205.198963][ T8507] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 205.270118][ T8497] tipc: Resetting bearer [ 205.404242][ T8521] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 205.405993][ T8521] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 205.450797][ T8497] tipc: Disabling bearer [ 205.631048][ T8514] macvtap1: left promiscuous mode [ 205.631069][ T8514] team0: left promiscuous mode [ 205.631757][ T8514] macvtap1: left allmulticast mode [ 205.631771][ T8514] team0: left allmulticast mode [ 205.631783][ T8514] team_slave_0: left allmulticast mode [ 205.631803][ T8514] team_slave_1: left allmulticast mode [ 205.635724][ T8513] netlink: 'syz.2.893': attribute type 15 has an invalid length. [ 206.090092][ T5918] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 206.239992][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 206.242557][ T5918] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.242636][ T5918] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 206.263100][ T5918] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.263125][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.263152][ T5918] usb 5-1: Product: syz [ 206.263165][ T5918] usb 5-1: Manufacturer: syz [ 206.263178][ T5918] usb 5-1: SerialNumber: syz [ 206.572686][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 206.572722][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 206.572739][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 206.572766][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 206.669114][ T5918] usb 5-1: USB disconnect, device number 9 [ 206.818794][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.900511][ T8557] netlink: 92 bytes leftover after parsing attributes in process `syz.1.910'. [ 207.823126][ T8562] nbd1: detected capacity change from 0 to 63 [ 208.022841][ T8569] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 208.023677][ T8567] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 208.288172][ T5898] block nbd1: Send control failed (result -22) [ 208.288194][ T5898] block nbd1: Request send failed, requeueing [ 208.288422][ T63] block nbd1: Dead connection, failed to find a fallback [ 208.288440][ T63] block nbd1: shutting down sockets [ 208.303367][ T5898] ldm_validate_partition_table(): Disk read failed. [ 208.305467][ T5898] Dev nbd1: unable to read RDB block 0 [ 208.307754][ T5898] nbd1: unable to read partition table [ 208.317292][ T5898] ldm_validate_partition_table(): Disk read failed. [ 208.319386][ T5898] Dev nbd1: unable to read RDB block 0 [ 208.321871][ T5898] nbd1: unable to read partition table [ 208.500833][ T8583] netlink: 'syz.1.921': attribute type 15 has an invalid length. [ 208.618826][ T8586] netlink: 92 bytes leftover after parsing attributes in process `syz.3.924'. [ 208.981251][ T8599] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 208.983257][ T8597] tipc: Started in network mode [ 208.983283][ T8597] tipc: Node identity 36b6b7ad030c, cluster identity 4711 [ 208.983486][ T8597] tipc: Enabled bearer , priority 0 [ 208.984343][ T8597] syzkaller0: entered promiscuous mode [ 208.984367][ T8597] syzkaller0: entered allmulticast mode [ 209.115016][ T5918] IPVS: starting estimator thread 0... [ 209.159862][ T8601] tipc: Resetting bearer [ 209.200119][ T8605] IPVS: using max 7 ests per chain, 16800 per kthread [ 209.240241][ T8595] tipc: Resetting bearer [ 210.192794][ T5918] tipc: Node number set to 901429165 [ 210.482102][ T8595] tipc: Disabling bearer [ 210.523301][ T8621] netlink: 92 bytes leftover after parsing attributes in process `syz.2.937'. [ 210.807064][ T8630] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 211.222163][ T8639] netlink: 'syz.1.944': attribute type 15 has an invalid length. [ 212.597308][ T8634] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.597344][ T8634] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 212.681250][ T8665] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 212.927120][ T8672] netlink: 92 bytes leftover after parsing attributes in process `syz.4.956'. [ 212.973029][ T8674] netlink: 'syz.1.957': attribute type 9 has an invalid length. [ 214.360349][ T8681] lo: Caught tx_queue_len zero misconfig [ 214.604644][ T8634] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.604677][ T8634] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 214.843764][ T8700] binder: 8699:8700 ioctl c0306201 0 returned -14 [ 215.094199][ T8634] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.094234][ T8634] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 216.276526][ T8724] netlink: 92 bytes leftover after parsing attributes in process `syz.1.976'. [ 216.436583][ T8728] binder: 8727:8728 ioctl c0306201 0 returned -14 [ 216.463872][ T8634] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.463904][ T8634] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 216.709288][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'. [ 216.758812][ T8737] dummy0: entered promiscuous mode [ 216.759080][ T8737] macvtap2: entered promiscuous mode [ 216.785639][ T8737] macvtap2: entered allmulticast mode [ 216.785658][ T8737] dummy0: entered allmulticast mode [ 217.330994][ T8757] binder: 8756:8757 ioctl c0306201 0 returned -14 [ 219.370830][ T8793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.622199][ T8816] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1014'. [ 220.652592][ T8819] netlink: 5636 bytes leftover after parsing attributes in process `syz.4.1012'. [ 221.240341][ T5925] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 221.416405][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.416436][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.416472][ T5925] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 221.416494][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.463075][ T5925] usb 1-1: config 0 descriptor?? [ 221.600215][ T8852] netlink: 'syz.3.1027': attribute type 15 has an invalid length. [ 221.687594][ T8834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.699226][ T8834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.715430][ T5925] usbhid 1-1:0.0: can't add hid device: -71 [ 221.715551][ T5925] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 221.719634][ T5925] usb 1-1: USB disconnect, device number 17 [ 221.900991][ T8858] dvmrp8: entered allmulticast mode [ 221.921173][ T8858] dvmrp8: left allmulticast mode [ 221.978525][ T8864] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1032'. [ 222.004100][ T8866] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1030'. [ 222.551086][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'. [ 223.070321][ T8903] netlink: 'syz.0.1044': attribute type 1 has an invalid length. [ 223.177532][ T8907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1044'. [ 223.386647][ T8909] dvmrp8: entered allmulticast mode [ 223.427796][ T8909] dvmrp8: left allmulticast mode [ 224.741299][ T8955] dvmrp8: entered allmulticast mode [ 224.744535][ T8955] dvmrp8: left allmulticast mode [ 225.251973][ T8957] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.253551][ T8957] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.923814][ T8957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.160944][ T8957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.649843][ T8965] netlink: 'syz.1.1066': attribute type 1 has an invalid length. [ 226.655541][ T8967] tipc: Enabled bearer , priority 0 [ 226.666115][ T8968] syzkaller0: entered promiscuous mode [ 226.666141][ T8968] syzkaller0: entered allmulticast mode [ 226.699421][ T8976] tipc: Resetting bearer [ 226.731911][ T1116] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.731941][ T1116] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 226.809561][ T8961] tipc: Resetting bearer [ 227.041124][ T8961] tipc: Disabling bearer [ 227.325423][ T1116] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.325454][ T1116] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 227.326114][ T1116] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.326139][ T1116] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 227.326173][ T1116] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.326195][ T1116] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 228.442249][ T9038] syzkaller1: entered promiscuous mode [ 228.442276][ T9038] syzkaller1: entered allmulticast mode [ 228.813961][ T9049] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.832599][ T9052] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1098'. [ 229.205017][ T9064] lo: Caught tx_queue_len zero misconfig [ 229.278195][ T9064] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1104'. [ 229.348080][ T9067] bond0: entered promiscuous mode [ 229.348101][ T9067] bond_slave_0: entered promiscuous mode [ 229.348455][ T9067] bond_slave_1: entered promiscuous mode [ 229.356534][ T9067] batadv0: entered promiscuous mode [ 229.365954][ T9067] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 229.392394][ T9066] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1104'. [ 229.694307][ T9078] syzkaller1: entered promiscuous mode [ 229.694335][ T9078] syzkaller1: entered allmulticast mode [ 229.713477][ T9081] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1110'. [ 230.233292][ T9098] netlink: 'syz.4.1116': attribute type 15 has an invalid length. [ 230.428492][ T9107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1119'. [ 230.536090][ T9108] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1119'. [ 230.874951][ T9116] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1124'. [ 232.063874][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 234.030182][ C1] vcan0: j1939_session_tx_dat: 0xffff88805cc1c000: queue data error: -100 [ 234.041523][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.041549][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.041654][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.041670][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.041765][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.041777][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.041863][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.041877][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.041966][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.041981][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.042067][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.042083][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.042171][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.042186][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.042293][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.042310][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.042402][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.042418][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.042512][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.042528][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.042621][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.042636][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.042727][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.042752][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.042845][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.042861][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.042950][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.042966][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.043059][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.043076][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.043167][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.043183][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.043273][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.043290][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.043384][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.043400][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.043487][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.043503][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.043594][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.043611][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.043703][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.043718][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.043816][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.043833][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.043929][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.043945][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.044043][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.044059][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.044153][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.044169][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.044261][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.044277][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.044371][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.044387][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.044481][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.044498][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.044591][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.044607][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.044701][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.044718][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.044816][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.044833][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.044930][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.044946][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.045043][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.045059][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.045154][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.045170][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.045263][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.045280][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.045400][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.045417][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.045511][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.045527][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.045621][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.045637][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.045731][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 234.045752][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 234.852023][ T9150] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1136'. [ 235.086358][ T9159] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1138'. [ 235.120999][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1138'. [ 235.121020][ T9159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1138'. [ 235.645179][ T9174] dvmrp8: entered allmulticast mode [ 236.407190][ T9189] netlink: 'syz.4.1150': attribute type 1 has an invalid length. [ 236.469802][ T9193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1150'. [ 236.562445][ T9193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.577033][ T5918] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 236.745196][ T5918] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.751157][ T5918] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.751183][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.751202][ T5918] usb 4-1: Product: syz [ 236.751215][ T5918] usb 4-1: Manufacturer: syz [ 236.751229][ T5918] usb 4-1: SerialNumber: syz [ 237.460093][ T5918] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 237.460174][ T5918] cdc_ncm 4-1:1.0: bind() failure [ 237.514092][ T5918] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 237.514137][ T5918] cdc_ncm 4-1:1.1: bind() failure [ 237.715311][ T9210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.356985][ T9229] netlink: 'syz.1.1163': attribute type 1 has an invalid length. [ 238.418898][ T9233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1163'. [ 238.427684][ T9233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.265532][ T5918] usb 4-1: USB disconnect, device number 8 [ 239.492079][ T9254] netlink: 'syz.3.1170': attribute type 1 has an invalid length. [ 239.492099][ T9254] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1170'. [ 239.821458][ T9266] netlink: 'syz.1.1174': attribute type 1 has an invalid length. [ 240.210375][ T9267] bond2: (slave geneve2): making interface the new active one [ 240.211912][ T9267] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 240.212353][ T1290] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 240.448265][ T1290] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 240.493993][ T1290] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 240.494037][ T1290] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 241.110157][ T6026] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 241.173409][ T9298] nbd: nbd0 already in use [ 241.174974][ T9298] block nbd0: NBD_DISCONNECT [ 241.174997][ T9298] block nbd0: Send disconnect failed -22 [ 241.299128][ T6026] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.304233][ T6026] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.304259][ T6026] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.304277][ T6026] usb 3-1: Product: syz [ 241.304290][ T6026] usb 3-1: Manufacturer: syz [ 241.304302][ T6026] usb 3-1: SerialNumber: syz [ 241.810042][ T5845] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 241.960028][ T5845] usb 4-1: Using ep0 maxpacket: 16 [ 241.962278][ T5845] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.962358][ T5845] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 241.999495][ T5845] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.999524][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.999544][ T5845] usb 4-1: Product: syz [ 241.999558][ T5845] usb 4-1: Manufacturer: syz [ 241.999571][ T5845] usb 4-1: SerialNumber: syz [ 242.338817][ T6026] cdc_ncm 3-1:1.0: failed to get mac address [ 242.339333][ T6026] cdc_ncm 3-1:1.0: bind() failure [ 242.370037][ T6026] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 242.377675][ T6026] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 242.389336][ T6026] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 242.418780][ T6026] usb 3-1: USB disconnect, device number 11 [ 242.588686][ T5845] usb 4-1: USB disconnect, device number 9 [ 242.678737][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.129223][ T9334] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.1199'. [ 244.026819][ T9351] overlayfs: overlapping lowerdir path [ 244.310318][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 244.472804][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.475892][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 244.475973][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.475993][ T9] usb 5-1: Product: syz [ 244.476007][ T9] usb 5-1: Manufacturer: syz [ 244.476020][ T9] usb 5-1: SerialNumber: syz [ 245.517268][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 245.517694][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 245.518120][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 245.518560][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 245.519181][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 245.523681][ T9] cdc_ncm 5-1:1.0: failed to get mac address [ 245.526088][ T9] cdc_ncm 5-1:1.0: bind() failure [ 245.560009][ T9] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 245.560868][ T9] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 245.562604][ T9] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 245.597179][ T9] usb 5-1: USB disconnect, device number 10 [ 249.873075][ T9425] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1234'. [ 256.452517][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 256.456074][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 256.457294][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 256.458993][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 256.486655][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 256.748159][ T9464] chnl_net:caif_netlink_parms(): no params data found [ 257.041458][ T9464] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.041534][ T9464] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.041818][ T9464] bridge_slave_0: entered allmulticast mode [ 257.043288][ T9464] bridge_slave_0: entered promiscuous mode [ 257.045068][ T9464] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.045141][ T9464] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.045412][ T9464] bridge_slave_1: entered allmulticast mode [ 257.046996][ T9464] bridge_slave_1: entered promiscuous mode [ 257.254213][ T9464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.257646][ T9464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.422528][ T9464] team0: Port device team_slave_0 added [ 257.424690][ T9464] team0: Port device team_slave_1 added [ 257.562702][ T9464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.562717][ T9464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.562741][ T9464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.564506][ T9464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.564518][ T9464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.564531][ T9464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.933929][ T9464] hsr_slave_0: entered promiscuous mode [ 257.934908][ T9464] hsr_slave_1: entered promiscuous mode [ 257.935543][ T9464] debugfs: 'hsr0' already exists in 'hsr' [ 257.935559][ T9464] Cannot create hsr debugfs directory [ 258.570045][ T5856] Bluetooth: hci5: command tx timeout [ 259.466911][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 259.471447][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 259.472996][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 259.474859][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 259.475593][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 259.788148][ T9475] chnl_net:caif_netlink_parms(): no params data found [ 260.112277][ T9475] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.114203][ T9475] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.114413][ T9475] bridge_slave_0: entered allmulticast mode [ 260.117082][ T9475] bridge_slave_0: entered promiscuous mode [ 260.147254][ T9475] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.147402][ T9475] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.147586][ T9475] bridge_slave_1: entered allmulticast mode [ 260.149516][ T9475] bridge_slave_1: entered promiscuous mode [ 260.328182][ T9475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.340863][ T9475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.464282][ T9475] team0: Port device team_slave_0 added [ 260.467859][ T9475] team0: Port device team_slave_1 added [ 260.603310][ T9475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.603324][ T9475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.603348][ T9475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.605719][ T9475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.605731][ T9475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.605756][ T9475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.642829][ T5856] Bluetooth: hci5: command tx timeout [ 260.821122][ T9475] hsr_slave_0: entered promiscuous mode [ 260.822474][ T9475] hsr_slave_1: entered promiscuous mode [ 260.824501][ T9475] debugfs: 'hsr0' already exists in 'hsr' [ 260.824525][ T9475] Cannot create hsr debugfs directory [ 261.520263][ T5856] Bluetooth: hci6: command tx timeout [ 262.032172][ T5849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 262.037935][ T5849] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 262.039864][ T5849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 262.051950][ T5849] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 262.053204][ T5849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 262.449388][ T9484] chnl_net:caif_netlink_parms(): no params data found [ 262.713213][ T5849] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 262.722803][ T5155] Bluetooth: hci5: command tx timeout [ 262.743431][ T5849] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 262.745624][ T5849] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 262.748265][ T5849] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 262.749032][ T5849] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 262.904526][ T9484] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.904662][ T9484] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.905129][ T9484] bridge_slave_0: entered allmulticast mode [ 262.907350][ T9484] bridge_slave_0: entered promiscuous mode [ 262.912890][ T9484] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.913080][ T9484] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.913264][ T9484] bridge_slave_1: entered allmulticast mode [ 262.915919][ T9484] bridge_slave_1: entered promiscuous mode [ 263.093516][ T9484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.098005][ T9484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.274841][ T9484] team0: Port device team_slave_0 added [ 263.288641][ T9484] team0: Port device team_slave_1 added [ 263.458606][ T9484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.458621][ T9484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.458647][ T9484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.469613][ T9484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.469626][ T9484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.469650][ T9484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.600116][ T5856] Bluetooth: hci6: command tx timeout [ 263.701205][ T9484] hsr_slave_0: entered promiscuous mode [ 263.702641][ T9484] hsr_slave_1: entered promiscuous mode [ 263.703572][ T9484] debugfs: 'hsr0' already exists in 'hsr' [ 263.703595][ T9484] Cannot create hsr debugfs directory [ 264.081819][ T5856] Bluetooth: hci7: command tx timeout [ 264.316896][ T9493] chnl_net:caif_netlink_parms(): no params data found [ 264.792347][ T9493] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.792520][ T9493] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.792694][ T9493] bridge_slave_0: entered allmulticast mode [ 264.798099][ T9493] bridge_slave_0: entered promiscuous mode [ 264.800369][ T5856] Bluetooth: hci5: command tx timeout [ 264.803733][ T9493] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.803925][ T9493] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.804108][ T9493] bridge_slave_1: entered allmulticast mode [ 264.807043][ T9493] bridge_slave_1: entered promiscuous mode [ 264.890285][ T5856] Bluetooth: hci8: command tx timeout [ 265.001110][ T9493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.005835][ T9493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.144933][ T9493] team0: Port device team_slave_0 added [ 265.149105][ T9493] team0: Port device team_slave_1 added [ 265.443752][ T9493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.443768][ T9493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.443793][ T9493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.446286][ T9493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.446298][ T9493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.446323][ T9493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.664926][ T9493] hsr_slave_0: entered promiscuous mode [ 265.666351][ T9493] hsr_slave_1: entered promiscuous mode [ 265.667363][ T9493] debugfs: 'hsr0' already exists in 'hsr' [ 265.667385][ T9493] Cannot create hsr debugfs directory [ 265.680237][ T5856] Bluetooth: hci6: command tx timeout [ 266.160309][ T5856] Bluetooth: hci7: command tx timeout [ 266.972201][ T5856] Bluetooth: hci8: command tx timeout [ 267.770284][ T5856] Bluetooth: hci6: command tx timeout [ 268.240285][ T5856] Bluetooth: hci7: command tx timeout [ 268.557951][ T5849] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 268.574787][ T5849] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 268.575942][ T5849] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 268.576970][ T5849] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 268.577669][ T5849] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 268.927100][ T9502] chnl_net:caif_netlink_parms(): no params data found [ 269.040283][ T5856] Bluetooth: hci8: command tx timeout [ 269.242546][ T9502] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.242766][ T9502] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.242973][ T9502] bridge_slave_0: entered allmulticast mode [ 269.245734][ T9502] bridge_slave_0: entered promiscuous mode [ 269.249297][ T9502] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.249508][ T9502] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.292162][ T9502] bridge_slave_1: entered allmulticast mode [ 269.294900][ T9502] bridge_slave_1: entered promiscuous mode [ 269.477822][ T9502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.486202][ T9502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.646043][ T9502] team0: Port device team_slave_0 added [ 269.652246][ T9502] team0: Port device team_slave_1 added [ 269.813235][ T9502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.813250][ T9502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.813274][ T9502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.815699][ T9502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.815711][ T9502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.815735][ T9502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.164415][ T9502] hsr_slave_0: entered promiscuous mode [ 270.165929][ T9502] hsr_slave_1: entered promiscuous mode [ 270.166886][ T9502] debugfs: 'hsr0' already exists in 'hsr' [ 270.166909][ T9502] Cannot create hsr debugfs directory [ 270.320277][ T5856] Bluetooth: hci7: command tx timeout [ 270.640634][ T5856] Bluetooth: hci9: command tx timeout [ 271.120025][ T5856] Bluetooth: hci8: command tx timeout [ 272.720005][ T5856] Bluetooth: hci9: command tx timeout [ 274.800166][ T5856] Bluetooth: hci9: command tx timeout [ 276.880307][ T5856] Bluetooth: hci9: command tx timeout [ 316.598619][ T5849] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 316.620995][ T5849] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 316.626041][ T5849] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 316.640758][ T5849] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 316.652451][ T5849] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 317.002661][ T9514] chnl_net:caif_netlink_parms(): no params data found [ 317.311813][ T9514] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.311932][ T9514] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.312055][ T9514] bridge_slave_0: entered allmulticast mode [ 317.313552][ T9514] bridge_slave_0: entered promiscuous mode [ 317.315764][ T9514] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.315890][ T9514] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.316169][ T9514] bridge_slave_1: entered allmulticast mode [ 317.317642][ T9514] bridge_slave_1: entered promiscuous mode [ 317.518389][ T9514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.525550][ T9514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.662871][ T9514] team0: Port device team_slave_0 added [ 317.665155][ T9514] team0: Port device team_slave_1 added [ 317.792633][ T9514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.792642][ T9514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.792656][ T9514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.794047][ T9514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.794055][ T9514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.794069][ T9514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.212144][ T9514] hsr_slave_0: entered promiscuous mode [ 318.214827][ T9514] hsr_slave_1: entered promiscuous mode [ 318.215842][ T9514] debugfs: 'hsr0' already exists in 'hsr' [ 318.215865][ T9514] Cannot create hsr debugfs directory [ 318.720781][ T5856] Bluetooth: hci10: command tx timeout [ 319.214487][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 319.655623][ T5856] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 319.659850][ T5856] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 319.677199][ T5856] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 319.686451][ T5856] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 319.687627][ T5856] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 320.028501][ T9524] chnl_net:caif_netlink_parms(): no params data found [ 320.333762][ T9524] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.333981][ T9524] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.334504][ T9524] bridge_slave_0: entered allmulticast mode [ 320.337321][ T9524] bridge_slave_0: entered promiscuous mode [ 320.368194][ T9524] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.368407][ T9524] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.368617][ T9524] bridge_slave_1: entered allmulticast mode [ 320.391731][ T9524] bridge_slave_1: entered promiscuous mode [ 320.556071][ T9524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.561376][ T9524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.716764][ T9524] team0: Port device team_slave_0 added [ 320.727551][ T9524] team0: Port device team_slave_1 added [ 320.800257][ T5849] Bluetooth: hci10: command tx timeout [ 320.902934][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.902948][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.902973][ T9524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.905693][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.905706][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.905731][ T9524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.326622][ T9524] hsr_slave_0: entered promiscuous mode [ 321.328997][ T9524] hsr_slave_1: entered promiscuous mode [ 321.341410][ T9524] debugfs: 'hsr0' already exists in 'hsr' [ 321.341434][ T9524] Cannot create hsr debugfs directory [ 321.760156][ T5849] Bluetooth: hci11: command tx timeout [ 322.792840][ T5856] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 322.803849][ T5856] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 322.805438][ T5856] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 322.806641][ T5856] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 322.807844][ T5856] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 322.880198][ T5856] Bluetooth: hci10: command tx timeout [ 322.949686][ T5849] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 322.954694][ T5849] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 322.955916][ T5849] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 322.956965][ T5849] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 322.957720][ T5849] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 323.487843][ T9535] chnl_net:caif_netlink_parms(): no params data found [ 323.650524][ T9537] chnl_net:caif_netlink_parms(): no params data found [ 323.840186][ T5856] Bluetooth: hci11: command tx timeout [ 324.013653][ T9535] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.013857][ T9535] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.014078][ T9535] bridge_slave_0: entered allmulticast mode [ 324.016923][ T9535] bridge_slave_0: entered promiscuous mode [ 324.055694][ T9535] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.055850][ T9535] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.056058][ T9535] bridge_slave_1: entered allmulticast mode [ 324.058912][ T9535] bridge_slave_1: entered promiscuous mode [ 324.390923][ T9537] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.391121][ T9537] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.391395][ T9537] bridge_slave_0: entered allmulticast mode [ 324.393150][ T9537] bridge_slave_0: entered promiscuous mode [ 324.411074][ T9535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.412726][ T9537] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.412856][ T9537] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.413089][ T9537] bridge_slave_1: entered allmulticast mode [ 324.415751][ T9537] bridge_slave_1: entered promiscuous mode [ 324.466506][ T9535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.827364][ T9537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.832667][ T9535] team0: Port device team_slave_0 added [ 324.838056][ T9537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.842545][ T9535] team0: Port device team_slave_1 added [ 324.880208][ T5856] Bluetooth: hci12: command tx timeout [ 324.960059][ T5856] Bluetooth: hci10: command tx timeout [ 325.040208][ T5856] Bluetooth: hci13: command tx timeout [ 325.163732][ T9537] team0: Port device team_slave_0 added [ 325.167809][ T9537] team0: Port device team_slave_1 added [ 325.251922][ T9535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.251936][ T9535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.251959][ T9535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.383151][ T9535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.383166][ T9535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.383192][ T9535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.396826][ T9537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.396841][ T9537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.396870][ T9537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.404605][ T9537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.404617][ T9537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.404641][ T9537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.863443][ T9535] hsr_slave_0: entered promiscuous mode [ 325.864954][ T9535] hsr_slave_1: entered promiscuous mode [ 325.865979][ T9535] debugfs: 'hsr0' already exists in 'hsr' [ 325.866003][ T9535] Cannot create hsr debugfs directory [ 325.920064][ T5856] Bluetooth: hci11: command tx timeout [ 326.012208][ T9537] hsr_slave_0: entered promiscuous mode [ 326.013697][ T9537] hsr_slave_1: entered promiscuous mode [ 326.014718][ T9537] debugfs: 'hsr0' already exists in 'hsr' [ 326.014741][ T9537] Cannot create hsr debugfs directory [ 326.965720][ T5856] Bluetooth: hci12: command tx timeout [ 327.120244][ T5856] Bluetooth: hci13: command tx timeout [ 328.001156][ T5856] Bluetooth: hci11: command tx timeout [ 329.040000][ T5856] Bluetooth: hci12: command tx timeout [ 329.131182][ T5849] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 329.148489][ T5849] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 329.149692][ T5849] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 329.166857][ T5849] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 329.167609][ T5849] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 329.200979][ T5849] Bluetooth: hci13: command tx timeout [ 329.523816][ T9554] chnl_net:caif_netlink_parms(): no params data found [ 329.822596][ T9554] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.822811][ T9554] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.823045][ T9554] bridge_slave_0: entered allmulticast mode [ 329.825873][ T9554] bridge_slave_0: entered promiscuous mode [ 329.836051][ T9554] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.841746][ T9554] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.842263][ T9554] bridge_slave_1: entered allmulticast mode [ 329.850022][ T9554] bridge_slave_1: entered promiscuous mode [ 330.049447][ T9554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.057087][ T9554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.204832][ T9554] team0: Port device team_slave_0 added [ 330.209055][ T9554] team0: Port device team_slave_1 added [ 330.392813][ T9554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.392825][ T9554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.392838][ T9554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.394274][ T9554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.394282][ T9554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.394296][ T9554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.768251][ T9554] hsr_slave_0: entered promiscuous mode [ 330.769193][ T9554] hsr_slave_1: entered promiscuous mode [ 330.769764][ T9554] debugfs: 'hsr0' already exists in 'hsr' [ 330.769778][ T9554] Cannot create hsr debugfs directory [ 331.119975][ T5856] Bluetooth: hci12: command tx timeout [ 331.281868][ T5849] Bluetooth: hci13: command tx timeout [ 331.281930][ T5856] Bluetooth: hci14: command tx timeout [ 333.360223][ T5856] Bluetooth: hci14: command tx timeout [ 335.440267][ T5856] Bluetooth: hci14: command tx timeout [ 337.520170][ T5856] Bluetooth: hci14: command tx timeout [ 376.652355][ T5849] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 376.657201][ T5849] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 376.659555][ T5849] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 376.671005][ T5849] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 376.674762][ T5849] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 377.045239][ T9566] chnl_net:caif_netlink_parms(): no params data found [ 377.373491][ T9566] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.373711][ T9566] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.374261][ T9566] bridge_slave_0: entered allmulticast mode [ 377.377086][ T9566] bridge_slave_0: entered promiscuous mode [ 377.381275][ T9566] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.381475][ T9566] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.381689][ T9566] bridge_slave_1: entered allmulticast mode [ 377.384376][ T9566] bridge_slave_1: entered promiscuous mode [ 377.570184][ T9566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.576491][ T9566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.696147][ T9566] team0: Port device team_slave_0 added [ 377.702162][ T9566] team0: Port device team_slave_1 added [ 377.863270][ T9566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.863286][ T9566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.863312][ T9566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.865921][ T9566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.865934][ T9566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.865958][ T9566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.256358][ T9566] hsr_slave_0: entered promiscuous mode [ 378.257857][ T9566] hsr_slave_1: entered promiscuous mode [ 378.258886][ T9566] debugfs: 'hsr0' already exists in 'hsr' [ 378.258912][ T9566] Cannot create hsr debugfs directory [ 378.720375][ T5849] Bluetooth: hci15: command tx timeout [ 379.742851][ T5155] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 379.746291][ T5155] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 379.749714][ T5155] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 379.762156][ T5155] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 379.762936][ T5155] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 380.125762][ T9577] chnl_net:caif_netlink_parms(): no params data found [ 380.433783][ T9577] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.434060][ T9577] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.434304][ T9577] bridge_slave_0: entered allmulticast mode [ 380.437162][ T9577] bridge_slave_0: entered promiscuous mode [ 380.467135][ T9577] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.467340][ T9577] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.467951][ T9577] bridge_slave_1: entered allmulticast mode [ 380.491486][ T9577] bridge_slave_1: entered promiscuous mode [ 380.651861][ T5849] Bluetooth: hci5: command 0x0406 tx timeout [ 380.661071][ T9577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.666174][ T9577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.800210][ T5856] Bluetooth: hci15: command tx timeout [ 380.844744][ T9577] team0: Port device team_slave_0 added [ 380.847349][ T9577] team0: Port device team_slave_1 added [ 380.993187][ T9577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.993202][ T9577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.993227][ T9577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.995702][ T9577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.995715][ T9577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.995739][ T9577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.391813][ T9577] hsr_slave_0: entered promiscuous mode [ 381.393386][ T9577] hsr_slave_1: entered promiscuous mode [ 381.394435][ T9577] debugfs: 'hsr0' already exists in 'hsr' [ 381.394457][ T9577] Cannot create hsr debugfs directory [ 381.850132][ T5856] Bluetooth: hci16: command tx timeout [ 382.880275][ T5856] Bluetooth: hci15: command tx timeout [ 383.326124][ T5849] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 383.328811][ T5849] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 383.330363][ T5849] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 383.342876][ T5849] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 383.343604][ T5849] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 383.454343][ T5849] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 383.457008][ T5849] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 383.459729][ T5849] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 383.487535][ T5849] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 383.488356][ T5849] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 383.920020][ T5856] Bluetooth: hci16: command tx timeout [ 384.065612][ T9587] chnl_net:caif_netlink_parms(): no params data found [ 384.213874][ T9589] chnl_net:caif_netlink_parms(): no params data found [ 384.532164][ T9587] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.532319][ T9587] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.532563][ T9587] bridge_slave_0: entered allmulticast mode [ 384.535512][ T9587] bridge_slave_0: entered promiscuous mode [ 384.549578][ T9587] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.549776][ T9587] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.550547][ T9587] bridge_slave_1: entered allmulticast mode [ 384.554535][ T9587] bridge_slave_1: entered promiscuous mode [ 384.828177][ T9587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.916327][ T9587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.916605][ T9589] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.916782][ T9589] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.917014][ T9589] bridge_slave_0: entered allmulticast mode [ 384.923690][ T9589] bridge_slave_0: entered promiscuous mode [ 384.960388][ T5856] Bluetooth: hci15: command tx timeout [ 384.991268][ T9589] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.991472][ T9589] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.991709][ T9589] bridge_slave_1: entered allmulticast mode [ 384.994804][ T9589] bridge_slave_1: entered promiscuous mode [ 385.193594][ T9587] team0: Port device team_slave_0 added [ 385.197842][ T9587] team0: Port device team_slave_1 added [ 385.425387][ T9589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.432555][ T9589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.433564][ T9587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.433575][ T9587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.433605][ T9587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.436330][ T9587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.436342][ T9587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.436367][ T9587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.440259][ T5856] Bluetooth: hci17: command tx timeout [ 385.600192][ T5856] Bluetooth: hci18: command tx timeout [ 385.677635][ T9589] team0: Port device team_slave_0 added [ 385.770358][ T5856] Bluetooth: hci8: command 0x0406 tx timeout [ 385.770390][ T5856] Bluetooth: hci6: command 0x0406 tx timeout [ 385.770412][ T5856] Bluetooth: hci7: command 0x0406 tx timeout [ 385.776136][ T9589] team0: Port device team_slave_1 added [ 385.982877][ T9587] hsr_slave_0: entered promiscuous mode [ 385.984440][ T9587] hsr_slave_1: entered promiscuous mode [ 385.985508][ T9587] debugfs: 'hsr0' already exists in 'hsr' [ 385.985530][ T9587] Cannot create hsr debugfs directory [ 386.000054][ T5849] Bluetooth: hci16: command tx timeout [ 386.204342][ T9589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.204358][ T9589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.204384][ T9589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.332945][ T9589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.332961][ T9589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.332986][ T9589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.621208][ T9589] hsr_slave_0: entered promiscuous mode [ 386.622914][ T9589] hsr_slave_1: entered promiscuous mode [ 386.624917][ T9589] debugfs: 'hsr0' already exists in 'hsr' [ 386.624940][ T9589] Cannot create hsr debugfs directory [ 387.520438][ T5849] Bluetooth: hci17: command tx timeout [ 387.681754][ T5849] Bluetooth: hci18: command tx timeout [ 388.090344][ T5849] Bluetooth: hci16: command tx timeout [ 389.207605][ T5155] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 389.225727][ T5155] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 389.230141][ T5155] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 389.245117][ T5155] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 389.252751][ T5155] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 389.600163][ T5155] Bluetooth: hci17: command tx timeout [ 389.632331][ T9604] chnl_net:caif_netlink_parms(): no params data found [ 389.770058][ T5155] Bluetooth: hci18: command tx timeout [ 389.961667][ T9604] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.961796][ T9604] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.961959][ T9604] bridge_slave_0: entered allmulticast mode [ 389.970304][ T9604] bridge_slave_0: entered promiscuous mode [ 389.974696][ T9604] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.974843][ T9604] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.975081][ T9604] bridge_slave_1: entered allmulticast mode [ 389.980992][ T9604] bridge_slave_1: entered promiscuous mode [ 390.187778][ T9604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.203926][ T9604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.385138][ T9604] team0: Port device team_slave_0 added [ 390.389557][ T9604] team0: Port device team_slave_1 added [ 390.553489][ T9604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.553504][ T9604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.553529][ T9604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.556968][ T9604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.556981][ T9604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.557005][ T9604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.880314][ T5155] Bluetooth: hci9: command 0x0406 tx timeout [ 390.931831][ T9604] hsr_slave_0: entered promiscuous mode [ 390.933405][ T9604] hsr_slave_1: entered promiscuous mode [ 390.934447][ T9604] debugfs: 'hsr0' already exists in 'hsr' [ 390.934470][ T9604] Cannot create hsr debugfs directory [ 391.361524][ T5849] Bluetooth: hci19: command tx timeout [ 391.680328][ T5849] Bluetooth: hci17: command tx timeout [ 391.840476][ T5849] Bluetooth: hci18: command tx timeout [ 393.440057][ T5849] Bluetooth: hci19: command tx timeout [ 395.520077][ T5849] Bluetooth: hci19: command tx timeout [ 397.600274][ T5849] Bluetooth: hci19: command tx timeout [ 404.160663][ T38] INFO: task syz.0.1183:9298 blocked for more than 143 seconds. [ 404.160692][ T38] Not tainted syzkaller #0 [ 404.160703][ T38] "echo 0 > /proc/sys/kerne[ 404.160703][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 404.160714][ T38] task:syz.0.1183 state:D stack:23688 pid:9298 tgid:9290 ppid:5836 task_flags:0x400140 flags:0x00004004 [ 404.160774][ T38] Call Trace: [ 404.160782][ T38] [ 404.160795][ T38] __schedule+0x16f3/0x4c20 [ 404.160842][ T38] ? validate_chain+0x897/0x2140 [ 404.160879][ T38] ? __lock_acquire+0xab9/0xd20 [ 404.160902][ T38] ? __pfx___schedule+0x10/0x10 [ 404.160949][ T38] ? schedule+0x91/0x360 [ 404.160976][ T38] schedule+0x165/0x360 [ 404.161001][ T38] schedule_timeout+0x9a/0x270 [ 404.161025][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 404.161061][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 404.161085][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.161106][ T38] ? wait_for_completion+0x267/0x5d0 [ 404.161133][ T38] wait_for_completion+0x2bf/0x5d0 [ 404.161170][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 404.161209][ T38] __flush_workqueue+0x6f7/0x14b0 [ 404.161241][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 404.161266][ T38] ? rt_spin_lock+0x1bb/0x2c0 [ 404.161287][ T38] ? __pfx___flush_workqueue+0x10/0x10 [ 404.161336][ T38] nbd_disconnect_and_put+0x9e/0x2a0 [ 404.161360][ T38] nbd_genl_disconnect+0x485/0x570 [ 404.161388][ T38] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 404.161413][ T38] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 404.161443][ T38] genl_family_rcv_msg_doit+0x212/0x300 [ 404.161471][ T38] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 404.161515][ T38] genl_rcv_msg+0x60e/0x790 [ 404.161542][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.161560][ T38] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 404.161587][ T38] ? __lock_acquire+0xab9/0xd20 [ 404.161618][ T38] netlink_rcv_skb+0x205/0x470 [ 404.161643][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.161664][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.161703][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.161725][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.161754][ T38] genl_rcv+0x28/0x40 [ 404.161771][ T38] netlink_unicast+0x843/0xa10 [ 404.161803][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 404.161827][ T38] ? netlink_sendmsg+0x642/0xb30 [ 404.161848][ T38] ? skb_put+0x11b/0x210 [ 404.161877][ T38] netlink_sendmsg+0x805/0xb30 [ 404.161910][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.161947][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 404.161965][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.161989][ T38] __sock_sendmsg+0x21c/0x270 [ 404.162016][ T38] ____sys_sendmsg+0x508/0x820 [ 404.162041][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 404.162070][ T38] ? import_iovec+0x74/0xa0 [ 404.162096][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 404.162117][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.162175][ T38] ? __fget_files+0x2a/0x420 [ 404.162197][ T38] ? __fget_files+0x3a6/0x420 [ 404.162232][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 404.162254][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 404.162280][ T38] ? rcu_is_watching+0x15/0xb0 [ 404.162310][ T38] ? do_syscall_64+0xbe/0x3b0 [ 404.162332][ T38] do_syscall_64+0xfa/0x3b0 [ 404.162345][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.162367][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.162385][ T38] ? clear_bhb_loop+0x60/0xb0 [ 404.162407][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.162428][ T38] RIP: 0033:0x7f69122beec9 [ 404.162448][ T38] RSP: 002b:00007f69104e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.162465][ T38] RAX: ffffffffffffffda RBX: 00007f6912516180 RCX: 00007f69122beec9 [ 404.162479][ T38] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 000000000000000e [ 404.162490][ T38] RBP: 00007f6912341f91 R08: 0000000000000000 R09: 0000000000000000 [ 404.162502][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.162513][ T38] R13: 00007f6912516218 R14: 00007f6912516180 R15: 00007ffec8d43ff8 [ 404.162542][ T38] [ 404.162550][ T38] INFO: task syz.3.1208:9357 blocked for more than 143 seconds. [ 404.162562][ T38] Not tainted syzkaller #0 [ 404.162570][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 404.162578][ T38] task:syz.3.1208 state:D stack:27800 pid:9357 tgid:9356 ppid:5842 task_flags:0x400040 flags:0x00004004 [ 404.162617][ T38] Call Trace: [ 404.162623][ T38] [ 404.162634][ T38] __schedule+0x16f3/0x4c20 [ 404.162664][ T38] ? sched_clock+0x3f/0x60 [ 404.162683][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 404.162714][ T38] ? __pfx___schedule+0x10/0x10 [ 404.162756][ T38] rt_mutex_schedule+0x77/0xf0 [ 404.162771][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 404.162798][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 404.162817][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 404.162834][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 404.162850][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 404.162864][ T38] ? __lock_acquire+0xab9/0xd20 [ 404.162890][ T38] ? genl_rcv_msg+0x10d/0x790 [ 404.162914][ T38] ? genl_rcv_msg+0x10d/0x790 [ 404.162932][ T38] mutex_lock_nested+0x16a/0x1d0 [ 404.162947][ T38] ? radix_tree_lookup+0x243/0x290 [ 404.162967][ T38] genl_rcv_msg+0x10d/0x790 [ 404.163025][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.163046][ T38] ? __lock_acquire+0xab9/0xd20 [ 404.163069][ T38] netlink_rcv_skb+0x205/0x470 [ 404.163087][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.163102][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.163131][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.163148][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.163173][ T38] genl_rcv+0x28/0x40 [ 404.163186][ T38] netlink_unicast+0x843/0xa10 [ 404.163210][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 404.163227][ T38] ? netlink_sendmsg+0x642/0xb30 [ 404.163242][ T38] ? skb_put+0x11b/0x210 [ 404.163264][ T38] netlink_sendmsg+0x805/0xb30 [ 404.163289][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.163313][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 404.163326][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.163344][ T38] __sock_sendmsg+0x21c/0x270 [ 404.163364][ T38] __sys_sendto+0x3c7/0x520 [ 404.163384][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 404.163424][ T38] ? exc_page_fault+0x76/0xf0 [ 404.163445][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 404.163465][ T38] __x64_sys_sendto+0xde/0x100 [ 404.163488][ T38] do_syscall_64+0xfa/0x3b0 [ 404.163500][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.163519][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.163533][ T38] ? clear_bhb_loop+0x60/0xb0 [ 404.163550][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.163563][ T38] RIP: 0033:0x7f12bd810d5c [ 404.163575][ T38] RSP: 002b:00007f12bba6cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 404.163589][ T38] RAX: ffffffffffffffda RBX: 00007f12bba6cfc0 RCX: 00007f12bd810d5c [ 404.163600][ T38] RDX: 0000000000000020 RSI: 00007f12bba6d010 RDI: 0000000000000003 [ 404.163609][ T38] RBP: 0000000000000000 R08: 00007f12bba6cf14 R09: 000000000000000c [ 404.163617][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 404.163626][ T38] R13: 00007f12bba6cf68 R14: 00007f12bba6d010 R15: 0000000000000000 [ 404.163649][ T38] [ 404.163655][ T38] INFO: task syz.2.1221:9393 blocked for more than 143 seconds. [ 404.163664][ T38] Not tainted syzkaller #0 [ 404.163671][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 404.163678][ T38] task:syz.2.1221 state:D stack:28392 pid:9393 tgid:9392 ppid:5838 task_flags:0x400040 flags:0x00004004 [ 404.163716][ T38] Call Trace: [ 404.163721][ T38] [ 404.163730][ T38] __schedule+0x16f3/0x4c20 [ 404.163769][ T38] ? __pfx___schedule+0x10/0x10 [ 404.163802][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 404.163824][ T38] rt_mutex_schedule+0x77/0xf0 [ 404.163838][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 404.163855][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 404.163886][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 404.163905][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 404.163931][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 404.163947][ T38] ? __lock_acquire+0xab9/0xd20 [ 404.163974][ T38] ? genl_rcv_msg+0x10d/0x790 [ 404.163999][ T38] ? genl_rcv_msg+0x10d/0x790 [ 404.164012][ T38] mutex_lock_nested+0x16a/0x1d0 [ 404.164027][ T38] ? __pfx_stack_trace_save+0x10/0x10 [ 404.164040][ T38] ? radix_tree_lookup+0x243/0x290 [ 404.164061][ T38] genl_rcv_msg+0x10d/0x790 [ 404.164077][ T38] ? __lock_acquire+0xab9/0xd20 [ 404.164096][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.164115][ T38] ? __lock_acquire+0xab9/0xd20 [ 404.164138][ T38] netlink_rcv_skb+0x205/0x470 [ 404.164157][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.164174][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.164206][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.164223][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.164245][ T38] genl_rcv+0x28/0x40 [ 404.164259][ T38] netlink_unicast+0x843/0xa10 [ 404.164285][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 404.164307][ T38] ? netlink_sendmsg+0x642/0xb30 [ 404.164324][ T38] ? skb_put+0x11b/0x210 [ 404.164349][ T38] netlink_sendmsg+0x805/0xb30 [ 404.164378][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.164414][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 404.164430][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.164451][ T38] __sock_sendmsg+0x21c/0x270 [ 404.164476][ T38] __sys_sendto+0x3c7/0x520 [ 404.164501][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 404.164548][ T38] ? exc_page_fault+0x76/0xf0 [ 404.164577][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 404.164601][ T38] __x64_sys_sendto+0xde/0x100 [ 404.164628][ T38] do_syscall_64+0xfa/0x3b0 [ 404.167761][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.167796][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.167814][ T38] ? clear_bhb_loop+0x60/0xb0 [ 404.167836][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.167854][ T38] RIP: 0033:0x7f0560480d5c [ 404.167870][ T38] RSP: 002b:00007f055e6dcec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 404.167890][ T38] RAX: ffffffffffffffda RBX: 00007f055e6dcfc0 RCX: 00007f0560480d5c [ 404.167904][ T38] RDX: 0000000000000024 RSI: 00007f055e6dd010 RDI: 0000000000000006 [ 404.167916][ T38] RBP: 0000000000000000 R08: 00007f055e6dcf14 R09: 000000000000000c [ 404.167927][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 404.167939][ T38] R13: 00007f055e6dcf68 R14: 00007f055e6dd010 R15: 0000000000000000 [ 404.167970][ T38] [ 404.167978][ T38] INFO: task syz.4.1224:9400 blocked for more than 143 seconds. [ 404.167991][ T38] Not tainted syzkaller #0 [ 404.168000][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 404.168009][ T38] task:syz.4.1224 state:D stack:26024 pid:9400 tgid:9399 ppid:5837 task_flags:0x400140 flags:0x00004004 [ 404.168053][ T38] Call Trace: [ 404.168059][ T38] [ 404.168071][ T38] __schedule+0x16f3/0x4c20 [ 404.168101][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 404.168130][ T38] ? __lock_acquire+0xab9/0xd20 [ 404.168163][ T38] ? __pfx___schedule+0x10/0x10 [ 404.168206][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 404.168233][ T38] rt_mutex_schedule+0x77/0xf0 [ 404.168251][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 404.168272][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 404.168312][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 404.168336][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 404.168358][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 404.168377][ T38] ? __lock_acquire+0xab9/0xd20 [ 404.168411][ T38] ? genl_rcv_msg+0x10d/0x790 [ 404.168444][ T38] ? genl_rcv_msg+0x10d/0x790 [ 404.168460][ T38] mutex_lock_nested+0x16a/0x1d0 [ 404.168480][ T38] ? radix_tree_lookup+0x243/0x290 [ 404.168507][ T38] genl_rcv_msg+0x10d/0x790 [ 404.168532][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.168557][ T38] ? __lock_acquire+0xab9/0xd20 [ 404.168588][ T38] netlink_rcv_skb+0x205/0x470 [ 404.168612][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.168632][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.168676][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.168699][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.168726][ T38] genl_rcv+0x28/0x40 [ 404.168743][ T38] netlink_unicast+0x843/0xa10 [ 404.168774][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 404.168798][ T38] ? netlink_sendmsg+0x642/0xb30 [ 404.168819][ T38] ? skb_put+0x11b/0x210 [ 404.168847][ T38] netlink_sendmsg+0x805/0xb30 [ 404.168880][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.168912][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 404.168930][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.168954][ T38] __sock_sendmsg+0x21c/0x270 [ 404.168979][ T38] __sys_sendto+0x3c7/0x520 [ 404.169007][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 404.169059][ T38] ? exc_page_fault+0x76/0xf0 [ 404.169086][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 404.169113][ T38] __x64_sys_sendto+0xde/0x100 [ 404.169142][ T38] do_syscall_64+0xfa/0x3b0 [ 404.169158][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.169181][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.169199][ T38] ? clear_bhb_loop+0x60/0xb0 [ 404.169221][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.169238][ T38] RIP: 0033:0x7f7e10e70d5c [ 404.169253][ T38] RSP: 002b:00007f7e0f0d4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 404.169271][ T38] RAX: ffffffffffffffda RBX: 00007f7e0f0d4fc0 RCX: 00007f7e10e70d5c [ 404.169285][ T38] RDX: 0000000000000020 RSI: 00007f7e0f0d5010 RDI: 0000000000000004 [ 404.169297][ T38] RBP: 0000000000000000 R08: 00007f7e0f0d4f14 R09: 000000000000000c [ 404.169310][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 404.169321][ T38] R13: 00007f7e0f0d4f68 R14: 00007f7e0f0d5010 R15: 0000000000000000 [ 404.169352][ T38] [ 404.169359][ T38] INFO: task syz.1.1245:9452 blocked for more than 143 seconds. [ 404.169372][ T38] Not tainted syzkaller #0 [ 404.169381][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 404.169389][ T38] task:syz.1.1245 state:D stack:26168 pid:9452 tgid:9451 ppid:5840 task_flags:0x400140 flags:0x00004004 [ 404.169432][ T38] Call Trace: [ 404.169439][ T38] [ 404.169450][ T38] __schedule+0x16f3/0x4c20 [ 404.169501][ T38] ? __pfx___schedule+0x10/0x10 [ 404.169544][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 404.169571][ T38] rt_mutex_schedule+0x77/0xf0 [ 404.169588][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 404.169609][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 404.169649][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 404.169677][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 404.169700][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 404.169719][ T38] ? __lock_acquire+0xab9/0xd20 [ 404.169752][ T38] ? genl_rcv_msg+0x10d/0x790 [ 404.169785][ T38] ? genl_rcv_msg+0x10d/0x790 [ 404.169802][ T38] mutex_lock_nested+0x16a/0x1d0 [ 404.169821][ T38] ? __pfx_stack_trace_save+0x10/0x10 [ 404.169840][ T38] ? radix_tree_lookup+0x243/0x290 [ 404.169866][ T38] genl_rcv_msg+0x10d/0x790 [ 404.175235][ T38] ? __lock_acquire+0xab9/0xd20 [ 404.175263][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.175288][ T38] ? __lock_acquire+0xab9/0xd20 [ 404.175318][ T38] netlink_rcv_skb+0x205/0x470 [ 404.175342][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.175362][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.175399][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.175421][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.175447][ T38] genl_rcv+0x28/0x40 [ 404.175463][ T38] netlink_unicast+0x843/0xa10 [ 404.175493][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 404.175517][ T38] ? netlink_sendmsg+0x642/0xb30 [ 404.175537][ T38] ? skb_put+0x11b/0x210 [ 404.175564][ T38] netlink_sendmsg+0x805/0xb30 [ 404.175596][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.175626][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 404.175644][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.175667][ T38] __sock_sendmsg+0x21c/0x270 [ 404.175697][ T38] __sys_sendto+0x3c7/0x520 [ 404.175723][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 404.175772][ T38] ? exc_page_fault+0x76/0xf0 [ 404.175799][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 404.175825][ T38] __x64_sys_sendto+0xde/0x100 [ 404.175851][ T38] do_syscall_64+0xfa/0x3b0 [ 404.175867][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.175889][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.175907][ T38] ? clear_bhb_loop+0x60/0xb0 [ 404.175928][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.175945][ T38] RIP: 0033:0x7f10d7d00d5c [ 404.175960][ T38] RSP: 002b:00007f10d5f5cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 404.175978][ T38] RAX: ffffffffffffffda RBX: 00007f10d5f5cfc0 RCX: 00007f10d7d00d5c [ 404.175992][ T38] RDX: 0000000000000028 RSI: 00007f10d5f5d010 RDI: 0000000000000007 [ 404.176004][ T38] RBP: 0000000000000000 R08: 00007f10d5f5cf14 R09: 000000000000000c [ 404.176015][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 404.176026][ T38] R13: 00007f10d5f5cf68 R14: 00007f10d5f5d010 R15: 0000000000000000 [ 404.176055][ T38] [ 404.176063][ T38] INFO: task syz.1.1245:9453 blocked for more than 143 seconds. [ 404.176076][ T38] Not tainted syzkaller #0 [ 404.176085][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 404.176094][ T38] task:syz.1.1245 state:D stack:26664 pid:9453 tgid:9451 ppid:5840 task_flags:0x400140 flags:0x00004004 [ 404.176137][ T38] Call Trace: [ 404.176143][ T38] [ 404.176154][ T38] __schedule+0x16f3/0x4c20 [ 404.176203][ T38] ? __pfx___schedule+0x10/0x10 [ 404.176245][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 404.176270][ T38] rt_mutex_schedule+0x77/0xf0 [ 404.176287][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 404.176308][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 404.176347][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 404.176369][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 404.176390][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 404.176409][ T38] ? __lock_acquire+0xab9/0xd20 [ 404.176441][ T38] ? genl_rcv_msg+0x10d/0x790 [ 404.176472][ T38] ? genl_rcv_msg+0x10d/0x790 [ 404.176487][ T38] mutex_lock_nested+0x16a/0x1d0 [ 404.176506][ T38] ? __pfx_stack_trace_save+0x10/0x10 [ 404.176523][ T38] ? radix_tree_lookup+0x243/0x290 [ 404.176548][ T38] genl_rcv_msg+0x10d/0x790 [ 404.176568][ T38] ? __lock_acquire+0xab9/0xd20 [ 404.176591][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.176615][ T38] ? __lock_acquire+0xab9/0xd20 [ 404.176656][ T38] netlink_rcv_skb+0x205/0x470 [ 404.176684][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.176704][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.176742][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.176763][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.176789][ T38] genl_rcv+0x28/0x40 [ 404.176805][ T38] netlink_unicast+0x843/0xa10 [ 404.176835][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 404.176858][ T38] ? netlink_sendmsg+0x642/0xb30 [ 404.176877][ T38] ? skb_put+0x11b/0x210 [ 404.176904][ T38] netlink_sendmsg+0x805/0xb30 [ 404.176936][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.176966][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 404.176984][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.177007][ T38] __sock_sendmsg+0x21c/0x270 [ 404.177031][ T38] __sys_sendto+0x3c7/0x520 [ 404.177057][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 404.177107][ T38] ? exc_page_fault+0x76/0xf0 [ 404.177133][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 404.177158][ T38] __x64_sys_sendto+0xde/0x100 [ 404.177185][ T38] do_syscall_64+0xfa/0x3b0 [ 404.177200][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.177224][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.177241][ T38] ? clear_bhb_loop+0x60/0xb0 [ 404.177262][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.177278][ T38] RIP: 0033:0x7f10d7d00d5c [ 404.177292][ T38] RSP: 002b:00007f10d5f3bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 404.177310][ T38] RAX: ffffffffffffffda RBX: 00007f10d5f3bfc0 RCX: 00007f10d7d00d5c [ 404.177323][ T38] RDX: 0000000000000024 RSI: 00007f10d5f3c010 RDI: 0000000000000007 [ 404.177335][ T38] RBP: 0000000000000000 R08: 00007f10d5f3bf14 R09: 000000000000000c [ 404.177346][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 404.177357][ T38] R13: 00007f10d5f3bf68 R14: 00007f10d5f3c010 R15: 0000000000000000 [ 404.177386][ T38] [ 404.177393][ T38] INFO: task syz.1.1245:9454 blocked for more than 143 seconds. [ 404.177405][ T38] Not tainted syzkaller #0 [ 404.177413][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 404.177422][ T38] task:syz.1.1245 state:D stack:26168 pid:9454 tgid:9451 ppid:5840 task_flags:0x400140 flags:0x00004004 [ 404.177463][ T38] Call Trace: [ 404.177469][ T38] [ 404.177480][ T38] __schedule+0x16f3/0x4c20 [ 404.177528][ T38] ? __pfx___schedule+0x10/0x10 [ 404.177569][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 404.177595][ T38] rt_mutex_schedule+0x77/0xf0 [ 404.177611][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 404.177631][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 404.177669][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 404.177700][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 404.177721][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 404.177739][ T38] ? __lock_acquire+0xab9/0xd20 [ 404.177771][ T38] ? genl_rcv_msg+0x10d/0x790 [ 404.177802][ T38] ? genl_rcv_msg+0x10d/0x790 [ 404.177818][ T38] mutex_lock_nested+0x16a/0x1d0 [ 404.177837][ T38] ? __pfx_stack_trace_save+0x10/0x10 [ 404.177854][ T38] ? radix_tree_lookup+0x243/0x290 [ 404.177878][ T38] genl_rcv_msg+0x10d/0x790 [ 404.177899][ T38] ? __lock_acquire+0xab9/0xd20 [ 404.177920][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.177945][ T38] ? __lock_acquire+0xab9/0xd20 [ 404.177974][ T38] netlink_rcv_skb+0x205/0x470 [ 404.177997][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.178017][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.178054][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.178075][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.178102][ T38] genl_rcv+0x28/0x40 [ 404.178118][ T38] netlink_unicast+0x843/0xa10 [ 404.178148][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 404.178172][ T38] ? netlink_sendmsg+0x642/0xb30 [ 404.178191][ T38] ? skb_put+0x11b/0x210 [ 404.178217][ T38] netlink_sendmsg+0x805/0xb30 [ 404.178250][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.178280][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 404.178297][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.178320][ T38] __sock_sendmsg+0x21c/0x270 [ 404.178345][ T38] __sys_sendto+0x3c7/0x520 [ 404.178371][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 404.178420][ T38] ? exc_page_fault+0x76/0xf0 [ 404.178447][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 404.178473][ T38] __x64_sys_sendto+0xde/0x100 [ 404.178499][ T38] do_syscall_64+0xfa/0x3b0 [ 404.178515][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.178538][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.178555][ T38] ? clear_bhb_loop+0x60/0xb0 [ 404.178576][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.178592][ T38] RIP: 0033:0x7f10d7d00d5c [ 404.178607][ T38] RSP: 002b:00007f10d5f1aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 404.178624][ T38] RAX: ffffffffffffffda RBX: 00007f10d5f1afc0 RCX: 00007f10d7d00d5c [ 404.178637][ T38] RDX: 0000000000000028 RSI: 00007f10d5f1b010 RDI: 000000000000000b [ 404.178648][ T38] RBP: 0000000000000000 R08: 00007f10d5f1af14 R09: 000000000000000c [ 404.178660][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 404.178676][ T38] R13: 00007f10d5f1af68 R14: 00007f10d5f1b010 R15: 0000000000000000 [ 404.178705][ T38] [ 404.178712][ T38] INFO: task syz-executor:9464 blocked for more than 143 seconds. [ 404.178724][ T38] Not tainted syzkaller #0 [ 404.178732][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 404.178740][ T38] task:syz-executor state:D stack:22232 pid:9464 tgid:9464 ppid:1 task_flags:0x400140 flags:0x00004004 [ 404.178780][ T38] Call Trace: [ 404.178785][ T38] [ 404.178796][ T38] __schedule+0x16f3/0x4c20 [ 404.178845][ T38] ? __pfx___schedule+0x10/0x10 [ 404.178886][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 404.178913][ T38] rt_mutex_schedule+0x77/0xf0 [ 404.178929][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 404.178950][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 404.178987][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 404.179010][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 404.179031][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 404.179049][ T38] ? __lock_acquire+0xab9/0xd20 [ 404.179080][ T38] ? genl_rcv_msg+0x10d/0x790 [ 404.179111][ T38] ? genl_rcv_msg+0x10d/0x790 [ 404.179127][ T38] mutex_lock_nested+0x16a/0x1d0 [ 404.179146][ T38] ? __pfx_stack_trace_save+0x10/0x10 [ 404.179163][ T38] ? radix_tree_lookup+0x243/0x290 [ 404.179187][ T38] genl_rcv_msg+0x10d/0x790 [ 404.179208][ T38] ? __lock_acquire+0xab9/0xd20 [ 404.179230][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.179254][ T38] ? __lock_acquire+0xab9/0xd20 [ 404.179284][ T38] netlink_rcv_skb+0x205/0x470 [ 404.179307][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.179327][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.179364][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.179385][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.179411][ T38] genl_rcv+0x28/0x40 [ 404.179428][ T38] netlink_unicast+0x843/0xa10 [ 404.179458][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 404.179480][ T38] ? netlink_sendmsg+0x642/0xb30 [ 404.179500][ T38] ? skb_put+0x11b/0x210 [ 404.179527][ T38] netlink_sendmsg+0x805/0xb30 [ 404.179559][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.179590][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 404.179606][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.179630][ T38] __sock_sendmsg+0x21c/0x270 [ 404.179654][ T38] __sys_sendto+0x3c7/0x520 [ 404.179684][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 404.179736][ T38] ? fd_install+0x9a/0x550 [ 404.179757][ T38] ? fd_install+0x313/0x550 [ 404.179786][ T38] __x64_sys_sendto+0xde/0x100 [ 404.179813][ T38] do_syscall_64+0xfa/0x3b0 [ 404.179829][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.179852][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.181371][ T38] ? clear_bhb_loop+0x60/0xb0 [ 404.181398][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.181416][ T38] RIP: 0033:0x7f7de89e0d5c [ 404.181431][ T38] RSP: 002b:00007ffc8f70f260 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 404.181449][ T38] RAX: ffffffffffffffda RBX: 00007f7de9764620 RCX: 00007f7de89e0d5c [ 404.181463][ T38] RDX: 0000000000000020 RSI: 00007f7de9764670 RDI: 0000000000000005 [ 404.181475][ T38] RBP: 0000000000000000 R08: 00007ffc8f70f2b4 R09: 000000000000000c [ 404.181486][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 404.181497][ T38] R13: 00007ffc8f70f308 R14: 00007f7de9764670 R15: 0000000000000000 [ 404.181526][ T38] [ 404.181577][ T38] [ 404.181577][ T38] Showing all locks held in the system: [ 404.181587][ T38] 3 locks held by kworker/u8:0/12: [ 404.181599][ T38] 4 locks held by pr/legacy/17: [ 404.181611][ T38] 1 lock held by khungtaskd/38: [ 404.181620][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 404.181692][ T38] 1 lock held by syslogd/5188: [ 404.181702][ T38] #0: ffff8880252e5858 (&ei->socket.wq.wait){+.+.}-{3:3}, at: finish_wait+0xbf/0x1f0 [ 404.181745][ T38] 3 locks held by klogd/5195: [ 404.181756][ T38] 2 locks held by getty/5597: [ 404.181765][ T38] #0: ffff88823bf288a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 404.181813][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 404.181857][ T38] 2 locks held by kworker/u9:3/5846: [ 404.181867][ T38] #0: ffff888024ea4938 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 404.181911][ T38] #1: ffffc9000490fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 404.181955][ T38] 2 locks held by kworker/u9:8/5857: [ 404.181965][ T38] #0: ffff888024e87138 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 404.182008][ T38] #1: ffffc90004a9fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 404.182057][ T38] 2 locks held by kworker/1:6/6080: [ 404.182068][ T38] 3 locks held by syz.0.1183/9298: [ 404.182078][ T38] #0: ffffffff8ed39940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.182117][ T38] #1: ffffffff8ed39738 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.182156][ T38] #2: ffff888024e83a00 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x2f/0x2a0 [ 404.182198][ T38] 2 locks held by syz.3.1208/9357: [ 404.182207][ T38] #0: ffffffff8ed39940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.182245][ T38] #1: ffffffff8ed39738 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.182286][ T38] 2 locks held by syz.2.1221/9393: [ 404.182295][ T38] #0: ffffffff8ed39940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.182333][ T38] #1: ffffffff8ed39738 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.182374][ T38] 2 locks held by syz.4.1224/9400: [ 404.182383][ T38] #0: ffffffff8ed39940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.182421][ T38] #1: ffffffff8ed39738 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.182460][ T38] 2 locks held by syz.1.1245/9452: [ 404.182470][ T38] #0: ffffffff8ed39940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.182508][ T38] #1: ffffffff8ed39738 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.182546][ T38] 2 locks held by syz.1.1245/9453: [ 404.182555][ T38] #0: ffffffff8ed39940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.182592][ T38] #1: ffffffff8ed39738 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.182631][ T38] 2 locks held by syz.1.1245/9454: [ 404.182641][ T38] #0: ffffffff8ed39940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.182684][ T38] #1: ffffffff8ed39738 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.182723][ T38] 2 locks held by syz-executor/9464: [ 404.182732][ T38] #0: ffffffff8ed39940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.182770][ T38] #1: ffffffff8ed39738 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.182811][ T38] 2 locks held by syz-executor/9475: [ 404.182821][ T38] #0: ffffffff8ed39940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.182859][ T38] #1: ffffffff8ed39738 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.182899][ T38] 2 locks held by syz-executor/9484: [ 404.182909][ T38] #0: ffffffff8ed39940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.182947][ T38] #1: ffffffff8ed39738 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.182987][ T38] 2 locks held by syz-executor/9493: [ 404.182997][ T38] #0: ffffffff8ed39940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.183035][ T38] #1: ffffffff8ed39738 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.183076][ T38] 2 locks held by syz-executor/9502: [ 404.183086][ T38] #0: ffffffff8ed39940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.183125][ T38] #1: ffffffff8ed39738 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.183164][ T38] 2 locks held by syz-executor/9514: [ 404.183174][ T38] #0: ffffffff8ed39940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.183213][ T38] #1: ffffffff8ed39738 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.183260][ T38] 2 locks held by syz-executor/9524: [ 404.183271][ T38] #0: ffffffff8ed39940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.183309][ T38] #1: ffffffff8ed39738 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.183348][ T38] 2 locks held by syz-executor/9535: [ 404.183358][ T38] #0: ffffffff8ed39940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.183397][ T38] #1: ffffffff8ed39738 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.183437][ T38] 2 locks held by syz-executor/9537: [ 404.183446][ T38] #0: ffffffff8ed39940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.183484][ T38] #1: ffffffff8ed39738 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.183525][ T38] 2 locks held by syz-executor/9554: [ 404.183535][ T38] #0: ffffffff8ed39940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.183573][ T38] #1: ffffffff8ed39738 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.183613][ T38] 2 locks held by syz-executor/9566: [ 404.183623][ T38] #0: ffffffff8ed39940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.183661][ T38] #1: ffffffff8ed39738 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.183729][ T38] 2 locks held by syz-executor/9577: [ 404.183739][ T38] #0: ffffffff8ed39940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.183777][ T38] #1: ffffffff8ed39738 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.183817][ T38] 2 locks held by syz-executor/9587: [ 404.183827][ T38] #0: ffffffff8ed39940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.183865][ T38] #1: ffffffff8ed39738 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.183905][ T38] 2 locks held by syz-executor/9589: [ 404.183915][ T38] #0: ffffffff8ed39940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.183953][ T38] #1: ffffffff8ed39738 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.183994][ T38] 2 locks held by syz-executor/9604: [ 404.184003][ T38] #0: ffffffff8ed39940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.184041][ T38] #1: ffffffff8ed39738 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.184081][ T38] [ 404.184086][ T38] ============================================= [ 404.184086][ T38] [ 404.184103][ T38] NMI backtrace for cpu 0 [ 404.184126][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 404.184146][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 404.184156][ T38] Call Trace: [ 404.184163][ T38] [ 404.184170][ T38] dump_stack_lvl+0x189/0x250 [ 404.184197][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.184219][ T38] ? __pfx__printk+0x10/0x10 [ 404.184250][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 404.184273][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 404.184296][ T38] ? __pfx__printk+0x10/0x10 [ 404.184318][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 404.184340][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 404.184364][ T38] watchdog+0xf93/0xfe0 [ 404.184389][ T38] ? watchdog+0x1de/0xfe0 [ 404.184415][ T38] kthread+0x70e/0x8a0 [ 404.184441][ T38] ? __pfx_watchdog+0x10/0x10 [ 404.184461][ T38] ? __pfx_kthread+0x10/0x10 [ 404.184488][ T38] ? __pfx_kthread+0x10/0x10 [ 404.184512][ T38] ret_from_fork+0x436/0x7d0 [ 404.184535][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 404.184561][ T38] ? __switch_to_asm+0x39/0x70 [ 404.184576][ T38] ? __switch_to_asm+0x33/0x70 [ 404.184591][ T38] ? __pfx_kthread+0x10/0x10 [ 404.184614][ T38] ret_from_fork_asm+0x1a/0x30 [ 404.184645][ T38] [ 404.184652][ T38] Sending NMI from CPU 0 to CPUs 1: [ 404.184676][ C1] NMI backtrace for cpu 1 [ 404.184689][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 404.184706][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 404.184715][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 404.184734][ C1] Code: e8 ee 39 7f fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5f 80 de fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 1a 8c bb 05 cc 44 89 f9 80 e1 07 [ 404.184747][ C1] RSP: 0018:ffffc90000167890 EFLAGS: 00000202 [ 404.184761][ C1] RAX: 1ffffffff3275c00 RBX: 00000000000003fd RCX: 0000000000000000 [ 404.184772][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 404.184781][ C1] RBP: ffffffff993ae890 R08: 0000000000000000 R09: 0000000000000000 [ 404.184791][ C1] R10: dffffc0000000000 R11: ffffffff853f3400 R12: dffffc0000000000 [ 404.184803][ C1] R13: 0000000000000000 R14: ffffffff993ae600 R15: 0000000000000000 [ 404.184813][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 404.184826][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 404.184837][ C1] CR2: 00007f0e0e2da25b CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 404.184851][ C1] Call Trace: [ 404.184857][ C1] [ 404.184864][ C1] wait_for_lsr+0x1a7/0x2f0 [ 404.184886][ C1] serial8250_console_write+0x11bd/0x1b40 [ 404.184909][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 404.184931][ C1] ? console_flush_all+0x13a/0xcd0 [ 404.184949][ C1] ? console_flush_all+0x476/0xcd0 [ 404.184967][ C1] console_flush_all+0x695/0xcd0 [ 404.184984][ C1] ? console_flush_all+0x13a/0xcd0 [ 404.185002][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 404.185018][ C1] ? __lock_acquire+0xab9/0xd20 [ 404.185041][ C1] __console_flush_and_unlock+0xa4/0x240 [ 404.185058][ C1] ? __pfx___console_flush_and_unlock+0x10/0x10 [ 404.185079][ C1] legacy_kthread_func+0x13b/0x1a0 [ 404.185096][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 404.185113][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 404.185131][ C1] ? __kthread_parkme+0x7b/0x200 [ 404.185148][ C1] ? __kthread_parkme+0x1a1/0x200 [ 404.185168][ C1] kthread+0x70e/0x8a0 [ 404.185188][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 404.185204][ C1] ? __pfx_kthread+0x10/0x10 [ 404.185225][ C1] ? __pfx_kthread+0x10/0x10 [ 404.185244][ C1] ret_from_fork+0x436/0x7d0 [ 404.185262][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 404.185282][ C1] ? __switch_to_asm+0x39/0x70 [ 404.185295][ C1] ? __switch_to_asm+0x33/0x70 [ 404.185308][ C1] ? __pfx_kthread+0x10/0x10 [ 404.185328][ C1] ret_from_fork_asm+0x1a/0x30 [ 404.185349][ C1] [ 404.185677][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 404.185690][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 404.185710][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 404.185719][ T38] Call Trace: [ 404.185726][ T38] [ 404.185732][ T38] dump_stack_lvl+0x99/0x250 [ 404.185755][ T38] ? __asan_memcpy+0x40/0x70 [ 404.185775][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.185797][ T38] ? __pfx__printk+0x10/0x10 [ 404.185827][ T38] vpanic+0x281/0x750 [ 404.185853][ T38] ? __pfx_vpanic+0x10/0x10 [ 404.185873][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 404.185891][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.185924][ T38] panic+0xb9/0xc0 [ 404.185945][ T38] ? __pfx_panic+0x10/0x10 [ 404.185970][ T38] ? irq_work_queue+0xc3/0x140 [ 404.185994][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 404.186017][ T38] watchdog+0xfd2/0xfe0 [ 404.186041][ T38] ? watchdog+0x1de/0xfe0 [ 404.186067][ T38] kthread+0x70e/0x8a0 [ 404.186093][ T38] ? __pfx_watchdog+0x10/0x10 [ 404.186113][ T38] ? __pfx_kthread+0x10/0x10 [ 404.186140][ T38] ? __pfx_kthread+0x10/0x10 [ 404.186165][ T38] ret_from_fork+0x436/0x7d0 [ 404.186188][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 404.186215][ T38] ? __switch_to_asm+0x39/0x70 [ 404.186230][ T38] ? __switch_to_asm+0x33/0x70 [ 404.186245][ T38] ? __pfx_kthread+0x10/0x10 [ 404.186269][ T38] ret_from_fork_asm+0x1a/0x30 [ 404.186301][ T38] [ 404.186557][ T38] Kernel Offset: disabled