last executing test programs: 14m39.698085296s ago: executing program 4 (id=5): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc, 0xf}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) 14m21.990193397s ago: executing program 32 (id=5): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc, 0xf}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) 14m17.292030487s ago: executing program 3 (id=21): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)={@remote, @local, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0xbc, 0x0, "d3", "789c2222584e025ac76cc58949d62fdb20693d84327f438ad03e4853d2aad5879c3d465076e6692dc3462f0c6fb55b543566db8db2d09d3fd4a176436b04edadcc2251d87dc01143f4b980c088d2cf26591b8f51aa3c11336cd0b5bcf18843d2932bc1fe1002e09867cd43c03c9774b488"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001340)=0x0) move_pages(r2, 0x0, 0x0, &(0x7f00000013c0)=[0x6], &(0x7f0000001400)=[0x0, 0x0], 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0], 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) 14m14.318316321s ago: executing program 3 (id=24): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000002280)=""/4060, &(0x7f0000000640)=0xfdc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x8b, 0x100000500) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0xfffffffffffffffe, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 14m11.778610312s ago: executing program 3 (id=29): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x8c0, 0x80000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x26d7, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = getpid() syz_pidfd_open(r3, 0x0) 14m7.072353941s ago: executing program 3 (id=36): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc, 0xf}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) 14m3.535024082s ago: executing program 0 (id=41): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(0x0, &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) 14m3.021348609s ago: executing program 0 (id=43): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_uring_setup(0x68e9, &(0x7f0000000240)={0x0, 0x4177, 0x4000, 0x2, 0x3e4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x80) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000037c0000040042800c0001800600060086dd"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000001580)=""/102400, 0x19000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004090) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {0x36}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x9c) socket$inet6(0xa, 0xa, 0x1) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000001f00)) sendmmsg(r4, &(0x7f0000009140)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000000)="b3c7", 0x2}], 0x1}}], 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000080)={0x1, 0x4, 0x81}) 14m1.926422007s ago: executing program 3 (id=45): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x8c0, 0x80000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x26d7, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = getpid() syz_pidfd_open(r3, 0x0) 13m59.409620183s ago: executing program 0 (id=47): socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000010c0)) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$uid(0x0, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x40000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 13m53.396761984s ago: executing program 3 (id=50): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000018c0), &(0x7f0000001900)=0xc) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x7, 0x0, 0x34324142, 0x2, 0x9, 0x1, 0xb, 0x8, 0x0, 0x2, 0x0, 0x2}}) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="01001fff0000000000000100000014000180060001000200000008000300ac1414aa"], 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xac}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4081}, 0x8800) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) clock_settime(0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000013c0)) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r1, &(0x7f00000003c0)=""/4096, 0x1000) 13m53.23930235s ago: executing program 0 (id=51): socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000010c0)) socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$uid(0x0, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 13m45.425972644s ago: executing program 0 (id=54): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)={@remote, @local, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0xbc, 0x0, "d3", "789c2222584e025ac76cc58949d62fdb20693d84327f438ad03e4853d2aad5879c3d465076e6692dc3462f0c6fb55b543566db8db2d09d3fd4a176436b04edadcc2251d87dc01143f4b980c088d2cf26591b8f51aa3c11336cd0b5bcf18843d2932bc1fe1002e09867cd43c03c9774b488"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001340)=0x0) move_pages(r2, 0x0, 0x0, &(0x7f00000013c0)=[0x6], &(0x7f0000001400)=[0x0, 0x0], 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0], 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) 13m42.673675069s ago: executing program 0 (id=57): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x14, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x42) 13m35.762237335s ago: executing program 33 (id=50): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000018c0), &(0x7f0000001900)=0xc) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x7, 0x0, 0x34324142, 0x2, 0x9, 0x1, 0xb, 0x8, 0x0, 0x2, 0x0, 0x2}}) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="01001fff0000000000000100000014000180060001000200000008000300ac1414aa"], 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xac}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4081}, 0x8800) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) clock_settime(0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000013c0)) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r1, &(0x7f00000003c0)=""/4096, 0x1000) 13m26.998509717s ago: executing program 34 (id=57): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x14, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x42) 35.92359656s ago: executing program 2 (id=772): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000010c0)) socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$uid(0x0, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r6, 0x1) 35.617130337s ago: executing program 2 (id=773): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x600) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="610f7208deff6fc546fdfa1530638be90bf3845c52ef530bbd66a92604b159f00e0adad9618978ed7f57ce320d7840a8784c77f1531a93a6f8dd28325ae10dc5b6156a8f46079434e2155098137ae1392f4b56810541d86ebfccc59d302d55b1e16bcea32aa81ee390dcc51d9ec3d8da660f909be5f2b43eded40b823d308280329ea8115963bd7d9b3ccf5a74c7039c07037a8b2a342fb6e83b6182fd79757410b42fc4776b417bfafb3fdbe60d48bab220bbdc8b9aea898c5b74bf85c6cdd4fda6f4a3103df684959838c6c0999c9451a4419486eb253aa01c9e010c2b0fd8522037e29e", @ANYBLOB="a574ea73ddfac9c98e8335cb1b237b87a562664c3564c8196f6f4f37a294dd6a79818d8f681870f57246b48f84600fffa9ee397ffddf69fa9462d739b92c27e7f341caadb37907f6506f49ae93e5634df3ec", @ANYRES8=r0], &(0x7f0000000340)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c005af07677d18bc"}}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) 34.585075664s ago: executing program 2 (id=774): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002440)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x25dfdbfd, {{@in6=@dev={0xfe, 0x80, '\x00', 0xa}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x6}, {0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x3, 0x0, 0x1e2}, 0x400, 0x1, 0x1, 0x1, 0x0, 0x3}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x1}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20040084}, 0x24048840) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x54}, 0x4000) getpgrp(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 33.721227245s ago: executing program 2 (id=775): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) pipe2(&(0x7f0000000980), 0x4800) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@generic={0x80, 0x4, 0x3, 0x40, 0xffffffff}, @jmp={0x5, 0x0, 0xd, 0x4, 0x3, 0xffffffffffffffff, 0x1}, @exit]}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x66, &(0x7f00000003c0)=""/102, 0x41100, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xa, 0x8, 0x9}, 0x10, 0x0, r0, 0x3, &(0x7f00000009c0), &(0x7f0000000a00)=[{0x1, 0x2, 0x2, 0xc}, {0x4, 0x3, 0x5, 0x9}, {0x5, 0x2, 0x6, 0xa}], 0x10, 0x2}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, 0x0, 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) 27.108419463s ago: executing program 2 (id=782): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) pipe2(&(0x7f0000000980), 0x4800) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@generic={0x80, 0x4, 0x3, 0x40, 0xffffffff}, @jmp={0x5, 0x0, 0xd, 0x4, 0x3, 0xffffffffffffffff, 0x1}, @exit]}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x66, &(0x7f00000003c0)=""/102, 0x41100, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xa, 0x8, 0x9}, 0x10, 0x0, r0, 0x3, &(0x7f00000009c0), &(0x7f0000000a00)=[{0x1, 0x2, 0x2, 0xc}, {0x4, 0x3, 0x5, 0x9}, {0x5, 0x2, 0x6, 0xa}], 0x10, 0x2}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 26.004182847s ago: executing program 1 (id=783): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_usb_connect$uac1(0x6, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 24.1891436s ago: executing program 1 (id=784): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r0 = creat(0x0, 0xa8) acct(&(0x7f0000000100)='./file0/bus\x00') close(r0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 24.042919715s ago: executing program 1 (id=785): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) close(0x3) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47) 20.921315692s ago: executing program 1 (id=786): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47) 19.52838058s ago: executing program 1 (id=787): mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0xa8) acct(&(0x7f0000000100)='./file0/bus\x00') close(r0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 19.435765824s ago: executing program 2 (id=788): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000010c0)) socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$uid(0x0, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r6, 0x1) 19.357332023s ago: executing program 1 (id=789): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0x1, 0x100005, 0x5, 0x7, 0x1}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) syz_clone(0xa8140180, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000040)="cb", 0xfffffdef) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x400) 286.522997ms ago: executing program 35 (id=789): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0x1, 0x100005, 0x5, 0x7, 0x1}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) syz_clone(0xa8140180, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000040)="cb", 0xfffffdef) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x400) 0s ago: executing program 36 (id=788): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000010c0)) socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$uid(0x0, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r6, 0x1) kernel console output (not intermixed with test programs): over after parsing attributes in process `syz.1.350'. [ 537.261339][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.382068][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.443818][ T1339] bond0 (unregistering): Released all slaves [ 537.749722][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.854520][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.945393][ T1339] bond0 (unregistering): Released all slaves [ 538.190659][ T7727] vlan2: entered promiscuous mode [ 538.190942][ T7727] vlan2: entered allmulticast mode [ 538.190957][ T7727] hsr_slave_1: entered allmulticast mode [ 539.154313][ T1339] hsr_slave_0: left promiscuous mode [ 539.188906][ T1339] hsr_slave_1: left promiscuous mode [ 539.189881][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.230547][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.302452][ T1339] hsr_slave_0: left promiscuous mode [ 539.349044][ T1339] hsr_slave_1: left promiscuous mode [ 539.350137][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.377122][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.218760][ T5993] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 540.378761][ T5993] usb 2-1: Using ep0 maxpacket: 8 [ 540.386584][ T5993] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 540.386619][ T5993] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 540.386645][ T5993] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 540.386670][ T5993] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 540.386714][ T5993] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 540.386737][ T5993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.657726][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 540.720099][ T5993] usb 2-1: GET_CAPABILITIES returned 0 [ 540.720143][ T5993] usbtmc 2-1:16.0: can't read capabilities [ 540.972942][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 540.986235][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 540.995884][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 540.997654][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 540.998858][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 541.062176][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 541.083865][ T5993] usb 2-1: USB disconnect, device number 7 [ 543.079121][ T5845] Bluetooth: hci5: command tx timeout [ 544.398046][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 544.829879][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 545.158752][ T5845] Bluetooth: hci5: command tx timeout [ 547.239001][ T5845] Bluetooth: hci5: command tx timeout [ 549.318592][ T5845] Bluetooth: hci5: command tx timeout [ 552.748662][ T5993] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 552.901604][ T5993] usb 3-1: Using ep0 maxpacket: 8 [ 552.905190][ T5993] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 552.905223][ T5993] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 552.905248][ T5993] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 552.905273][ T5993] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.905316][ T5993] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 552.905339][ T5993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.004096][ T7442] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 553.204379][ T5993] usb 3-1: GET_CAPABILITIES returned 0 [ 553.204428][ T5993] usbtmc 3-1:16.0: can't read capabilities [ 553.452083][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 553.454289][ T7774] usbtmc 3-1:16.0: Unable to send data, error -71 [ 553.460528][ T5921] usb 3-1: USB disconnect, device number 7 [ 555.724475][ T7159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 555.745875][ T7159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 555.761059][ T7159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 555.779235][ T7159] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 555.785171][ T7159] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 556.632777][ T7159] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 556.658980][ T7159] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 556.676142][ T7159] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 556.700082][ T7159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 556.720999][ T7159] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 558.429094][ T5845] Bluetooth: hci0: command tx timeout [ 558.607224][ T7749] chnl_net:caif_netlink_parms(): no params data found [ 558.928594][ T5845] Bluetooth: hci1: command tx timeout [ 559.973756][ T7847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.368'. [ 559.973779][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.368'. [ 560.345268][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'. [ 560.438872][ T5845] Bluetooth: hci0: command tx timeout [ 560.458857][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 560.608682][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 560.611191][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 560.611225][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 560.611252][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 560.611276][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 560.611319][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 560.611342][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.853626][ T7749] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.854259][ T7749] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.855272][ T7749] bridge_slave_0: entered allmulticast mode [ 560.882642][ T7749] bridge_slave_0: entered promiscuous mode [ 560.894853][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 560.894900][ T9] usbtmc 3-1:16.0: can't read capabilities [ 560.998716][ T5845] Bluetooth: hci1: command tx timeout [ 561.014743][ T7749] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.014905][ T7749] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.015133][ T7749] bridge_slave_1: entered allmulticast mode [ 561.039888][ T7749] bridge_slave_1: entered promiscuous mode [ 561.097901][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 561.097999][ T7852] usbtmc 3-1:16.0: Unable to send data, error -71 [ 561.132941][ T5992] usb 3-1: USB disconnect, device number 8 [ 561.615100][ T7749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.676887][ T7873] netlink: 20 bytes leftover after parsing attributes in process `syz.1.372'. [ 561.676911][ T7873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.372'. [ 561.814745][ T7749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.886011][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 561.886039][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 562.034521][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.372'. [ 562.522254][ T5845] Bluetooth: hci0: command tx timeout [ 563.079495][ T5845] Bluetooth: hci1: command tx timeout [ 564.577697][ T7749] team0: Port device team_slave_0 added [ 564.598741][ T5845] Bluetooth: hci0: command tx timeout [ 564.781155][ T7749] team0: Port device team_slave_1 added [ 564.927616][ T7807] chnl_net:caif_netlink_parms(): no params data found [ 564.972041][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'. [ 565.158684][ T5845] Bluetooth: hci1: command tx timeout [ 565.624494][ T7749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.624513][ T7749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.624542][ T7749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.028304][ T7749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.028323][ T7749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.028352][ T7749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.283968][ T7815] chnl_net:caif_netlink_parms(): no params data found [ 568.368737][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.368818][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.955247][ T7749] hsr_slave_0: entered promiscuous mode [ 568.976628][ T7749] hsr_slave_1: entered promiscuous mode [ 569.001727][ T7807] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.001961][ T7807] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.002222][ T7807] bridge_slave_0: entered allmulticast mode [ 569.047013][ T7807] bridge_slave_0: entered promiscuous mode [ 569.389772][ T7807] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.389920][ T7807] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.390129][ T7807] bridge_slave_1: entered allmulticast mode [ 569.393030][ T7807] bridge_slave_1: entered promiscuous mode [ 571.110399][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'. [ 572.705338][ T7807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.060785][ T7807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.062302][ T7815] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.062543][ T7815] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.067571][ T7815] bridge_slave_0: entered allmulticast mode [ 573.076189][ T7815] bridge_slave_0: entered promiscuous mode [ 573.280237][ T7815] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.280529][ T7815] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.280753][ T7815] bridge_slave_1: entered allmulticast mode [ 573.294321][ T7815] bridge_slave_1: entered promiscuous mode [ 575.321100][ T7807] team0: Port device team_slave_0 added [ 575.503121][ T7807] team0: Port device team_slave_1 added [ 575.521819][ T7815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.664416][ T7815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.150487][ T8018] netlink: 20 bytes leftover after parsing attributes in process `syz.1.392'. [ 576.150513][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.392'. [ 576.529726][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'. [ 576.645292][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.645310][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.645339][ T7807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.116744][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.116762][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.116792][ T7807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.185084][ T7815] team0: Port device team_slave_0 added [ 577.253634][ T8040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.395'. [ 577.253658][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.395'. [ 577.303039][ T7815] team0: Port device team_slave_1 added [ 577.519597][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 577.950661][ T7815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.950679][ T7815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.950707][ T7815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.102636][ T7815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.102653][ T7815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.102681][ T7815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.132726][ T7807] hsr_slave_0: entered promiscuous mode [ 578.139588][ T7807] hsr_slave_1: entered promiscuous mode [ 578.141288][ T7807] debugfs: 'hsr0' already exists in 'hsr' [ 578.141320][ T7807] Cannot create hsr debugfs directory [ 578.821551][ T7815] hsr_slave_0: entered promiscuous mode [ 578.952264][ T7815] hsr_slave_1: entered promiscuous mode [ 578.956960][ T7815] debugfs: 'hsr0' already exists in 'hsr' [ 578.956990][ T7815] Cannot create hsr debugfs directory [ 581.665724][ T8062] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 584.173470][ T8076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.405'. [ 584.173495][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.405'. [ 584.443901][ T1339] bridge_slave_1: left allmulticast mode [ 584.444167][ T1339] bridge_slave_1: left promiscuous mode [ 584.444445][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.488007][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'. [ 584.545490][ T1339] bridge_slave_0: left allmulticast mode [ 584.545525][ T1339] bridge_slave_0: left promiscuous mode [ 584.545837][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.641639][ T1339] bridge_slave_1: left allmulticast mode [ 584.641676][ T1339] bridge_slave_1: left promiscuous mode [ 584.641958][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.720522][ T1339] bridge_slave_0: left allmulticast mode [ 584.720557][ T1339] bridge_slave_0: left promiscuous mode [ 584.720835][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.798866][ T1339] bridge_slave_1: left allmulticast mode [ 584.798902][ T1339] bridge_slave_1: left promiscuous mode [ 584.801000][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.860393][ T1339] bridge_slave_0: left allmulticast mode [ 584.860428][ T1339] bridge_slave_0: left promiscuous mode [ 584.860696][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.522192][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.604899][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.663700][ T1339] bond0 (unregistering): Released all slaves [ 585.961269][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.043276][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.107568][ T1339] bond0 (unregistering): Released all slaves [ 586.427411][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.529546][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.603188][ T1339] bond0 (unregistering): Released all slaves [ 586.720868][ T5993] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 586.875444][ T5993] usb 3-1: Using ep0 maxpacket: 8 [ 586.891094][ T5993] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 586.891130][ T5993] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 586.891156][ T5993] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 586.891180][ T5993] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 586.891225][ T5993] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 586.891248][ T5993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.127171][ T5993] usb 3-1: GET_CAPABILITIES returned 0 [ 587.127221][ T5993] usbtmc 3-1:16.0: can't read capabilities [ 587.383193][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 587.383290][ T8087] usbtmc 3-1:16.0: Unable to send data, error -71 [ 587.385724][ T5913] usb 3-1: USB disconnect, device number 9 [ 587.608898][ T1339] hsr_slave_0: left promiscuous mode [ 587.630185][ T1339] hsr_slave_1: left promiscuous mode [ 587.631150][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.682790][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.769897][ T1339] hsr_slave_0: left promiscuous mode [ 587.810388][ T1339] hsr_slave_1: left promiscuous mode [ 587.811416][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.865566][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.129087][ T1339] hsr_slave_0: left promiscuous mode [ 588.159464][ T1339] hsr_slave_1: left promiscuous mode [ 589.515101][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.601516][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.419194][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 598.611050][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 599.558658][ T5992] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 600.618617][ T5992] usb 3-1: Using ep0 maxpacket: 8 [ 600.620592][ T5992] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 600.620625][ T5992] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 600.620651][ T5992] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 600.620675][ T5992] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 600.620718][ T5992] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 600.620741][ T5992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.836826][ T5992] usb 3-1: GET_CAPABILITIES returned 0 [ 600.836875][ T5992] usbtmc 3-1:16.0: can't read capabilities [ 601.070479][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 601.073277][ T8118] usbtmc 3-1:16.0: Unable to send data, error -71 [ 601.078240][ T5921] usb 3-1: USB disconnect, device number 10 [ 601.365765][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 601.619509][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 602.195073][ T7159] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 602.209057][ T7159] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 602.221620][ T7159] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 602.245228][ T7159] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 602.319045][ T7159] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 604.358591][ T7159] Bluetooth: hci3: command tx timeout [ 606.482724][ T7159] Bluetooth: hci3: command tx timeout [ 607.160071][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 608.494582][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 608.528824][ T7159] Bluetooth: hci3: command tx timeout [ 610.179174][ T5921] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 610.393997][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 610.397095][ T5921] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 610.397129][ T5921] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 610.397155][ T5921] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 610.397179][ T5921] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.397222][ T5921] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 610.397245][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.598783][ T7159] Bluetooth: hci3: command tx timeout [ 610.941176][ T5921] usb 3-1: GET_CAPABILITIES returned 0 [ 610.941290][ T5921] usbtmc 3-1:16.0: can't read capabilities [ 611.316476][ T5921] usb 3-1: USB disconnect, device number 11 [ 613.691957][ T8176] syz.2.432 (8176) used greatest stack depth: 15536 bytes left [ 613.864096][ T38] audit: type=1326 audit(1756100451.603:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8189 comm="syz.2.435" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7e4e8ebe9 code=0x0 [ 614.130971][ C0] vkms_vblank_simulate: vblank timer overrun [ 615.092107][ T8130] chnl_net:caif_netlink_parms(): no params data found [ 615.527269][ C0] vkms_vblank_simulate: vblank timer overrun [ 616.014056][ T8130] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.026336][ T8130] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.026595][ T8130] bridge_slave_0: entered allmulticast mode [ 616.999974][ T8130] bridge_slave_0: entered promiscuous mode [ 617.104472][ C0] vkms_vblank_simulate: vblank timer overrun [ 617.213976][ C0] vkms_vblank_simulate: vblank timer overrun [ 617.352463][ T8130] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.352646][ T8130] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.352847][ T8130] bridge_slave_1: entered allmulticast mode [ 617.355805][ T8130] bridge_slave_1: entered promiscuous mode [ 618.846947][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 618.862862][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 618.864318][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 618.865544][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 618.866334][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 619.048667][ T5993] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 619.172647][ T8130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.182388][ T8130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.228574][ T5993] usb 2-1: Using ep0 maxpacket: 8 [ 619.235337][ T5993] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 619.235379][ T5993] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 619.235405][ T5993] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 619.235430][ T5993] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 619.235473][ T5993] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 619.235496][ T5993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.520853][ T5993] usb 2-1: GET_CAPABILITIES returned 0 [ 619.520897][ T5993] usbtmc 2-1:16.0: can't read capabilities [ 619.547503][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 619.558541][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 619.560477][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 619.590041][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 619.595449][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 619.725329][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 619.725523][ T8240] usbtmc 2-1:16.0: Unable to send data, error -71 [ 619.728259][ T5993] usb 2-1: USB disconnect, device number 8 [ 619.962254][ T8130] team0: Port device team_slave_0 added [ 620.017790][ T8130] team0: Port device team_slave_1 added [ 621.201437][ T7159] Bluetooth: hci5: command tx timeout [ 621.304813][ C0] vkms_vblank_simulate: vblank timer overrun [ 621.437369][ T8130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.437417][ T8130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.437475][ T8130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.596265][ C0] vkms_vblank_simulate: vblank timer overrun [ 621.918829][ C0] vkms_vblank_simulate: vblank timer overrun [ 621.930064][ T7159] Bluetooth: hci6: command tx timeout [ 622.239894][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.405498][ T8130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.405516][ T8130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.405545][ T8130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.238765][ T7159] Bluetooth: hci5: command tx timeout [ 623.771315][ T5992] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 623.902299][ T8130] hsr_slave_0: entered promiscuous mode [ 623.928661][ T5992] usb 3-1: Using ep0 maxpacket: 8 [ 623.932013][ T5992] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 623.932047][ T5992] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 623.932074][ T5992] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 623.932099][ T5992] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 623.932143][ T5992] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 623.932167][ T5992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.958751][ T7159] Bluetooth: hci6: command tx timeout [ 623.969173][ T8130] hsr_slave_1: entered promiscuous mode [ 623.970246][ T8130] debugfs: 'hsr0' already exists in 'hsr' [ 623.970275][ T8130] Cannot create hsr debugfs directory [ 624.299421][ T5992] usb 3-1: GET_CAPABILITIES returned 0 [ 624.299472][ T5992] usbtmc 3-1:16.0: can't read capabilities [ 624.534878][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 624.534997][ T8303] usbtmc 3-1:16.0: Unable to send data, error -71 [ 624.560206][ T5992] usb 3-1: USB disconnect, device number 12 [ 625.473599][ T7159] Bluetooth: hci5: command tx timeout [ 625.510993][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.727504][ T8328] netlink: 20 bytes leftover after parsing attributes in process `syz.2.452'. [ 626.450569][ T7159] Bluetooth: hci6: command tx timeout [ 627.010679][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.320262][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.392730][ C0] vkms_vblank_simulate: vblank timer overrun [ 628.477093][ C0] vkms_vblank_simulate: vblank timer overrun [ 628.495458][ T7159] Bluetooth: hci5: command tx timeout [ 628.538722][ T5845] Bluetooth: hci6: command tx timeout [ 629.812045][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.812130][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 639.308890][ T5920] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 639.470476][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 639.472583][ T5920] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 639.472608][ T5920] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 639.472626][ T5920] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 639.472643][ T5920] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.472674][ T5920] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 639.472690][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.700502][ T5920] usb 3-1: GET_CAPABILITIES returned 0 [ 639.700552][ T5920] usbtmc 3-1:16.0: can't read capabilities [ 639.943935][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 639.944043][ T8359] usbtmc 3-1:16.0: Unable to send data, error -71 [ 639.946709][ T5923] usb 3-1: USB disconnect, device number 13 [ 640.151638][ T8237] chnl_net:caif_netlink_parms(): no params data found [ 641.688780][ T5921] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 641.689388][ T8254] chnl_net:caif_netlink_parms(): no params data found [ 641.868998][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 641.885331][ T5921] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 641.885366][ T5921] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 641.885393][ T5921] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 641.885418][ T5921] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 641.885463][ T5921] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 641.885487][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.247735][ T5921] usb 2-1: GET_CAPABILITIES returned 0 [ 642.247793][ T5921] usbtmc 2-1:16.0: can't read capabilities [ 642.505373][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 642.507098][ T8381] usbtmc 2-1:16.0: Unable to send data, error -71 [ 642.605842][ T5921] usb 2-1: USB disconnect, device number 9 [ 642.610581][ T8237] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.610718][ T8237] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.611018][ T8237] bridge_slave_0: entered allmulticast mode [ 642.685554][ T8237] bridge_slave_0: entered promiscuous mode [ 642.749509][ T8237] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.749659][ T8237] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.749921][ T8237] bridge_slave_1: entered allmulticast mode [ 642.765344][ T8237] bridge_slave_1: entered promiscuous mode [ 643.296461][ C0] vkms_vblank_simulate: vblank timer overrun [ 643.340114][ T8130] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 644.272304][ C0] vkms_vblank_simulate: vblank timer overrun [ 644.788358][ T1339] bridge_slave_1: left allmulticast mode [ 644.788394][ T1339] bridge_slave_1: left promiscuous mode [ 644.788910][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.945655][ T1339] bridge_slave_0: left allmulticast mode [ 644.945692][ T1339] bridge_slave_0: left promiscuous mode [ 644.945988][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.059944][ T1339] bridge_slave_1: left allmulticast mode [ 645.059980][ T1339] bridge_slave_1: left promiscuous mode [ 645.060251][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.120676][ T1339] bridge_slave_0: left allmulticast mode [ 645.120712][ T1339] bridge_slave_0: left promiscuous mode [ 645.120994][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.618952][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 645.677997][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.769659][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.879125][ T1339] bond0 (unregistering): Released all slaves [ 646.209827][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.289561][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.365893][ T1339] bond0 (unregistering): Released all slaves [ 646.424413][ T8237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.424531][ T8130] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 646.662439][ T8237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.662823][ T8130] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 646.708993][ T8254] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.709142][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.709386][ T8254] bridge_slave_0: entered allmulticast mode [ 646.722103][ T8254] bridge_slave_0: entered promiscuous mode [ 646.914329][ T8130] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 646.953228][ T8254] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.953376][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.953589][ T8254] bridge_slave_1: entered allmulticast mode [ 646.956618][ T8254] bridge_slave_1: entered promiscuous mode [ 647.038689][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 647.162802][ T8237] team0: Port device team_slave_0 added [ 647.198626][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 647.202252][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 647.202277][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 647.202296][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 647.202313][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 647.202343][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 647.202359][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.346180][ T8237] team0: Port device team_slave_1 added [ 647.445706][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 647.445757][ T10] usbtmc 2-1:16.0: can't read capabilities [ 647.838668][ T1339] hsr_slave_0: left promiscuous mode [ 648.895957][ T1339] hsr_slave_1: left promiscuous mode [ 648.896981][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.969516][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.993411][ T10] usb 2-1: USB disconnect, device number 10 [ 649.069135][ T1339] hsr_slave_0: left promiscuous mode [ 649.091454][ T1339] hsr_slave_1: left promiscuous mode [ 649.092493][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.117121][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.160169][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 650.389502][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 651.250762][ T5993] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 651.448854][ T5993] usb 2-1: Using ep0 maxpacket: 8 [ 651.452033][ T5993] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 651.452066][ T5993] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 651.452093][ T5993] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 651.452118][ T5993] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 651.452162][ T5993] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 651.452187][ T5993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.664807][ T5993] usb 2-1: GET_CAPABILITIES returned 0 [ 651.664856][ T5993] usbtmc 2-1:16.0: can't read capabilities [ 651.780662][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 651.868233][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 651.868333][ T8424] usbtmc 2-1:16.0: Unable to send data, error -71 [ 651.891301][ T5993] usb 2-1: USB disconnect, device number 11 [ 651.932479][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 652.587181][ T8254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.147898][ T8254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.882440][ T8237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.882459][ T8237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.882489][ T8237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.154393][ T8237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.154448][ T8237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.154478][ T8237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.221427][ T8254] team0: Port device team_slave_0 added [ 658.311281][ T8254] team0: Port device team_slave_1 added [ 659.487871][ T8254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.487891][ T8254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.487922][ T8254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.161587][ T8254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.161658][ T8254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.161728][ T8254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.447839][ T8237] hsr_slave_0: entered promiscuous mode [ 660.480295][ T8237] hsr_slave_1: entered promiscuous mode [ 662.585632][ T8254] hsr_slave_0: entered promiscuous mode [ 662.587032][ T8254] hsr_slave_1: entered promiscuous mode [ 662.587996][ T8254] debugfs: 'hsr0' already exists in 'hsr' [ 662.588023][ T8254] Cannot create hsr debugfs directory [ 665.691239][ T5845] Bluetooth: hci6: link tx timeout [ 665.691864][ T5845] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 666.095318][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 666.123375][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 666.124691][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 666.126985][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 666.130982][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 667.718890][ T5844] Bluetooth: hci6: command 0x0406 tx timeout [ 668.199171][ T5845] Bluetooth: hci0: command tx timeout [ 670.278787][ T5845] Bluetooth: hci0: command tx timeout [ 672.360232][ T5845] Bluetooth: hci0: command tx timeout [ 674.448316][ T5845] Bluetooth: hci0: command tx timeout [ 677.165630][ T8495] chnl_net:caif_netlink_parms(): no params data found [ 677.588596][ T5913] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 677.701218][ T1339] bridge_slave_1: left allmulticast mode [ 677.701255][ T1339] bridge_slave_1: left promiscuous mode [ 677.701524][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.738540][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 677.741080][ T5913] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 677.741114][ T5913] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 677.741140][ T5913] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 677.741165][ T5913] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 677.741209][ T5913] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 677.741234][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.860429][ T1339] bridge_slave_0: left allmulticast mode [ 677.860466][ T1339] bridge_slave_0: left promiscuous mode [ 677.860757][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.934336][ T1339] bridge_slave_1: left allmulticast mode [ 677.934373][ T1339] bridge_slave_1: left promiscuous mode [ 677.934648][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.990738][ T1339] bridge_slave_0: left allmulticast mode [ 677.990775][ T1339] bridge_slave_0: left promiscuous mode [ 678.025713][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.050324][ T5913] usb 2-1: usb_control_msg returned -71 [ 678.050373][ T5913] usbtmc 2-1:16.0: can't read capabilities [ 678.081541][ T5913] usb 2-1: USB disconnect, device number 12 [ 678.241770][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 678.264194][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 678.266237][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 678.267664][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 678.308907][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 679.612863][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 679.630708][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.633134][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 679.658616][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 679.680460][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 679.681685][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 679.815638][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.973907][ T1339] bond0 (unregistering): Released all slaves [ 680.471270][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.518691][ T5845] Bluetooth: hci1: command tx timeout [ 680.559570][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 680.623674][ T1339] bond0 (unregistering): Released all slaves [ 682.003832][ T5845] Bluetooth: hci3: command tx timeout [ 682.338726][ T8495] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.339000][ T8495] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.339257][ T8495] bridge_slave_0: entered allmulticast mode [ 682.345610][ T8495] bridge_slave_0: entered promiscuous mode [ 682.448746][ T8495] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.448896][ T8495] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.449166][ T8495] bridge_slave_1: entered allmulticast mode [ 682.479449][ T8495] bridge_slave_1: entered promiscuous mode [ 682.598616][ T5844] Bluetooth: hci1: command tx timeout [ 682.794755][ T1339] hsr_slave_0: left promiscuous mode [ 682.818650][ T1339] hsr_slave_1: left promiscuous mode [ 682.820219][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.873119][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.033576][ T1339] hsr_slave_0: left promiscuous mode [ 683.050067][ T1339] hsr_slave_1: left promiscuous mode [ 683.050799][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.091721][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.038694][ T5844] Bluetooth: hci3: command tx timeout [ 684.376071][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 684.624571][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 684.678609][ T5844] Bluetooth: hci1: command tx timeout [ 685.029387][ T5923] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 685.178648][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 685.181369][ T5923] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 685.181404][ T5923] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 685.181429][ T5923] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 685.181454][ T5923] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 685.181498][ T5923] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 685.181522][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.429108][ T5923] usb 2-1: usb_control_msg returned -71 [ 685.429159][ T5923] usbtmc 2-1:16.0: can't read capabilities [ 685.497824][ T5923] usb 2-1: USB disconnect, device number 13 [ 686.128648][ T5844] Bluetooth: hci3: command tx timeout [ 686.509529][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 686.683323][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 686.758628][ T5845] Bluetooth: hci1: command tx timeout [ 688.100479][ T8495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.198669][ T5845] Bluetooth: hci3: command tx timeout [ 688.382740][ T8495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.292304][ T8495] team0: Port device team_slave_0 added [ 690.394746][ T8495] team0: Port device team_slave_1 added [ 691.014643][ T8495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.014754][ T8495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.014839][ T8495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.257901][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.257986][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.301093][ T8495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.301111][ T8495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.301142][ T8495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.258677][ T5993] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 692.434293][ T5993] usb 3-1: Using ep0 maxpacket: 8 [ 692.459383][ T5993] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 692.459422][ T5993] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 692.459449][ T5993] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 692.459475][ T5993] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 692.459520][ T5993] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 692.459544][ T5993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.151768][ T5993] usb 3-1: usb_control_msg returned -71 [ 694.151986][ T5993] usbtmc 3-1:16.0: can't read capabilities [ 694.901442][ T5993] usb 3-1: USB disconnect, device number 14 [ 694.940277][ T8495] hsr_slave_0: entered promiscuous mode [ 694.946541][ T8495] hsr_slave_1: entered promiscuous mode [ 694.947475][ T8495] debugfs: 'hsr0' already exists in 'hsr' [ 694.947498][ T8495] Cannot create hsr debugfs directory [ 696.050018][ T8567] chnl_net:caif_netlink_parms(): no params data found [ 698.511127][ C0] vkms_vblank_simulate: vblank timer overrun [ 699.023925][ T8584] chnl_net:caif_netlink_parms(): no params data found [ 699.338696][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 699.488581][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 699.495545][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 699.495583][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 699.495608][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 699.495634][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 699.495679][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 699.495703][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.825824][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 699.825866][ T10] usbtmc 3-1:16.0: can't read capabilities [ 700.439510][ T10] usb 3-1: USB disconnect, device number 15 [ 700.895594][ T8680] ipvlan0: entered promiscuous mode [ 700.895636][ T8680] ipvlan0: entered allmulticast mode [ 700.895650][ T8680] veth0_vlan: entered allmulticast mode [ 700.909130][ T8567] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.909283][ T8567] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.909527][ T8567] bridge_slave_0: entered allmulticast mode [ 700.912485][ T8567] bridge_slave_0: entered promiscuous mode [ 701.163851][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 701.279879][ T8567] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.280032][ T8567] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.280286][ T8567] bridge_slave_1: entered allmulticast mode [ 701.291357][ T8567] bridge_slave_1: entered promiscuous mode [ 701.818695][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.818845][ T8584] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.819102][ T8584] bridge_slave_0: entered allmulticast mode [ 701.830023][ T8584] bridge_slave_0: entered promiscuous mode [ 702.146406][ T8584] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.146582][ T8584] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.146914][ T8584] bridge_slave_1: entered allmulticast mode [ 702.151250][ T8584] bridge_slave_1: entered promiscuous mode [ 702.175927][ T8567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.513949][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 702.699046][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 702.721633][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 702.721690][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 702.721813][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 702.721841][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 702.721995][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 702.722066][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.894965][ T8567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.341900][ T9] usb 3-1: usb_control_msg returned -71 [ 704.341951][ T9] usbtmc 3-1:16.0: can't read capabilities [ 704.408288][ T9] usb 3-1: USB disconnect, device number 16 [ 705.181611][ T8584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.512502][ T8584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.534043][ T8567] team0: Port device team_slave_0 added [ 705.628569][ C0] vkms_vblank_simulate: vblank timer overrun [ 707.852741][ T8567] team0: Port device team_slave_1 added [ 708.178324][ T8584] team0: Port device team_slave_0 added [ 708.474636][ T8584] team0: Port device team_slave_1 added [ 708.578503][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 708.633566][ T8567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.633584][ T8567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.633614][ T8567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.758579][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 708.761121][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 708.761146][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 708.761165][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 708.761188][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.761218][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 708.761235][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.873084][ T8567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.873220][ T8567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.873251][ T8567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.065249][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 709.065300][ T9] usbtmc 2-1:16.0: can't read capabilities [ 709.343998][ T8584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.344017][ T8584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.344047][ T8584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.434149][ T8584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.434169][ T8584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.434201][ T8584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.517333][ T1339] bridge_slave_1: left allmulticast mode [ 709.517369][ T1339] bridge_slave_1: left promiscuous mode [ 709.517639][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.579809][ T1339] bridge_slave_0: left allmulticast mode [ 709.579835][ T1339] bridge_slave_0: left promiscuous mode [ 709.580049][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.627491][ T5992] usb 2-1: USB disconnect, device number 14 [ 709.699896][ T1339] bridge_slave_1: left allmulticast mode [ 709.699932][ T1339] bridge_slave_1: left promiscuous mode [ 709.700207][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.780461][ T1339] bridge_slave_0: left allmulticast mode [ 709.780487][ T1339] bridge_slave_0: left promiscuous mode [ 709.780676][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.415320][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.939290][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.066189][ T1339] bond0 (unregistering): Released all slaves [ 712.091125][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.229573][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.405826][ T1339] bond0 (unregistering): Released all slaves [ 715.856802][ T8567] hsr_slave_0: entered promiscuous mode [ 715.879034][ T8567] hsr_slave_1: entered promiscuous mode [ 715.881218][ T8567] debugfs: 'hsr0' already exists in 'hsr' [ 715.881248][ T8567] Cannot create hsr debugfs directory [ 716.059695][ T8495] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 716.274946][ T8495] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 716.326572][ T8584] hsr_slave_0: entered promiscuous mode [ 716.328087][ T8584] hsr_slave_1: entered promiscuous mode [ 716.356417][ T8584] debugfs: 'hsr0' already exists in 'hsr' [ 716.356448][ T8584] Cannot create hsr debugfs directory [ 716.521821][ T8495] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 716.650051][ T8495] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 716.842935][ T1339] hsr_slave_0: left promiscuous mode [ 716.878776][ T1339] hsr_slave_1: left promiscuous mode [ 716.879724][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.929790][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.119040][ T1339] hsr_slave_0: left promiscuous mode [ 717.159062][ T1339] hsr_slave_1: left promiscuous mode [ 717.160104][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.210280][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.761320][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 718.982525][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 719.686064][ C1] vkms_vblank_simulate: vblank timer overrun [ 720.564894][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.389410][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 722.429535][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.538675][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 722.564592][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 722.698848][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 722.705522][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 722.705558][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 722.705584][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 722.705609][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 722.705654][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 722.705678][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.963549][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.989186][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 722.989236][ T9] usbtmc 2-1:16.0: can't read capabilities [ 723.367227][ T9] usb 2-1: USB disconnect, device number 15 [ 723.625929][ T8495] kthread_run failed with err -4 [ 723.930055][ C1] vkms_vblank_simulate: vblank timer overrun [ 724.381273][ C1] vkms_vblank_simulate: vblank timer overrun [ 725.531497][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 725.535200][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 725.573678][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 725.575777][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 725.577744][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 726.758850][ T5920] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 726.918809][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 726.924700][ T5920] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 726.924736][ T5920] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 726.924763][ T5920] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 726.924788][ T5920] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 726.924833][ T5920] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 726.924857][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.233601][ T5920] usb 2-1: GET_CAPABILITIES returned 0 [ 727.233651][ T5920] usbtmc 2-1:16.0: can't read capabilities [ 727.566059][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 727.568168][ T8770] usbtmc 2-1:16.0: Unable to send data, error -71 [ 727.720120][ T5844] Bluetooth: hci0: command tx timeout [ 728.495761][ T8584] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 728.559927][ T8759] chnl_net:caif_netlink_parms(): no params data found [ 728.578991][ T8584] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 728.635217][ T8584] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 728.915670][ T8584] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 729.632219][ T9] usb 2-1: USB disconnect, device number 16 [ 729.820832][ T5844] Bluetooth: hci0: command tx timeout [ 730.977246][ T8759] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.977406][ T8759] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.977663][ T8759] bridge_slave_0: entered allmulticast mode [ 731.010555][ T8759] bridge_slave_0: entered promiscuous mode [ 731.054958][ T8567] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 731.673331][ T8759] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.673446][ T8759] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.673653][ T8759] bridge_slave_1: entered allmulticast mode [ 731.725797][ T8759] bridge_slave_1: entered promiscuous mode [ 731.776806][ T8567] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 731.898952][ T5844] Bluetooth: hci0: command tx timeout [ 732.225496][ C1] vkms_vblank_simulate: vblank timer overrun [ 732.262332][ T8567] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 732.580190][ T8567] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 732.949544][ T8759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.995716][ T8759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.958522][ T5844] Bluetooth: hci0: command tx timeout [ 734.925314][ T8759] team0: Port device team_slave_0 added [ 734.959442][ T8759] team0: Port device team_slave_1 added [ 735.018204][ T8810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.562'. [ 735.018227][ T8810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.562'. [ 735.100010][ T1339] bridge_slave_1: left allmulticast mode [ 735.100047][ T1339] bridge_slave_1: left promiscuous mode [ 735.100318][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.210252][ T1339] bridge_slave_0: left allmulticast mode [ 735.210289][ T1339] bridge_slave_0: left promiscuous mode [ 735.210619][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.315243][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.562'. [ 735.959569][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.079331][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.135985][ T1339] bond0 (unregistering): Released all slaves [ 736.501258][ T8759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.501278][ T8759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.501308][ T8759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.571943][ T8759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.571961][ T8759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.571991][ T8759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.750052][ T1339] hsr_slave_0: left promiscuous mode [ 736.781379][ T1339] hsr_slave_1: left promiscuous mode [ 736.782351][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.809660][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.839579][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 738.000439][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 738.583336][ T8826] netlink: 20 bytes leftover after parsing attributes in process `syz.1.565'. [ 738.583353][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.565'. [ 738.910381][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.565'. [ 739.239638][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 739.270187][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 739.271500][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 739.274544][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 739.284326][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 739.778730][ T8694] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 739.884669][ T8759] hsr_slave_0: entered promiscuous mode [ 739.896275][ T8759] hsr_slave_1: entered promiscuous mode [ 739.960070][ T8694] usb 3-1: Using ep0 maxpacket: 8 [ 739.986543][ T8694] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 739.986580][ T8694] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 739.986608][ T8694] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 739.986633][ T8694] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 739.986679][ T8694] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 739.986704][ T8694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.269658][ T8694] usb 3-1: GET_CAPABILITIES returned 0 [ 740.269710][ T8694] usbtmc 3-1:16.0: can't read capabilities [ 740.472940][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 740.493448][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 740.503395][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 740.517320][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 740.527783][ T8836] usbtmc 3-1:16.0: Unable to send data, error -71 [ 740.538830][ T8694] usb 3-1: USB disconnect, device number 17 [ 740.578940][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 740.581747][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 741.318676][ T5845] Bluetooth: hci5: command tx timeout [ 742.678622][ T5845] Bluetooth: hci1: command tx timeout [ 742.908021][ C1] vkms_vblank_simulate: vblank timer overrun [ 743.062188][ C1] vkms_vblank_simulate: vblank timer overrun [ 743.244957][ C1] vkms_vblank_simulate: vblank timer overrun [ 743.860207][ C1] vkms_vblank_simulate: vblank timer overrun [ 743.943250][ T5845] Bluetooth: hci5: command tx timeout [ 744.175789][ C1] vkms_vblank_simulate: vblank timer overrun [ 744.760515][ T5845] Bluetooth: hci1: command tx timeout [ 745.217064][ C1] vkms_vblank_simulate: vblank timer overrun [ 746.649565][ T5845] Bluetooth: hci5: command tx timeout [ 746.862078][ T5844] Bluetooth: hci1: command tx timeout [ 748.679512][ T5844] Bluetooth: hci5: command tx timeout [ 748.922335][ T5844] Bluetooth: hci1: command tx timeout [ 752.762268][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.762326][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.055147][ T8832] chnl_net:caif_netlink_parms(): no params data found [ 753.565740][ T8900] ipvlan0: entered promiscuous mode [ 753.565781][ T8900] ipvlan0: entered allmulticast mode [ 753.565796][ T8900] veth0_vlan: entered allmulticast mode [ 754.555481][ T8914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.582'. [ 754.555507][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.582'. [ 754.840837][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'. [ 755.054491][ T8837] chnl_net:caif_netlink_parms(): no params data found [ 755.111257][ T8832] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.111423][ T8832] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.111670][ T8832] bridge_slave_0: entered allmulticast mode [ 755.114652][ T8832] bridge_slave_0: entered promiscuous mode [ 755.227088][ T8832] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.227238][ T8832] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.227495][ T8832] bridge_slave_1: entered allmulticast mode [ 755.253729][ T8832] bridge_slave_1: entered promiscuous mode [ 755.986410][ T8832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.065518][ T8832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.068174][ T8759] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 757.438687][ T8759] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 758.041257][ T8759] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 758.163073][ T8832] team0: Port device team_slave_0 added [ 758.164259][ T8759] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 758.434198][ T8837] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.434353][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.434571][ T8837] bridge_slave_0: entered allmulticast mode [ 758.436513][ T8837] bridge_slave_0: entered promiscuous mode [ 758.478328][ T8832] team0: Port device team_slave_1 added [ 758.487758][ T8837] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.488022][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.488268][ T8837] bridge_slave_1: entered allmulticast mode [ 758.498650][ T8837] bridge_slave_1: entered promiscuous mode [ 761.628954][ T8832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.628974][ T8832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.629004][ T8832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.636290][ T8837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.757634][ T8832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.757652][ T8832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.757682][ T8832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.782749][ T8837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.514572][ T8837] team0: Port device team_slave_0 added [ 762.907112][ T8837] team0: Port device team_slave_1 added [ 763.043166][ T8832] hsr_slave_0: entered promiscuous mode [ 763.062071][ T8832] hsr_slave_1: entered promiscuous mode [ 763.063163][ T8832] debugfs: 'hsr0' already exists in 'hsr' [ 763.063190][ T8832] Cannot create hsr debugfs directory [ 764.180527][ T8837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.180546][ T8837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.180577][ T8837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.844391][ T8837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.844409][ T8837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.844444][ T8837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.447748][ T1339] bridge_slave_1: left allmulticast mode [ 767.447786][ T1339] bridge_slave_1: left promiscuous mode [ 767.448217][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.559323][ T1339] bridge_slave_0: left allmulticast mode [ 767.559359][ T1339] bridge_slave_0: left promiscuous mode [ 767.562952][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.069011][ T1339] bridge_slave_1: left allmulticast mode [ 768.069049][ T1339] bridge_slave_1: left promiscuous mode [ 768.069327][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.171819][ T1339] bridge_slave_0: left allmulticast mode [ 768.171858][ T1339] bridge_slave_0: left promiscuous mode [ 768.172139][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.283056][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.419213][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.482730][ T1339] bond0 (unregistering): Released all slaves [ 772.340900][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.472977][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.618015][ T1339] bond0 (unregistering): Released all slaves [ 773.172425][ T8837] hsr_slave_0: entered promiscuous mode [ 773.174242][ T8837] hsr_slave_1: entered promiscuous mode [ 773.174908][ T8837] debugfs: 'hsr0' already exists in 'hsr' [ 773.174926][ T8837] Cannot create hsr debugfs directory [ 784.470707][ T1339] hsr_slave_0: left promiscuous mode [ 784.509904][ T1339] hsr_slave_1: left promiscuous mode [ 784.510682][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.582155][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.419033][ T1339] hsr_slave_0: left promiscuous mode [ 785.522158][ T1339] hsr_slave_1: left promiscuous mode [ 785.523132][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.569754][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.740554][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.604'. [ 786.078580][ T8263] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 786.134333][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 786.155693][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 786.172913][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 786.177855][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 786.207509][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 786.231265][ T8263] usb 2-1: Using ep0 maxpacket: 32 [ 786.265141][ T8263] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 786.268584][ T8263] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 786.268621][ T8263] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 786.268647][ T8263] usb 2-1: Product: syz [ 786.268674][ T8263] usb 2-1: Manufacturer: syz [ 786.268692][ T8263] usb 2-1: SerialNumber: syz [ 786.280878][ T8263] usb 2-1: config 0 descriptor?? [ 786.281946][ T9049] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 786.284774][ T8263] hub 2-1:0.0: bad descriptor, ignoring hub [ 786.284819][ T8263] hub 2-1:0.0: probe with driver hub failed with error -5 [ 786.340232][ C1] vkms_vblank_simulate: vblank timer overrun [ 786.619105][ T8263] usb 2-1: USB disconnect, device number 17 [ 786.735574][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 786.904898][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 787.054716][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.278681][ T5844] Bluetooth: hci3: command tx timeout [ 788.560827][ C1] vkms_vblank_simulate: vblank timer overrun [ 789.899239][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 790.130263][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 790.358666][ T5844] Bluetooth: hci3: command tx timeout [ 792.451249][ T5844] Bluetooth: hci3: command tx timeout [ 797.148872][ T5845] Bluetooth: hci3: command tx timeout [ 801.906315][ T9051] chnl_net:caif_netlink_parms(): no params data found [ 803.341015][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 803.359435][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 803.361941][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 803.363299][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 803.364236][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 803.367862][ T9134] netlink: 32 bytes leftover after parsing attributes in process `syz.1.619'. [ 803.367884][ T9134] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 803.957472][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 804.008650][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 804.016960][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 804.019487][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 804.021295][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 805.507338][ T5844] Bluetooth: hci0: command tx timeout [ 806.118731][ T5845] Bluetooth: hci5: command tx timeout [ 806.482735][ T9051] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.482962][ T9051] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.483190][ T9051] bridge_slave_0: entered allmulticast mode [ 806.577987][ T9051] bridge_slave_0: entered promiscuous mode [ 806.901986][ T9051] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.902173][ T9051] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.902437][ T9051] bridge_slave_1: entered allmulticast mode [ 806.958463][ T9051] bridge_slave_1: entered promiscuous mode [ 807.153394][ T9] Process accounting resumed [ 807.435936][ T9051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.483387][ T9051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.558715][ T5845] Bluetooth: hci0: command tx timeout [ 808.199190][ T5845] Bluetooth: hci5: command tx timeout [ 808.354242][ T9051] team0: Port device team_slave_0 added [ 808.579766][ T9051] team0: Port device team_slave_1 added [ 809.639657][ T5845] Bluetooth: hci0: command tx timeout [ 809.694786][ T9180] Process accounting resumed [ 809.877505][ T9051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.877523][ T9051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.877552][ T9051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.979757][ T9051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.979775][ T9051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.979805][ T9051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.278655][ T5845] Bluetooth: hci5: command tx timeout [ 811.297749][ T9051] hsr_slave_0: entered promiscuous mode [ 811.301862][ T9051] hsr_slave_1: entered promiscuous mode [ 811.302958][ T9051] debugfs: 'hsr0' already exists in 'hsr' [ 811.302989][ T9051] Cannot create hsr debugfs directory [ 811.718877][ T5845] Bluetooth: hci0: command tx timeout [ 812.196631][ T9132] chnl_net:caif_netlink_parms(): no params data found [ 812.328217][ T9139] chnl_net:caif_netlink_parms(): no params data found [ 812.358690][ T5845] Bluetooth: hci5: command tx timeout [ 812.415858][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 812.415895][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 814.209843][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.212076][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.738992][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.630'. [ 814.739019][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.630'. [ 814.830974][ T1339] bridge_slave_1: left allmulticast mode [ 814.831009][ T1339] bridge_slave_1: left promiscuous mode [ 814.831295][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.920374][ T1339] bridge_slave_0: left allmulticast mode [ 814.920411][ T1339] bridge_slave_0: left promiscuous mode [ 814.920734][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.985637][ T1339] bridge_slave_1: left allmulticast mode [ 814.985680][ T1339] bridge_slave_1: left promiscuous mode [ 814.986120][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.052345][ T1339] bridge_slave_0: left allmulticast mode [ 815.052381][ T1339] bridge_slave_0: left promiscuous mode [ 815.052919][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.549435][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.642495][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.701998][ T1339] bond0 (unregistering): Released all slaves [ 816.601962][ T9218] netlink: 20 bytes leftover after parsing attributes in process `syz.2.634'. [ 816.601987][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.634'. [ 816.627346][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.743633][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.778053][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.634'. [ 816.844359][ T1339] bond0 (unregistering): Released all slaves [ 818.418639][ T9132] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.418807][ T9132] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.419073][ T9132] bridge_slave_0: entered allmulticast mode [ 818.421987][ T9132] bridge_slave_0: entered promiscuous mode [ 818.759744][ T9132] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.759981][ T9132] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.760246][ T9132] bridge_slave_1: entered allmulticast mode [ 818.763190][ T9132] bridge_slave_1: entered promiscuous mode [ 821.156603][ T9139] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.156765][ T9139] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.156949][ T9139] bridge_slave_0: entered allmulticast mode [ 821.181728][ T9139] bridge_slave_0: entered promiscuous mode [ 821.566656][ T9139] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.566825][ T9139] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.567089][ T9139] bridge_slave_1: entered allmulticast mode [ 821.628613][ T9139] bridge_slave_1: entered promiscuous mode [ 821.734901][ T9132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.945894][ T1339] hsr_slave_0: left promiscuous mode [ 821.958778][ T1339] hsr_slave_1: left promiscuous mode [ 821.959460][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.000422][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.149330][ T1339] hsr_slave_0: left promiscuous mode [ 822.183513][ T1339] hsr_slave_1: left promiscuous mode [ 822.184274][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.212802][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.550746][ T9247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.641'. [ 822.550764][ T9247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.641'. [ 825.033308][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 825.149819][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 826.229495][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 826.389413][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 827.303731][ T9132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.945801][ T9261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.643'. [ 828.317376][ T9139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.562874][ T9139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.936154][ T9132] team0: Port device team_slave_0 added [ 829.190622][ T9132] team0: Port device team_slave_1 added [ 829.880254][ T9139] team0: Port device team_slave_0 added [ 830.900247][ T9139] team0: Port device team_slave_1 added [ 831.385887][ T9132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.385905][ T9132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.385934][ T9132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.749550][ T9132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.749573][ T9132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.749599][ T9132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.813256][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.813277][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.813311][ T9139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.859980][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.860003][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.860038][ T9139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.057996][ T9132] hsr_slave_0: entered promiscuous mode [ 835.060016][ T9132] hsr_slave_1: entered promiscuous mode [ 836.497951][ T9139] hsr_slave_0: entered promiscuous mode [ 836.509850][ T9139] hsr_slave_1: entered promiscuous mode [ 836.510868][ T9139] debugfs: 'hsr0' already exists in 'hsr' [ 836.510894][ T9139] Cannot create hsr debugfs directory [ 839.465637][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'. [ 839.623058][ T9051] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 839.672152][ T9051] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 839.755085][ T9051] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 839.825516][ T9051] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 840.147053][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 840.147075][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 840.366062][ T1339] bridge_slave_1: left allmulticast mode [ 840.366099][ T1339] bridge_slave_1: left promiscuous mode [ 840.366365][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.675351][ T1339] bridge_slave_0: left allmulticast mode [ 840.675387][ T1339] bridge_slave_0: left promiscuous mode [ 840.675673][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.081814][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.260489][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.312988][ T1339] bond0 (unregistering): Released all slaves [ 843.261946][ T1339] hsr_slave_0: left promiscuous mode [ 843.364937][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 843.403330][ T1339] hsr_slave_1: left promiscuous mode [ 843.404043][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.439292][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.979622][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 845.282903][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 846.236647][ T9352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 846.735350][ T9132] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 846.848176][ T9132] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 846.993313][ T9132] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 847.130339][ T9132] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 848.068448][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 849.190658][ T9139] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 849.254346][ T9139] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 849.454555][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 849.457374][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 849.478037][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 849.497905][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 849.514597][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 850.805996][ T9391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.667'. [ 850.806022][ T9391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.667'. [ 850.875090][ T9139] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 851.073903][ T9395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 851.449472][ T9139] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 851.638748][ T5844] Bluetooth: hci1: command tx timeout [ 852.053625][ T9419] Process accounting resumed [ 852.653594][ T9434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.672'. [ 852.653627][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.672'. [ 852.901808][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'. [ 853.676736][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.673'. [ 853.707035][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'. [ 853.718886][ T5844] Bluetooth: hci1: command tx timeout [ 853.966173][ T9132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.243154][ T9382] chnl_net:caif_netlink_parms(): no params data found [ 855.013174][ T9469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.675'. [ 855.661441][ T9132] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.662158][ T1339] bridge_slave_1: left allmulticast mode [ 855.662193][ T1339] bridge_slave_1: left promiscuous mode [ 855.662491][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.798584][ T5844] Bluetooth: hci1: command tx timeout [ 855.945008][ T1339] bridge_slave_0: left allmulticast mode [ 855.945033][ T1339] bridge_slave_0: left promiscuous mode [ 855.945251][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.311556][ T9481] Process accounting resumed [ 857.888758][ T5844] Bluetooth: hci1: command tx timeout [ 859.666637][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.683'. [ 859.751950][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.829465][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.892643][ T1339] bond0 (unregistering): Released all slaves [ 860.044974][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.045229][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.240261][ T9139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.366118][ T9382] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.366289][ T9382] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.366497][ T9382] bridge_slave_0: entered allmulticast mode [ 860.370875][ T9382] bridge_slave_0: entered promiscuous mode [ 860.375908][ T981] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.376085][ T981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.420828][ T9382] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.420990][ T9382] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.421244][ T9382] bridge_slave_1: entered allmulticast mode [ 860.424168][ T9382] bridge_slave_1: entered promiscuous mode [ 860.609057][ T1339] hsr_slave_0: left promiscuous mode [ 860.660666][ T1339] hsr_slave_1: left promiscuous mode [ 860.665392][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.709280][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.839606][ T9522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.685'. [ 861.929884][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 862.465598][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 862.488274][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 862.499045][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 862.531413][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 862.534882][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 862.605762][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 864.598606][ T5845] Bluetooth: hci3: command tx timeout [ 864.681945][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 864.701484][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 864.703734][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 864.708027][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 864.737223][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 865.557895][ T9537] Process accounting resumed [ 865.871560][ T9382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.914106][ T9382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.334713][ T9542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.689'. [ 866.884020][ T5845] Bluetooth: hci3: command tx timeout [ 866.884054][ T5844] Bluetooth: hci5: command tx timeout [ 867.319627][ T9382] team0: Port device team_slave_0 added [ 867.357217][ T9382] team0: Port device team_slave_1 added [ 867.618690][ T5995] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 869.231126][ T5845] Bluetooth: hci5: command tx timeout [ 869.235172][ T5844] Bluetooth: hci3: command tx timeout [ 869.353143][ T9382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.353163][ T9382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.353196][ T9382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.767552][ T9382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.767572][ T9382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.767600][ T9382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.238922][ T5844] Bluetooth: hci5: command tx timeout [ 871.329556][ T5844] Bluetooth: hci3: command tx timeout [ 872.508023][ T9382] hsr_slave_0: entered promiscuous mode [ 872.548531][ T9382] hsr_slave_1: entered promiscuous mode [ 872.549505][ T9382] debugfs: 'hsr0' already exists in 'hsr' [ 872.549533][ T9382] Cannot create hsr debugfs directory [ 873.318530][ T5844] Bluetooth: hci5: command tx timeout [ 873.776451][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 875.189658][ T9592] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 875.198776][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.697'. [ 875.575137][ T9592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 875.578064][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.578144][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.031367][ T9602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.698'. [ 876.712818][ T9592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 879.040040][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 880.395196][ T9612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 883.978195][ T9523] chnl_net:caif_netlink_parms(): no params data found [ 884.787106][ T9530] chnl_net:caif_netlink_parms(): no params data found [ 885.523164][ T9523] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.526330][ T9523] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.526570][ T9523] bridge_slave_0: entered allmulticast mode [ 885.555264][ T9523] bridge_slave_0: entered promiscuous mode [ 885.704339][ T9523] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.704496][ T9523] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.704821][ T9523] bridge_slave_1: entered allmulticast mode [ 885.707724][ T9523] bridge_slave_1: entered promiscuous mode [ 886.567048][ T9523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.629666][ T9530] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.629861][ T9530] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.630247][ T9530] bridge_slave_0: entered allmulticast mode [ 886.633465][ T9530] bridge_slave_0: entered promiscuous mode [ 886.959947][ T9523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.961921][ T9530] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.962096][ T9530] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.962301][ T9530] bridge_slave_1: entered allmulticast mode [ 886.966290][ T9530] bridge_slave_1: entered promiscuous mode [ 887.695290][ T9523] team0: Port device team_slave_0 added [ 887.713284][ T9530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.938233][ T9523] team0: Port device team_slave_1 added [ 887.953247][ T9530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.641191][ T9523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.641210][ T9523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.641241][ T9523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.652471][ T9530] team0: Port device team_slave_0 added [ 888.701776][ T9523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.701798][ T9523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.701831][ T9523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.714188][ T9530] team0: Port device team_slave_1 added [ 889.093388][ T9658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.707'. [ 889.093413][ T9658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.707'. [ 889.305147][ T9530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.305166][ T9530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.305198][ T9530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.242599][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'. [ 890.482521][ T9530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.482540][ T9530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.482572][ T9530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.937702][ T9523] hsr_slave_0: entered promiscuous mode [ 890.948173][ T9523] hsr_slave_1: entered promiscuous mode [ 890.951759][ T9523] debugfs: 'hsr0' already exists in 'hsr' [ 890.951792][ T9523] Cannot create hsr debugfs directory [ 890.959165][ T9382] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 891.143847][ T9382] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 891.325176][ T9382] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 891.720718][ T9382] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 891.788932][ T9530] hsr_slave_0: entered promiscuous mode [ 891.790534][ T9530] hsr_slave_1: entered promiscuous mode [ 891.791539][ T9530] debugfs: 'hsr0' already exists in 'hsr' [ 891.791566][ T9530] Cannot create hsr debugfs directory [ 892.440155][ T1339] bridge_slave_1: left allmulticast mode [ 892.440191][ T1339] bridge_slave_1: left promiscuous mode [ 892.440458][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.534132][ T1339] bridge_slave_0: left allmulticast mode [ 892.534169][ T1339] bridge_slave_0: left promiscuous mode [ 892.534467][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.705892][ T1339] bridge_slave_1: left allmulticast mode [ 892.705919][ T1339] bridge_slave_1: left promiscuous mode [ 892.706099][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.807305][ T1339] bridge_slave_0: left allmulticast mode [ 892.807342][ T1339] bridge_slave_0: left promiscuous mode [ 892.807706][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.959460][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 897.049493][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.113746][ T1339] bond0 (unregistering): Released all slaves [ 898.609498][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 898.669680][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.734692][ T1339] bond0 (unregistering): Released all slaves [ 907.463680][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.721'. [ 907.499698][ T1339] hsr_slave_0: left promiscuous mode [ 907.542396][ T1339] hsr_slave_1: left promiscuous mode [ 907.544585][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.589771][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.092942][ T1339] hsr_slave_0: left promiscuous mode [ 909.042576][ T1339] hsr_slave_1: left promiscuous mode [ 909.043609][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 909.089352][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 909.903849][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 910.069439][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 910.850675][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 910.873011][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 910.877635][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 910.962427][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 910.963366][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 913.869348][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 913.958696][ T5845] Bluetooth: hci0: command tx timeout [ 914.009939][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 914.723401][ T9736] bridge0: entered promiscuous mode [ 914.723638][ T9736] macvlan2: entered promiscuous mode [ 914.815962][ T9747] bridge0: entered promiscuous mode [ 914.816050][ T9747] macvlan2: entered promiscuous mode [ 916.333453][ T5844] Bluetooth: hci0: command tx timeout [ 916.360443][ T9755] Process accounting resumed [ 919.586097][ T5844] Bluetooth: hci0: command tx timeout [ 920.041956][ T9784] netlink: 20 bytes leftover after parsing attributes in process `syz.1.733'. [ 920.041974][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.733'. [ 920.045056][ T9780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.732'. [ 920.399166][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'. [ 921.037050][ T9801] Process accounting resumed [ 921.662763][ T5844] Bluetooth: hci0: command tx timeout [ 922.228748][ T9742] chnl_net:caif_netlink_parms(): no params data found [ 922.824749][ T9742] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.824979][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.826662][ T9742] bridge_slave_0: entered allmulticast mode [ 922.832543][ T9742] bridge_slave_0: entered promiscuous mode [ 922.854491][ T9742] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.854658][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.854925][ T9742] bridge_slave_1: entered allmulticast mode [ 922.858169][ T9742] bridge_slave_1: entered promiscuous mode [ 923.171079][ T9742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.182611][ T9742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.316440][ T9742] team0: Port device team_slave_0 added [ 924.944117][ T9742] team0: Port device team_slave_1 added [ 924.971488][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 924.984828][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 924.987862][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 924.990361][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 924.991279][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 925.801400][ T9742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.801419][ T9742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.801449][ T9742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.818945][ T9742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.818963][ T9742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.818994][ T9742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.408125][ T5845] Bluetooth: hci1: command tx timeout [ 927.636746][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 927.668957][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 927.671359][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 927.673047][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 927.673891][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 929.488512][ T5844] Bluetooth: hci1: command tx timeout [ 929.808535][ T5844] Bluetooth: hci3: command tx timeout [ 931.568539][ T5844] Bluetooth: hci1: command tx timeout [ 931.880268][ T5844] Bluetooth: hci3: command tx timeout [ 933.648514][ T5844] Bluetooth: hci1: command tx timeout [ 933.968504][ T5844] Bluetooth: hci3: command tx timeout [ 934.813798][ T9847] Process accounting resumed [ 934.866990][ T9851] netlink: 'syz.2.745': attribute type 11 has an invalid length. [ 935.282512][ T9742] hsr_slave_0: entered promiscuous mode [ 935.284042][ T9742] hsr_slave_1: entered promiscuous mode [ 936.038485][ T5844] Bluetooth: hci3: command tx timeout [ 936.040730][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.747'. [ 936.077512][ T9862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.748'. [ 936.157939][ T9862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.748'. [ 936.822932][ T1339] bridge_slave_1: left allmulticast mode [ 936.822968][ T1339] bridge_slave_1: left promiscuous mode [ 936.823260][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.900252][ T1339] bridge_slave_0: left allmulticast mode [ 936.900286][ T1339] bridge_slave_0: left promiscuous mode [ 936.900572][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.019163][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.019230][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.129781][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 939.289549][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 939.352641][ T1339] bond0 (unregistering): Released all slaves [ 940.108551][ T1339] hsr_slave_0: left promiscuous mode [ 940.139335][ T1339] hsr_slave_1: left promiscuous mode [ 940.141587][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.201638][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.230243][ T9892] Process accounting resumed [ 940.275556][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.757'. [ 940.284617][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.757'. [ 942.745766][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 943.582265][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 945.586091][ T9829] chnl_net:caif_netlink_parms(): no params data found [ 947.043660][ T9829] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.043866][ T9829] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.044124][ T9829] bridge_slave_0: entered allmulticast mode [ 947.047128][ T9829] bridge_slave_0: entered promiscuous mode [ 947.102708][ T9839] chnl_net:caif_netlink_parms(): no params data found [ 947.157141][ T9829] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.157293][ T9829] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.157526][ T9829] bridge_slave_1: entered allmulticast mode [ 947.296718][ T9829] bridge_slave_1: entered promiscuous mode [ 948.170164][ T9829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 948.233629][ T9829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.166247][ T9829] team0: Port device team_slave_0 added [ 950.715841][ T9947] macvlan3: entered promiscuous mode [ 951.294408][ T9829] team0: Port device team_slave_1 added [ 951.808890][ T9839] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.809115][ T9839] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.809384][ T9839] bridge_slave_0: entered allmulticast mode [ 951.812392][ T9839] bridge_slave_0: entered promiscuous mode [ 953.421881][ T9839] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.422015][ T9839] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.422266][ T9839] bridge_slave_1: entered allmulticast mode [ 953.449095][ T9839] bridge_slave_1: entered promiscuous mode [ 953.535135][ T9962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.771'. [ 953.535159][ T9962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.771'. [ 953.701485][ T9742] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 953.760740][ T9829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.760760][ T9829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.760789][ T9829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.789303][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'. [ 954.304546][ T9742] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 954.348799][ T9829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.348817][ T9829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 954.348846][ T9829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.370037][ T9839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.370789][ T9742] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 954.550840][ T9839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.551033][ T9742] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 955.201147][ T9839] team0: Port device team_slave_0 added [ 955.306499][ T9839] team0: Port device team_slave_1 added [ 955.469911][ T9829] hsr_slave_0: entered promiscuous mode [ 955.475119][ T9829] hsr_slave_1: entered promiscuous mode [ 955.476205][ T9829] debugfs: 'hsr0' already exists in 'hsr' [ 955.476232][ T9829] Cannot create hsr debugfs directory [ 955.577373][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 955.894031][ T9839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.894050][ T9839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 955.894079][ T9839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.081886][ T9839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.081904][ T9839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.081932][ T9839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.679094][ T5993] Process accounting resumed [ 957.254662][ T9839] hsr_slave_0: entered promiscuous mode [ 957.256146][ T9839] hsr_slave_1: entered promiscuous mode [ 957.257142][ T9839] debugfs: 'hsr0' already exists in 'hsr' [ 957.257169][ T9839] Cannot create hsr debugfs directory [ 960.151622][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'. [ 960.444036][T10008] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 962.426948][ T9742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.194369][ T9742] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.405544][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.408902][ T5991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 963.506562][ T1339] bridge_slave_1: left allmulticast mode [ 963.506597][ T1339] bridge_slave_1: left promiscuous mode [ 963.506837][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.607230][ T1339] bridge_slave_0: left allmulticast mode [ 963.607256][ T1339] bridge_slave_0: left promiscuous mode [ 963.607447][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.643835][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.783'. [ 963.714459][ T1339] bridge_slave_1: left allmulticast mode [ 963.714496][ T1339] bridge_slave_1: left promiscuous mode [ 963.714765][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.780257][ T1339] bridge_slave_0: left allmulticast mode [ 963.780292][ T1339] bridge_slave_0: left promiscuous mode [ 963.780694][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.189298][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.269312][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 964.336714][ T1339] bond0 (unregistering): Released all slaves [ 964.644067][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.719599][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 964.783493][ T1339] bond0 (unregistering): Released all slaves [ 964.871934][ T5991] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.872769][ T5991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.683896][ T1339] hsr_slave_0: left promiscuous mode [ 965.703644][ T1339] hsr_slave_1: left promiscuous mode [ 965.704357][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.740626][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.838488][ T5993] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 965.898619][ T1339] hsr_slave_0: left promiscuous mode [ 965.928476][ T1339] hsr_slave_1: left promiscuous mode [ 965.929248][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.970533][ T5993] usb 2-1: device descriptor read/64, error -71 [ 965.980154][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 966.218528][ T5993] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 966.358606][ T5993] usb 2-1: device descriptor read/64, error -71 [ 966.469783][ T5993] usb usb2-port1: attempt power cycle [ 966.760792][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 966.866395][ T5993] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 966.881504][ T5993] usb 2-1: device descriptor read/8, error -71 [ 966.895364][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 967.118534][ T5993] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 967.139410][ T5993] usb 2-1: device descriptor read/8, error -71 [ 967.254660][ T5993] usb usb2-port1: unable to enumerate USB device [ 968.289611][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 968.449018][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 969.021657][ T9455] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 969.168467][ T9455] usb 2-1: Using ep0 maxpacket: 8 [ 969.173516][ T9455] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 969.173553][ T9455] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 969.173579][ T9455] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 969.173610][ T9455] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 969.173655][ T9455] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 969.173680][ T9455] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.393277][ T9455] usb 2-1: usb_control_msg returned -32 [ 969.393325][ T9455] usbtmc 2-1:16.0: can't read capabilities [ 969.515192][ T9455] usb 2-1: USB disconnect, device number 23 [ 988.886309][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 988.907911][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 988.918946][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 988.920783][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 988.921759][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 991.748488][ T5845] Bluetooth: hci5: command tx timeout [ 994.431444][ T5845] Bluetooth: hci5: command tx timeout [ 996.812742][ T5844] Bluetooth: hci5: command tx timeout [ 999.021412][ T5844] Bluetooth: hci5: command tx timeout [ 1005.380984][ T5844] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1008.234286][T10056] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1008.239144][T10056] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1008.241969][T10056] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1008.243191][T10056] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1008.243486][T10061] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1008.493295][T10056] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1008.494166][T10056] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1010.207084][ T5845] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1010.241766][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1011.243967][T10061] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1012.262740][T10061] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1013.223308][T10061] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1014.249214][T10061] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1014.305527][T10061] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1014.320189][T10061] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1014.321613][T10061] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1015.226368][T10061] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1016.197224][T10061] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1018.055174][T10061] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1020.217773][T10040] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1020.229684][T10040] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1021.208871][T10040] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1021.209436][T10040] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1021.209939][T10040] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1021.217283][T10040] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1021.218213][T10040] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1024.288182][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1037.517713][T10056] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1037.626014][T10056] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1038.066942][T10056] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1038.650108][T10056] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1038.650999][T10056] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1054.668356][T10069] Bluetooth: hci1: command tx timeout [ 1083.998815][T10073] Bluetooth: hci3: command 0x0406 tx timeout [ 1085.597168][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1085.611739][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.568074][T10092] Bluetooth: hci5: command tx timeout [ 1117.597836][T10092] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1118.531453][T10089] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 1118.627505][T10094] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1118.635298][T10092] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1118.646011][T10092] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1118.649745][T10092] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1118.651139][T10092] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1122.247689][ T39] INFO: task syz-executor:9829 blocked for more than 144 seconds. [ 1122.247735][ T39] Not tainted syzkaller #0 [ 1122.247748][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1122.247765][ T39] task:syz-executor state:D stack:22064 pid:9829 tgid:9829 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1122.247854][ T39] Call Trace: [ 1122.247862][ T39] [ 1122.247878][ T39] __schedule+0x16f3/0x4c20 [ 1122.247931][ T39] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 1122.247979][ T39] ? rcu_is_watching+0x15/0xb0 [ 1122.248024][ T39] ? __pfx___schedule+0x10/0x10 [ 1122.248048][ T39] ? rcu_read_unlock_special+0x35b/0x470 [ 1122.248081][ T39] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1122.248109][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1122.248158][ T39] rt_mutex_schedule+0x77/0xf0 [ 1122.248181][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1122.248270][ T39] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 1122.248301][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 1122.248327][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1122.248352][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1122.248373][ T39] ? __lock_acquire+0xab9/0xd20 [ 1122.248416][ T39] ? new_device_store+0x12c/0x6f0 [ 1122.248459][ T39] ? __pfx_sscanf+0x10/0x10 [ 1122.248489][ T39] ? new_device_store+0x12c/0x6f0 [ 1122.248522][ T39] mutex_lock_nested+0x16a/0x1d0 [ 1122.248550][ T39] new_device_store+0x12c/0x6f0 [ 1122.248591][ T39] ? __pfx_new_device_store+0x10/0x10 [ 1122.248623][ T39] ? sysfs_file_kobj+0x1a/0x230 [ 1122.248658][ T39] ? sysfs_file_kobj+0x1e4/0x230 [ 1122.248692][ T39] ? sysfs_kf_write+0x166/0x260 [ 1122.248729][ T39] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1122.248761][ T39] kernfs_fop_write_iter+0x379/0x4f0 [ 1122.248807][ T39] vfs_write+0x5d2/0xb40 [ 1122.248842][ T39] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1122.248874][ T39] ? __pfx_vfs_write+0x10/0x10 [ 1122.248907][ T39] ? do_sys_openat2+0x154/0x1c0 [ 1122.248929][ T39] ? kmem_cache_free+0x195/0x510 [ 1122.248978][ T39] ksys_write+0x14b/0x260 [ 1122.249011][ T39] ? __pfx_ksys_write+0x10/0x10 [ 1122.249047][ T39] ? do_syscall_64+0xbe/0x3b0 [ 1122.249082][ T39] do_syscall_64+0xfa/0x3b0 [ 1122.249112][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1122.249140][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.249164][ T39] ? clear_bhb_loop+0x60/0xb0 [ 1122.249192][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.249222][ T39] RIP: 0033:0x7f236be5d69f [ 1122.249247][ T39] RSP: 002b:00007ffc3f89c100 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1122.249271][ T39] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f236be5d69f [ 1122.249288][ T39] RDX: 0000000000000003 RSI: 00007ffc3f89c150 RDI: 0000000000000005 [ 1122.249303][ T39] RBP: 00007f236bee30e5 R08: 0000000000000000 R09: 00007ffc3f89bf57 [ 1122.249318][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1122.249332][ T39] R13: 00007ffc3f89c150 R14: 00007f236cbb4620 R15: 0000000000000003 [ 1122.249368][ T39] [ 1122.249413][ T39] [ 1122.249413][ T39] Showing all locks held in the system: [ 1122.249424][ T39] 7 locks held by kworker/u8:0/12: [ 1122.249438][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.249500][ T39] #1: ffffc90000117bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.249563][ T39] #2: ffff88805c589300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 1122.249628][ T39] #3: ffff8880340b3d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 1122.249690][ T39] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 1122.249741][ T39] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.249808][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.249867][ T39] 3 locks held by kworker/u8:1/13: [ 1122.249881][ T39] #0: ffff88803012f938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.249953][ T39] #1: ffffc90000127bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.250011][ T39] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1122.250064][ T39] 8 locks held by ksoftirqd/0/15: [ 1122.250077][ T39] 2 locks held by ktimers/0/16: [ 1122.250090][ T39] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.250144][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.250203][ T39] 2 locks held by rcuc/1/28: [ 1122.250215][ T39] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.250271][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.250327][ T39] 12 locks held by ktimers/1/29: [ 1122.250340][ T39] 2 locks held by ksoftirqd/1/30: [ 1122.250352][ T39] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.250408][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.250464][ T39] 4 locks held by kworker/u8:2/37: [ 1122.250477][ T39] #0: ffff88814d7fe938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.250534][ T39] #1: ffffc90000ac7bc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.250592][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.250647][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.250704][ T39] 1 lock held by khungtaskd/39: [ 1122.250717][ T39] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1122.250770][ T39] 7 locks held by kworker/u8:3/57: [ 1122.250783][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.250854][ T39] #1: ffffc9000123fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.250914][ T39] #2: ffff88805c9ca300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 1122.250978][ T39] #3: ffff88805c9dc120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 1122.251037][ T39] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 1122.251087][ T39] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.251142][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.251207][ T39] 6 locks held by kworker/u8:6/981: [ 1122.251220][ T39] #0: ffff888033c23938 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.251281][ T39] #1: ffffc90004ba7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.251339][ T39] #2: ffff88802fa3d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 1122.251405][ T39] #3: ffff888036dc4e20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 1122.251470][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.251527][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.251584][ T39] 7 locks held by kworker/u8:7/1012: [ 1122.251596][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.251653][ T39] #1: ffffc90004cc7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.251712][ T39] #2: ffff8880294dd300 (&devlink->lock_key#22){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 1122.251775][ T39] #3: ffff88802fe5f920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 1122.251843][ T39] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 1122.251894][ T39] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.251949][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.252009][ T39] 5 locks held by kworker/u8:8/1312: [ 1122.252022][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.252078][ T39] #1: ffffc900055c7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.252136][ T39] #2: ffff88804ab00898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 1122.252191][ T39] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.252247][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.252304][ T39] 5 locks held by kworker/u8:9/1339: [ 1122.252317][ T39] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.252373][ T39] #1: ffffc90005707bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.252429][ T39] #2: ffffffff8ecc4f80 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1122.252486][ T39] #3: ffff88804deb17b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x2f0 [ 1122.252537][ T39] #4: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1122.252602][ T39] 6 locks held by kworker/u8:10/3200: [ 1122.252615][ T39] #0: ffff888031060138 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.252678][ T39] #1: ffffc9000d8efbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.252736][ T39] #2: ffff8880207d95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 1122.252809][ T39] #3: ffff888036dc38f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 1122.252891][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.252947][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.253005][ T39] 5 locks held by kworker/u8:12/4749: [ 1122.253018][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.253074][ T39] #1: ffffc9000fccfbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.253131][ T39] #2: ffff88804a660898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 1122.253185][ T39] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.253240][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.253296][ T39] 3 locks held by udevd/5205: [ 1122.253309][ T39] #0: ffff88802d0c0350 (sk_lock-AF_NETLINK){+.+.}-{0:0}, at: netlink_insert+0xd3/0x1370 [ 1122.253363][ T39] #1: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.253419][ T39] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.253476][ T39] 2 locks held by dhcpcd/5499: [ 1122.253488][ T39] #0: ffffffff8ed37e80 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1122.253547][ T39] #1: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 1122.253610][ T39] 2 locks held by getty/5594: [ 1122.253623][ T39] #0: ffff88823bf760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1122.253683][ T39] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 1122.253738][ T39] 1 lock held by syz-executor/5823: [ 1122.253751][ T39] 4 locks held by kworker/u9:3/5844: [ 1122.253763][ T39] #0: ffff888036434938 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.253831][ T39] #1: ffffc90004b2fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.253889][ T39] #2: ffff8880351840a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 1122.253945][ T39] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 1122.253999][ T39] 4 locks held by kworker/u9:4/5845: [ 1122.254011][ T39] #0: ffff88814d76e938 ((wq_completion)krxrpcd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.254068][ T39] #1: ffffc90004b57bc0 ((work_completion)(&rxnet->peer_keepalive_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.254126][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.254181][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.254239][ T39] 4 locks held by kworker/R-wg-cr/5870: [ 1122.254251][ T39] #0: ffff88805b478938 ((wq_completion)wg-crypt-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.254312][ T39] #1: ffffc90004cd7ba0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.254370][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.254425][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.254483][ T39] 2 locks held by napi/wg2-0/5903: [ 1122.254495][ T39] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.254550][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.254608][ T39] 5 locks held by kworker/u8:14/5985: [ 1122.254620][ T39] 5 locks held by kworker/u8:15/5991: [ 1122.254633][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.254690][ T39] #1: ffffc90005327bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.254746][ T39] #2: ffff88805d870898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 1122.254808][ T39] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.254879][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.254937][ T39] 4 locks held by kworker/1:7/5992: [ 1122.254949][ T39] #0: ffff88805b478938 ((wq_completion)wg-crypt-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.255011][ T39] #1: ffffc90005207bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.255089][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.255144][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.255201][ T39] 4 locks held by kworker/1:8/5993: [ 1122.255214][ T39] #0: ffff88805b443538 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.255275][ T39] #1: ffffc900052a7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.255333][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.255388][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.255446][ T39] 6 locks held by kworker/u8:16/6016: [ 1122.255458][ T39] #0: ffff888033c23938 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.255520][ T39] #1: ffffc900054e7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.255578][ T39] #2: ffff88802fa3d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 1122.255645][ T39] #3: ffff88803b1d38f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 1122.255710][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.255766][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.255830][ T39] 7 locks held by kworker/u8:18/6018: [ 1122.255842][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.255899][ T39] #1: ffffc90005507bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.255957][ T39] #2: ffff88805c76d300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 1122.256021][ T39] #3: ffff888029a96d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 1122.256080][ T39] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 1122.256130][ T39] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.256185][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.256242][ T39] 1 lock held by syz.2.69/6247: [ 1122.256259][ T39] 3 locks held by kworker/1:0/8263: [ 1122.256271][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.256327][ T39] #1: ffffc900050e7bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.256383][ T39] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 1122.256441][ T39] 2 locks held by kworker/0:2/8694: [ 1122.256454][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.256510][ T39] #1: ffffc90003a6fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.256566][ T39] 4 locks held by kworker/1:1/9420: [ 1122.256578][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.256636][ T39] #1: ffffc90004ca7bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.256693][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.256748][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.256813][ T39] 4 locks held by kworker/1:3/9454: [ 1122.256826][ T39] #0: ffff88805b3f1538 ((wq_completion)wg-crypt-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.256888][ T39] #1: ffffc90005167bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.256946][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.257000][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.257057][ T39] 4 locks held by kworker/1:6/9455: [ 1122.257069][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.257126][ T39] #1: ffffc90005177bc0 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.257184][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.257240][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.257297][ T39] 2 locks held by syz-executor/9742: [ 1122.257309][ T39] #0: ffff888064910e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1122.257361][ T39] #1: ffff8880649100a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1122.257419][ T39] 4 locks held by syz-executor/9829: [ 1122.257431][ T39] #0: ffff88803431c488 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1122.257491][ T39] #1: ffff888027392478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e1/0x4f0 [ 1122.257548][ T39] #2: ffff888145359878 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x204/0x4f0 [ 1122.257611][ T39] #3: ffffffff8e541ed8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x12c/0x6f0 [ 1122.257674][ T39] 7 locks held by syz-executor/9839: [ 1122.257687][ T39] #0: ffff88803431c488 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1122.257745][ T39] #1: ffff888029763478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e1/0x4f0 [ 1122.257808][ T39] #2: ffff888145359968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x204/0x4f0 [ 1122.257870][ T39] #3: ffffffff8e541ed8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1122.257920][ T39] #4: ffff88805c9780d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 1122.257985][ T39] #5: ffff88805c97c300 (&devlink->lock_key#21){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1122.258044][ T39] #6: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1122.258098][ T39] 3 locks held by syz.1.778/9998: [ 1122.258110][ T39] #0: ffff888058708e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1122.258161][ T39] #1: ffff8880587080a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1122.268334][ T39] #2: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1122.268402][ T39] 4 locks held by kworker/u9:0/10040: [ 1122.268416][ T39] #0: ffff8880685a1138 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.268480][ T39] #1: ffffc9000434fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.268538][ T39] #2: ffff8880290900a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 1122.268595][ T39] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 1122.268651][ T39] 6 locks held by kworker/u8:5/10048: [ 1122.268664][ T39] 7 locks held by kworker/u8:11/10049: [ 1122.268676][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.268734][ T39] #1: ffffc9000492fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.268802][ T39] #2: ffff88803068d300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 1122.268869][ T39] #3: ffff88805c4b3120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 1122.268928][ T39] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 1122.268979][ T39] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.269035][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.269092][ T39] 4 locks held by kworker/0:4/10050: [ 1122.269105][ T39] #0: ffff88805b43b138 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.269168][ T39] #1: ffffc900042efbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.269246][ T39] #2: ffff88805b8395f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x1c7/0xb00 [ 1122.269301][ T39] #3: ffff888036dc6350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x267/0xb00 [ 1122.269356][ T39] 3 locks held by syz-executor/10054: [ 1122.269369][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1122.269424][ T39] #1: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.269480][ T39] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.269538][ T39] 4 locks held by kworker/u9:1/10056: [ 1122.269550][ T39] #0: ffff88803bbf5138 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.269613][ T39] #1: ffffc90003bbfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.269670][ T39] #2: ffff888058e640a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 1122.269725][ T39] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 1122.269780][ T39] 6 locks held by kworker/u8:17/10057: [ 1122.269799][ T39] #0: ffff88805b3d3138 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.269862][ T39] #1: ffffc9000432fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.269920][ T39] #2: ffff88805b5a55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 1122.269986][ T39] #3: ffff888036e558b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 1122.270052][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.270109][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.270167][ T39] 6 locks held by kworker/u9:2/10060: [ 1122.270179][ T39] #0: ffff888035463938 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.270236][ T39] #1: ffffc9000428fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.270292][ T39] #2: ffff888063934e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1122.270350][ T39] #3: ffff8880639340a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1122.270404][ T39] #4: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1122.270460][ T39] #5: ffff88805cc23b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1122.270524][ T39] 4 locks held by kworker/u9:5/10061: [ 1122.270537][ T39] #0: ffff8880685a4938 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.270600][ T39] #1: ffffc9000451fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.270658][ T39] #2: ffff8880290940a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 1122.270713][ T39] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 1122.270767][ T39] 7 locks held by kworker/u8:19/10062: [ 1122.270780][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.270844][ T39] #1: ffffc900041dfbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.270903][ T39] #2: ffff88804917f300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 1122.270962][ T39] #3: ffff888035f10920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 1122.271022][ T39] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 1122.271072][ T39] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.271128][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.271185][ T39] 1 lock held by syz-executor/10063: [ 1122.271198][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1122.271253][ T39] 4 locks held by kworker/0:8/10066: [ 1122.271265][ T39] #0: ffff88805b443138 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.271328][ T39] #1: ffffc9000454fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.271405][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.271462][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.271518][ T39] 4 locks held by kworker/0:9/10067: [ 1122.271531][ T39] #0: ffff88805b478938 ((wq_completion)wg-crypt-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.271593][ T39] #1: ffffc900041cfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.271672][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.271728][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.271786][ T39] 6 locks held by kworker/u8:20/10068: [ 1122.271809][ T39] #0: ffff88805b3d3138 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.271872][ T39] #1: ffffc9000429fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.271930][ T39] #2: ffff88805b5a55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 1122.271997][ T39] #3: ffff888036e56350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 1122.272062][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.272119][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.272176][ T39] 5 locks held by kworker/u9:6/10069: [ 1122.272188][ T39] #0: ffff888067224938 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.272246][ T39] #1: ffffc90004fb7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.272304][ T39] #2: ffff888049e94e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1122.272365][ T39] #3: ffff888049e940a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1122.272421][ T39] #4: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1122.272478][ T39] 6 locks held by kworker/u8:21/10070: [ 1122.272491][ T39] #0: ffff88805b771138 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.272552][ T39] #1: ffffc900044afbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.272610][ T39] #2: ffff88805b8395f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 1122.272677][ T39] #3: ffff888036dc58b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 1122.272743][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.272805][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.272862][ T39] 6 locks held by kworker/u8:22/10072: [ 1122.272875][ T39] #0: ffff88805b771138 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.272938][ T39] #1: ffffc9000419fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.272996][ T39] #2: ffff88805b8395f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 1122.273062][ T39] #3: ffff888036dc6350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 1122.273128][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.273184][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.273242][ T39] 5 locks held by kworker/u9:7/10073: [ 1122.273254][ T39] #0: ffff888027c91138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.273311][ T39] #1: ffffc90003f9fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.273369][ T39] #2: ffff88804edc8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1122.273431][ T39] #3: ffff88804edc80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1122.273487][ T39] #4: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1122.273545][ T39] 2 locks held by kworker/0:10/10078: [ 1122.273560][ T39] 1 lock held by syz-executor/10083: [ 1122.273574][ T39] 1 lock held by syz-executor/10087: [ 1122.273587][ T39] 1 lock held by syz-executor/10088: [ 1122.273601][ T39] 3 locks held by syz-executor/10090: [ 1122.273613][ T39] #0: ffff88805e3cb350 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_ioctl+0x247/0x910 [ 1122.273672][ T39] #1: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.273728][ T39] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.273786][ T39] 3 locks held by syz-executor/10091: [ 1122.273805][ T39] #0: ffff888034e52350 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_ioctl+0x247/0x910 [ 1122.273864][ T39] #1: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1122.273920][ T39] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1122.273980][ T39] [ 1122.273986][ T39] ============================================= [ 1122.273986][ T39] [ 1122.274010][ T39] NMI backtrace for cpu 0 [ 1122.274042][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1122.274072][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1122.274085][ T39] Call Trace: [ 1122.274094][ T39] [ 1122.274103][ T39] dump_stack_lvl+0x189/0x250 [ 1122.274141][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1122.274174][ T39] ? __pfx__printk+0x10/0x10 [ 1122.274212][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 1122.274238][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1122.274265][ T39] ? __pfx__printk+0x10/0x10 [ 1122.274293][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1122.274323][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1122.274350][ T39] watchdog+0xf93/0xfe0 [ 1122.274384][ T39] ? watchdog+0x1de/0xfe0 [ 1122.274418][ T39] kthread+0x711/0x8a0 [ 1122.274454][ T39] ? __pfx_watchdog+0x10/0x10 [ 1122.274481][ T39] ? __pfx_kthread+0x10/0x10 [ 1122.274518][ T39] ? __pfx_kthread+0x10/0x10 [ 1122.274552][ T39] ret_from_fork+0x3fc/0x770 [ 1122.274584][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1122.274619][ T39] ? __switch_to_asm+0x39/0x70 [ 1122.274639][ T39] ? __switch_to_asm+0x33/0x70 [ 1122.274658][ T39] ? __pfx_kthread+0x10/0x10 [ 1122.274692][ T39] ret_from_fork_asm+0x1a/0x30 [ 1122.274730][ T39] [ 1122.274738][ T39] Sending NMI from CPU 0 to CPUs 1: [ 1122.274766][ C1] NMI backtrace for cpu 1 [ 1122.274784][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1122.274808][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1122.274819][ C1] RIP: 0010:rcu_is_watching+0x67/0xb0 [ 1122.274850][ C1] Code: 89 f7 e8 fc 8d 78 00 48 c7 c3 18 14 f7 91 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d d9 da 50 10 <74> 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f c3 cc cc cc cc cc e8 c1 71 [ 1122.274866][ C1] RSP: 0000:ffffc90000a3ea78 EFLAGS: 00000286 [ 1122.274882][ C1] RAX: 0000000000f64a24 RBX: ffff8880b8933418 RCX: 7cfea5934400a900 [ 1122.274896][ C1] RDX: ffffc90000a3eb01 RSI: ffffffff8b620c60 RDI: ffffffff8b620c20 [ 1122.274910][ C1] RBP: dffffc0000000000 R08: ffffc90000a3f800 R09: 0000000000000000 [ 1122.274923][ C1] R10: ffffc90000a3ebb8 R11: fffff52000147d79 R12: ffffc90000a3f810 [ 1122.274937][ C1] R13: ffffc90000a38000 R14: ffffffff8d24fd18 R15: dffffc0000000000 [ 1122.274951][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 1122.274967][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1122.274979][ C1] CR2: 00007efe7d691ee3 CR3: 0000000033a62000 CR4: 00000000003526f0 [ 1122.274996][ C1] Call Trace: [ 1122.275002][ C1] [ 1122.275010][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1122.275036][ C1] unwind_next_frame+0x1965/0x2390 [ 1122.275065][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1122.275090][ C1] ? __netif_receive_skb+0xd3/0x380 [ 1122.275111][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1122.275132][ C1] arch_stack_walk+0x11c/0x150 [ 1122.275162][ C1] ? process_backlog+0x31e/0x900 [ 1122.275185][ C1] stack_trace_save+0x9c/0xe0 [ 1122.275203][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1122.275220][ C1] ? kasan_save_free_info+0x46/0x50 [ 1122.275238][ C1] ? consume_skb+0x9e/0xf0 [ 1122.275259][ C1] ? nft_synproxy_eval_v6+0x376/0x560 [ 1122.275286][ C1] ? nft_synproxy_do_eval+0x3d7/0x570 [ 1122.275316][ C1] ? __lock_acquire+0xab9/0xd20 [ 1122.275340][ C1] kasan_save_track+0x3e/0x80 [ 1122.275360][ C1] ? kasan_save_track+0x3e/0x80 [ 1122.275378][ C1] ? kasan_save_free_info+0x46/0x50 [ 1122.275393][ C1] ? __kasan_slab_free+0x5b/0x80 [ 1122.275414][ C1] ? kmem_cache_free+0x195/0x510 [ 1122.275439][ C1] ? nft_synproxy_eval_v6+0x376/0x560 [ 1122.275464][ C1] ? nft_synproxy_do_eval+0x3d7/0x570 [ 1122.275491][ C1] ? nft_do_chain+0x40c/0x1920 [ 1122.275516][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 1122.275547][ C1] ? nf_hook_slow+0xc5/0x220 [ 1122.275568][ C1] ? NF_HOOK+0x206/0x3a0 [ 1122.275586][ C1] ? ip6_input+0x16a/0x270 [ 1122.275605][ C1] ? NF_HOOK+0x309/0x3a0 [ 1122.275622][ C1] ? __netif_receive_skb+0xd3/0x380 [ 1122.275663][ C1] kasan_save_free_info+0x46/0x50 [ 1122.275679][ C1] __kasan_slab_free+0x5b/0x80 [ 1122.275700][ C1] ? nft_synproxy_eval_v6+0x376/0x560 [ 1122.275726][ C1] kmem_cache_free+0x195/0x510 [ 1122.275753][ C1] nft_synproxy_eval_v6+0x376/0x560 [ 1122.275784][ C1] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 1122.275815][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1122.275843][ C1] nft_synproxy_do_eval+0x3d7/0x570 [ 1122.275874][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1122.275911][ C1] nft_do_chain+0x40c/0x1920 [ 1122.275945][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1122.275969][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 1122.276011][ C1] nft_do_chain_inet+0x25d/0x340 [ 1122.276037][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1122.276064][ C1] ? __lock_acquire+0xab9/0xd20 [ 1122.276092][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1122.276112][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1122.276139][ C1] nf_hook_slow+0xc5/0x220 [ 1122.276164][ C1] NF_HOOK+0x206/0x3a0 [ 1122.276184][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 1122.276205][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1122.276223][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1122.276244][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 1122.276271][ C1] ip6_input+0x16a/0x270 [ 1122.276289][ C1] ? ip6_input+0x23/0x270 [ 1122.276311][ C1] NF_HOOK+0x309/0x3a0 [ 1122.276329][ C1] ? skb_orphan+0xaf/0xd0 [ 1122.276349][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1122.276369][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1122.276387][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1122.276408][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1122.276433][ C1] __netif_receive_skb+0xd3/0x380 [ 1122.276451][ C1] ? rt_spin_unlock+0x65/0x80 [ 1122.276471][ C1] ? process_backlog+0x27b/0x900 [ 1122.276491][ C1] process_backlog+0x31e/0x900 [ 1122.276517][ C1] __napi_poll+0xb6/0x540 [ 1122.276537][ C1] net_rx_action+0x707/0xe00 [ 1122.276563][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1122.276594][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1122.276632][ C1] handle_softirqs+0x22c/0x710 [ 1122.276660][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1122.276687][ C1] run_ktimerd+0xcf/0x190 [ 1122.276712][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 1122.276741][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1122.276763][ C1] smpboot_thread_fn+0x542/0xa60 [ 1122.276785][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1122.276813][ C1] kthread+0x711/0x8a0 [ 1122.276842][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1122.276864][ C1] ? __pfx_kthread+0x10/0x10 [ 1122.276893][ C1] ? __pfx_kthread+0x10/0x10 [ 1122.276920][ C1] ret_from_fork+0x3fc/0x770 [ 1122.276944][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1122.276970][ C1] ? __switch_to_asm+0x39/0x70 [ 1122.276987][ C1] ? __switch_to_asm+0x33/0x70 [ 1122.277003][ C1] ? __pfx_kthread+0x10/0x10 [ 1122.277030][ C1] ret_from_fork_asm+0x1a/0x30 [ 1122.277055][ C1] [ 1122.277770][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1122.277787][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1122.277818][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1122.277831][ T39] Call Trace: [ 1122.277840][ T39] [ 1122.277849][ T39] dump_stack_lvl+0x99/0x250 [ 1122.277882][ T39] ? __asan_memcpy+0x40/0x70 [ 1122.277906][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1122.277938][ T39] ? __pfx__printk+0x10/0x10 [ 1122.277977][ T39] vpanic+0x281/0x750 [ 1122.278013][ T39] ? __pfx_vpanic+0x10/0x10 [ 1122.278041][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 1122.278064][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1122.278105][ T39] panic+0xb9/0xc0 [ 1122.278136][ T39] ? __pfx_panic+0x10/0x10 [ 1122.278171][ T39] ? irq_work_queue+0xc3/0x140 [ 1122.278207][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1122.278231][ T39] watchdog+0xfd2/0xfe0 [ 1122.278263][ T39] ? watchdog+0x1de/0xfe0 [ 1122.278297][ T39] kthread+0x711/0x8a0 [ 1122.278334][ T39] ? __pfx_watchdog+0x10/0x10 [ 1122.278360][ T39] ? __pfx_kthread+0x10/0x10 [ 1122.278399][ T39] ? __pfx_kthread+0x10/0x10 [ 1122.278433][ T39] ret_from_fork+0x3fc/0x770 [ 1122.278464][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1122.278500][ T39] ? __switch_to_asm+0x39/0x70 [ 1122.278519][ T39] ? __switch_to_asm+0x33/0x70 [ 1122.278539][ T39] ? __pfx_kthread+0x10/0x10 [ 1122.278571][ T39] ret_from_fork_asm+0x1a/0x30 [ 1122.278610][ T39] [ 1122.278985][ T39] Kernel Offset: disabled