last executing test programs: 7.405523136s ago: executing program 3 (id=1754): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) 7.148265614s ago: executing program 3 (id=1763): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) read$FUSE(r0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r2 = dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_CARRIER={0x5}, @IFLA_MASTER={0x8}]}, 0x30}}, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x30, r2, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r0, 0x4068aea3, &(0x7f0000000300)={0x8f, 0x0, 0xf}) get_mempolicy(&(0x7f0000000100), 0x0, 0x9, &(0x7f0000013000/0x3000)=nil, 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='H', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="2b00330080000000ffffffffffff080211000000080211000000000000000000000000006400000003"], 0x48}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, 0x0, 0x4000805) 6.894974757s ago: executing program 3 (id=1770): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) 6.382007221s ago: executing program 3 (id=1780): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x2c0842, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000100)=""/114, &(0x7f0000000180)=0x72) recvmsg(r0, 0x0, 0x700) 6.137867738s ago: executing program 4 (id=1786): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 6.059948753s ago: executing program 0 (id=1789): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x58}}], 0x2, 0x0) 5.928670621s ago: executing program 2 (id=1790): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') r4 = socket(0x28, 0x1, 0x2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0xa6) close_range(r5, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000000001f0000000000000a40000000060a010400000000000000000200000014000480100001800c010000626974779d7365000900010073797a300000020073797a3200000000140000001100010000000000000000000d905ec205f60000000a07a6f3810a3c542da9e38bdb0af7a9f5cbf964dcadf5000300000000f7094a6c6a5fb657926c386a837fde7f838ecfe704e11fe3417859059e22a814e34e750904b104946fb0d9eacec3c00abb72a02b05fbd1844cc406ae04defea97f160bb9df36a757c2e5192d1dfe1c0a94230a9fb776601815a77a80e7cfe5"], 0x68}}, 0x0) recvmmsg(r3, &(0x7f0000005940)=[{{&(0x7f0000000240)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000005b80)=[{&(0x7f00000005c0)=""/191, 0xbf}, {&(0x7f0000000680)=""/136, 0x88}, {&(0x7f0000000a00)=""/40, 0x28}], 0x3}}, {{&(0x7f0000000440)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000340)=[{&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000000740)=""/218, 0xda}], 0x2, &(0x7f0000000840)=""/200, 0xc8}, 0x4}, {{&(0x7f0000000940)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002c00)=""/220, 0xdc}, {&(0x7f0000002d00)=""/247, 0xf7}, {&(0x7f0000002e00)=""/148, 0x94}, {&(0x7f00000009c0)=""/40, 0x28}, {&(0x7f0000002ec0)=""/90, 0x5a}, {&(0x7f0000002f40)=""/4096, 0x1000}], 0x6, &(0x7f0000003fc0)=""/4096, 0x1000}}, {{&(0x7f0000004fc0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000005040)=""/154, 0x9a}, {&(0x7f0000005100)=""/250, 0xfa}, {&(0x7f0000000a00)}], 0x3}, 0x6}, {{&(0x7f0000005200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000005280)=""/114, 0x72}, {&(0x7f0000005bc0)=""/85, 0x55}], 0x2, &(0x7f0000005340)=""/2, 0x2}, 0x194e}, {{&(0x7f0000005380)=@phonet, 0x80, &(0x7f0000005480)=[{&(0x7f0000005400)=""/36, 0x24}, {&(0x7f0000005440)=""/36, 0x24}], 0x2}, 0x2e}, {{&(0x7f00000054c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000005600)=[{&(0x7f0000005540)=""/185, 0xb9}], 0x1, &(0x7f0000005640)=""/7, 0x7}, 0x5}, {{0x0, 0x0, &(0x7f0000005840)=[{&(0x7f0000005680)=""/209, 0xd1}, {&(0x7f0000005780)=""/185, 0xb9}], 0x2, &(0x7f0000005880)=""/129, 0x81}, 0x2}], 0x8, 0xa1, &(0x7f0000005b40)={0x0, 0x3938700}) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x18) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0xa, 0x4005, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000380)}, {&(0x7f0000000b40)="af70da5d267fdea676a869dcb3d4e7f1544cd2df45ee6eaa34bfcfbc82f452396a66d9a723d1923ec3e5d9056d8190898c64b12c5d91940f7e90ecae4f068c32a8bfdd4f73f3db6fed03428409f1196145a10b5b923b7c4742acdd6ad04667acb2c3bd2d349f1754202e53fc1766", 0x6e}], 0x2}}, {{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @remote, 0x40}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="9f3371fed8c0c7fcbe68488a940dc5736ca78043c8d5e0f24c252251d1b51e2be08c4185f6ed04867f3e8318b0ff41a71621ca61ed89cfb85b82bbbef9be5a87b50ba8050f8be14b347e1d170eb9490e10cce2fc4dc57884cd62174f3c5eb4ba38bdeb", 0x63}], 0x1}}], 0x2, 0xc0c0) 5.928483652s ago: executing program 4 (id=1791): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000002c40)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000300)={{r2, 0x200, 0x1000, 0x3, 0x1, 0x8, 0x80000001, 0x3, 0x6, 0x40000000, 0x100, 0x1, 0x3, 0xcc, 0x4cd}}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) 5.912802744s ago: executing program 0 (id=1792): syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[], 0x0) socket$inet6(0xa, 0x80002, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x222040, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 5.769847537s ago: executing program 1 (id=1794): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)="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", 0x2f5}, {&(0x7f0000000fc0)="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"/807, 0x327}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e8463", 0x35}], 0x3, 0x0, 0x0, 0x900}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="fa06a87e28e73d9b468084f879f1", 0xe}, {&(0x7f0000000300)="d53f2fc8f2b1acb1715ace06d9a16f6ad095828a3273bfc6794468cceda826d22be8ff58bf0def3bad5f7dd862f03a33f410c909914b2f4ccb22b77cf53f89eb63cbb22290664ba55c4f292220e7b87559d2a9eb1361d8f08e117c2bca6c44b73bbfd2096c9dde8fbd6d770ce83574a225188ae4fd4f130444b4b4768a742be8bd490157a7b7033b24c2a7ece8b461dccc68199288becfd92ccecf2c3c70dbf53dd420bbcece30b3b65c81e29c613a8ae477249b7d56eea5c0691e997fa3ecb13ba3bc3def0b685d5e4b24", 0xcb}, {&(0x7f0000000480)="86c96f9217ef7eda926fdbcdd453df02cf29f0e95b5d0d44603f34b69f04d0e3b9ad2feaf9e06258453edd8d9e8a7eb7f718ac5a3cbf3beb80c9b94f86385811171cc8e2a80169c44376f23b680cb2ad208e2019ff87294c625b5cc8651c92d1139f8695ade6b2e5b18bc878ad847e326bfb427ed71efcff3a4d9b7522a428f2b869e872542401e84dfe350e3557", 0x8e}, {&(0x7f0000000200)}, {&(0x7f0000000240)}, {&(0x7f0000000540)="cd7b0bda0876a5226dea83d85835fd9b3c451e2ba27d3ff92c96ef3657940422b6b05d047189ef25e4e9b8e2de89509b1a7049310b56a4cf77d7bfde4ae4152f9570161a2c615bac25f34e3f77e691697819d36d655dd71bc4a8a96a0a5db7d1c360bc3dc7281e0f432945b988a0fcd68022aef48ace9d82db", 0x79}], 0x6}}, {{&(0x7f0000000400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000700)="7a2b16163fbf8309c10216441477ee6c589422450c1fe6bd11730f1b3a93480e462cd21c8dff174c6c84009549607c8b67c4b55d555ddecd452bf054746ba11e8f87e377feec3fac094cc73c81f3ad8fe24f4ea15b418c2d71a4c1a6be5c9846bbd194ee1454b8bd8da8173b47d5ae9abf5804140ef90eedd1655912a8133994f44f42d4634e4840166bd7b1f50a8a77f27ea87ae030335f8bffff60255052027c7fbcee7f2faecf4c8495001ab7e7c0cc985b2e778b88ec31918735f8770886fe2896582bc7f1dc2f0d1281532f4808d640e572450d8f66cdc1f5ee5a07e5c7a571f13eb3923a", 0xe7}, {&(0x7f0000001300)="bae048b4dabc46709c76b751e4b7ac7ee36ab88d9b649a951de271044c8f807ef6aeff78bcb49ed7acf9b3a0f90ded3927b2c16a65932cc1b3bcc4af0b98f8b4304c0a45fca66c9151122d1b86e0bcfe9bf01323f2ec673499083c572c07bd2e864e61b9cce1524627e848e2a6ecdcf446a89fda38ec6d70eed8201339a5d9cbe080e2aadd61ff0a57cc47256cd4", 0x8e}], 0x2, &(0x7f0000001480)=[@ip_retopts={{0x40, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4, 0x37, 0x1, 0xa}, @noop, @timestamp_addr={0x44, 0x24, 0x88, 0x1, 0x9, [{@loopback, 0x9}, {@local, 0x57}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @generic={0x88, 0x2}, @end, @generic={0x0, 0x3, "13"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @empty}}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x94, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xf6, 0x0, 0x6, [0x4, 0x7, 0x9eb, 0x5]}, @rr={0x7, 0x17, 0x78, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @ssrr={0x89, 0x7, 0x73, [@rand_addr=0x64010100]}, @lsrr={0x83, 0x23, 0x42, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3d}, @local, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast]}, @ssrr={0x89, 0x13, 0xb6, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @local]}, @timestamp={0x44, 0x4, 0x7b, 0x0, 0x2}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x31, 0x3, 0x0, [{@loopback}, {@local}]}]}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x9a, 0x3, 0x6, [{@local, 0x8}, {@rand_addr=0x64010102, 0x10000}, {@private=0xa010100, 0x7}]}, @cipso={0x86, 0x2b, 0x0, [{0x7, 0xd, "79c0a81c8effe8f757022d"}, {0x1, 0x4, "1a56"}, {0x6, 0xa, "1db9631006a0d9d8"}, {0x5, 0xa, "7352344c7aa9029f"}]}, @timestamp_prespec={0x44, 0x14, 0x18, 0x3, 0x9, [{@local, 0x9060}, {@rand_addr=0x64010101, 0x1}]}, @timestamp_addr={0x44, 0x44, 0x6d, 0x1, 0x7, [{@local, 0xb5}, {@private=0xa010100, 0x3b4}, {@loopback, 0x57d5}, {@empty, 0x6}, {@broadcast, 0x1}, {@private=0xa010100, 0x2}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xc5}]}]}}}], 0x1c0}}], 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) set_mempolicy(0x3, &(0x7f0000000040)=0x10000000005, 0x7) set_mempolicy(0x8000, &(0x7f0000000000)=0x1, 0x26d5) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x4e20, 0x2, @remote, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x84, &(0x7f0000000000), 0x90) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaeabb00ad2687e3c0040100007992052531611cd1"], 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, 0x0, 0x0) userfaultfd(0x80001) 5.677745151s ago: executing program 0 (id=1795): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00', 0x5}]}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x9) 5.584234847s ago: executing program 4 (id=1796): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x28}}, 0x4040004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x40004) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@nop]}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r3, 0x409, 0x8) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) 5.566198996s ago: executing program 2 (id=1797): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.552467264s ago: executing program 1 (id=1798): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x4, 0x0, 0x0, 0x4000}, 0x4c8c0) 5.459831166s ago: executing program 0 (id=1799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r1, 0x719, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 5.459149301s ago: executing program 2 (id=1800): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x22000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x3) 5.410193303s ago: executing program 3 (id=1801): r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x59) 5.409696867s ago: executing program 1 (id=1802): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x58}}], 0x2, 0x0) 5.204242117s ago: executing program 2 (id=1803): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 5.141070545s ago: executing program 0 (id=1804): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000306010800000000000000000000000005000100"], 0x1c}}, 0x0) 5.062700973s ago: executing program 1 (id=1805): syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[], 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x222040, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 4.944647561s ago: executing program 4 (id=1806): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000002c40)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000300)={{r2, 0x200, 0x1000, 0x3, 0x1, 0x8, 0x80000001, 0x3, 0x6, 0x40000000, 0x100, 0x1, 0x3, 0xcc, 0x4cd}}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) 4.803099441s ago: executing program 2 (id=1807): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) 4.700857906s ago: executing program 3 (id=1808): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') r4 = socket(0x28, 0x1, 0x2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0xa6) close_range(r5, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000000001f0000000000000a40000000060a010400000000000000000200000014000480100001800c010000626974779d7365000900010073797a300000020073797a3200000000140000001100010000000000000000000d905ec205f60000000a07a6f3810a3c542da9e38bdb0af7a9f5cbf964dcadf5000300000000f7094a6c6a5fb657926c386a837fde7f838ecfe704e11fe3417859059e22a814e34e750904b104946fb0d9eacec3c00abb72a02b05fbd1844cc406ae04defea97f160bb9df36a757c2e5192d1dfe1c0a94230a9fb776601815a77a80e7cfe5"], 0x68}}, 0x0) recvmmsg(r3, &(0x7f0000005940)=[{{&(0x7f0000000240)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000005b80)=[{&(0x7f00000005c0)=""/191, 0xbf}, {&(0x7f0000000680)=""/136, 0x88}, {&(0x7f0000000a00)=""/40, 0x28}], 0x3}}, {{&(0x7f0000000440)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000340)=[{&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000000740)=""/218, 0xda}], 0x2, &(0x7f0000000840)=""/200, 0xc8}, 0x4}, {{&(0x7f0000000940)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002c00)=""/220, 0xdc}, {&(0x7f0000002d00)=""/247, 0xf7}, {&(0x7f0000002e00)=""/148, 0x94}, {&(0x7f00000009c0)=""/40, 0x28}, {&(0x7f0000002ec0)=""/90, 0x5a}, {&(0x7f0000002f40)=""/4096, 0x1000}], 0x6, &(0x7f0000003fc0)=""/4096, 0x1000}}, {{&(0x7f0000004fc0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000005040)=""/154, 0x9a}, {&(0x7f0000005100)=""/250, 0xfa}, {&(0x7f0000000a00)}], 0x3}, 0x6}, {{&(0x7f0000005200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000005280)=""/114, 0x72}, {&(0x7f0000005bc0)=""/85, 0x55}], 0x2, &(0x7f0000005340)=""/2, 0x2}, 0x194e}, {{&(0x7f0000005380)=@phonet, 0x80, &(0x7f0000005480)=[{&(0x7f0000005400)=""/36, 0x24}, {&(0x7f0000005440)=""/36, 0x24}], 0x2}, 0x2e}, {{&(0x7f00000054c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000005600)=[{&(0x7f0000005540)=""/185, 0xb9}], 0x1, &(0x7f0000005640)=""/7, 0x7}, 0x5}, {{0x0, 0x0, &(0x7f0000005840)=[{&(0x7f0000005680)=""/209, 0xd1}, {&(0x7f0000005780)=""/185, 0xb9}], 0x2, &(0x7f0000005880)=""/129, 0x81}, 0x2}], 0x8, 0xa1, &(0x7f0000005b40)={0x0, 0x3938700}) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x18) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0xa, 0x4005, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000380)}, {&(0x7f0000000b40)="af70da5d267fdea676a869dcb3d4e7f1544cd2df45ee6eaa34bfcfbc82f452396a66d9a723d1923ec3e5d9056d8190898c64b12c5d91940f7e90ecae4f068c32a8bfdd4f73f3db6fed03428409f1196145a10b5b923b7c4742acdd6ad04667acb2c3bd2d349f1754202e53fc1766", 0x6e}], 0x2}}, {{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @remote, 0x40}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="9f3371fed8c0c7fcbe68488a940dc5736ca78043c8d5e0f24c252251d1b51e2be08c4185f6ed04867f3e8318b0ff41a71621ca61ed89cfb85b82bbbef9be5a87b50ba8050f8be14b347e1d170eb9490e10cce2fc4dc57884cd62174f3c5eb4ba38bdeb", 0x63}], 0x1}}], 0x2, 0xc0c0) 4.619167203s ago: executing program 0 (id=1809): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00', 0x5}]}, &(0x7f0000000440)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x9) 4.618742992s ago: executing program 1 (id=1810): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000400)="d00701", 0xfdef, 0x810, 0x0, 0x0) 4.576101838s ago: executing program 4 (id=1811): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0b585d5463a40298459e6ebb94bf2bf363c3a6d0a6c38b5", 0x2f5}, {&(0x7f0000000fc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369b93d78e6e99ed492e7bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e5f011c00d215ff2249901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf1119305f0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef09000000000000007d1fea33bf2acfb7630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b1574826727f5f62f842a3bedb18ec4aa931dfa0fc47e4dca15ec180d04cfdfff82fd9c6066fe65322c8c019dd09c32d60cb5e1b60f6c37ef36acd509dec18fcc274d0334c8fa81809a5dd93396bf972ffd3013add7b197e6cbf06237757ae14f2eaabfcdf934749424c8250eb4ae6d5dd57b192825821fce610cbba1932ea796429f6a37e3e201c762a91cfa73f9be510c7ec44617a93327c7a3eb96149002dd53aae59748df921404f4373b845f6e793fce38e235d027e7cfb9c0db2464000928b80e8827249391270adaa4ba2baaf00563827476fe025e59235450acd9707bfff75c48658074dfd3f98901645972b827842c9518f00689eb7db0b9434deda68be1db940daac02474f2ff3a319ebe25f9fbab2250855e7591b968b14135545b86d946705195a62c0fed40c22c56218cc07c7be3b556838b2a15e12c6244dc221ed502b1f249dd000"/807, 0x327}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e8463", 0x35}], 0x3, 0x0, 0x0, 0x900}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="fa06a87e28e73d9b468084f879f1", 0xe}, {&(0x7f0000000300)="d53f2fc8f2b1acb1715ace06d9a16f6ad095828a3273bfc6794468cceda826d22be8ff58bf0def3bad5f7dd862f03a33f410c909914b2f4ccb22b77cf53f89eb63cbb22290664ba55c4f292220e7b87559d2a9eb1361d8f08e117c2bca6c44b73bbfd2096c9dde8fbd6d770ce83574a225188ae4fd4f130444b4b4768a742be8bd490157a7b7033b24c2a7ece8b461dccc68199288becfd92ccecf2c3c70dbf53dd420bbcece30b3b65c81e29c613a8ae477249b7d56eea5c0691e997fa3ecb13ba3bc3def0b685d5e4b24", 0xcb}, {&(0x7f0000000480)="86c96f9217ef7eda926fdbcdd453df02cf29f0e95b5d0d44603f34b69f04d0e3b9ad2feaf9e06258453edd8d9e8a7eb7f718ac5a3cbf3beb80c9b94f86385811171cc8e2a80169c44376f23b680cb2ad208e2019ff87294c625b5cc8651c92d1139f8695ade6b2e5b18bc878ad847e326bfb427ed71efcff3a4d9b7522a428f2b869e872542401e84dfe350e3557", 0x8e}, {&(0x7f0000000200)}, {&(0x7f0000000240)}, {&(0x7f0000000540)="cd7b0bda0876a5226dea83d85835fd9b3c451e2ba27d3ff92c96ef3657940422b6b05d047189ef25e4e9b8e2de89509b1a7049310b56a4cf77d7bfde4ae4152f9570161a2c615bac25f34e3f77e691697819d36d655dd71bc4a8a96a0a5db7d1c360bc3dc7281e0f432945b988a0fcd68022aef48ace9d82db", 0x79}], 0x6}}, {{&(0x7f0000000400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000700)="7a2b16163fbf8309c10216441477ee6c589422450c1fe6bd11730f1b3a93480e462cd21c8dff174c6c84009549607c8b67c4b55d555ddecd452bf054746ba11e8f87e377feec3fac094cc73c81f3ad8fe24f4ea15b418c2d71a4c1a6be5c9846bbd194ee1454b8bd8da8173b47d5ae9abf5804140ef90eedd1655912a8133994f44f42d4634e4840166bd7b1f50a8a77f27ea87ae030335f8bffff60255052027c7fbcee7f2faecf4c8495001ab7e7c0cc985b2e778b88ec31918735f8770886fe2896582bc7f1dc2f0d1281532f4808d640e572450d8f66cdc1f5ee5a07e5c7a571f13eb3923a", 0xe7}, {&(0x7f0000001300)="bae048b4dabc46709c76b751e4b7ac7ee36ab88d9b649a951de271044c8f807ef6aeff78bcb49ed7acf9b3a0f90ded3927b2c16a65932cc1b3bcc4af0b98f8b4304c0a45fca66c9151122d1b86e0bcfe9bf01323f2ec673499083c572c07bd2e864e61b9cce1524627e848e2a6ecdcf446a89fda38ec6d70eed8201339a5d9cbe080e2aadd61ff0a57cc47256cd4", 0x8e}], 0x2, &(0x7f0000001480)=[@ip_retopts={{0x40, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4, 0x37, 0x1, 0xa}, @noop, @timestamp_addr={0x44, 0x24, 0x88, 0x1, 0x9, [{@loopback, 0x9}, {@local, 0x57}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @generic={0x88, 0x2}, @end, @generic={0x0, 0x3, "13"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @empty}}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x94, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xf6, 0x0, 0x6, [0x4, 0x7, 0x9eb, 0x5]}, @rr={0x7, 0x17, 0x78, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x41}, @broadcast]}, @ssrr={0x89, 0x7, 0x73, [@rand_addr=0x64010100]}, @lsrr={0x83, 0x23, 0x42, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3d}, @local, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast]}, @ssrr={0x89, 0x13, 0xb6, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @local]}, @timestamp={0x44, 0x4, 0x7b, 0x0, 0x2}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x31, 0x3, 0x0, [{@loopback}, {@local}]}]}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x9a, 0x3, 0x6, [{@local, 0x8}, {@rand_addr=0x64010102, 0x10000}, {@private=0xa010100, 0x7}]}, @cipso={0x86, 0x2b, 0x0, [{0x7, 0xd, "79c0a81c8effe8f757022d"}, {0x1, 0x4, "1a56"}, {0x6, 0xa, "1db9631006a0d9d8"}, {0x5, 0xa, "7352344c7aa9029f"}]}, @timestamp_prespec={0x44, 0x14, 0x18, 0x3, 0x9, [{@local, 0x9060}, {@rand_addr=0x64010101, 0x1}]}, @timestamp_addr={0x44, 0x44, 0x6d, 0x1, 0x7, [{@local, 0xb5}, {@private=0xa010100, 0x3b4}, {@loopback, 0x57d5}, {@empty, 0x6}, {@broadcast, 0x1}, {@private=0xa010100, 0x2}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xc5}]}]}}}], 0x1c0}}], 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) set_mempolicy(0x3, &(0x7f0000000040)=0x10000000005, 0x7) set_mempolicy(0x8000, &(0x7f0000000000)=0x1, 0x26d5) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x4e20, 0x2, @remote, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x84, &(0x7f0000000000), 0x90) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaeabb00ad2687e3c0040100007992052531611cd1"], 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, 0x0, 0x0) userfaultfd(0x80001) 4.539630803s ago: executing program 2 (id=1812): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x2c0842, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000100)=""/114, &(0x7f0000000180)=0x72) recvmsg(r0, 0x0, 0x700) 263.615677ms ago: executing program 1 (id=1813): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x22000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x3) 0s ago: executing program 4 (id=1814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r1, 0x719, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): strongly recommended to keep mac addresses unique to avoid problems! [ 335.040582][ T8741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.125339][ T8741] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.135477][ T8741] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.145304][ T8741] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.154901][ T8741] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.177726][ T1833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.189478][ T1833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.298229][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.320394][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.494875][ T1833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.528970][ T1833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.640382][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.668671][ T8847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 335.698994][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.712295][ T8847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 335.739049][ T8847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 335.779314][ T8847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 336.136478][ T8847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.191498][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 336.208744][ T9060] netlink: 'syz.4.841': attribute type 4 has an invalid length. [ 336.224807][ T9060] netlink: 17 bytes leftover after parsing attributes in process `syz.4.841'. [ 336.254899][ T9064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.841'. [ 336.298808][ T8847] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.343188][ T5238] Bluetooth: hci2: command tx timeout [ 336.369447][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.376726][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.381957][ T5287] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 336.445326][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.452771][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.551986][ T5287] usb 4-1: Using ep0 maxpacket: 8 [ 336.587633][ T5287] usb 4-1: config 6 has an invalid interface number: 230 but max is 0 [ 336.614629][ T5287] usb 4-1: config 6 has no interface number 0 [ 336.641984][ T5287] usb 4-1: config 6 interface 230 has no altsetting 0 [ 336.678818][ T8847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.684146][ T5287] usb 4-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=2c.a4 [ 336.705370][ T5287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.744617][ T5287] usb 4-1: Product: syz [ 336.748862][ T5287] usb 4-1: Manufacturer: syz [ 336.773047][ T5287] usb 4-1: SerialNumber: syz [ 336.895802][ T8847] veth0_vlan: entered promiscuous mode [ 336.906304][ T9078] netlink: 64 bytes leftover after parsing attributes in process `syz.0.844'. [ 336.938606][ T8847] veth1_vlan: entered promiscuous mode [ 337.053328][ T8847] veth0_macvtap: entered promiscuous mode [ 337.084009][ T8847] veth1_macvtap: entered promiscuous mode [ 337.125220][ T8847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.166446][ T8847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.192493][ T8847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.208541][ T9055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.259043][ T8847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.289573][ T8847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.341869][ T8847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.370659][ T8847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.381376][ T8847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.393445][ T8847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.405246][ T8847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.417488][ T8847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.417518][ T8847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.417539][ T8847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.417559][ T8847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.460340][ T8847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.470583][ T8847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.481129][ T8847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.495815][ T8847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.513731][ T9055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.572759][ T9089] sch_fq: defrate 2 ignored. [ 337.699434][ T8847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.710115][ T8847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.740473][ T8847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.767572][ T8847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.980959][ T1833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.005793][ T1833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.053434][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.086505][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.292646][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 338.303247][ T9107] tipc: Started in network mode [ 338.308384][ T9107] tipc: Node identity 1, cluster identity 4711 [ 338.322162][ T9107] tipc: Node number set to 1 [ 338.503149][ T9112] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 338.504865][ T9111] IPVS: stopping master sync thread 9112 ... [ 339.056852][ T5287] dvb-usb: found a 'DiBcom TFE7790P reference design' in cold state, will try to load a firmware [ 339.271049][ T5287] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 339.311799][ T5287] dib0700: firmware download failed at 7 with -22 [ 339.375076][ T5287] usb 4-1: USB disconnect, device number 46 [ 339.704282][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 339.895450][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 339.905609][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.916331][ T9] usb 2-1: config 0 descriptor?? [ 339.995461][ T9142] netlink: 'syz.2.863': attribute type 4 has an invalid length. [ 340.025794][ T9142] netlink: 17 bytes leftover after parsing attributes in process `syz.2.863'. [ 340.056626][ T9142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.863'. [ 340.251876][ T5287] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 340.364590][ T9] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 340.422233][ T5287] usb 5-1: Using ep0 maxpacket: 8 [ 340.439379][ T5287] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 340.458041][ T5287] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 340.499410][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 340.527436][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 340.584700][ T5287] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 340.630503][ T5287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.662822][ T5287] usb 5-1: Product: syz [ 340.667061][ T5287] usb 5-1: Manufacturer: syz [ 340.703333][ T5287] usb 5-1: SerialNumber: syz [ 340.716462][ T5287] usb 5-1: config 0 descriptor?? [ 340.734621][ T9143] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 340.763960][ T9] playstation 0003:054C:0DF2.0005: Failed to retrieve feature with reportID 32: -71 [ 340.793677][ T9] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense firmware info: -71 [ 340.814413][ T9] playstation 0003:054C:0DF2.0005: Failed to get firmware info from DualSense [ 340.833496][ T9] playstation 0003:054C:0DF2.0005: Failed to create dualsense. [ 340.867901][ T9] playstation 0003:054C:0DF2.0005: probe with driver playstation failed with error -71 [ 340.894990][ T9] usb 2-1: USB disconnect, device number 47 [ 340.998800][ T5287] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 341.033712][ T5287] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input47 [ 341.082812][ C1] powermate: config urb returned -71 [ 341.088623][ C1] powermate: config urb returned -71 [ 341.095491][ C1] powermate: config urb returned -71 [ 341.101067][ C1] powermate: config urb returned -71 [ 341.115469][ T5287] usb 5-1: USB disconnect, device number 56 [ 341.121488][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 341.774073][ T5238] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 342.093476][ T9170] Context (ID=0x4d4) not attached to queue pair (handle=0xffffffff:0x7) [ 342.261915][ T5287] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 342.294900][ T9177] netlink: 60 bytes leftover after parsing attributes in process `syz.1.878'. [ 342.423017][ T5287] usb 5-1: Using ep0 maxpacket: 32 [ 342.436413][ T5287] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 342.462469][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.498912][ T5287] usb 5-1: config 0 descriptor?? [ 342.514290][ T5287] gspca_main: sq930x-2.14.0 probing 041e:403c [ 342.809098][ T5285] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 342.974768][ T5285] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 342.994596][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 343.006033][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 343.016165][ T5285] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 343.029437][ T5285] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 343.038731][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.050482][ T9193] syz.3.886 (9193) used greatest stack depth: 18496 bytes left [ 343.054317][ T5285] usb 3-1: config 0 descriptor?? [ 343.162608][ T5287] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 343.168651][ T5287] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 343.194724][ T5287] usb 5-1: USB disconnect, device number 57 [ 343.227947][ T9199] netlink: 32 bytes leftover after parsing attributes in process `syz.3.887'. [ 343.442343][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 343.481869][ T5285] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 343.489394][ T5285] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 343.500185][ T5285] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 343.508143][ T5285] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 343.515991][ T5285] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 343.524233][ T5285] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 343.535467][ T5285] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 343.552337][ T5285] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 343.579436][ T5285] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 343.593706][ T5285] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 343.612102][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 343.617344][ T5285] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 343.629792][ T5285] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 343.642587][ T9] usb 2-1: config 2 has an invalid interface number: 151 but max is 0 [ 343.661101][ T9] usb 2-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 343.662763][ T5285] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 343.693794][ T5285] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 343.697110][ T9] usb 2-1: config 2 has no interface number 1 [ 343.720696][ T5285] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 343.728408][ T9] usb 2-1: too many endpoints for config 2 interface 0 altsetting 5: 142, using maximum allowed: 30 [ 343.728458][ T9] usb 2-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 142 [ 343.728491][ T9] usb 2-1: config 2 interface 0 has no altsetting 0 [ 343.730950][ T9] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 343.761161][ T5285] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 343.809538][ T5285] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 343.851976][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.860075][ T9] usb 2-1: Product: syz [ 343.883439][ T9] usb 2-1: Manufacturer: syz [ 343.888142][ T9] usb 2-1: SerialNumber: syz [ 344.131900][ T9] usb 2-1: selecting invalid altsetting 1 [ 344.138143][ T9] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 344.138240][ T9] dvb_usb_lmedm04 2-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 344.174207][ T9] usb 2-1: USB disconnect, device number 48 [ 344.221820][ T5283] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 344.373786][ T5283] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 344.408188][ T5283] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 344.441926][ T5283] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 344.470128][ T5283] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.498468][ T5283] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 344.515656][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.537810][ T5283] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 344.551306][ T5283] usb 5-1: invalid MIDI out EP 0 [ 344.644202][ T5283] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 344.775187][ T5285] usb 5-1: USB disconnect, device number 58 [ 344.883410][ T9240] tipc: Started in network mode [ 344.898812][ T9240] tipc: Node identity 1, cluster identity 4711 [ 344.924455][ T9240] tipc: Node number set to 1 [ 345.078235][ T9243] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 345.435906][ T5287] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 345.584535][ T9258] kernel profiling enabled (shift: 0) [ 345.602246][ T5287] usb 2-1: Using ep0 maxpacket: 8 [ 345.609575][ T5287] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 345.630506][ T5287] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 345.647360][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 345.661039][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 345.673010][ T5287] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.689375][ T5287] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 345.721113][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.758941][ T5287] usb 2-1: Product: syz [ 345.771749][ T5287] usb 2-1: Manufacturer: syz [ 345.783051][ T5287] usb 2-1: SerialNumber: syz [ 345.803169][ T5287] usb 2-1: config 0 descriptor?? [ 345.826886][ T5287] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input48 [ 345.936120][ T5286] usb 3-1: USB disconnect, device number 43 [ 346.278646][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.920'. [ 346.451689][ T9258] syz.4.914: vmalloc error: size 738197504, failed to allocated page array size 1441792, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 346.470354][ T9258] CPU: 1 UID: 0 PID: 9258 Comm: syz.4.914 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 346.481030][ T9258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 346.491108][ T9258] Call Trace: [ 346.494417][ T9258] [ 346.497394][ T9258] dump_stack_lvl+0x241/0x360 [ 346.502129][ T9258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.507390][ T9258] ? __pfx__printk+0x10/0x10 [ 346.512040][ T9258] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 346.518512][ T9258] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 346.525059][ T9258] warn_alloc+0x278/0x410 [ 346.529457][ T9258] ? __pfx_warn_alloc+0x10/0x10 [ 346.534342][ T9258] ? profile_init+0xb1/0x100 [ 346.539007][ T9258] ? __get_vm_area_node+0x23d/0x270 [ 346.544268][ T9258] __vmalloc_node_range_noprof+0x691/0x13f0 [ 346.550216][ T9258] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 346.556567][ T9258] ? rcu_is_watching+0x15/0xb0 [ 346.561351][ T9258] ? rcu_is_watching+0x15/0xb0 [ 346.566138][ T9258] ? profile_init+0xb1/0x100 [ 346.570787][ T9258] ? __pfx_sysfs_kf_write+0x10/0x10 [ 346.576053][ T9258] vzalloc_noprof+0x79/0x90 [ 346.580592][ T9258] ? profile_init+0xb1/0x100 [ 346.585224][ T9258] profile_init+0xb1/0x100 [ 346.589671][ T9258] profiling_store+0x6c/0xf0 [ 346.594281][ T9258] kernfs_fop_write_iter+0x3a0/0x500 [ 346.599603][ T9258] vfs_write+0xa6d/0xc90 [ 346.603871][ T9258] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 346.609881][ T9258] ? __pfx_vfs_write+0x10/0x10 [ 346.614695][ T9258] ? __pfx_do_futex+0x10/0x10 [ 346.619412][ T9258] ? fdget_pos+0x265/0x320 [ 346.623871][ T9258] ksys_write+0x183/0x2b0 [ 346.628241][ T9258] ? __pfx_ksys_write+0x10/0x10 [ 346.633122][ T9258] ? do_syscall_64+0x100/0x230 [ 346.637929][ T9258] ? do_syscall_64+0xb6/0x230 [ 346.642637][ T9258] do_syscall_64+0xf3/0x230 [ 346.647163][ T9258] ? clear_bhb_loop+0x35/0x90 [ 346.651868][ T9258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.657794][ T9258] RIP: 0033:0x7f9d9617dff9 [ 346.662232][ T9258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.681864][ T9258] RSP: 002b:00007f9d96f9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 346.690311][ T9258] RAX: ffffffffffffffda RBX: 00007f9d96335f80 RCX: 00007f9d9617dff9 [ 346.698332][ T9258] RDX: 0000000000000048 RSI: 0000000020000280 RDI: 0000000000000005 [ 346.706353][ T9258] RBP: 00007f9d961f0296 R08: 0000000000000000 R09: 0000000000000000 [ 346.714347][ T9258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.722332][ T9258] R13: 0000000000000000 R14: 00007f9d96335f80 R15: 00007f9d9645fa28 [ 346.730362][ T9258] [ 346.742086][ T9258] Mem-Info: [ 346.745855][ T9258] active_anon:4854 inactive_anon:0 isolated_anon:0 [ 346.745855][ T9258] active_file:13217 inactive_file:38333 isolated_file:0 [ 346.745855][ T9258] unevictable:768 dirty:131 writeback:0 [ 346.745855][ T9258] slab_reclaimable:9162 slab_unreclaimable:99804 [ 346.745855][ T9258] mapped:21988 shmem:1253 pagetables:928 [ 346.745855][ T9258] sec_pagetables:0 bounce:0 [ 346.745855][ T9258] kernel_misc_reclaimable:0 [ 346.745855][ T9258] free:1323122 free_pcp:2141 free_cma:0 [ 346.791925][ T9258] Node 0 active_anon:19416kB inactive_anon:0kB active_file:52860kB inactive_file:153256kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:87844kB dirty:524kB writeback:0kB shmem:3476kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10452kB pagetables:3712kB sec_pagetables:0kB all_unreclaimable? no [ 346.825407][ T5286] usb 2-1: USB disconnect, device number 49 [ 346.830328][ T9258] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 346.869907][ T9258] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 346.949062][ T9258] lowmem_reserve[]: 0 2465 2466 0 0 [ 346.988264][ T9258] Node 0 DMA32 free:1350144kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:19276kB inactive_anon:0kB active_file:52860kB inactive_file:152432kB unevictable:1536kB writepending:524kB present:3129332kB managed:2552508kB mlocked:0kB bounce:0kB free_pcp:1568kB local_pcp:892kB free_cma:0kB [ 347.021125][ T9258] lowmem_reserve[]: 0 0 0 0 0 [ 347.035610][ T9258] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 347.077206][ T9275] bridge_slave_0: left allmulticast mode [ 347.084594][ T9275] bridge_slave_0: left promiscuous mode [ 347.090192][ T9258] lowmem_reserve[]: 0 0 0 0 0 [ 347.097908][ T9275] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.106016][ T9258] Node 1 Normal free:3934412kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 347.137480][ T9258] lowmem_reserve[]: 0 0 0 0 0 [ 347.139631][ T9275] bridge_slave_1: left allmulticast mode [ 347.143335][ T9258] Node 0 [ 347.149895][ T9275] bridge_slave_1: left promiscuous mode [ 347.149963][ T9258] DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 347.168025][ T9275] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.171794][ T9258] Node 0 DMA32: 230*4kB (UM) 440*8kB (UME) 410*16kB (ME) 405*32kB (UME) 268*64kB (UME) 23*128kB (UME) 26*256kB (UME) 8*512kB (ME) 7*1024kB (UME) 7*2048kB (UME) 311*4096kB (UM) = 1350168kB [ 347.199250][ T9258] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 347.211070][ T9258] Node 1 Normal: 159*4kB (UME) 46*8kB (UME) 38*16kB (UME) 196*32kB (UME) 88*64kB (UME) 28*128kB (UE) 16*256kB (UME) 5*512kB (UM) 5*1024kB (UM) 3*2048kB (UM) 952*4096kB (ME) = 3934412kB [ 347.250449][ T9258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 347.268580][ T9275] bond0: (slave bond_slave_0): Releasing backup interface [ 347.294000][ T9258] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 347.317989][ T9275] bond0: (slave bond_slave_1): Releasing backup interface [ 347.327856][ T9258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 347.357602][ T9258] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 347.367483][ T9258] 52800 total pagecache pages [ 347.372623][ T9258] 0 pages in swap cache [ 347.376938][ T9258] Free swap = 124560kB [ 347.378671][ T9275] team0: Port device team_slave_0 removed [ 347.381274][ T9258] Total swap = 124996kB [ 347.393146][ T9258] 2097051 pages RAM [ 347.397097][ T9258] 0 pages HighMem/MovableOnly [ 347.402915][ T9258] 427074 pages reserved [ 347.426279][ T9258] 0 pages cma reserved [ 347.440329][ T9275] team0: Port device team_slave_1 removed [ 347.478165][ T9275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.487727][ T9275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.502829][ T9275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.511827][ T5287] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 347.526454][ T9275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.697613][ T5287] usb 4-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 347.733038][ T5287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.741112][ T5287] usb 4-1: Product: syz [ 347.760230][ T5287] usb 4-1: Manufacturer: syz [ 347.781116][ T5287] usb 4-1: SerialNumber: syz [ 347.927757][ T9288] kvm: pic: single mode not supported [ 347.927788][ T9288] kvm: pic: level sensitive irq not supported [ 347.944089][ T9288] kvm: pic: non byte read [ 347.972101][ T9288] kvm: pic: non byte read [ 347.978816][ T9288] kvm: pic: non byte read [ 347.994360][ T9288] kvm: pic: single mode not supported [ 347.994390][ T9288] kvm: pic: level sensitive irq not supported [ 348.017649][ T9288] kvm: pic: non byte read [ 348.021946][ T5287] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 348.042091][ T9288] kvm: pic: non byte read [ 348.059571][ T9288] kvm: pic: non byte read [ 348.074430][ T5287] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 348.083320][ T9288] kvm: pic: non byte read [ 348.102362][ T9288] kvm: pic: non byte read [ 348.112222][ T9288] kvm: pic: non byte read [ 348.125746][ T9288] kvm: pic: non byte read [ 348.137977][ T5287] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 348.209546][ T9] usb 4-1: USB disconnect, device number 47 [ 348.216184][ T9288] kvm: pic: single mode not supported [ 348.216209][ T9288] kvm: pic: level sensitive irq not supported [ 348.216557][ T1833] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.240037][ T9288] kvm: pic: single mode not supported [ 348.240063][ T9288] kvm: pic: level sensitive irq not supported [ 348.249044][ T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 348.271363][ T9288] kvm: pic: single mode not supported [ 348.271391][ T9288] kvm: pic: level sensitive irq not supported [ 348.292423][ T9288] kvm: pic: single mode not supported [ 348.298569][ T9288] kvm: pic: level sensitive irq not supported [ 348.328633][ T9288] kvm: pic: single mode not supported [ 348.334977][ T9288] kvm: pic: level sensitive irq not supported [ 348.351536][ T9288] kvm: pic: single mode not supported [ 348.352398][ T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 348.357938][ T9288] kvm: pic: level sensitive irq not supported [ 348.393152][ T9288] kvm: pic: single mode not supported [ 348.399352][ T9288] kvm: pic: level sensitive irq not supported [ 348.401607][ T9] visor 4-1:1.0: device disconnected [ 348.423862][ T9288] kvm: pic: single mode not supported [ 348.423893][ T9288] kvm: pic: level sensitive irq not supported [ 348.507222][ T1833] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.755349][ T1833] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.996276][ T1833] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.041477][ T4623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 349.051219][ T4623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 349.060406][ T4623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 349.081938][ T4623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 349.094099][ T4623] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 349.104355][ T4623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 349.437990][ T1833] bridge_slave_1: left allmulticast mode [ 349.454590][ T1833] bridge_slave_1: left promiscuous mode [ 349.460379][ T1833] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.537096][ T9309] can: request_module (can-proto-3) failed. [ 349.568323][ T1833] bridge_slave_0: left allmulticast mode [ 349.580196][ T1833] bridge_slave_0: left promiscuous mode [ 349.590494][ T1833] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.803123][ T4623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.813994][ T4623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.829257][ T4623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.837591][ T4623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.847275][ T4623] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 349.862284][ T4623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 350.352344][ T1833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.362090][ T5303] IPVS: starting estimator thread 0... [ 350.374127][ T1833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.420519][ T1833] bond0 (unregistering): Released all slaves [ 350.448724][ T9314] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.456008][ T9314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.464046][ T9324] IPVS: using max 15 ests per chain, 36000 per kthread [ 350.485255][ T9314] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.141948][ T4623] Bluetooth: hci4: command tx timeout [ 351.235027][ T9361] input: syz1 as /devices/virtual/input/input49 [ 351.375135][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 351.458325][ T9302] chnl_net:caif_netlink_parms(): no params data found [ 351.580531][ T1833] hsr_slave_0: left promiscuous mode [ 351.590129][ T1833] hsr_slave_1: left promiscuous mode [ 351.599823][ T1833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.607440][ T1833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.618802][ T1833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.626507][ T1833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.652342][ T1833] veth1_macvtap: left promiscuous mode [ 351.659386][ T1833] veth0_macvtap: left promiscuous mode [ 351.665387][ T1833] veth1_vlan: left promiscuous mode [ 351.670930][ T1833] veth0_vlan: left promiscuous mode [ 351.743011][ T5283] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 351.904674][ T5283] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 351.915884][ T5283] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 351.929133][ T5283] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.940267][ T5283] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 351.954986][ T5283] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 351.972650][ T4623] Bluetooth: hci2: command tx timeout [ 351.979977][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.202583][ T5283] ath6kl: Failed to submit usb control message: -71 [ 352.209435][ T5283] ath6kl: unable to send the bmi data to the device: -71 [ 352.217064][ T5283] ath6kl: Unable to send get target info: -71 [ 352.233633][ T5283] ath6kl: Failed to init ath6kl core: -71 [ 352.240199][ T5283] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 352.264742][ T5283] usb 5-1: USB disconnect, device number 59 [ 352.320164][ T1833] team0 (unregistering): Port device team_slave_1 removed [ 352.374857][ T1833] team0 (unregistering): Port device team_slave_0 removed [ 352.918344][ T9318] chnl_net:caif_netlink_parms(): no params data found [ 353.203076][ T9302] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.210269][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.219175][ T9302] bridge_slave_0: entered allmulticast mode [ 353.222264][ T4623] Bluetooth: hci4: command tx timeout [ 353.228431][ T9302] bridge_slave_0: entered promiscuous mode [ 353.240117][ T9318] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.247451][ T9318] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.255770][ T9318] bridge_slave_0: entered allmulticast mode [ 353.263728][ T9318] bridge_slave_0: entered promiscuous mode [ 353.280581][ T9302] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.288145][ T5287] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 353.317173][ T9302] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.356052][ T9302] bridge_slave_1: entered allmulticast mode [ 353.385717][ T9302] bridge_slave_1: entered promiscuous mode [ 353.445338][ T9318] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.462792][ T9318] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.477636][ T9318] bridge_slave_1: entered allmulticast mode [ 353.483895][ T5287] usb 5-1: Using ep0 maxpacket: 8 [ 353.491135][ T5287] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 353.504266][ T5287] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 353.517047][ T9318] bridge_slave_1: entered promiscuous mode [ 353.523046][ T5287] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 353.540960][ T5287] usb 5-1: Product: syz [ 353.551126][ T5287] usb 5-1: Manufacturer: syz [ 353.562790][ T5287] usb 5-1: SerialNumber: syz [ 353.687338][ T9318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.710596][ T9302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.736048][ T9302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.755551][ T9318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.788868][ T9410] netlink: 'syz.3.964': attribute type 4 has an invalid length. [ 353.799000][ T5287] usb 5-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 353.812361][ T5287] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 353.830509][ T5287] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 353.868268][ T9413] netlink: 'syz.3.964': attribute type 4 has an invalid length. [ 353.923850][ T9318] team0: Port device team_slave_0 added [ 353.946113][ T9302] team0: Port device team_slave_0 added [ 353.964321][ T9318] team0: Port device team_slave_1 added [ 354.011249][ T5287] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 354.022240][ T5238] Bluetooth: hci2: command tx timeout [ 354.029035][ T9302] team0: Port device team_slave_1 added [ 354.043352][ T5287] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 354.073470][ T5287] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 354.084304][ T5287] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 354.094954][ T5287] usb 5-1: USB disconnect, device number 60 [ 354.104431][ T5287] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 354.119604][ T5287] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 354.130607][ T5287] visor 5-1:1.0: device disconnected [ 354.273593][ T1833] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.321174][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.328560][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.359885][ T9302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.388624][ T9318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.396216][ T9318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.423405][ T9318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.436675][ T9318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.443891][ T9318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.471016][ T9318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.505258][ T1833] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.519844][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.527745][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.554139][ T9302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.612236][ T5287] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 354.677120][ T1833] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.738508][ T9318] hsr_slave_0: entered promiscuous mode [ 354.765004][ T9318] hsr_slave_1: entered promiscuous mode [ 354.771367][ T9318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.799077][ T9318] Cannot create hsr debugfs directory [ 354.813072][ T5287] usb 4-1: Using ep0 maxpacket: 16 [ 354.824148][ T5287] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 354.833798][ T5287] usb 4-1: config 0 has no interface number 0 [ 354.851854][ T5287] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 354.871757][ T5287] usb 4-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 354.873693][ T1833] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.893857][ T5287] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 354.905265][ T5287] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 354.918801][ T5287] usb 4-1: Product: syz [ 354.950286][ T5287] usb 4-1: Manufacturer: syz [ 354.955278][ T5287] usb 4-1: SerialNumber: syz [ 354.975702][ T5287] usb 4-1: config 0 descriptor?? [ 355.068636][ T9302] hsr_slave_0: entered promiscuous mode [ 355.084494][ T9302] hsr_slave_1: entered promiscuous mode [ 355.094012][ T9302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.110169][ T9302] Cannot create hsr debugfs directory [ 355.219509][ T5287] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 355.240010][ T5287] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 355.281346][ T5287] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 355.302053][ T5238] Bluetooth: hci4: command tx timeout [ 355.309135][ T5287] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 355.338925][ T5287] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 355.350150][ T5287] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 355.359630][ T5287] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 355.370065][ T5287] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 355.381823][ T5238] Bluetooth: hci3: command 0x0406 tx timeout [ 355.389172][ T5287] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 355.405007][ T5287] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 355.428357][ T5287] usb 4-1: USB disconnect, device number 48 [ 355.464195][ T5287] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 355.516022][ T5287] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 355.570756][ T5287] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 355.598660][ T5287] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 355.625952][ T5287] keyspan 4-1:0.107: device disconnected [ 356.113215][ T4623] Bluetooth: hci2: command tx timeout [ 356.140245][ T1833] bond0 (unregistering): Released all slaves [ 356.278520][ T1833] tipc: Left network mode [ 356.578203][ T1833] hsr_slave_0: left promiscuous mode [ 356.583778][ T5286] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 356.602046][ T1833] hsr_slave_1: left promiscuous mode [ 356.626562][ T1833] veth1_macvtap: left promiscuous mode [ 356.642843][ T1833] veth0_macvtap: left promiscuous mode [ 356.648545][ T1833] veth1_vlan: left promiscuous mode [ 356.667148][ T1833] veth0_vlan: left promiscuous mode [ 356.783159][ T5286] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 356.800373][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.824594][ T5286] usb 5-1: config 0 descriptor?? [ 356.844453][ T5286] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 357.119897][ T9471] tls_set_device_offload: netdev not found [ 357.239767][ T5286] cpia1 5-1:0.0: unexpected state after lo power cmd: 5d [ 357.394306][ T4623] Bluetooth: hci4: command tx timeout [ 357.855565][ T5286] gspca_cpia1: usb_control_msg 05, error -71 [ 357.862800][ T5286] cpia1 5-1:0.0: unexpected systemstate: 5d [ 357.871085][ T5286] usb 5-1: USB disconnect, device number 61 [ 358.190825][ T4623] Bluetooth: hci2: command tx timeout [ 358.924540][ T9318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 358.942198][ T5286] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 358.944067][ T9318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 359.113519][ T9318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 359.131544][ T9318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 359.142426][ T5286] usb 5-1: Using ep0 maxpacket: 32 [ 359.158522][ T5286] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 359.177201][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.229586][ T5286] usb 5-1: Product: syz [ 359.249652][ T5286] usb 5-1: Manufacturer: syz [ 359.268750][ T5286] usb 5-1: SerialNumber: syz [ 359.283265][ T5286] usb 5-1: config 0 descriptor?? [ 359.304364][ T5286] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 359.883261][ T9318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.907030][ T9318] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.961395][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.968616][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.029654][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.036993][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.207281][ T9302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 360.218564][ T9302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 360.234492][ T9302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 360.247450][ T9302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 360.303708][ T9318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.393708][ T9302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.406864][ T5293] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 360.466741][ T9302] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.489139][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.496341][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.511053][ T9318] veth0_vlan: entered promiscuous mode [ 360.539987][ T9318] veth1_vlan: entered promiscuous mode [ 360.553613][ T3033] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.560782][ T3033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.572423][ T5293] usb 4-1: Using ep0 maxpacket: 8 [ 360.586539][ T5293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.606245][ T5293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.621095][ T5293] usb 4-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 360.639800][ T5293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.661521][ T5293] usb 4-1: config 0 descriptor?? [ 360.674395][ T9318] veth0_macvtap: entered promiscuous mode [ 360.709126][ T9318] veth1_macvtap: entered promiscuous mode [ 360.799114][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.810324][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.844015][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.866146][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.891410][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.916447][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.938546][ T9318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.958161][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.980392][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.002546][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.024905][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.040471][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.060459][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.083787][ T9318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.110804][ T9302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.127526][ T5293] wacom 0003:056A:0090.0007: hidraw0: USB HID v0.00 Device [HID 056a:0090] on usb-dummy_hcd.3-1/input0 [ 361.148164][ T9318] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.168378][ T9318] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.185692][ T9318] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.195113][ T9318] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.302677][ T5293] usb 4-1: USB disconnect, device number 49 [ 361.376405][ T9302] veth0_vlan: entered promiscuous mode [ 361.389569][ T3033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.406677][ T3033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.446893][ T9302] veth1_vlan: entered promiscuous mode [ 361.487510][ T3033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.500663][ T3033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.523696][ T9302] veth0_macvtap: entered promiscuous mode [ 361.554371][ T9302] veth1_macvtap: entered promiscuous mode [ 361.603989][ T9302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.626748][ T5286] gspca_stk1135: reg_w 0x2ff err -71 [ 361.631828][ T9302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.633656][ T5286] gspca_stk1135: serial bus timeout: status=0x00 [ 361.661796][ T5286] gspca_stk1135: Sensor write failed [ 361.667191][ T5286] gspca_stk1135: serial bus timeout: status=0x00 [ 361.675234][ T9302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.696222][ T5286] gspca_stk1135: Sensor write failed [ 361.701615][ T5286] gspca_stk1135: serial bus timeout: status=0x00 [ 361.701936][ T9302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.718574][ T5286] gspca_stk1135: Sensor read failed [ 361.724118][ T5286] gspca_stk1135: serial bus timeout: status=0x00 [ 361.730585][ T5286] gspca_stk1135: Sensor read failed [ 361.740905][ T9302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.751529][ T5286] gspca_stk1135: Detected sensor type unknown (0x0) [ 361.759481][ T9302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.770042][ T5286] gspca_stk1135: serial bus timeout: status=0x00 [ 361.776996][ T5286] gspca_stk1135: Sensor read failed [ 361.784447][ T9302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.797227][ T5286] gspca_stk1135: serial bus timeout: status=0x00 [ 361.803720][ T5286] gspca_stk1135: Sensor read failed [ 361.809260][ T9302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.819674][ T5286] gspca_stk1135: serial bus timeout: status=0x00 [ 361.826241][ T5286] gspca_stk1135: Sensor write failed [ 361.833664][ T9302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.851783][ T5286] gspca_stk1135: serial bus timeout: status=0x00 [ 361.875597][ T9302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.903788][ T5286] gspca_stk1135: Sensor write failed [ 361.909218][ T5286] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 361.938394][ T9302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.959333][ T5286] usb 5-1: USB disconnect, device number 62 [ 361.968714][ T9302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.002769][ T9302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.031794][ T9302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.051916][ T9302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.063586][ T9302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.074493][ T9302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.086527][ T9302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.155450][ T9302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.191848][ T9302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.204760][ T9302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.214693][ T9302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.449467][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.501922][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.564390][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.587587][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.743226][ T4623] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 362.752604][ T4623] Bluetooth: hci1: Injecting HCI hardware error event [ 362.762670][ T4623] Bluetooth: hci1: hardware error 0x00 [ 362.817934][ T29] audit: type=1326 audit(1729053281.067:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.2.931" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f128d97dff9 code=0x0 [ 363.201915][ T5284] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 363.312450][ T5293] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 363.388623][ T5284] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 363.425861][ T5284] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 363.482978][ T5284] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 363.563254][ T5284] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 363.601929][ T5293] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 363.625943][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.644894][ T5293] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 363.681993][ T5293] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 363.712173][ T9602] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 363.761989][ T5293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.464108][ T5293] usb 4-1: string descriptor 0 read error: -71 [ 364.488660][ T5293] usb 4-1: USB disconnect, device number 50 [ 364.604427][ T5284] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 364.624398][ T5284] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input53 [ 364.702053][ T9659] Invalid logical block size (1) [ 364.707752][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 364.736562][ T5284] usb 2-1: USB disconnect, device number 50 [ 364.902235][ T4623] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 365.321156][ T9682] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 365.418640][ T9688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1024'. [ 365.883630][ T9701] pic_ioport_write: 11 callbacks suppressed [ 365.883655][ T9701] kvm: pic: level sensitive irq not supported [ 367.057712][ T1833] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.081773][ T5288] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 367.122207][ T29] audit: type=1326 audit(1729053285.367:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9756 comm="syz.2.1042" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f128d97dff9 code=0x0 [ 367.267611][ T5288] usb 2-1: Using ep0 maxpacket: 32 [ 367.283813][ T5288] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 367.293342][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.301394][ T5288] usb 2-1: Product: syz [ 367.312068][ T5288] usb 2-1: Manufacturer: syz [ 367.319228][ T1833] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.331252][ T5288] usb 2-1: SerialNumber: syz [ 367.350176][ T5288] usb 2-1: config 0 descriptor?? [ 367.507027][ T1833] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.667194][ T1833] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.831821][ T5283] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 367.881869][ T1833] bridge_slave_1: left promiscuous mode [ 367.887698][ T1833] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.942524][ T1833] bridge_slave_0: left allmulticast mode [ 367.954036][ T1833] bridge_slave_0: left promiscuous mode [ 367.984387][ T1833] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.985763][ T5288] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 368.011822][ T5283] usb 5-1: Using ep0 maxpacket: 8 [ 368.041885][ T5283] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 368.065451][ T5283] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 368.129784][ T5283] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=f0.c9 [ 368.172036][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.181796][ T5283] usb 5-1: Product: syz [ 368.186105][ T5283] usb 5-1: Manufacturer: syz [ 368.190747][ T5283] usb 5-1: SerialNumber: syz [ 368.366428][ T5287] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 368.424481][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 368.439022][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 368.446669][ T5283] snd-usb-6fire 5-1:2.0: unable to receive device firmware state. [ 368.460217][ T5283] snd-usb-6fire 5-1:2.0: probe with driver snd-usb-6fire failed with error -71 [ 368.469970][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 368.478684][ T5283] usb 5-1: USB disconnect, device number 63 [ 368.497953][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 368.510050][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 368.531825][ T5287] usb 3-1: Using ep0 maxpacket: 16 [ 368.540032][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.578103][ T5287] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 368.605152][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.622179][ T5287] usb 3-1: Product: syz [ 368.626521][ T5287] usb 3-1: Manufacturer: syz [ 368.651824][ T5287] usb 3-1: SerialNumber: syz [ 368.659221][ T5287] usb 3-1: config 0 descriptor?? [ 368.823700][ T9791] pic_ioport_write: 11 callbacks suppressed [ 368.823725][ T9791] kvm: pic: single mode not supported [ 368.829803][ T9791] kvm: pic: level sensitive irq not supported [ 368.843644][ T9791] picdev_read: 112 callbacks suppressed [ 368.843669][ T9791] kvm: pic: non byte read [ 368.868768][ T9791] kvm: pic: non byte read [ 368.874737][ T9791] kvm: pic: single mode not supported [ 368.874763][ T9791] kvm: pic: level sensitive irq not supported [ 368.880400][ T5286] usb 3-1: USB disconnect, device number 44 [ 368.880435][ T9791] kvm: pic: non byte read [ 368.911256][ T9791] kvm: pic: non byte read [ 368.916435][ T9791] kvm: pic: non byte read [ 368.921046][ T9791] kvm: pic: non byte read [ 368.933549][ T9791] kvm: pic: non byte read [ 368.938316][ T9791] kvm: pic: non byte read [ 368.948092][ T9791] kvm: pic: non byte read [ 368.955438][ T9791] kvm: pic: non byte read [ 369.276369][ T1833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.293040][ T1833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.315572][ T1833] bond0 (unregistering): Released all slaves [ 369.345795][ T9778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.354668][ T9778] IPv6: NLM_F_CREATE should be set when creating new route [ 369.355637][ T9780] netlink: 'syz.0.1052': attribute type 27 has an invalid length. [ 369.439788][ T5288] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 369.493244][ T5288] usb 2-1: USB disconnect, device number 51 [ 369.715653][ T9780] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.723257][ T9780] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.138058][ T9780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.164115][ T9780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.231733][ T5288] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 370.353936][ T9780] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.374065][ T9780] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.387191][ T9780] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.397452][ T9780] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.413144][ T5288] usb 5-1: Using ep0 maxpacket: 8 [ 370.430129][ T5288] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 370.442306][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.450409][ T5288] usb 5-1: Product: syz [ 370.461100][ T5288] usb 5-1: Manufacturer: syz [ 370.467310][ T5288] usb 5-1: SerialNumber: syz [ 370.480227][ T5288] usb 5-1: config 0 descriptor?? [ 370.672183][ T4623] Bluetooth: hci1: command tx timeout [ 370.710143][ T9816] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1063'. [ 370.732035][ T5288] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 371.134262][ T5288] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 371.163002][ T5288] usb 5-1: USB disconnect, device number 64 [ 371.193053][ T46] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 371.262831][ T1833] hsr_slave_0: left promiscuous mode [ 371.272061][ T1833] hsr_slave_1: left promiscuous mode [ 371.289027][ T1833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.297210][ T1833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.307331][ T1833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.315875][ T1833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.356329][ T1833] veth1_macvtap: left promiscuous mode [ 371.367329][ T1833] veth0_macvtap: left promiscuous mode [ 371.374845][ T1833] veth1_vlan: left promiscuous mode [ 371.380336][ T1833] veth0_vlan: left promiscuous mode [ 371.382632][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 371.396311][ T5303] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 371.403023][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 371.427269][ T46] usb 3-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 371.451758][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.470688][ T46] usb 3-1: config 0 descriptor?? [ 371.494571][ T46] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input54 [ 371.572434][ T5303] usb 2-1: Using ep0 maxpacket: 8 [ 371.586952][ T5303] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 371.615831][ T5303] usb 2-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 371.631831][ T5303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.651349][ T5303] usb 2-1: config 0 descriptor?? [ 371.694986][ T5303] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input55 [ 371.708510][ T4671] bcm5974 3-1:0.0: could not read from device [ 371.718542][ T4671] bcm5974 3-1:0.0: could not read from device [ 371.758900][ T46] usb 3-1: USB disconnect, device number 45 [ 371.766542][ T4671] bcm5974 3-1:0.0: could not read from device [ 371.786060][ T4671] bcm5974 3-1:0.0: could not read from device [ 371.794572][ T4671] bcm5974 3-1:0.0: could not read from device [ 371.803449][ T9233] bcm5974 3-1:0.0: could not read from device [ 371.886713][ T9233] udevd[9233]: Error opening device "/dev/input/event4": No such file or directory [ 371.919081][ T9233] udevd[9233]: Unable to EVIOCGABS device "/dev/input/event4" [ 371.927818][ T9233] udevd[9233]: Unable to EVIOCGABS device "/dev/input/event4" [ 371.937062][ T9233] udevd[9233]: Unable to EVIOCGABS device "/dev/input/event4" [ 371.945165][ T9233] udevd[9233]: Unable to EVIOCGABS device "/dev/input/event4" [ 372.387727][ T1833] team0 (unregistering): Port device team_slave_1 removed [ 372.579039][ T1833] team0 (unregistering): Port device team_slave_0 removed [ 372.749883][ T4623] Bluetooth: hci1: command tx timeout [ 372.911771][ T5303] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 373.096257][ T5303] usb 3-1: Using ep0 maxpacket: 16 [ 373.148905][ T5303] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 373.167610][ T5303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.184851][ T5303] usb 3-1: Product: syz [ 373.189106][ T5303] usb 3-1: Manufacturer: syz [ 373.202833][ T5303] usb 3-1: SerialNumber: syz [ 373.217868][ T5303] usb 3-1: config 0 descriptor?? [ 373.279947][ T9786] chnl_net:caif_netlink_parms(): no params data found [ 373.305853][ T9871] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.313268][ T9871] IPv6: NLM_F_CREATE should be set when creating new route [ 373.455465][ T9869] binder: 9868:9869 ioctl c0306201 20000280 returned -14 [ 373.524103][ T5303] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 373.540491][ T5303] peak_usb 3-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 373.604603][ T9786] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.612234][ T9786] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.619746][ T9786] bridge_slave_0: entered allmulticast mode [ 373.628709][ T9786] bridge_slave_0: entered promiscuous mode [ 373.641343][ T9786] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.658374][ T9786] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.676449][ T9786] bridge_slave_1: entered allmulticast mode [ 373.696059][ T9786] bridge_slave_1: entered promiscuous mode [ 373.723228][ T5303] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 373.757456][ T5303] usb 3-1: USB disconnect, device number 46 [ 373.800653][ T9881] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 373.868207][ T9786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.937424][ T9786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.975781][ T4671] bcm5974 2-1:0.0: could not read from device [ 373.982969][ T5303] usb 2-1: USB disconnect, device number 52 [ 374.004701][ T8204] bcm5974 2-1:0.0: could not read from device [ 374.073613][ T8204] udevd[8204]: Error opening device "/dev/input/event5": No such file or directory [ 374.089268][ T9786] team0: Port device team_slave_0 added [ 374.097936][ T8204] udevd[8204]: Unable to EVIOCGABS device "/dev/input/event5" [ 374.119520][ T8204] udevd[8204]: Unable to EVIOCGABS device "/dev/input/event5" [ 374.143982][ T8204] udevd[8204]: Unable to EVIOCGABS device "/dev/input/event5" [ 374.151198][ T9786] team0: Port device team_slave_1 added [ 374.202574][ T8204] udevd[8204]: Unable to EVIOCGABS device "/dev/input/event5" [ 374.301963][ T9786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.319291][ T9786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.363368][ T9786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.513087][ T5286] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 374.559903][ T9896] syzkaller0: entered promiscuous mode [ 374.601790][ T9896] syzkaller0: entered allmulticast mode [ 374.649960][ T9786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.659146][ T9786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.687977][ T9786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.701802][ T5286] usb 3-1: Using ep0 maxpacket: 8 [ 374.709676][ T5286] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.733114][ T5286] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 374.760129][ T5286] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 374.783380][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 374.812325][ T5286] usb 3-1: Product: syz [ 374.822312][ T4623] Bluetooth: hci1: command tx timeout [ 374.832283][ T5286] usb 3-1: SerialNumber: syz [ 374.840398][ T5286] usb 3-1: config 0 descriptor?? [ 375.515736][ T9912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.557173][ T9912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.647667][ T9912] xt_ecn: cannot match TCP bits for non-tcp packets [ 376.907786][ T4623] Bluetooth: hci1: command tx timeout [ 377.340964][ T5286] usb 3-1: USB disconnect, device number 47 [ 377.491837][ T5288] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 377.662381][ T5288] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 377.673981][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.699380][ T5288] usb 5-1: config 0 descriptor?? [ 377.907530][ T5284] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 378.074415][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 378.098925][ T5284] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 378.108379][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.130329][ T5284] usb 3-1: Product: syz [ 378.145631][ T5284] usb 3-1: Manufacturer: syz [ 378.150678][ T5284] usb 3-1: SerialNumber: syz [ 378.172708][ T5284] usb 3-1: config 0 descriptor?? [ 378.335027][ T9923] netlink: 'syz.1.1079': attribute type 29 has an invalid length. [ 378.372570][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 378.425640][ T9786] hsr_slave_0: entered promiscuous mode [ 378.436434][ T9786] hsr_slave_1: entered promiscuous mode [ 378.460190][ T9786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.468577][ T9786] Cannot create hsr debugfs directory [ 378.477265][ T9918] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1078'. [ 378.539165][ T5284] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 378.758677][ T9929] syzkaller0: entered promiscuous mode [ 378.769934][ T9929] syzkaller0: entered allmulticast mode [ 378.906491][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.921916][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.945598][ T5284] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 378.966052][ T5284] usb 3-1: USB disconnect, device number 48 [ 379.865598][ T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 380.024934][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 380.043200][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 380.062481][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.071037][ T9] usb 2-1: Product: syz [ 380.086444][ T9] usb 2-1: Manufacturer: syz [ 380.091214][ T9] usb 2-1: SerialNumber: syz [ 380.116133][ T9] usb 2-1: config 0 descriptor?? [ 380.289301][ T5288] usbhid 5-1:0.0: can't add hid device: -71 [ 380.315836][ T5288] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 380.348148][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 380.354747][ T5288] usb 5-1: USB disconnect, device number 65 [ 382.148545][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 382.157516][ T9959] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 382.243642][ T9] usb 2-1: USB disconnect, device number 53 [ 382.317852][ T9965] loop0: detected capacity change from 0 to 7 [ 382.338508][ T9965] Dev loop0: unable to read RDB block 7 [ 382.359432][ T9965] loop0: AHDI p2 [ 382.368532][ T9965] loop0: partition table partially beyond EOD, truncated [ 382.512230][ T5288] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 382.711102][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.761898][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.784875][ T5288] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 382.805901][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.842463][ T5288] usb 3-1: config 0 descriptor?? [ 382.849658][ T9786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 382.877504][ T9786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 382.914234][ T9786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 382.936803][ T9786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 383.108002][ T9989] dccp_invalid_packet: P.Data Offset(100) too large [ 383.130092][ T9989] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1091'. [ 383.220209][ T9786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.276468][ T9786] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.307006][ T5288] logitech 0003:046D:C294.0008: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.2-1/input0 [ 383.337696][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.341751][ T5288] logitech 0003:046D:C294.0008: no inputs found [ 383.344888][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.407245][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.414531][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.469163][ T9786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 383.479728][ T9786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.496710][ T5286] usb 3-1: USB disconnect, device number 49 [ 383.510609][ T9786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.562846][ T9786] veth0_vlan: entered promiscuous mode [ 383.575346][ T9786] veth1_vlan: entered promiscuous mode [ 383.602081][ T9786] veth0_macvtap: entered promiscuous mode [ 383.612721][ T9786] veth1_macvtap: entered promiscuous mode [ 383.630068][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.640912][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.651147][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.662070][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.672216][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.682881][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.694320][ T9786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.705919][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.716731][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.726954][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.737642][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.747869][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.758422][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.769572][ T9786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.779945][ T9786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.789098][ T9786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.799048][ T9786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.808742][ T9786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.041887][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.073528][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.159514][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.208045][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.349424][ T4623] Bluetooth: Wrong link type (-71) [ 384.771903][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 384.954554][ T9] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 384.979990][T10027] syzkaller0: entered promiscuous mode [ 384.986017][ T9] usb 3-1: config 0 has no interface number 0 [ 385.019981][T10027] syzkaller0: entered allmulticast mode [ 385.058546][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 385.112250][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.151367][ T9] usb 3-1: Product: syz [ 385.161800][ T9] usb 3-1: Manufacturer: syz [ 385.166583][ T9] usb 3-1: SerialNumber: syz [ 385.185739][ T9] usb 3-1: config 0 descriptor?? [ 385.194747][ T9] ljca 3-1:0.84: bulk endpoints not found [ 385.440673][ T5286] usb 3-1: USB disconnect, device number 50 [ 387.788430][T10109] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 388.409832][T10126] kvm: pic: single mode not supported [ 388.409924][T10126] kvm: pic: single mode not supported [ 388.415681][T10126] kvm: pic: level sensitive irq not supported [ 389.141824][ T25] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 389.331796][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 389.343641][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 389.363057][ T25] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 389.372578][ T25] usb 4-1: config 1 has an invalid descriptor of length 78, skipping remainder of the config [ 389.392031][ T25] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 389.416309][ T25] usb 4-1: config 1 has no interface number 1 [ 389.431814][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 389.461836][ T25] usb 4-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x5E, changing to 0xE [ 389.481736][ T25] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0xE has an invalid bInterval 148, changing to 7 [ 389.503263][ T25] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0xE has invalid maxpacket 33273, setting to 1024 [ 389.533981][ T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 389.544100][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.562072][ T25] usb 4-1: Product: syz [ 389.572011][ T25] usb 4-1: Manufacturer: syz [ 389.582076][ T25] usb 4-1: SerialNumber: syz [ 389.800743][ T25] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 389.819593][ T25] usb 4-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 389.838483][ T25] usb 4-1: found format II with max.bitrate = 0, frame size=39301 [ 389.862094][ T25] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 389.872397][ T25] usb 4-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 389.880915][ T25] usb 4-1: found format II with max.bitrate = 0, frame size=39301 [ 390.006608][ T25] usb 4-1: USB disconnect, device number 51 [ 390.882274][ T5288] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 390.891913][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 390.976884][T10180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1133'. [ 390.982497][ T5284] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 391.042747][ T5288] usb 2-1: Using ep0 maxpacket: 8 [ 391.043850][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 391.052533][ T5288] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 391.064385][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.075773][ T5288] usb 2-1: Product: syz [ 391.076816][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 391.085984][ T5288] usb 2-1: Manufacturer: syz [ 391.101288][ T5288] usb 2-1: SerialNumber: syz [ 391.110784][ T5288] usb 2-1: config 0 descriptor?? [ 391.122994][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 391.140551][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.151995][ T5284] usb 5-1: Using ep0 maxpacket: 16 [ 391.173600][ T5284] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 391.188631][ T5284] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 391.201388][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.215271][ T9] usb 3-1: config 0 descriptor?? [ 391.226550][ T5284] usb 5-1: Product: syz [ 391.237349][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input56 [ 391.255372][ T5284] usb 5-1: Manufacturer: syz [ 391.270887][ T5284] usb 5-1: SerialNumber: syz [ 391.310410][ T5284] usb 5-1: config 0 descriptor?? [ 391.328599][ T5284] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 391.345694][T10149] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1126'. [ 391.360879][ T5284] usb 5-1: Detected FT232R [ 391.379923][ T5288] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 391.742573][ T5284] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 391.773633][ T5284] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 391.787697][ T5284] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 391.797077][ T5288] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 391.808109][ T5284] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 391.823792][ T5284] usb 5-1: USB disconnect, device number 66 [ 391.835878][ T5288] usb 2-1: USB disconnect, device number 54 [ 391.836233][ T5284] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 391.860995][ T5284] ftdi_sio 5-1:0.0: device disconnected [ 392.051963][ T25] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 392.211736][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 392.219650][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 392.234911][ T25] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 392.244446][ T25] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 392.252828][ T25] usb 4-1: Product: syz [ 392.257504][ T25] usb 4-1: Manufacturer: syz [ 392.262254][ T25] usb 4-1: SerialNumber: syz [ 392.269963][ T25] usb 4-1: config 0 descriptor?? [ 392.279626][T10200] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 392.444466][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 392.577187][ T5288] usb 4-1: USB disconnect, device number 52 [ 392.652476][ T5284] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 392.750234][T10210] kvm: pic: level sensitive irq not supported [ 392.751072][T10210] kvm: pic: single mode not supported [ 392.757507][T10210] kvm: pic: level sensitive irq not supported [ 392.830125][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.858020][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.878436][ T5284] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 392.901330][ T5284] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 392.910939][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.928130][ T5284] usb 5-1: config 0 descriptor?? [ 393.375850][ T5284] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 393.406789][ T5284] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 393.421811][ T4671] bcm5974 3-1:0.0: could not read from device [ 393.473849][ T4671] bcm5974 3-1:0.0: could not read from device [ 393.486571][ T9] usb 3-1: USB disconnect, device number 51 [ 393.495849][ T4671] bcm5974 3-1:0.0: could not read from device [ 393.517581][ T9233] bcm5974 3-1:0.0: could not read from device [ 393.559917][ T9233] udevd[9233]: Error opening device "/dev/input/event4": No such device [ 393.579048][ T9233] udevd[9233]: Unable to EVIOCGABS device "/dev/input/event4" [ 393.594580][ T9233] udevd[9233]: Unable to EVIOCGABS device "/dev/input/event4" [ 393.614943][ T9233] udevd[9233]: Unable to EVIOCGABS device "/dev/input/event4" [ 393.634541][ T5303] usb 5-1: USB disconnect, device number 67 [ 393.662567][ T9233] udevd[9233]: Unable to EVIOCGABS device "/dev/input/event4" [ 393.670233][ T9233] udevd[9233]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 393.787418][ T4686] udevd[4686]: worker [9233] terminated by signal 6 (Aborted) [ 393.803144][ T4686] udevd[4686]: worker [9233] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input56/event4' [ 394.513669][T10232] netlink: 'syz.4.1148': attribute type 58 has an invalid length. [ 394.535076][T10233] hub 6-0:1.0: USB hub found [ 394.547839][T10233] hub 6-0:1.0: 1 port detected [ 394.806789][T10237] tipc: New replicast peer: fe80:0000:0000:0000:00e8:ff00:0000:00bb [ 394.819898][T10237] tipc: Enabled bearer , priority 10 [ 396.609864][T10279] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 396.953834][T10286] dccp_close: ABORT with 1 bytes unread [ 397.561411][T10299] ptrace attach of "./syz-executor exec"[9318] was attempted by "./syz-executor exec"[10299] [ 398.180350][T10309] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1178'. [ 399.210193][T10327] syz_tun: entered promiscuous mode [ 399.263862][T10327] syz_tun (unregistering): left promiscuous mode [ 399.826617][T10338] netlink: 'syz.3.1191': attribute type 4 has an invalid length. [ 400.429754][T10350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1196'. [ 401.262961][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.725052][T10391] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1215'. [ 401.734791][T10391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1215'. [ 401.744276][T10391] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1215'. [ 401.753472][T10391] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1215'. [ 402.193456][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.234715][T10400] tipc: Started in network mode [ 402.239764][T10400] tipc: Node identity , cluster identity 4711 [ 402.252229][T10400] tipc: Failed to set node id, please configure manually [ 402.259386][T10400] tipc: Enabling of bearer rejected, failed to enable media [ 402.325257][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.541589][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.705246][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.762470][T10405] netlink: 'syz.2.1222': attribute type 4 has an invalid length. [ 402.889431][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 402.912502][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 402.923282][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 402.973406][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 402.984957][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 402.998630][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 403.130064][T10414] netlink: 87 bytes leftover after parsing attributes in process `syz.2.1224'. [ 403.177417][ T11] bridge_slave_1: left allmulticast mode [ 403.185100][ T11] bridge_slave_1: left promiscuous mode [ 403.191671][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.225941][ T11] bridge_slave_0: left allmulticast mode [ 403.231860][ T11] bridge_slave_0: left promiscuous mode [ 403.237696][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.127171][ T5238] Bluetooth: hci3: command tx timeout [ 405.142634][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.184713][T10458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.196016][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.217631][ T11] bond0 (unregistering): Released all slaves [ 405.406130][ T8584] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.475395][ T11] tipc: Disabling bearer [ 405.488809][ T11] tipc: Left network mode [ 405.871887][ T5238] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 405.880709][ T5238] Bluetooth: hci4: Injecting HCI hardware error event [ 405.890828][ T5238] Bluetooth: hci4: hardware error 0x00 [ 406.291160][T10412] chnl_net:caif_netlink_parms(): no params data found [ 406.541484][ T11] hsr_slave_0: left promiscuous mode [ 406.589734][T10492] Bluetooth: hci0: command 0x0406 tx timeout [ 406.678565][ T11] hsr_slave_1: left promiscuous mode [ 406.707982][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.748886][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.793715][T10516] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1248'. [ 406.806108][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.814361][T10516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1248'. [ 406.833299][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.842140][T10516] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1248'. [ 406.870280][T10516] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1248'. [ 406.965268][ T11] veth1_macvtap: left promiscuous mode [ 406.993724][ T11] veth0_macvtap: left promiscuous mode [ 407.005833][ T11] veth1_vlan: left promiscuous mode [ 407.016884][ T11] veth0_vlan: left promiscuous mode [ 407.142070][ T4623] Bluetooth: hci3: command tx timeout [ 408.108934][ T5238] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 408.617546][ T11] team0 (unregistering): Port device team_slave_1 removed [ 408.775555][ T11] team0 (unregistering): Port device team_slave_0 removed [ 409.236914][ T5238] Bluetooth: hci3: command tx timeout [ 409.804971][T10537] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1255'. [ 410.372226][T10542] netlink: 'syz.0.1266': attribute type 4 has an invalid length. [ 410.412976][T10549] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1260'. [ 410.437383][T10549] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1260'. [ 410.461922][T10549] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1260'. [ 410.482611][T10549] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1260'. [ 410.560037][T10412] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.601198][T10412] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.611455][T10412] bridge_slave_0: entered allmulticast mode [ 410.634292][T10412] bridge_slave_0: entered promiscuous mode [ 410.698397][T10412] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.739959][T10412] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.757964][T10412] bridge_slave_1: entered allmulticast mode [ 410.781081][T10412] bridge_slave_1: entered promiscuous mode [ 410.904718][T10412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.962594][T10412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.156248][T10412] team0: Port device team_slave_0 added [ 411.239145][T10412] team0: Port device team_slave_1 added [ 411.302896][ T5238] Bluetooth: hci3: command tx timeout [ 411.430734][T10412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.452347][T10412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.453051][T10584] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 411.453051][T10584] The task syz.2.1269 (10584) triggered the difference, watch for misbehavior. [ 411.515605][T10412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.534868][ T11] IPVS: stop unused estimator thread 0... [ 411.544721][T10412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.558286][T10412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.619902][T10412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.644309][T10589] netlink: 'syz.0.1272': attribute type 9 has an invalid length. [ 411.671312][ T4623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 411.681854][ T4623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 411.686024][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1272'. [ 411.690918][ T4623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 411.708555][ T4623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 411.722774][ T4623] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 411.731429][ T4623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 411.899197][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.926249][T10412] hsr_slave_0: entered promiscuous mode [ 411.936024][T10412] hsr_slave_1: entered promiscuous mode [ 412.050969][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.190204][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.418725][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.861914][ T11] bridge_slave_1: left allmulticast mode [ 412.867647][ T11] bridge_slave_1: left promiscuous mode [ 412.874077][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.893406][ T11] bridge_slave_0: left allmulticast mode [ 412.899144][ T11] bridge_slave_0: left promiscuous mode [ 412.913156][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.645860][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.665365][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.685149][ T11] bond0 (unregistering): Released all slaves [ 413.782005][ T4623] Bluetooth: hci1: command tx timeout [ 413.886015][T10616] netlink: 'syz.1.1274': attribute type 4 has an invalid length. [ 414.275166][T10591] chnl_net:caif_netlink_parms(): no params data found [ 414.758087][ T11] hsr_slave_0: left promiscuous mode [ 414.766761][ T11] hsr_slave_1: left promiscuous mode [ 414.822357][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.829921][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.855120][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.870605][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.950750][ T11] veth1_macvtap: left promiscuous mode [ 414.978807][ T11] veth0_macvtap: left promiscuous mode [ 415.001033][ T11] veth1_vlan: left promiscuous mode [ 415.013153][ T11] veth0_vlan: left promiscuous mode [ 415.862126][ T4623] Bluetooth: hci1: command tx timeout [ 416.647084][ T11] team0 (unregistering): Port device team_slave_1 removed [ 416.784486][ T11] team0 (unregistering): Port device team_slave_0 removed [ 417.839794][T10672] netlink: 'syz.2.1288': attribute type 9 has an invalid length. [ 417.848370][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'. [ 417.906552][T10591] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.919979][T10591] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.935678][T10591] bridge_slave_0: entered allmulticast mode [ 417.945256][ T4623] Bluetooth: hci1: command tx timeout [ 417.968857][T10591] bridge_slave_0: entered promiscuous mode [ 418.085340][T10591] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.095925][T10591] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.124268][T10591] bridge_slave_1: entered allmulticast mode [ 418.140862][T10591] bridge_slave_1: entered promiscuous mode [ 418.267521][T10591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.316454][T10591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.416590][T10412] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 418.524793][T10412] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 418.720127][T10412] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 418.748819][T10412] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 418.794188][T10591] team0: Port device team_slave_0 added [ 418.837928][T10591] team0: Port device team_slave_1 added [ 418.959222][T10591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.004192][T10591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.040604][T10591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.085756][T10591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.095786][T10591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.154823][T10591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.329497][T10591] hsr_slave_0: entered promiscuous mode [ 419.369065][T10591] hsr_slave_1: entered promiscuous mode [ 419.442900][T10591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.450949][T10591] Cannot create hsr debugfs directory [ 419.516990][T10412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.707673][T10412] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.762818][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.770071][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.881684][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.888886][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.022044][ T4623] Bluetooth: hci1: command tx timeout [ 420.438339][T10412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.658098][T10412] veth0_vlan: entered promiscuous mode [ 420.704727][T10412] veth1_vlan: entered promiscuous mode [ 420.880765][T10412] veth0_macvtap: entered promiscuous mode [ 420.927818][T10412] veth1_macvtap: entered promiscuous mode [ 420.969895][T10591] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 421.019858][T10591] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 421.040240][T10591] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 421.065870][T10412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.110733][T10412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.139630][T10412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.154781][T10412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.177424][T10412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.210420][T10591] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 421.259894][T10412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.295519][T10412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.324920][T10412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.362887][T10412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.386773][T10412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.425136][T10412] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.446312][T10412] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.471746][T10412] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.508841][T10412] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.065912][T10591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.110285][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.118492][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.244431][T10591] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.383627][ T3033] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.390806][ T3033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.441682][ T3033] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.448865][ T3033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.556345][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.582383][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.682454][T10591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.802535][T10591] veth0_vlan: entered promiscuous mode [ 422.817808][T10591] veth1_vlan: entered promiscuous mode [ 422.935094][T10591] veth0_macvtap: entered promiscuous mode [ 422.980794][T10591] veth1_macvtap: entered promiscuous mode [ 423.067503][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.081882][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.107195][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.117806][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.128608][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.139413][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.151234][T10591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.166484][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.177091][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.187030][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.197553][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.207518][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.218099][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.229659][T10591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.241454][T10591] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.250293][T10591] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.259115][T10591] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.267968][T10591] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.568281][ T3033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.639824][ T3033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.811859][ T3033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.830099][ T3033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.519891][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.992656][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1332'. [ 425.313898][T10857] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.528224][T10857] bridge_slave_0 (unregistering): left allmulticast mode [ 425.580701][T10857] bridge_slave_0 (unregistering): left promiscuous mode [ 425.596413][T10857] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.847944][T10889] input: syz1 as /devices/virtual/input/input59 [ 427.992180][T10973] input: syz1 as /devices/virtual/input/input60 [ 428.655668][ T29] audit: type=1326 audit(1729053346.907:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10953 comm="syz.0.1357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e4357dff9 code=0x0 [ 428.721301][T10990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.744583][ T9828] IPVS: starting estimator thread 0... [ 428.831854][T10991] IPVS: using max 15 ests per chain, 36000 per kthread [ 429.289708][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.457067][T11010] syz_tun: entered promiscuous mode [ 429.532298][T11010] syz_tun: left promiscuous mode [ 429.633902][T11016] sch_fq: defrate 2 ignored. [ 429.897426][T11025] input: syz1 as /devices/virtual/input/input61 [ 430.882747][T11061] netlink: 'syz.4.1397': attribute type 9 has an invalid length. [ 430.890562][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1397'. [ 431.153130][T11074] sch_fq: defrate 2 ignored. [ 431.400194][T11084] syz_tun: entered promiscuous mode [ 431.428964][T11084] syz_tun: left promiscuous mode [ 431.773553][T11090] netlink: 'syz.0.1407': attribute type 4 has an invalid length. [ 431.781385][T11090] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1407'. [ 431.854700][T11090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1407'. [ 432.170435][T11107] netlink: 'syz.3.1416': attribute type 9 has an invalid length. [ 432.196341][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1416'. [ 433.134598][T11136] sch_fq: defrate 2 ignored. [ 433.429810][T11146] dccp_close: ABORT with 801 bytes unread [ 435.566247][T11214] netlink: 6380 bytes leftover after parsing attributes in process `syz.4.1463'. [ 436.961942][ T25] IPVS: starting estimator thread 0... [ 437.082652][T11250] IPVS: using max 17 ests per chain, 40800 per kthread [ 437.205375][T11261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1482'. [ 437.858149][T11293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1494'. [ 438.495142][T11325] lo: entered promiscuous mode [ 438.510493][T11325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.251725][ T25] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 439.412147][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 439.438170][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.451664][ T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 439.489534][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 439.562624][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 439.573755][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 439.601794][ T25] usb 5-1: SerialNumber: syz [ 439.633120][T11338] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 439.645329][ T25] cdc_acm 5-1:1.0: skipping garbage [ 439.913069][T11338] syz.4.1509 (11338): /proc/11337/oom_adj is deprecated, please use /proc/11337/oom_score_adj instead. [ 439.981990][ T25] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 440.021924][ T25] usb 5-1: USB disconnect, device number 68 [ 440.344584][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.351205][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.247497][T11435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1550'. [ 443.088714][T11458] Invalid logical block size (1) [ 444.239546][T11502] sch_tbf: burst 1 is lower than device lo mtu (18) ! [ 444.465630][T11509] lo: entered promiscuous mode [ 444.495886][T11509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.971046][T11530] tipc: Started in network mode [ 444.982578][T11530] tipc: Node identity 3a000000000000000000000000000001, cluster identity 4711 [ 445.006783][T11530] tipc: Enabling of bearer rejected, failed to enable media [ 445.021145][T11529] sch_tbf: burst 1 is lower than device lo mtu (18) ! [ 445.271281][T11542] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1597'. [ 445.794645][T11562] xt_hashlimit: size too large, truncated to 1048576 [ 446.613766][T11594] usb usb8: usbfs: process 11594 (syz.1.1617) did not claim interface 0 before use [ 448.423842][T11625] tipc: Started in network mode [ 448.449240][T11625] tipc: Node identity 3a000000000000000000000000000001, cluster identity 4711 [ 448.494175][T11625] tipc: Enabling of bearer rejected, failed to enable media [ 449.417762][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'. [ 450.761296][T11687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 451.700262][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1666'. [ 452.828356][T11750] lo: entered promiscuous mode [ 452.847647][T11750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.172240][ T46] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 453.351761][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 453.366038][T11764] tipc: Enabling of bearer rejected, failed to enable media [ 453.395568][ T46] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 453.418403][ T46] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 453.441659][ T46] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 453.466147][ T46] usb 5-1: Product: syz [ 453.481683][ T46] usb 5-1: Manufacturer: syz [ 453.486358][ T46] usb 5-1: SerialNumber: syz [ 453.511880][ T46] usb 5-1: config 0 descriptor?? [ 453.522109][T11754] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 453.860008][ T46] usb 5-1: USB disconnect, device number 69 [ 453.925969][T11774] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1693'. [ 454.808323][T11800] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1705'. [ 455.211531][ T4623] Bluetooth: latency 2274 > 499 [ 455.279119][T11807] veth0_vlan: left promiscuous mode [ 455.581747][ T5286] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 455.673500][T11832] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1720'. [ 455.741772][ T5286] usb 3-1: Using ep0 maxpacket: 32 [ 455.755189][ T5286] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 455.775219][ T5286] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 455.791724][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 455.800092][ T5286] usb 3-1: Product: syz [ 455.850220][ T5286] usb 3-1: Manufacturer: syz [ 455.859429][ T5286] usb 3-1: SerialNumber: syz [ 455.893829][ T5286] usb 3-1: config 0 descriptor?? [ 455.902132][T11815] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 456.285224][ T25] usb 3-1: USB disconnect, device number 52 [ 456.491317][T11866] netlink: 'syz.0.1733': attribute type 4 has an invalid length. [ 457.202056][T11903] netlink: 'syz.2.1749': attribute type 4 has an invalid length. [ 457.241755][ T4623] Bluetooth: hci3: command tx timeout [ 459.041954][T11991] veth0_vlan: left promiscuous mode [ 463.681621][ C1] sched: DL replenish lagged too much [ 473.149679][ T5238] Bluetooth: hci2: command 0x0406 tx timeout [ 479.333972][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 479.361917][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 479.372799][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 479.383118][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 479.390896][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 479.412543][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 479.714631][ T4623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 479.726507][ T4623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 479.735739][ T4623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 479.814637][T10409] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 479.835634][T10409] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 479.843652][T10409] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 479.861767][T10409] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 479.890155][T10409] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 479.902240][T10409] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 479.910501][T10409] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 479.918843][T10409] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 479.926703][T10409] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 480.078849][T10409] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 480.093542][T10409] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 480.112644][T10409] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 480.120842][T10409] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 480.131882][T10409] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 480.139303][T10409] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 480.333922][T12052] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 480.346308][T12052] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 480.355185][T12052] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 480.364017][T12052] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 480.378289][T12052] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 480.387515][T12052] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 481.541960][T12052] Bluetooth: hci0: command tx timeout [ 481.942811][T12052] Bluetooth: hci4: command tx timeout [ 482.022109][T12052] Bluetooth: hci1: command tx timeout [ 482.182074][T12052] Bluetooth: hci2: command tx timeout [ 482.501889][T12052] Bluetooth: hci3: command tx timeout [ 483.624252][T12052] Bluetooth: hci0: command tx timeout [ 484.021838][T12052] Bluetooth: hci4: command tx timeout [ 484.101793][T12052] Bluetooth: hci1: command tx timeout [ 484.261821][T12052] Bluetooth: hci2: command tx timeout [ 484.581783][T12052] Bluetooth: hci3: command tx timeout [ 485.701812][T12052] Bluetooth: hci0: command tx timeout [ 486.101787][T12052] Bluetooth: hci4: command tx timeout [ 486.181916][T12052] Bluetooth: hci1: command tx timeout [ 486.341894][T12052] Bluetooth: hci2: command tx timeout [ 486.661924][T12052] Bluetooth: hci3: command tx timeout [ 487.781862][T12052] Bluetooth: hci0: command tx timeout [ 488.182067][T12052] Bluetooth: hci4: command tx timeout [ 488.263118][T12052] Bluetooth: hci1: command tx timeout [ 488.421796][T12052] Bluetooth: hci2: command tx timeout [ 488.741993][T12052] Bluetooth: hci3: command tx timeout [ 501.785080][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.791458][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 541.512429][T10409] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 541.526158][T10409] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 541.534392][T10409] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 541.555616][T10409] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 541.563479][T10409] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 541.571026][T10409] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 541.841765][T12052] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 541.873308][T12052] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 541.883690][T12052] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 541.893562][T12052] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 541.901906][T12052] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 541.912135][T12052] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 542.036521][T10409] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 542.047282][T10409] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 542.059316][T10409] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 542.067785][T10409] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 542.096697][ T4623] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 542.112399][ T4623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 542.170376][ T4623] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 542.185611][ T4623] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 542.201932][ T4623] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 542.234889][ T4623] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 542.246504][ T4623] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 542.254081][ T4623] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 542.323563][T10409] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 542.342847][T10409] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 542.357564][T10409] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 542.366274][T10409] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 542.374472][T10409] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 542.382285][T10409] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 543.622014][ T4623] Bluetooth: hci5: command tx timeout [ 544.021855][ T4623] Bluetooth: hci6: command tx timeout [ 544.182238][ T4623] Bluetooth: hci7: command tx timeout [ 544.341947][ T4623] Bluetooth: hci8: command tx timeout [ 544.501856][ T4623] Bluetooth: hci9: command tx timeout [ 545.702206][ T4623] Bluetooth: hci5: command tx timeout [ 546.101784][ T4623] Bluetooth: hci6: command tx timeout [ 546.262087][ T4623] Bluetooth: hci7: command tx timeout [ 546.421913][ T4623] Bluetooth: hci8: command tx timeout [ 546.581854][ T4623] Bluetooth: hci9: command tx timeout [ 547.782203][ T4623] Bluetooth: hci5: command tx timeout [ 548.181918][ T4623] Bluetooth: hci6: command tx timeout [ 548.342044][ T4623] Bluetooth: hci7: command tx timeout [ 548.510417][ T4623] Bluetooth: hci8: command tx timeout [ 548.661787][ T4623] Bluetooth: hci9: command tx timeout [ 549.862055][ T4623] Bluetooth: hci5: command tx timeout [ 550.261737][ T4623] Bluetooth: hci6: command tx timeout [ 550.421964][ T4623] Bluetooth: hci7: command tx timeout [ 550.581861][ T4623] Bluetooth: hci8: command tx timeout [ 550.741769][ T4623] Bluetooth: hci9: command tx timeout [ 563.225222][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.239028][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 600.884122][T10409] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 600.894413][T10409] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 600.903625][T10409] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 600.931886][T10409] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 600.966470][T10409] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 600.974176][T10409] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 601.569347][T10492] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 601.582241][T10492] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 601.594660][T10492] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 601.603000][T10492] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 601.613746][T10492] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 601.621248][T10492] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 601.683826][ T4623] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 601.696749][ T4623] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 601.707689][ T4623] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 601.719151][ T4623] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 601.727184][ T4623] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 601.735242][ T4623] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 602.499055][T12102] chnl_net:caif_netlink_parms(): no params data found [ 602.704897][T10409] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 602.722079][T10409] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 602.734361][T10409] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 602.753567][T10409] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 602.776424][T10409] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 602.784098][T10409] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 602.904107][T10409] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 602.916683][T10409] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 602.925426][T10409] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 602.934034][T10409] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 602.951835][T10409] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 602.964187][T10409] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 603.061908][T10409] Bluetooth: hci1: command tx timeout [ 603.126093][T12102] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.140433][T12102] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.161451][T12102] bridge_slave_0: entered allmulticast mode [ 603.169042][T12102] bridge_slave_0: entered promiscuous mode [ 603.186029][T12102] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.199472][T12102] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.209979][T12102] bridge_slave_1: entered allmulticast mode [ 603.231480][T12102] bridge_slave_1: entered promiscuous mode [ 603.393234][T12102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.414522][T12102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.588219][T12102] team0: Port device team_slave_0 added [ 603.605636][T12102] team0: Port device team_slave_1 added [ 603.702269][T10409] Bluetooth: hci11: command tx timeout [ 603.742420][T12102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.749442][T12102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.786649][T10409] Bluetooth: hci10: command tx timeout [ 603.805591][T12102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.827735][T12102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.838536][T12102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.877062][T12102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.031085][T12102] hsr_slave_0: entered promiscuous mode [ 604.066821][T12102] hsr_slave_1: entered promiscuous mode [ 604.096814][T12102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 604.111788][T12102] Cannot create hsr debugfs directory [ 604.835731][T12115] Bluetooth: hci12: command tx timeout [ 605.061975][T12116] Bluetooth: hci13: command tx timeout [ 605.142067][T12116] Bluetooth: hci1: command tx timeout [ 605.783095][T12116] Bluetooth: hci11: command tx timeout [ 605.861730][T12116] Bluetooth: hci10: command tx timeout [ 606.275560][ T5238] Bluetooth: hci4: command 0x0406 tx timeout [ 606.282167][ T5238] Bluetooth: hci2: command 0x0406 tx timeout [ 606.288236][ T5238] Bluetooth: hci3: command 0x0406 tx timeout [ 606.301005][T12116] Bluetooth: hci0: command 0x0406 tx timeout [ 606.901782][T12052] Bluetooth: hci12: command tx timeout [ 607.142018][T12052] Bluetooth: hci13: command tx timeout [ 607.222238][T12052] Bluetooth: hci1: command tx timeout [ 607.868498][T12052] Bluetooth: hci11: command tx timeout [ 607.941762][T12052] Bluetooth: hci10: command tx timeout [ 608.981726][T12052] Bluetooth: hci12: command tx timeout [ 609.221995][T12052] Bluetooth: hci13: command tx timeout [ 609.303287][T12052] Bluetooth: hci1: command tx timeout [ 609.942059][T12052] Bluetooth: hci11: command tx timeout [ 610.021919][T12052] Bluetooth: hci10: command tx timeout [ 611.061792][T12052] Bluetooth: hci12: command tx timeout [ 611.301870][T12052] Bluetooth: hci13: command tx timeout [ 624.667901][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.681708][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 641.302669][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 641.310390][ T30] Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 641.360783][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 641.406460][ T30] task:kworker/u8:0 state:D stack:21264 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 641.447098][ T30] Workqueue: netns cleanup_net [ 641.522372][ T30] Call Trace: [ 641.525728][ T30] [ 641.528702][ T30] __schedule+0x1895/0x4b30 [ 641.602566][ T30] ? __pfx___schedule+0x10/0x10 [ 641.607534][ T30] ? __pfx_lock_release+0x10/0x10 [ 641.656193][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 641.699746][ T30] ? kthread_data+0x52/0xd0 [ 641.704821][ T30] ? schedule+0x90/0x320 [ 641.709133][ T30] ? wq_worker_sleeping+0x66/0x240 [ 641.761911][ T30] ? schedule+0x90/0x320 [ 641.766262][ T30] schedule+0x14b/0x320 [ 641.770483][ T30] schedule_preempt_disabled+0x13/0x30 [ 641.861918][ T30] __mutex_lock+0x6a7/0xd70 [ 641.866586][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 641.910132][ T30] ? __mutex_lock+0x52a/0xd70 [ 641.941897][ T30] ? nsim_destroy+0x71/0x5c0 [ 641.946598][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 641.973235][ T30] ? __pfx_mntput_no_expire+0x10/0x10 [ 641.978714][ T30] ? _raw_spin_unlock+0x28/0x50 [ 642.021787][ T30] ? simple_release_fs+0x9c/0xd0 [ 642.026841][ T30] nsim_destroy+0x71/0x5c0 [ 642.031315][ T30] ? nsim_dev_reload_destroy+0x28a/0x490 [ 642.096141][ T30] __nsim_dev_port_del+0x14b/0x1b0 [ 642.101349][ T30] nsim_dev_reload_destroy+0x28a/0x490 [ 642.141669][ T30] nsim_dev_reload_down+0x98/0xd0 [ 642.146792][ T30] devlink_reload+0x18b/0x870 [ 642.190042][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 642.211869][ T30] devlink_pernet_pre_exit+0x1f3/0x440 [ 642.217444][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 642.259761][ T30] ? class_remove_file_ns+0x121/0x160 [ 642.271785][ T30] cleanup_net+0x615/0xcc0 [ 642.276376][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 642.281378][ T30] ? process_scheduled_works+0x976/0x1850 [ 642.342047][ T30] process_scheduled_works+0xa63/0x1850 [ 642.347729][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 642.381865][ T30] ? assign_work+0x364/0x3d0 [ 642.386609][ T30] worker_thread+0x870/0xd30 [ 642.391269][ T30] ? __kthread_parkme+0x169/0x1d0 [ 642.420016][ T30] ? __pfx_worker_thread+0x10/0x10 [ 642.437113][ T30] kthread+0x2f0/0x390 [ 642.441347][ T30] ? __pfx_worker_thread+0x10/0x10 [ 642.452073][ T30] ? __pfx_kthread+0x10/0x10 [ 642.456734][ T30] ret_from_fork+0x4b/0x80 [ 642.461208][ T30] ? __pfx_kthread+0x10/0x10 [ 642.471977][ T30] ret_from_fork_asm+0x1a/0x30 [ 642.476854][ T30] [ 642.490034][ T30] INFO: task syz-executor:12048 blocked for more than 144 seconds. [ 642.500465][ T30] Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 642.519210][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 642.533191][ T30] task:syz-executor state:D stack:26080 pid:12048 tgid:12048 ppid:1 flags:0x00004006 [ 642.549873][ T30] Call Trace: [ 642.557467][ T30] [ 642.560560][ T30] __schedule+0x1895/0x4b30 [ 642.571746][ T30] ? __pfx___schedule+0x10/0x10 [ 642.576794][ T30] ? __pfx_lock_release+0x10/0x10 [ 642.591991][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 642.597557][ T30] ? schedule+0x90/0x320 [ 642.610128][ T30] schedule+0x14b/0x320 [ 642.614896][ T30] schedule_preempt_disabled+0x13/0x30 [ 642.620438][ T30] __mutex_lock+0x6a7/0xd70 [ 642.633525][ T30] ? __mutex_lock+0x52a/0xd70 [ 642.638373][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 642.653231][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 642.658363][ T30] ip_tunnel_init_net+0x20e/0x720 [ 642.671070][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 642.681961][ T30] ? ops_init+0x75/0x590 [ 642.686313][ T30] ops_init+0x31e/0x590 [ 642.690582][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 642.703730][ T30] setup_net+0x287/0x9e0 [ 642.708109][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 642.720217][ T30] ? __pfx_setup_net+0x10/0x10 [ 642.727881][ T30] copy_net_ns+0x33f/0x570 [ 642.740143][ T30] create_new_namespaces+0x425/0x7b0 [ 642.750468][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 642.761663][ T30] ksys_unshare+0x57d/0xa70 [ 642.766282][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 642.771361][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 642.786110][ T30] ? do_syscall_64+0x100/0x230 [ 642.790979][ T30] __x64_sys_unshare+0x38/0x40 [ 642.806464][ T30] do_syscall_64+0xf3/0x230 [ 642.811072][ T30] ? clear_bhb_loop+0x35/0x90 [ 642.820264][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.831778][ T30] RIP: 0033:0x7f308577f7f7 [ 642.836378][ T30] RSP: 002b:00007f3085a5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 642.853464][ T30] RAX: ffffffffffffffda RBX: 00007f30857f1a85 RCX: 00007f308577f7f7 [ 642.869932][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 642.881127][ T30] RBP: 0000000000000000 R08: 00007f3086467d60 R09: 0000000000000000 [ 642.895665][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 642.912082][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 642.920160][ T30] [ 642.933463][ T30] [ 642.933463][ T30] Showing all locks held in the system: [ 642.941251][ T30] 3 locks held by kworker/0:1/9: [ 642.951682][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 642.970518][ T30] #1: ffffc900000e7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 642.995666][ T30] #2: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 643.015105][ T30] 6 locks held by kworker/u8:0/11: [ 643.020337][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 643.040711][ T30] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 643.061399][ T30] #2: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 643.071403][ T30] #3: ffff8880585060e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 643.090506][ T30] #4: ffff888058505250 (&devlink->lock_key#16){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 643.111399][ T30] #5: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 643.120492][ T30] 7 locks held by kworker/1:0/25: [ 643.135846][ T30] 1 lock held by khungtaskd/30: [ 643.140853][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 643.173492][ T30] 3 locks held by kworker/u8:4/62: [ 643.178700][ T30] 3 locks held by kworker/u8:9/3033: [ 643.191986][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 643.213014][ T30] #1: ffffc90009717d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 643.231859][ T30] #2: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 643.240945][ T30] 2 locks held by getty/4996: [ 643.255301][ T30] #0: ffff88803218a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 643.271429][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 643.290679][ T30] 3 locks held by kworker/1:5/5286: [ 643.298846][ T30] 3 locks held by kworker/u8:10/8584: [ 643.311568][ T30] #0: ffff88814b9af948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 643.332959][ T30] #1: ffffc90009027d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 643.351973][ T30] #2: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 643.371676][ T30] 2 locks held by syz-executor/12048: [ 643.377123][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 643.391646][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 643.401395][ T30] 2 locks held by syz-executor/12054: [ 643.421015][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 643.432458][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 643.441300][ T30] 2 locks held by syz-executor/12057: [ 643.451564][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 643.461102][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 643.480527][ T30] 2 locks held by syz-executor/12059: [ 643.487794][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 643.506298][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 643.520519][ T30] 2 locks held by syz-executor/12074: [ 643.529892][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 643.544644][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 643.561681][ T30] 2 locks held by syz-executor/12076: [ 643.567134][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 643.586999][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 643.606086][ T30] 2 locks held by syz-executor/12080: [ 643.615459][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 643.631744][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 643.653407][ T30] 2 locks held by syz-executor/12083: [ 643.658934][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 643.678272][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 643.699641][ T30] 2 locks held by syz-executor/12084: [ 643.708596][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 643.721769][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 643.739889][ T30] 1 lock held by syz-executor/12094: [ 643.747154][ T30] #0: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab7/0x20a0 [ 643.761768][ T30] 2 locks held by syz-executor/12101: [ 643.767217][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 643.788479][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 643.802110][ T30] 8 locks held by syz-executor/12102: [ 643.807546][ T30] #0: ffff88803273a420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 643.826064][ T30] #1: ffff88805aa1b088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 643.839908][ T30] #2: ffff888144b282d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 643.858965][ T30] #3: ffffffff8f570c68 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 643.883153][ T30] #4: ffff888066ea00e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 643.902064][ T30] #5: ffff888066ea3250 (&devlink->lock_key#20){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 643.921142][ T30] #6: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 643.941239][ T30] #7: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 643.961663][ T30] 2 locks held by syz-executor/12112: [ 643.967120][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 643.986880][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 644.007609][ T30] 2 locks held by syz-executor/12114: [ 644.014738][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 644.031850][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 644.050948][ T30] [ 644.053796][ T30] ============================================= [ 644.053796][ T30] [ 644.071129][ T30] NMI backtrace for cpu 0 [ 644.075533][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 644.086084][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 644.096203][ T30] Call Trace: [ 644.099536][ T30] [ 644.102521][ T30] dump_stack_lvl+0x241/0x360 [ 644.107254][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.112513][ T30] ? __pfx__printk+0x10/0x10 [ 644.117172][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 644.122170][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 644.127683][ T30] ? _printk+0xd5/0x120 [ 644.131888][ T30] ? __pfx__printk+0x10/0x10 [ 644.136526][ T30] ? __wake_up_klogd+0xcc/0x110 [ 644.141432][ T30] ? __pfx__printk+0x10/0x10 [ 644.146077][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 644.151163][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 644.157214][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 644.163274][ T30] watchdog+0xff4/0x1040 [ 644.167578][ T30] ? watchdog+0x1ea/0x1040 [ 644.172055][ T30] ? __pfx_watchdog+0x10/0x10 [ 644.176791][ T30] kthread+0x2f0/0x390 [ 644.180915][ T30] ? __pfx_watchdog+0x10/0x10 [ 644.185652][ T30] ? __pfx_kthread+0x10/0x10 [ 644.190304][ T30] ret_from_fork+0x4b/0x80 [ 644.194779][ T30] ? __pfx_kthread+0x10/0x10 [ 644.199442][ T30] ret_from_fork_asm+0x1a/0x30 [ 644.204291][ T30] [ 644.208262][ T30] Sending NMI from CPU 0 to CPUs 1: [ 644.213710][ C1] NMI backtrace for cpu 1 [ 644.213728][ C1] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 644.213751][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 644.213764][ C1] Workqueue: events nsim_dev_trap_report_work [ 644.213794][ C1] RIP: 0010:__sanitizer_cov_trace_cmp4+0x81/0x90 [ 644.213823][ C1] Code: 8d 42 28 4c 39 c8 77 22 89 f8 89 f6 49 ff c2 4c 89 11 48 c7 44 0a 08 04 00 00 00 48 89 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 644.213841][ C1] RSP: 0018:ffffc90000a18008 EFLAGS: 00000246 [ 644.213858][ C1] RAX: 0000000000000100 RBX: ffff88809361ba00 RCX: ffff88801d2f1e00 [ 644.213873][ C1] RDX: ffff88801d2f1e00 RSI: 00000000000002c0 RDI: 0000000000000168 [ 644.213887][ C1] RBP: 00000000000002c0 R08: ffffffff898b112a R09: 1ffff1101132ac5c [ 644.213902][ C1] R10: dffffc0000000000 R11: ffffed101132ac5d R12: 1ffff110126c3759 [ 644.213917][ C1] R13: 0000000000000168 R14: dffffc0000000000 R15: ffff888089956000 [ 644.213932][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 644.213949][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 644.213963][ C1] CR2: 000000110c36a1bc CR3: 000000000e734000 CR4: 00000000003526f0 [ 644.213981][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004520 [ 644.213993][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 644.214007][ C1] Call Trace: [ 644.214014][ C1] [ 644.214023][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 644.214048][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 644.214079][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 644.214103][ C1] ? nmi_handle+0x2a/0x5a0 [ 644.214131][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 644.214157][ C1] ? nmi_handle+0x14f/0x5a0 [ 644.214177][ C1] ? nmi_handle+0x2a/0x5a0 [ 644.214197][ C1] ? __sanitizer_cov_trace_cmp4+0x81/0x90 [ 644.214222][ C1] ? default_do_nmi+0x63/0x160 [ 644.214254][ C1] ? exc_nmi+0x123/0x1f0 [ 644.214278][ C1] ? end_repeat_nmi+0xf/0x53 [ 644.214301][ C1] ? skb_put+0x10a/0x1f0 [ 644.214322][ C1] ? __sanitizer_cov_trace_cmp4+0x81/0x90 [ 644.214347][ C1] ? __sanitizer_cov_trace_cmp4+0x81/0x90 [ 644.214373][ C1] ? __sanitizer_cov_trace_cmp4+0x81/0x90 [ 644.214398][ C1] [ 644.214405][ C1] [ 644.214412][ C1] skb_put+0x10a/0x1f0 [ 644.214434][ C1] synproxy_send_client_synack+0x4a9/0xf30 [ 644.214468][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 644.214499][ C1] ? synproxy_pernet+0x45/0x270 [ 644.214531][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 644.214562][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 644.214593][ C1] ? nf_ip_checksum+0x13a/0x500 [ 644.214614][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 644.214646][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 644.214675][ C1] ? ip_vs_conn_hashkey_param+0x3ad/0x6b0 [ 644.214708][ C1] ? ip_vs_conn_out_get+0xba6/0xc00 [ 644.214731][ C1] nft_do_chain+0x4ad/0x1da0 [ 644.214753][ C1] ? tcp_conn_schedule+0x45e/0x880 [ 644.214784][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 644.214815][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 644.214835][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 644.214858][ C1] nft_do_chain_inet+0x418/0x6b0 [ 644.214889][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 644.214926][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 644.214953][ C1] nf_hook_slow+0xc3/0x220 [ 644.214979][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 644.215002][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 644.215025][ C1] NF_HOOK+0x29e/0x450 [ 644.215048][ C1] ? NF_HOOK+0x9a/0x450 [ 644.215069][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 644.215092][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 644.215118][ C1] ? ip_rcv_finish+0x406/0x560 [ 644.215141][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 644.215163][ C1] NF_HOOK+0x3a4/0x450 [ 644.215184][ C1] ? __lock_acquire+0x1384/0x2050 [ 644.215213][ C1] ? NF_HOOK+0x9a/0x450 [ 644.215241][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 644.215261][ C1] ? ip_rcv_core+0x801/0xd10 [ 644.215285][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 644.215311][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 644.215333][ C1] __netif_receive_skb+0x2bf/0x650 [ 644.215359][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 644.215387][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 644.215411][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 644.215440][ C1] ? __pfx_lock_release+0x10/0x10 [ 644.215469][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 644.215503][ C1] process_backlog+0x662/0x15b0 [ 644.215531][ C1] ? process_backlog+0x33b/0x15b0 [ 644.215561][ C1] ? __pfx_process_backlog+0x10/0x10 [ 644.215586][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 644.215616][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 644.215647][ C1] __napi_poll+0xcb/0x490 [ 644.215672][ C1] net_rx_action+0x89b/0x1240 [ 644.215709][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 644.215737][ C1] ? sched_clock+0x4a/0x70 [ 644.215769][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 644.215803][ C1] handle_softirqs+0x2c5/0x980 [ 644.215832][ C1] ? do_softirq+0x11b/0x1e0 [ 644.215857][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 644.215888][ C1] do_softirq+0x11b/0x1e0 [ 644.215912][ C1] [ 644.215919][ C1] [ 644.215927][ C1] ? __pfx_do_softirq+0x10/0x10 [ 644.215951][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 644.215982][ C1] ? rcu_is_watching+0x15/0xb0 [ 644.216004][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 644.216030][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 644.216054][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 644.216079][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 644.216105][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 644.216130][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 644.216161][ C1] ? process_scheduled_works+0x976/0x1850 [ 644.216187][ C1] process_scheduled_works+0xa63/0x1850 [ 644.216227][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 644.216265][ C1] ? assign_work+0x364/0x3d0 [ 644.216292][ C1] worker_thread+0x870/0xd30 [ 644.216325][ C1] ? __kthread_parkme+0x169/0x1d0 [ 644.216355][ C1] ? __pfx_worker_thread+0x10/0x10 [ 644.216381][ C1] kthread+0x2f0/0x390 [ 644.216399][ C1] ? __pfx_worker_thread+0x10/0x10 [ 644.216425][ C1] ? __pfx_kthread+0x10/0x10 [ 644.216444][ C1] ret_from_fork+0x4b/0x80 [ 644.216470][ C1] ? __pfx_kthread+0x10/0x10 [ 644.216489][ C1] ret_from_fork_asm+0x1a/0x30 [ 644.216523][ C1] [ 644.914080][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 644.921006][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 644.931555][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 644.941664][ T30] Call Trace: [ 644.944984][ T30] [ 644.947956][ T30] dump_stack_lvl+0x241/0x360 [ 644.952687][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.957936][ T30] ? __pfx__printk+0x10/0x10 [ 644.962571][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 644.968616][ T30] ? vscnprintf+0x5d/0x90 [ 644.973000][ T30] panic+0x349/0x880 [ 644.976940][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 644.983156][ T30] ? __pfx_panic+0x10/0x10 [ 644.987633][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 644.993060][ T30] ? __irq_work_queue_local+0x137/0x410 [ 644.998666][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 645.004091][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 645.010299][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 645.016517][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 645.022732][ T30] watchdog+0x1033/0x1040 [ 645.027115][ T30] ? watchdog+0x1ea/0x1040 [ 645.031590][ T30] ? __pfx_watchdog+0x10/0x10 [ 645.036319][ T30] kthread+0x2f0/0x390 [ 645.040433][ T30] ? __pfx_watchdog+0x10/0x10 [ 645.045157][ T30] ? __pfx_kthread+0x10/0x10 [ 645.049789][ T30] ret_from_fork+0x4b/0x80 [ 645.054258][ T30] ? __pfx_kthread+0x10/0x10 [ 645.058884][ T30] ret_from_fork_asm+0x1a/0x30 [ 645.063712][ T30] [ 645.067105][ T30] Kernel Offset: disabled [ 645.071451][ T30] Rebooting in 86400 seconds..