last executing test programs: 22.068836256s ago: executing program 1 (id=220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000000000000050000000000000000000000030000000000f100ffffffff"]) 21.716426624s ago: executing program 1 (id=225): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_tgsigqueueinfo(r0, r0, 0x10, &(0x7f0000000140)={0x3d, 0x3, 0xfffffff9}) tkill(r0, 0x2e) ptrace$peeksig(0x4209, r0, &(0x7f0000000040)={0x1, 0x0, 0x2}, &(0x7f00000001c0)=[{}, {}]) 21.444624513s ago: executing program 1 (id=227): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x7a, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000080)=0x9c) 20.47676411s ago: executing program 1 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) 20.144808938s ago: executing program 1 (id=239): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x224020, 0x0) 19.988734934s ago: executing program 1 (id=242): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000340)=0x5, 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) 10.815280192s ago: executing program 3 (id=287): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6(0xa, 0x80001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000079002800000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet6(0xa, 0x4, 0x0) close(r3) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c00020100800005260000000d240f0100000000000000f30006241a0000000905812300020000000904010000020d00000904010102020de4ff0805"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x52fc5ed1b305d67d}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000080)=0x400000001, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) stat(0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x11, &(0x7f0000000240)=ANY=[], 0x310) bpf$BPF_PROG_TEST_RUN(0xfb, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="fef351f64d23421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1d, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8300, 0x0, 0xffffffffffffff4b, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) 8.1572549s ago: executing program 3 (id=301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0a00100000004000000060ec97000fc811"], 0xffe) 7.727011369s ago: executing program 2 (id=305): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @random="df511109fd7c"}, 0x1e, {0x2, 0x0, @multicast2}, 'lo\x00'}) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24) 6.844799608s ago: executing program 2 (id=310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.666640686s ago: executing program 3 (id=312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6(0xa, 0x80001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000079002800000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet6(0xa, 0x4, 0x0) close(r3) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c00020100800005260000000d240f0100000000000000f30006241a0000000905812300020000000904010000020d00000904010102020de4ff0805"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0xfff}]}}}]}, 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x52fc5ed1b305d67d}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000080)=0x400000001, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) stat(0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x11, &(0x7f0000000240)=ANY=[], 0x310) bpf$BPF_PROG_TEST_RUN(0xfb, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="fef351f64d23421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1d, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8300, 0x0, 0xffffffffffffff4b, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) 6.573032382s ago: executing program 2 (id=313): r0 = socket(0x2, 0x80805, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000040)) 6.325394395s ago: executing program 2 (id=314): r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000040)='./file2\x00', 0x14b042, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/18, 0x12}], 0x1, 0x0, 0x0) 6.116716323s ago: executing program 2 (id=316): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000840)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x6}}]}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r1, {0x7}}, 0x18) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) 5.768839796s ago: executing program 4 (id=318): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff170000abaaaaaaaabb86dd6012000800703afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18020001ffffffffff60000000000000"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaa98aa0086dd6012000800103afffe8000000000000000000000000000bbff0200000000000000000000000000018600907800fd0d000000000000000000"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0xfffffffffffffffe) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r2 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) ppoll(&(0x7f0000000300)=[{}], 0x1, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r2}, &(0x7f00000000c0)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000ac0)=""/4095, 0xfff}], 0x1, 0xfffffffd, 0x0) r3 = mq_open(&(0x7f0000000200)='^-!-):(%@^+\x00', 0x40, 0x104, 0x0) mq_getsetattr(r3, 0x0, &(0x7f0000000380)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) preadv2(r4, &(0x7f0000002500)=[{&(0x7f0000001580)=""/185, 0xb9}], 0x1, 0x0, 0x0, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000004900)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00'/28], 0x48) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f00000003c0)=""/110, 0x6e}], 0x2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r6, 0x800455d1, &(0x7f0000000840)) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x00') socket$nl_rdma(0x10, 0x3, 0x14) 5.278565716s ago: executing program 0 (id=320): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f00000004c0)=0x4) 5.154257409s ago: executing program 0 (id=321): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000006c0), 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 5.153685468s ago: executing program 2 (id=322): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc015}, 0x48000) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 4.900844198s ago: executing program 0 (id=323): r0 = io_uring_setup(0x17c7, &(0x7f0000000580)={0x0, 0x0, 0x400, 0x20000000}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 4.786627497s ago: executing program 3 (id=324): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000500000000000000852000000000000018600000000000000000000000000000bf9100000000111cd51953b40000b70200000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0)=0x8, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 4.779299237s ago: executing program 4 (id=325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58b"]) 4.640847748s ago: executing program 0 (id=326): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0xc018480d, &(0x7f0000000080)={0x2}) 4.463240279s ago: executing program 4 (id=327): syz_open_procfs(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) 4.174722691s ago: executing program 4 (id=328): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000003140)=""/4090, 0xffa}, {0x0}], 0x2) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000002c0)=0xa0000) r2 = dup(r1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000080)={&(0x7f0000000300)={{@my=0x0}, {@my=0x0}, 0x400, "1a0b5dbeaad6e12581c3705615196659d1edfd3e937bb049a5b6150777cdfc3f662aaa33c62804d786b79e9434331a65305e1ca8b12f2ef78b51d868fcacb8c1ce634287005fa21eae9125b9b5f78afe5816253c1d8179a25109c92aca81cbefee8bfee6e64f7d09541b3b54b464b08cd356e1cb5c49e7deaccfce3d06dbdf2318dfb309890458cb7a7b2a21743cec8f1ad4a7cbea7ea1ed37d1bab65c1bf52f9b1559ea51ed0e07f0184f39018109c38b561e132a99d1248964ca540bf022b6977bfaca7f9fc8e1b6826807127484d9835b5a1b710478b2a67c3f68d4d065d59140309232f0b5884f1d1dc6a575f990d0685a0cd095f6b5b79d0cffdb57b0bac719e4a9f39ccdc79fa6aeafa3a71ed3f46987cc1fda18e3bc34e56a441eb3e7f47476c52a400597b01eaf894da3428b4027a6ce2657b267932e83053be08f450510a0df068e3907290e7d104a8f79838bdc762cfe081260ff54b6b2fb4670b89be06c40b3c4ba8387586f5b84d2547d75125356f478523b8604452d0898c94f6d0bc75d9a34f063c979d519e0379eec57aa7a48d2120ae28682229213017a2215e0755c3b71e56ebaf2c928d6cf53dbc0190864d0b6ea928e933474e58a193c880bd90bb39d3291142687e8f9a10c60887898a931e34dac504220200401a7b26973590621222a74aa843becaec07a70456dad98ab32c225872a699f7aa849a035b8d513c97198d5a790b85a14375bc00f0635db6eaf0741fb9ab5bfb72dde3c1992b0157a1a34933caf5fa679435f34a756e0366a4f7d604958e6ede55883ca9f11e3b7056612489528887a45d7f67588bae91ec6f4b28ac26ccdae64cc82948fe99b2002df2d93236faacccc629f41a6981fffbb640e60399c5fe7288112bba82046197ef850d9f225987a6022fef9ad89b4798dc92b7cb5a1e1d2c698f86c4f99317ba87530b874ac3bd7899dffd2393a1d93ddb5143678831d94aaa2bf4267bfffefb44ec03fadcae8e8d89617ed926ad635559a7cdf61e2638dc3d8c424403c8121ad89aec8277a64955cf090c187113f4484c30f6246643a9707a4ef15869e58fe86ba3ab33ed7646b21846bd4f754ccffac9a96223971e4c44a36eef33c09d1b57a3790bec363a2c7333b07629874ad2119f2ccda107b183477df18f175d7e9132720d7cd7e671f8b62dee95433fa1db34dfb1bcae6a22863d1f592be8f6c64dcbb93bc5131711c7156829f77fe17b5bbfb1ac2eac809daeeeb804994b61c5e4a40c1fcbe7ee925ac8a6b0c52e24eee6d713060e407752ad35aef68040a4e68ba07c6d0548b32b12b62401c8349c6c53084bad6300d2b5e371efa569bb3a67ad15797389b8fe8dfa267fe203555bb15f36807894643f3f7f081a1e584f959c7716a46fe455837fc44c561c41ccebb845434b86b354b4a0c7796d713a5"}, 0x418}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000180)={0x10000009}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f00000003a8407a730bf85edacab3"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000000000)={0x3}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0x4802, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = syz_open_dev$sg(&(0x7f00000001c0), 0x8, 0x210900) fcntl$F_SET_FILE_RW_HINT(r7, 0x40e, &(0x7f0000000240)=0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB], 0x34}}, 0x0) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x100000001, 0x10000, 0x1}, 0x1c) r10 = socket$inet6(0xa, 0x80000, 0x987) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'batadv0\x00'}) setsockopt$inet6_MCAST_LEAVE_GROUP(r10, 0x29, 0x2d, &(0x7f0000000080)={0x6, {{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa5}}}, 0x84) sendmmsg$sock(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.430431114s ago: executing program 0 (id=329): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000240)={0x1, 0x0, [{0x0, 0x0, 0x1}]}) 693.021688ms ago: executing program 0 (id=330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000ce"]) 341.749407ms ago: executing program 4 (id=331): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000009240)={0x0, 0x0, &(0x7f0000009200)={&(0x7f0000000040)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f149010980000202000000270a"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac0c}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x40}}, 0x0) 311.895269ms ago: executing program 3 (id=332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x95}]}]}]}, 0x3c}}, 0x0) 319.29µs ago: executing program 3 (id=333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6(0xa, 0x80001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000079002800000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet6(0xa, 0x4, 0x0) close(r3) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c00020100800005260000000d240f0100000000000000f30006241a0000000905812300020000000904010000020d00000904010102020de4ff0805"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0xfff}]}}}]}, 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x52fc5ed1b305d67d}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000080)=0x400000001, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) stat(0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x11, &(0x7f0000000240)=ANY=[], 0x310) bpf$BPF_PROG_TEST_RUN(0xfb, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="fef351f64d23421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1d, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8300, 0x0, 0xffffffffffffff4b, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) 0s ago: executing program 4 (id=334): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff170000abaaaaaaaabb86dd6012000800703afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18020001ffffffffff60000000000000"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaa98aa0086dd6012000800103afffe8000000000000000000000000000bbff0200000000000000000000000000018600907800fd0d000000000000000000"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0xfffffffffffffffe) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r2 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) ppoll(&(0x7f0000000300)=[{}], 0x1, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r2}, &(0x7f00000000c0)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000ac0)=""/4095, 0xfff}], 0x1, 0xfffffffd, 0x0) r3 = mq_open(&(0x7f0000000200)='^-!-):(%@^+\x00', 0x40, 0x104, 0x0) mq_getsetattr(r3, 0x0, &(0x7f0000000380)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) preadv2(r4, &(0x7f0000002500)=[{&(0x7f0000001580)=""/185, 0xb9}], 0x1, 0x0, 0x0, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000004900)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00'/28], 0x48) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f00000003c0)=""/110, 0x6e}], 0x2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r6, 0x800455d1, &(0x7f0000000840)) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x00') socket$nl_rdma(0x10, 0x3, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts. [ 63.035913][ T5220] cgroup: Unknown subsys name 'net' [ 63.170561][ T5220] cgroup: Unknown subsys name 'cpuset' [ 63.179564][ T5220] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.725640][ T5220] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.962978][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.980820][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.993984][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.001717][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.005439][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.013498][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.019698][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.024079][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.037745][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.040561][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.052688][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.053176][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.067931][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.068478][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.082961][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.104097][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.121190][ T5247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.129806][ T5247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.134259][ T5246] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.138039][ T5247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.144183][ T5248] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.152174][ T5247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.159950][ T5248] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.173348][ T5248] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.180845][ T5248] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.189217][ T5248] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.196493][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.196667][ T5248] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.214655][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.235998][ T5248] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.709545][ T5251] chnl_net:caif_netlink_parms(): no params data found [ 67.789987][ T5249] chnl_net:caif_netlink_parms(): no params data found [ 67.804509][ T5250] chnl_net:caif_netlink_parms(): no params data found [ 67.850667][ T5252] chnl_net:caif_netlink_parms(): no params data found [ 67.869866][ T5253] chnl_net:caif_netlink_parms(): no params data found [ 67.967374][ T5251] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.975474][ T5251] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.983201][ T5251] bridge_slave_0: entered allmulticast mode [ 67.990959][ T5251] bridge_slave_0: entered promiscuous mode [ 68.058279][ T5251] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.065483][ T5251] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.072926][ T5251] bridge_slave_1: entered allmulticast mode [ 68.080031][ T5251] bridge_slave_1: entered promiscuous mode [ 68.120774][ T5250] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.128362][ T5250] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.135668][ T5250] bridge_slave_0: entered allmulticast mode [ 68.142796][ T5250] bridge_slave_0: entered promiscuous mode [ 68.151052][ T5250] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.158392][ T5250] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.165584][ T5250] bridge_slave_1: entered allmulticast mode [ 68.172477][ T5250] bridge_slave_1: entered promiscuous mode [ 68.192463][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.202748][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.210754][ T5249] bridge_slave_0: entered allmulticast mode [ 68.218526][ T5249] bridge_slave_0: entered promiscuous mode [ 68.230596][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.238020][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.245410][ T5249] bridge_slave_1: entered allmulticast mode [ 68.252708][ T5249] bridge_slave_1: entered promiscuous mode [ 68.272315][ T5251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.320450][ T5251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.342626][ T5253] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.350688][ T5253] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.358134][ T5253] bridge_slave_0: entered allmulticast mode [ 68.365029][ T5253] bridge_slave_0: entered promiscuous mode [ 68.392738][ T5250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.422305][ T5253] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.430680][ T5253] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.441174][ T5253] bridge_slave_1: entered allmulticast mode [ 68.448921][ T5253] bridge_slave_1: entered promiscuous mode [ 68.455858][ T5252] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.463284][ T5252] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.470615][ T5252] bridge_slave_0: entered allmulticast mode [ 68.477893][ T5252] bridge_slave_0: entered promiscuous mode [ 68.487073][ T5249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.498259][ T5250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.528516][ T5251] team0: Port device team_slave_0 added [ 68.542937][ T5252] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.550297][ T5252] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.557885][ T5252] bridge_slave_1: entered allmulticast mode [ 68.564622][ T5252] bridge_slave_1: entered promiscuous mode [ 68.573363][ T5249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.603245][ T5250] team0: Port device team_slave_0 added [ 68.612275][ T5250] team0: Port device team_slave_1 added [ 68.620218][ T5251] team0: Port device team_slave_1 added [ 68.652768][ T5249] team0: Port device team_slave_0 added [ 68.678854][ T5253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.698133][ T5249] team0: Port device team_slave_1 added [ 68.705766][ T5252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.734876][ T5253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.753366][ T5252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.772600][ T5251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.782490][ T5251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.808768][ T5251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.821550][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.828906][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.854962][ T5250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.900830][ T5252] team0: Port device team_slave_0 added [ 68.907746][ T5251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.914816][ T5251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.941530][ T5251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.959421][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.966424][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.992822][ T5250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.014847][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.021974][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.048092][ T5249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.061403][ T5252] team0: Port device team_slave_1 added [ 69.093921][ T5253] team0: Port device team_slave_0 added [ 69.102099][ T5253] team0: Port device team_slave_1 added [ 69.108957][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.109759][ T5248] Bluetooth: hci0: command tx timeout [ 69.116006][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.147877][ T5249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.164521][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.171884][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.198053][ T5252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.208808][ T5248] Bluetooth: hci2: command tx timeout [ 69.253955][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.261295][ T5248] Bluetooth: hci3: command tx timeout [ 69.267288][ T5248] Bluetooth: hci4: command tx timeout [ 69.272923][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.299161][ T5252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.329571][ T5251] hsr_slave_0: entered promiscuous mode [ 69.336075][ T5251] hsr_slave_1: entered promiscuous mode [ 69.342172][ T5248] Bluetooth: hci1: command tx timeout [ 69.361264][ T5253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.370131][ T5253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.396679][ T5253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.409673][ T5253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.416746][ T5253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.443008][ T5253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.483520][ T5249] hsr_slave_0: entered promiscuous mode [ 69.491882][ T5249] hsr_slave_1: entered promiscuous mode [ 69.498367][ T5249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.506122][ T5249] Cannot create hsr debugfs directory [ 69.531136][ T5250] hsr_slave_0: entered promiscuous mode [ 69.540773][ T5250] hsr_slave_1: entered promiscuous mode [ 69.546896][ T5250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.554836][ T5250] Cannot create hsr debugfs directory [ 69.620526][ T5252] hsr_slave_0: entered promiscuous mode [ 69.626848][ T5252] hsr_slave_1: entered promiscuous mode [ 69.633810][ T5252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.641538][ T5252] Cannot create hsr debugfs directory [ 69.661909][ T5253] hsr_slave_0: entered promiscuous mode [ 69.668601][ T5253] hsr_slave_1: entered promiscuous mode [ 69.674770][ T5253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.682565][ T5253] Cannot create hsr debugfs directory [ 70.040666][ T5249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.055979][ T5249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.080378][ T5249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.091779][ T5249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.118894][ T5250] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.139919][ T5250] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.174340][ T5250] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.193124][ T5250] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.207588][ T5251] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.218856][ T5251] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.245667][ T5251] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.255875][ T5251] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.317578][ T5252] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.330609][ T5252] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.343265][ T5252] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.353520][ T5252] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.451792][ T5253] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.483240][ T5253] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.518162][ T5253] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.529886][ T5253] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.554119][ T5249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.616713][ T5249] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.661387][ T5251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.676408][ T5250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.687293][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.694583][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.727129][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.734273][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.755055][ T5250] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.806719][ T5251] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.832059][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.839234][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.853763][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.860945][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.870651][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.877947][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.891715][ T5253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.910773][ T5252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.919885][ T3071] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.927068][ T3071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.970327][ T5253] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.985271][ T5249] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.996464][ T5249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.025204][ T5252] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.048869][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.056022][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.081807][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.088945][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.113806][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.121191][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.166174][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.173348][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.185033][ T5248] Bluetooth: hci0: command tx timeout [ 71.208941][ T5249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.250255][ T5251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.257845][ T5248] Bluetooth: hci2: command tx timeout [ 71.296572][ T5250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.337561][ T5232] Bluetooth: hci3: command tx timeout [ 71.343621][ T5248] Bluetooth: hci4: command tx timeout [ 71.385743][ T5249] veth0_vlan: entered promiscuous mode [ 71.419062][ T5248] Bluetooth: hci1: command tx timeout [ 71.429919][ T5249] veth1_vlan: entered promiscuous mode [ 71.475857][ T5250] veth0_vlan: entered promiscuous mode [ 71.511516][ T5251] veth0_vlan: entered promiscuous mode [ 71.525827][ T5253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.537962][ T5249] veth0_macvtap: entered promiscuous mode [ 71.545077][ T5250] veth1_vlan: entered promiscuous mode [ 71.566754][ T5249] veth1_macvtap: entered promiscuous mode [ 71.583701][ T5251] veth1_vlan: entered promiscuous mode [ 71.629586][ T5250] veth0_macvtap: entered promiscuous mode [ 71.639440][ T5252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.665107][ T5250] veth1_macvtap: entered promiscuous mode [ 71.679185][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.711654][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.726127][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.738774][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.749522][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.755921][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.765543][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.786176][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.797506][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.811114][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.823532][ T5249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.833013][ T5249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.843088][ T5249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.852806][ T5249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.871174][ T5253] veth0_vlan: entered promiscuous mode [ 71.883912][ T5251] veth0_macvtap: entered promiscuous mode [ 71.896146][ T5251] veth1_macvtap: entered promiscuous mode [ 71.905664][ T5250] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.914837][ T5250] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.925488][ T5250] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.934453][ T5250] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.953295][ T5253] veth1_vlan: entered promiscuous mode [ 72.029841][ T5251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.041641][ T5251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.052186][ T5251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.063384][ T5251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.075088][ T5251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.095444][ T5252] veth0_vlan: entered promiscuous mode [ 72.109818][ T5251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.121777][ T5251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.132038][ T5251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.143997][ T5251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.155583][ T5251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.169685][ T5251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.189366][ T5251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.200708][ T5251] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.209801][ T5251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.226929][ T5253] veth0_macvtap: entered promiscuous mode [ 72.248324][ T5253] veth1_macvtap: entered promiscuous mode [ 72.286027][ T5252] veth1_vlan: entered promiscuous mode [ 72.330229][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.345407][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.356916][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.367780][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.379526][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.390757][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.402554][ T5253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.436593][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.439661][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.455210][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.463414][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.473486][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.484587][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.494556][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.505581][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.518500][ T5253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.530712][ T5253] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.546447][ T5253] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.555557][ T5253] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.564698][ T5253] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.580655][ T3071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.592840][ T3071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.626728][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.639940][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.686773][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.691470][ T5252] veth0_macvtap: entered promiscuous mode [ 72.708739][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.742905][ T5252] veth1_macvtap: entered promiscuous mode [ 72.771059][ T5250] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.806385][ T1306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.820112][ T1306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.844803][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.856317][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.877769][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.896584][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.906849][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.938313][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.977331][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.998535][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.030269][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.070894][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.093472][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.114464][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.125149][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.142829][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.154599][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.171248][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.185898][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.204906][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.229665][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.240234][ T5252] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.258390][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.259842][ T5252] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.274698][ T5252] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.283600][ T5252] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.290352][ T5248] Bluetooth: hci0: command tx timeout [ 73.337942][ T5248] Bluetooth: hci2: command tx timeout [ 73.372243][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.380231][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.398820][ T5296] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.417758][ T5248] Bluetooth: hci4: command tx timeout [ 73.423218][ T5248] Bluetooth: hci3: command tx timeout [ 73.497309][ T5248] Bluetooth: hci1: command tx timeout [ 73.521317][ T1306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.533077][ T3071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.541408][ T1306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.549456][ T3071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.567194][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.587501][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.527721][ T5320] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.821367][ T5331] random: crng reseeded on system resumption [ 75.004045][ T5249] syz-executor (5249) used greatest stack depth: 19088 bytes left [ 75.143216][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.417552][ T5248] Bluetooth: hci2: command tx timeout [ 75.509794][ T5248] Bluetooth: hci3: command tx timeout [ 75.515328][ T5248] Bluetooth: hci4: command tx timeout [ 75.577273][ T5248] Bluetooth: hci1: command tx timeout [ 75.606616][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.630841][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.641393][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.654991][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.664743][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.672392][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.755027][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.787840][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.797418][ T939] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.961392][ T939] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.972790][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 75.987176][ T939] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.021299][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.045355][ T939] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.075193][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 76.094196][ T939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.105177][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.113286][ T9] usb 4-1: SerialNumber: syz [ 76.127581][ T939] usb 5-1: Product: syz [ 76.131848][ T939] usb 5-1: Manufacturer: syz [ 76.139122][ T939] usb 5-1: SerialNumber: syz [ 76.162329][ T5343] chnl_net:caif_netlink_parms(): no params data found [ 76.200372][ T939] usb 5-1: selecting invalid altsetting 1 [ 76.339165][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.454068][ T5348] netlink: 284 bytes leftover after parsing attributes in process `syz.2.23'. [ 76.690086][ T5343] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.712456][ T5343] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.733852][ T5343] bridge_slave_0: entered allmulticast mode [ 76.756157][ T5343] bridge_slave_0: entered promiscuous mode [ 76.792193][ T5343] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.805371][ T5343] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.813742][ T5343] bridge_slave_1: entered allmulticast mode [ 76.819882][ T939] usb 5-1: selecting invalid altsetting 1 [ 76.827371][ T939] cdc_ncm 5-1:1.0: bind() failure [ 76.846885][ T5343] bridge_slave_1: entered promiscuous mode [ 77.018326][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 77.051509][ T9] usb 4-1: USB disconnect, device number 2 [ 77.084713][ T2634] usb 5-1: USB disconnect, device number 2 [ 77.121842][ T5343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.203693][ T5343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.229263][ T11] bridge_slave_1: left allmulticast mode [ 77.245980][ T11] bridge_slave_1: left promiscuous mode [ 77.256619][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.297214][ T11] bridge_slave_0: left allmulticast mode [ 77.302940][ T11] bridge_slave_0: left promiscuous mode [ 77.338359][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.751624][ T5248] Bluetooth: hci0: command tx timeout [ 78.479304][ T5287] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.524688][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.560142][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.589813][ T11] bond0 (unregistering): Released all slaves [ 78.637982][ T5287] usb 2-1: Using ep0 maxpacket: 16 [ 78.649826][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.670658][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.689198][ T5287] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 78.708987][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.782188][ T5287] usb 2-1: config 0 descriptor?? [ 79.049209][ T5343] team0: Port device team_slave_0 added [ 79.085853][ T5343] team0: Port device team_slave_1 added [ 79.251144][ T5287] corsair 0003:1B1C:1B02.0001: unknown main item tag 0x0 [ 79.279854][ T5287] corsair 0003:1B1C:1B02.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 79.292820][ T5343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.316127][ T5343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.342299][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.367465][ T5343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.404000][ T5402] mmap: syz.2.38 (5402) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.429910][ T5403] netlink: 68 bytes leftover after parsing attributes in process `syz.3.39'. [ 79.446681][ T5287] corsair 0003:1B1C:1B02.0001: Read invalid backlight brightness: db. [ 79.478694][ T11] hsr_slave_0: left promiscuous mode [ 79.509133][ T11] hsr_slave_1: left promiscuous mode [ 79.537369][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.544926][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.600654][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.617295][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.673031][ T25] usb 2-1: USB disconnect, device number 2 [ 79.716993][ T11] veth1_macvtap: left promiscuous mode [ 79.738617][ T11] veth0_macvtap: left promiscuous mode [ 79.757185][ T11] veth1_vlan: left promiscuous mode [ 79.762780][ T11] veth0_vlan: left promiscuous mode [ 79.827578][ T5248] Bluetooth: hci0: command tx timeout [ 80.477993][ T11] team0 (unregistering): Port device team_slave_1 removed [ 80.524939][ T11] team0 (unregistering): Port device team_slave_0 removed [ 81.124157][ T5343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.132675][ T5343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.158614][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.213956][ T5343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.473855][ T5343] hsr_slave_0: entered promiscuous mode [ 81.483657][ T5343] hsr_slave_1: entered promiscuous mode [ 81.493884][ T5343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.507579][ T5343] Cannot create hsr debugfs directory [ 81.526680][ T5446] netlink: 'syz.1.51': attribute type 15 has an invalid length. [ 81.550979][ T5446] netlink: 5 bytes leftover after parsing attributes in process `syz.1.51'. [ 81.898103][ T5248] Bluetooth: hci0: command tx timeout [ 82.005628][ T46] cfg80211: failed to load regulatory.db [ 82.634858][ T939] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 82.803120][ T5493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.65'. [ 82.850014][ T939] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.883049][ T939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 82.916225][ T939] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 82.945671][ T939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.985130][ T939] usb 5-1: config 0 descriptor?? [ 83.015690][ T939] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 83.027399][ T939] dvb-usb: bulk message failed: -22 (3/0) [ 83.052637][ T939] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 83.081573][ T939] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 83.107647][ T939] usb 5-1: media controller created [ 83.145103][ T939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.171673][ T939] dvb-usb: bulk message failed: -22 (6/0) [ 83.178456][ T939] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 83.230413][ T939] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 83.241751][ T46] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.273412][ T939] dvb-usb: schedule remote query interval to 150 msecs. [ 83.281116][ T939] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 83.295367][ T5481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.315048][ T5481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.462902][ T939] dvb-usb: bulk message failed: -22 (1/0) [ 83.469966][ T939] dvb-usb: error while querying for an remote control event. [ 83.644959][ T939] dvb-usb: bulk message failed: -22 (1/0) [ 83.651095][ T939] dvb-usb: error while querying for an remote control event. [ 83.681398][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.701630][ T939] usb 5-1: USB disconnect, device number 3 [ 83.704011][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.718036][ T46] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 83.727219][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.727579][ T5515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'. [ 83.779685][ T5343] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.796199][ T5343] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.816876][ T46] usb 4-1: config 0 descriptor?? [ 83.825757][ T5343] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.852933][ T5343] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.873007][ T939] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 83.983178][ T5248] Bluetooth: hci0: command tx timeout [ 84.080130][ T5343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.156439][ T5343] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.227939][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.235240][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.280719][ T46] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 84.292780][ T46] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 84.310036][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.318094][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.325747][ T46] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 84.432078][ T5343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.570081][ T5343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.683027][ T5343] veth0_vlan: entered promiscuous mode [ 84.691880][ T46] hid-led 0003:0FC5:B080.0002: probe with driver hid-led failed with error -71 [ 84.744655][ T5343] veth1_vlan: entered promiscuous mode [ 84.747906][ T46] usb 4-1: USB disconnect, device number 3 [ 84.905142][ T5343] veth0_macvtap: entered promiscuous mode [ 84.926898][ T5343] veth1_macvtap: entered promiscuous mode [ 84.984771][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.037075][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.082624][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.137121][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.175661][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.197876][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.212977][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.226374][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.245050][ T5343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.293281][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.305297][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.325956][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.389122][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.411401][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.437150][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.447116][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.457679][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.469051][ T5343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.607891][ T5343] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.619115][ T5343] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.657480][ T5343] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.684978][ T5343] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.899840][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.082556][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.257518][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.411720][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.531232][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.540285][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.610228][ T5595] netlink: 'syz.4.95': attribute type 3 has an invalid length. [ 86.672415][ T3071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.697208][ T3071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.840116][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.855781][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.874172][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.882443][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.891740][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.899296][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.267353][ T12] bridge_slave_1: left allmulticast mode [ 87.275286][ T12] bridge_slave_1: left promiscuous mode [ 87.285007][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.351476][ T12] bridge_slave_0: left allmulticast mode [ 87.357578][ T12] bridge_slave_0: left promiscuous mode [ 87.376573][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.090515][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.180272][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.195797][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.207441][ T12] bond0 (unregistering): Released all slaves [ 88.257175][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 88.276156][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.288596][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 88.303736][ T46] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 88.313956][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.338544][ T46] usb 1-1: config 0 descriptor?? [ 88.816164][ T46] hid-udraw 0003:20D6:CB17.0003: unknown main item tag 0x0 [ 88.824910][ T46] hid-udraw 0003:20D6:CB17.0003: unknown main item tag 0x0 [ 88.833069][ T46] hid-udraw 0003:20D6:CB17.0003: unknown main item tag 0x0 [ 88.834145][ T5651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.110'. [ 88.847254][ T46] hid-udraw 0003:20D6:CB17.0003: unknown main item tag 0x0 [ 88.864762][ T46] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0003/input/input6 [ 88.962987][ T5232] Bluetooth: hci2: command tx timeout [ 89.010917][ T46] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0003/input/input7 [ 89.142387][ T46] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0003/input/input8 [ 89.185936][ T46] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0003/input/input9 [ 89.233675][ T12] hsr_slave_0: left promiscuous mode [ 89.296591][ T46] hid-udraw 0003:20D6:CB17.0003: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0 [ 89.311470][ T46] usb 1-1: USB disconnect, device number 2 [ 89.335693][ T12] hsr_slave_1: left promiscuous mode [ 89.403200][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.414338][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.466402][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.487239][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.600847][ T12] veth1_macvtap: left promiscuous mode [ 89.606448][ T12] veth0_macvtap: left promiscuous mode [ 89.612844][ T12] veth1_vlan: left promiscuous mode [ 89.618254][ T12] veth0_vlan: left promiscuous mode [ 90.508633][ T12] team0 (unregistering): Port device team_slave_1 removed [ 90.554687][ T12] team0 (unregistering): Port device team_slave_0 removed [ 90.642497][ T5701] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 91.020113][ T5232] Bluetooth: hci2: command tx timeout [ 91.227760][ T5664] netlink: 'syz.3.113': attribute type 10 has an invalid length. [ 91.245548][ T5664] team0: Port device netdevsim0 added [ 91.253875][ T5666] netlink: 'syz.3.113': attribute type 10 has an invalid length. [ 91.495211][ T5607] chnl_net:caif_netlink_parms(): no params data found [ 91.926691][ T5733] netlink: 'syz.3.132': attribute type 25 has an invalid length. [ 91.979041][ T5743] netlink: 16 bytes leftover after parsing attributes in process `syz.1.133'. [ 92.411116][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.440234][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.458994][ T5607] bridge_slave_0: entered allmulticast mode [ 92.477247][ T5607] bridge_slave_0: entered promiscuous mode [ 92.486185][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.497124][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.504404][ T5607] bridge_slave_1: entered allmulticast mode [ 92.559325][ T5607] bridge_slave_1: entered promiscuous mode [ 92.601869][ T5761] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3966. macoff=82 [ 92.681035][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.733003][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.918159][ T5607] team0: Port device team_slave_0 added [ 92.950255][ T5607] team0: Port device team_slave_1 added [ 93.097369][ T5232] Bluetooth: hci2: command tx timeout [ 93.122582][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.132337][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.159031][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.188962][ T5778] netlink: 'syz.1.146': attribute type 2 has an invalid length. [ 93.217717][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.224792][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.341995][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.582990][ T5607] hsr_slave_0: entered promiscuous mode [ 93.605325][ T5607] hsr_slave_1: entered promiscuous mode [ 93.615708][ T5607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.624694][ T5607] Cannot create hsr debugfs directory [ 93.630586][ T5798] netlink: 576 bytes leftover after parsing attributes in process `syz.4.153'. [ 93.644480][ T5797] netlink: 'syz.1.152': attribute type 9 has an invalid length. [ 93.669897][ T5797] bond_slave_0: entered promiscuous mode [ 93.675903][ T5797] bond_slave_1: entered promiscuous mode [ 93.707628][ T5797] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 93.742398][ T5804] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.267447][ T5815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 94.578999][ T5834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.164'. [ 95.201708][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.168'. [ 95.210935][ T5232] Bluetooth: hci2: command tx timeout [ 95.342125][ T5607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.380799][ T5607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.433892][ T5607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.527781][ T5607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.813767][ T5862] netem: incorrect gi model size [ 95.848531][ T5862] netem: change failed [ 95.935099][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.024708][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.066555][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.073785][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.135165][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.142437][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.416802][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.457257][ T5607] veth0_vlan: entered promiscuous mode [ 96.469452][ T5607] veth1_vlan: entered promiscuous mode [ 96.496414][ T5607] veth0_macvtap: entered promiscuous mode [ 96.506477][ T5607] veth1_macvtap: entered promiscuous mode [ 96.523751][ T5607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.534427][ T5607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.544620][ T5607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.555751][ T5607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.565972][ T5607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.576719][ T5607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.586883][ T5607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.598006][ T5607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.609750][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.620705][ T5607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.631350][ T5607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.641305][ T5607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.651998][ T5607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.662230][ T5607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.673034][ T5607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.683243][ T5607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.694296][ T5607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.708246][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.799589][ T5607] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.827165][ T5607] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.836004][ T5607] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.895576][ T5607] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.150411][ T3071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.183064][ T5910] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.210418][ T3071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.299893][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.336659][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.797869][ T5933] netlink: 64 bytes leftover after parsing attributes in process `syz.2.190'. [ 98.737639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.746782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 98.838336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.617901][ T46] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.778358][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 99.790037][ T46] usb 5-1: config 0 has no interfaces? [ 99.801371][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.833103][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.860425][ T46] usb 5-1: Product: syz [ 99.876817][ T46] usb 5-1: Manufacturer: syz [ 99.894191][ T46] usb 5-1: SerialNumber: syz [ 99.931897][ T46] usb 5-1: config 0 descriptor?? [ 100.237953][ T939] usb 5-1: USB disconnect, device number 4 [ 100.867659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.876351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.885022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.894043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 101.014606][ T6072] netlink: 'syz.4.226': attribute type 9 has an invalid length. [ 101.037221][ T5238] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.037487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.053183][ T6072] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.226'. [ 101.183525][ T6080] netlink: 'syz.4.229': attribute type 34 has an invalid length. [ 101.229671][ T5238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.247900][ T5238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.269893][ T5238] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.285055][ T5238] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.295002][ T5238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.308559][ T5238] usb 4-1: config 0 descriptor?? [ 101.367175][ T939] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.564456][ T939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.601931][ T939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.624998][ T939] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.643016][ T939] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.652940][ T939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.673636][ T939] usb 1-1: config 0 descriptor?? [ 101.731612][ T5238] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.750338][ T5238] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.780969][ T5238] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 101.821335][ T5238] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 101.872054][ T6095] pim6reg1: entered promiscuous mode [ 101.905013][ T6095] pim6reg1: entered allmulticast mode [ 102.000651][ T5287] usb 4-1: USB disconnect, device number 4 [ 102.098544][ T939] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 102.123406][ T939] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 102.252695][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.237'. [ 102.817758][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 103.050534][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.087858][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 103.096864][ T9] usb 5-1: config 1 has no interface number 0 [ 103.108968][ T6127] netlink: 36 bytes leftover after parsing attributes in process `syz.2.247'. [ 103.142850][ T9] usb 5-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 103.187198][ T9] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.239320][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.268930][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.299379][ T9] usb 5-1: Product: syz [ 103.303658][ T9] usb 5-1: Manufacturer: syz [ 103.342697][ T9] usb 5-1: SerialNumber: syz [ 103.382243][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 103.385469][ T6129] tun0: tun_chr_ioctl cmd 1074025675 [ 103.404792][ T6129] tun0: persist enabled [ 103.407516][ T9] cdc_ncm 5-1:1.1: bind() failure [ 103.424996][ T6131] syz.2.249 uses obsolete (PF_INET,SOCK_PACKET) [ 103.435130][ T6129] tun0: tun_chr_ioctl cmd 1074025675 [ 103.444820][ T6129] tun0: persist enabled [ 103.451554][ T6131] syzkaller1: entered promiscuous mode [ 103.460470][ T6131] syzkaller1: entered allmulticast mode [ 103.633978][ T29] audit: type=1326 audit(1728315673.774:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 103.694132][ T9] usb 5-1: USB disconnect, device number 5 [ 103.720441][ T29] audit: type=1326 audit(1728315673.774:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 103.796219][ T29] audit: type=1326 audit(1728315673.774:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=106 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 103.823868][ T29] audit: type=1326 audit(1728315673.774:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 103.884083][ T29] audit: type=1326 audit(1728315673.774:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 103.976933][ T29] audit: type=1326 audit(1728315673.774:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 104.037537][ T29] audit: type=1326 audit(1728315673.774:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 104.094327][ T29] audit: type=1326 audit(1728315673.774:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 104.121462][ T29] audit: type=1326 audit(1728315673.804:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 104.182523][ T25] usb 1-1: USB disconnect, device number 3 [ 104.220991][ T29] audit: type=1326 audit(1728315673.804:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 105.267943][ T5287] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.453697][ T5287] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 105.495548][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.528184][ T5287] usb 1-1: config 0 descriptor?? [ 105.817273][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 105.846660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.898823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.969361][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.993701][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.014331][ T25] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 106.037207][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.061823][ T25] usb 5-1: config 0 descriptor?? [ 106.353550][ T6155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.519313][ T6155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.559619][ T25] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 106.585718][ T25] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 106.610220][ T25] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 106.985009][ T25] hid-led 0003:0FC5:B080.0006: probe with driver hid-led failed with error -71 [ 107.052256][ T6155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.071376][ T25] usb 5-1: USB disconnect, device number 6 [ 107.184358][ T6155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.374757][ T6155] netlink: 'syz.0.259': attribute type 10 has an invalid length. [ 107.621960][ T6155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.646304][ T6155] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 107.728877][ T5287] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 107.755538][ T5287] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 107.807932][ T5287] [drm:udl_init] *ERROR* Selecting channel failed [ 107.905059][ T5287] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 107.968616][ T5287] [drm] Initialized udl on minor 2 [ 107.982456][ T5287] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 108.044709][ T5287] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 108.079832][ T5277] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 108.107753][ T5287] usb 1-1: USB disconnect, device number 4 [ 108.125309][ T5277] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 108.277347][ T5238] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.522967][ T5238] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.582524][ T5238] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 108.639399][ T5238] usb 3-1: config 1 has no interface number 0 [ 108.645580][ T5238] usb 3-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 108.714017][ T5238] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.731820][ T5238] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.755589][ T5238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.790686][ T5238] usb 3-1: Product: syz [ 108.794946][ T5238] usb 3-1: Manufacturer: syz [ 108.818232][ T5238] usb 3-1: SerialNumber: syz [ 108.843921][ T5238] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 108.886354][ T5238] cdc_ncm 3-1:1.1: bind() failure [ 109.096787][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 109.096806][ T29] audit: type=1326 audit(1728315679.234:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 109.132405][ T29] audit: type=1326 audit(1728315679.234:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 109.162205][ T29] audit: type=1326 audit(1728315679.274:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=106 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 109.190394][ T5277] usb 3-1: USB disconnect, device number 2 [ 109.198194][ T29] audit: type=1326 audit(1728315679.274:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 109.282149][ T29] audit: type=1326 audit(1728315679.274:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 109.379492][ T29] audit: type=1326 audit(1728315679.294:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 109.409914][ T29] audit: type=1326 audit(1728315679.294:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 109.440353][ T29] audit: type=1326 audit(1728315679.294:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 109.523613][ T29] audit: type=1326 audit(1728315679.294:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 109.551742][ T29] audit: type=1326 audit(1728315679.294:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 111.072514][ T6233] capability: warning: `syz.4.284' uses deprecated v2 capabilities in a way that may be insecure [ 111.127534][ T5238] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.297308][ T5238] usb 3-1: Using ep0 maxpacket: 8 [ 111.319455][ T5238] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 111.343848][ T5238] usb 3-1: config 179 has no interface number 0 [ 111.381042][ T5238] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 111.447687][ T5238] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 111.487261][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 111.495017][ T5238] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 111.545274][ T5238] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 111.590392][ T5238] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 111.668344][ T5238] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 111.692241][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.723345][ T5238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.737345][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 111.780757][ T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 111.792781][ T6230] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 111.864885][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.933265][ T9] usb 1-1: config 0 descriptor?? [ 112.003584][ T6233] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 112.029411][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 112.116275][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 112.216267][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 112.228521][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.337399][ T5238] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.346151][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 112.367100][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.410012][ T9] usb 1-1: media controller created [ 112.430381][ T939] usb 3-1: USB disconnect, device number 3 [ 112.436295][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 112.436388][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 112.495701][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.563099][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 112.622076][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 112.686497][ T5238] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.710846][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 112.747215][ T5238] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 112.798911][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 112.805937][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 112.835125][ T5238] usb 4-1: config 1 has no interface number 0 [ 112.874283][ T5238] usb 4-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 112.967206][ T5238] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.210805][ T5234] dvb-usb: bulk message failed: -22 (1/0) [ 113.216613][ T5234] dvb-usb: error while querying for an remote control event. [ 113.225135][ T9] usb 1-1: USB disconnect, device number 5 [ 113.244367][ T5248] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.265692][ T5248] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.273944][ T5238] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.283419][ T5238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.291792][ T5238] usb 4-1: Product: syz [ 113.296068][ T5238] usb 4-1: Manufacturer: syz [ 113.300776][ T5238] usb 4-1: SerialNumber: syz [ 113.309215][ T5248] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.321241][ T5238] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 113.328276][ T5238] cdc_ncm 4-1:1.1: bind() failure [ 113.343712][ T5248] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.354403][ T5248] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 113.365947][ T5248] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.498285][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 113.615204][ T5238] usb 4-1: USB disconnect, device number 5 [ 113.694435][ T5253] syz-executor (5253) used greatest stack depth: 18832 bytes left [ 113.807716][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.915459][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.972030][ T6267] batadv_slave_1: entered promiscuous mode [ 114.070332][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.088747][ T6266] batadv_slave_1: left promiscuous mode [ 114.280314][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.352833][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'. [ 114.416751][ T6282] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 114.497745][ T6290] netlink: 16 bytes leftover after parsing attributes in process `syz.2.303'. [ 114.506803][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 114.525269][ T6288] loop0: detected capacity change from 0 to 7 [ 114.545100][ T6288] Dev loop0: unable to read RDB block 7 [ 114.551666][ T6290] netlink: 16 bytes leftover after parsing attributes in process `syz.2.303'. [ 114.578395][ T6288] loop0: AHDI p2 [ 114.602577][ T6288] loop0: partition table partially beyond EOD, truncated [ 114.608623][ T6259] chnl_net:caif_netlink_parms(): no params data found [ 114.735430][ T11] bridge_slave_1: left allmulticast mode [ 114.741341][ T11] bridge_slave_1: left promiscuous mode [ 114.747314][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.786351][ T11] bridge_slave_0: left allmulticast mode [ 114.796717][ T11] bridge_slave_0: left promiscuous mode [ 114.802886][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.854795][ T11] bond_slave_0: left promiscuous mode [ 114.861184][ T11] bond_slave_1: left promiscuous mode [ 115.424973][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.443115][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.455057][ T11] bond0 (unregistering): Released all slaves [ 115.497135][ T5248] Bluetooth: hci5: command tx timeout [ 115.517216][ T6300] erspan0: entered promiscuous mode [ 115.525074][ T6300] vlan2: entered promiscuous mode [ 115.582802][ T6300] erspan0: left promiscuous mode [ 115.848476][ T6259] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.863229][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.882341][ T6259] bridge_slave_0: entered allmulticast mode [ 115.893780][ T6259] bridge_slave_0: entered promiscuous mode [ 115.922969][ T6259] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.947736][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.964003][ T6259] bridge_slave_1: entered allmulticast mode [ 115.979944][ T6259] bridge_slave_1: entered promiscuous mode [ 116.247489][ T5238] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.289577][ T6259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.439535][ T5238] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.459532][ T5238] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 116.485315][ T5238] usb 4-1: config 1 has no interface number 0 [ 116.506717][ T6259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.526442][ T5238] usb 4-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 116.554608][ T5238] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.582877][ T5238] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.593378][ T5238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.608588][ T5238] usb 4-1: Product: syz [ 116.618325][ T5238] usb 4-1: Manufacturer: syz [ 116.624962][ T5238] usb 4-1: SerialNumber: syz [ 116.655396][ T5238] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 116.698611][ T5238] cdc_ncm 4-1:1.1: bind() failure [ 116.827286][ T11] hsr_slave_0: left promiscuous mode [ 116.835799][ T11] hsr_slave_1: left promiscuous mode [ 116.855683][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.866352][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.884140][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.899410][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 116.899430][ T29] audit: type=1326 audit(1728315687.044:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 116.938871][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.948333][ T5287] usb 4-1: USB disconnect, device number 6 [ 117.004999][ T29] audit: type=1326 audit(1728315687.044:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 117.038625][ T29] audit: type=1326 audit(1728315687.074:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=106 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 117.040337][ T11] veth1_macvtap: left promiscuous mode [ 117.070506][ T29] audit: type=1326 audit(1728315687.074:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 117.097330][ T29] audit: type=1326 audit(1728315687.074:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 117.119158][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.133308][ T29] audit: type=1326 audit(1728315687.074:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 117.163356][ T11] veth0_macvtap: left promiscuous mode [ 117.175580][ T11] veth1_vlan: left promiscuous mode [ 117.191218][ T11] veth0_vlan: left promiscuous mode [ 117.212909][ T29] audit: type=1326 audit(1728315687.074:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 117.234758][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.303684][ T29] audit: type=1326 audit(1728315687.074:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 117.361276][ T29] audit: type=1326 audit(1728315687.074:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 117.383139][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.463779][ T29] audit: type=1326 audit(1728315687.074:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 117.485712][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.591045][ T5248] Bluetooth: hci5: command tx timeout [ 118.074638][ T5238] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 118.251241][ T5238] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.288901][ T5238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 118.353665][ T5238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 118.408958][ T5238] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.431214][ T5238] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.444660][ T5238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.528567][ T5238] usb 1-1: config 0 descriptor?? [ 118.549127][ T6379] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 118.727323][ T5298] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 118.895416][ T5298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 118.930354][ T5298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 118.965155][ T5298] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.993789][ T5298] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.011430][ T11] team0 (unregistering): Port device team_slave_1 removed [ 119.029830][ T5238] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 119.039686][ T5298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.076916][ T5238] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 119.089593][ T5298] usb 5-1: config 0 descriptor?? [ 119.118139][ T6388] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 119.151896][ T5238] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 119.340331][ T5238] usb 1-1: USB disconnect, device number 6 [ 119.348023][ T11] team0 (unregistering): Port device team_slave_0 removed [ 119.569477][ T5298] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 119.603283][ T5298] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 119.637795][ T5298] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 119.658584][ T5248] Bluetooth: hci5: command tx timeout [ 121.037223][ T5298] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 121.187314][ T5298] usb 5-1: device descriptor read/64, error -32 [ 121.447299][ T5298] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 121.559177][ T6259] team0: Port device team_slave_0 added [ 121.570514][ T6259] team0: Port device team_slave_1 added [ 121.588930][ T5298] usb 5-1: device descriptor read/64, error -32 [ 121.747456][ T5248] Bluetooth: hci5: command tx timeout [ 121.847444][ T5298] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 121.887659][ T5298] usb 5-1: device descriptor read/8, error -32 [ 122.020137][ T6383] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 122.292600][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.386430][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.551774][ T6259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.709274][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.746506][ T0] sched: DL replenish lagged too much [ 134.491056][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.499056][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.536755][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.067201][ T6259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.287273][ T5238] usb 5-1: USB disconnect, device number 7 [ 137.016075][ T6259] hsr_slave_0: entered promiscuous mode [ 137.151158][ T6259] hsr_slave_1: entered promiscuous mode [ 137.186126][ T6259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.223988][ T6259] Cannot create hsr debugfs directory [ 138.669155][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 138.679522][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 138.689056][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.701289][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.712253][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 138.720251][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.142084][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.151530][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.160336][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.171320][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.179993][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 139.195052][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.335592][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.345359][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.355585][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.364231][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.377296][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 139.384729][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.399611][ T5248] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 139.411666][ T5248] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 139.420320][ T5248] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 139.428861][ T5248] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 139.436622][ T5248] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 139.468625][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 141.017418][ T54] Bluetooth: hci2: command tx timeout [ 141.257287][ T54] Bluetooth: hci0: command tx timeout [ 141.497553][ T54] Bluetooth: hci3: command tx timeout [ 141.503722][ T54] Bluetooth: hci1: command tx timeout [ 143.097521][ T54] Bluetooth: hci2: command tx timeout [ 143.337302][ T54] Bluetooth: hci0: command tx timeout [ 143.577345][ T5232] Bluetooth: hci3: command tx timeout [ 143.584236][ T54] Bluetooth: hci1: command tx timeout [ 145.177922][ T54] Bluetooth: hci2: command tx timeout [ 145.417315][ T54] Bluetooth: hci0: command tx timeout [ 145.657301][ T5232] Bluetooth: hci3: command tx timeout [ 145.664229][ T54] Bluetooth: hci1: command tx timeout [ 147.257526][ T54] Bluetooth: hci2: command tx timeout [ 147.497132][ T54] Bluetooth: hci0: command tx timeout [ 147.737217][ T5232] Bluetooth: hci3: command tx timeout [ 147.742721][ T54] Bluetooth: hci1: command tx timeout [ 175.204917][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.214365][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.222584][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.233338][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.256441][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 175.264664][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.337449][ T54] Bluetooth: hci4: command tx timeout [ 179.417210][ T54] Bluetooth: hci4: command tx timeout [ 181.498177][ T54] Bluetooth: hci4: command tx timeout [ 183.577245][ T54] Bluetooth: hci4: command tx timeout [ 194.623813][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.637083][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.598132][ T5232] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 199.618940][ T5232] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 199.637705][ T5232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 199.645754][ T5232] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 199.656522][ T5232] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 199.664109][ T5232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 199.797791][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 199.809327][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 199.820496][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 199.828663][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 199.844445][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 199.851977][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 199.902911][ T5248] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 199.915511][ T5248] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 199.924310][ T5248] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 199.932786][ T5248] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 199.951529][ T5245] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 199.967275][ T5245] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 199.984151][ T5232] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 200.016711][ T5245] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 200.025625][ T5245] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 200.042023][ T5245] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 200.051835][ T5245] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 200.059411][ T5245] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 201.737168][ T5245] Bluetooth: hci6: command tx timeout [ 201.977454][ T5245] Bluetooth: hci7: command tx timeout [ 202.057156][ T5245] Bluetooth: hci8: command tx timeout [ 202.137286][ T5245] Bluetooth: hci9: command tx timeout [ 203.817320][ T5245] Bluetooth: hci6: command tx timeout [ 204.057337][ T5245] Bluetooth: hci7: command tx timeout [ 204.144163][ T5245] Bluetooth: hci8: command tx timeout [ 204.217460][ T5245] Bluetooth: hci9: command tx timeout [ 205.897168][ T5245] Bluetooth: hci6: command tx timeout [ 206.137433][ T5245] Bluetooth: hci7: command tx timeout [ 206.217285][ T5245] Bluetooth: hci8: command tx timeout [ 206.297310][ T5245] Bluetooth: hci9: command tx timeout [ 207.977151][ T5245] Bluetooth: hci6: command tx timeout [ 208.217375][ T5245] Bluetooth: hci7: command tx timeout [ 208.297082][ T5245] Bluetooth: hci8: command tx timeout [ 208.377290][ T5245] Bluetooth: hci9: command tx timeout [ 235.772546][ T5232] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 235.781890][ T5232] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 235.791077][ T5232] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 235.809274][ T5232] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 235.826128][ T5232] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 235.833815][ T5232] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 237.664283][ T5232] Bluetooth: hci5: command 0x0406 tx timeout [ 237.906067][ T5248] Bluetooth: hci10: command tx timeout [ 239.978378][ T5248] Bluetooth: hci10: command tx timeout [ 242.058335][ T5248] Bluetooth: hci10: command tx timeout [ 244.139493][ T5248] Bluetooth: hci10: command tx timeout [ 256.061018][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.067547][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.285492][ T5232] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 260.299209][ T5232] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 260.307836][ T5232] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 260.315987][ T5232] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 260.337589][ T5232] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 260.357342][ T5232] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 260.543349][ T5248] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 260.554674][ T5248] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 260.564254][ T5248] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 260.574736][ T5248] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 260.582994][ T5248] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 260.592624][ T5248] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 260.646543][ T5232] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 260.667102][ T5232] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 260.675682][ T5232] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 260.684428][ T5232] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 260.693471][ T5232] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 260.702631][ T5232] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 260.782715][ T5248] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 260.797502][ T5248] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 260.807401][ T5248] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 260.821446][ T5248] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 260.829807][ T5248] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 260.838237][ T5248] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 262.457329][ T5247] Bluetooth: hci11: command tx timeout [ 262.697342][ T5247] Bluetooth: hci12: command tx timeout [ 262.780752][ T5247] Bluetooth: hci13: command tx timeout [ 262.945544][ T5247] Bluetooth: hci14: command tx timeout [ 263.257528][ T5247] Bluetooth: hci3: command 0x0406 tx timeout [ 263.263721][ T5247] Bluetooth: hci1: command 0x0406 tx timeout [ 263.270122][ T5233] Bluetooth: hci2: command 0x0406 tx timeout [ 263.276251][ T5233] Bluetooth: hci0: command 0x0406 tx timeout [ 264.537204][ T5232] Bluetooth: hci11: command tx timeout [ 264.777413][ T5232] Bluetooth: hci12: command tx timeout [ 264.857252][ T5232] Bluetooth: hci13: command tx timeout [ 265.017440][ T5245] Bluetooth: hci14: command tx timeout [ 266.617294][ T5232] Bluetooth: hci11: command tx timeout [ 266.857236][ T5232] Bluetooth: hci12: command tx timeout [ 266.937375][ T5232] Bluetooth: hci13: command tx timeout [ 267.097185][ T5232] Bluetooth: hci14: command tx timeout [ 268.697219][ T5232] Bluetooth: hci11: command tx timeout [ 268.937409][ T5232] Bluetooth: hci12: command tx timeout [ 269.017187][ T5232] Bluetooth: hci13: command tx timeout [ 269.180635][ T5232] Bluetooth: hci14: command tx timeout [ 288.057369][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 288.065421][ T30] Not tainted 6.12.0-rc2-syzkaller #0 [ 288.077044][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.085793][ T30] task:kworker/u8:0 state:D stack:22104 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 288.154512][ T30] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 288.177061][ T30] Call Trace: [ 288.180756][ T30] [ 288.183744][ T30] __schedule+0x1895/0x4b30 [ 288.284446][ T30] ? __pfx___schedule+0x10/0x10 [ 288.297358][ T30] ? __pfx_lock_release+0x10/0x10 [ 288.351809][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 288.385021][ T30] ? kthread_data+0x52/0xd0 [ 288.397069][ T30] ? schedule+0x90/0x320 [ 288.401420][ T30] ? wq_worker_sleeping+0x66/0x240 [ 288.406604][ T30] ? schedule+0x90/0x320 [ 288.467018][ T30] schedule+0x14b/0x320 [ 288.471287][ T30] schedule_preempt_disabled+0x13/0x30 [ 288.476810][ T30] __mutex_lock+0x6a7/0xd70 [ 288.553646][ T30] ? __mutex_lock+0x52a/0xd70 [ 288.577237][ T30] ? wg_destruct+0x25/0x2e0 [ 288.581854][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 288.622960][ T30] ? __pfx_free_percpu+0x10/0x10 [ 288.667042][ T30] ? kobject_put+0x272/0x480 [ 288.671727][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 288.676725][ T30] wg_destruct+0x25/0x2e0 [ 288.725699][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 288.754312][ T30] netdev_run_todo+0xe1a/0x1000 [ 288.767180][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 288.772561][ T30] ? unregister_netdevice_queue+0x26b/0x370 [ 288.815295][ T30] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 288.827980][ T30] default_device_exit_batch+0xa24/0xaa0 [ 288.833719][ T30] ? __pfx___might_resched+0x10/0x10 [ 288.885985][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 288.917041][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 288.922697][ T30] ? cfg802154_pernet_exit+0xc3/0xe0 [ 288.976656][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 289.013829][ T30] cleanup_net+0x89d/0xcc0 [ 289.024548][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 289.064495][ T30] ? process_scheduled_works+0x976/0x1850 [ 289.077196][ T30] process_scheduled_works+0xa63/0x1850 [ 289.083054][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 289.133804][ T30] ? assign_work+0x364/0x3d0 [ 289.143654][ T30] worker_thread+0x870/0xd30 [ 289.157122][ T30] ? __kthread_parkme+0x169/0x1d0 [ 289.162258][ T30] ? __pfx_worker_thread+0x10/0x10 [ 289.183988][ T30] kthread+0x2f0/0x390 [ 289.202802][ T30] ? __pfx_worker_thread+0x10/0x10 [ 289.216974][ T30] ? __pfx_kthread+0x10/0x10 [ 289.221657][ T30] ret_from_fork+0x4b/0x80 [ 289.226145][ T30] ? __pfx_kthread+0x10/0x10 [ 289.252667][ T30] ret_from_fork_asm+0x1a/0x30 [ 289.271330][ T30] [ 289.277224][ T30] INFO: task kworker/u8:3:52 blocked for more than 144 seconds. [ 289.284929][ T30] Not tainted 6.12.0-rc2-syzkaller #0 [ 289.324338][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.350986][ T30] task:kworker/u8:3 state:D stack:20472 pid:52 tgid:52 ppid:2 flags:0x00004000 [ 289.381916][ T30] Workqueue: events_unbound linkwatch_event [ 289.407397][ T30] Call Trace: [ 289.410847][ T30] [ 289.413815][ T30] __schedule+0x1895/0x4b30 [ 289.435826][ T30] ? __pfx___schedule+0x10/0x10 [ 289.454072][ T30] ? __pfx_lock_release+0x10/0x10 [ 289.473980][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 289.484669][ T30] ? kthread_data+0x52/0xd0 [ 289.502805][ T30] ? schedule+0x90/0x320 [ 289.513190][ T30] ? wq_worker_sleeping+0x66/0x240 [ 289.531316][ T30] ? schedule+0x90/0x320 [ 289.535742][ T30] schedule+0x14b/0x320 [ 289.552752][ T30] schedule_preempt_disabled+0x13/0x30 [ 289.571394][ T30] __mutex_lock+0x6a7/0xd70 [ 289.575994][ T30] ? __mutex_lock+0x52a/0xd70 [ 289.598803][ T30] ? linkwatch_event+0xe/0x60 [ 289.603671][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 289.632730][ T30] ? process_scheduled_works+0x976/0x1850 [ 289.651679][ T30] linkwatch_event+0xe/0x60 [ 289.656280][ T30] process_scheduled_works+0xa63/0x1850 [ 289.682270][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 289.697164][ T30] ? assign_work+0x364/0x3d0 [ 289.701870][ T30] worker_thread+0x870/0xd30 [ 289.706529][ T30] ? __kthread_parkme+0x169/0x1d0 [ 289.735442][ T30] ? __pfx_worker_thread+0x10/0x10 [ 289.754370][ T30] kthread+0x2f0/0x390 [ 289.767045][ T30] ? __pfx_worker_thread+0x10/0x10 [ 289.772343][ T30] ? __pfx_kthread+0x10/0x10 [ 289.793958][ T30] ret_from_fork+0x4b/0x80 [ 289.814175][ T30] ? __pfx_kthread+0x10/0x10 [ 289.827165][ T30] ret_from_fork_asm+0x1a/0x30 [ 289.832056][ T30] [ 289.849182][ T30] INFO: task kworker/u8:5:137 blocked for more than 145 seconds. [ 289.887086][ T30] Not tainted 6.12.0-rc2-syzkaller #0 [ 289.893064][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.936100][ T30] task:kworker/u8:5 state:D stack:22736 pid:137 tgid:137 ppid:2 flags:0x00004000 [ 289.960753][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 289.966903][ T30] Call Trace: [ 289.991591][ T30] [ 290.006999][ T30] __schedule+0x1895/0x4b30 [ 290.011628][ T30] ? __pfx___schedule+0x10/0x10 [ 290.016535][ T30] ? __pfx_lock_release+0x10/0x10 [ 290.043003][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 290.068622][ T30] ? kthread_data+0x52/0xd0 [ 290.073225][ T30] ? schedule+0x90/0x320 [ 290.096163][ T30] ? wq_worker_sleeping+0x66/0x240 [ 290.107090][ T30] ? schedule+0x90/0x320 [ 290.111507][ T30] schedule+0x14b/0x320 [ 290.115725][ T30] schedule_preempt_disabled+0x13/0x30 [ 290.132409][ T30] __mutex_lock+0x6a7/0xd70 [ 290.141123][ T30] ? mark_lock+0x9a/0x360 [ 290.145534][ T30] ? __mutex_lock+0x52a/0xd70 [ 290.153945][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 290.163827][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 290.171701][ T30] addrconf_dad_work+0xd0/0x16f0 [ 290.176730][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 290.191765][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 290.202276][ T30] ? process_scheduled_works+0x976/0x1850 [ 290.212021][ T30] process_scheduled_works+0xa63/0x1850 [ 290.222068][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 290.232534][ T30] ? assign_work+0x364/0x3d0 [ 290.242616][ T30] worker_thread+0x870/0xd30 [ 290.251614][ T30] ? __kthread_parkme+0x169/0x1d0 [ 290.256725][ T30] ? __pfx_worker_thread+0x10/0x10 [ 290.265934][ T30] kthread+0x2f0/0x390 [ 290.273942][ T30] ? __pfx_worker_thread+0x10/0x10 [ 290.283052][ T30] ? __pfx_kthread+0x10/0x10 [ 290.291590][ T30] ret_from_fork+0x4b/0x80 [ 290.296092][ T30] ? __pfx_kthread+0x10/0x10 [ 290.311243][ T30] ret_from_fork_asm+0x1a/0x30 [ 290.316143][ T30] [ 290.322274][ T30] INFO: task jbd2/sda1-8:4650 blocked for more than 145 seconds. [ 290.335806][ T30] Not tainted 6.12.0-rc2-syzkaller #0 [ 290.344567][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.363060][ T30] task:jbd2/sda1-8 state:D stack:23792 pid:4650 tgid:4650 ppid:2 flags:0x00004000 [ 290.376117][ T30] Call Trace: [ 290.384841][ T30] [ 290.390694][ T30] __schedule+0x1895/0x4b30 [ 290.395320][ T30] ? __pfx___schedule+0x10/0x10 [ 290.405460][ T30] ? __pfx_lock_release+0x10/0x10 [ 290.413305][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 290.426573][ T30] ? schedule+0x90/0x320 [ 290.434308][ T30] schedule+0x14b/0x320 [ 290.443862][ T30] io_schedule+0x8d/0x110 [ 290.451036][ T30] bit_wait_io+0x12/0xd0 [ 290.455438][ T30] __wait_on_bit+0xb0/0x2f0 [ 290.470289][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 290.475326][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 290.486333][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 290.495260][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 290.505347][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 290.514784][ T30] jbd2_journal_commit_transaction+0x3df6/0x67e0 [ 290.525223][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 290.536820][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 290.547026][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 290.553114][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 290.566249][ T30] ? __timer_delete_sync+0x15c/0x310 [ 290.571972][ T30] ? __timer_delete_sync+0x25d/0x310 [ 290.584822][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 290.591226][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 290.605985][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 290.612955][ T30] ? prepare_to_wait+0x186/0x210 [ 290.626996][ T30] ? finish_wait+0xd4/0x1e0 [ 290.631589][ T30] kjournald2+0x41c/0x7b0 [ 290.644089][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 290.650884][ T30] ? __pfx_kjournald2+0x10/0x10 [ 290.655811][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 290.671016][ T30] ? __kthread_parkme+0x169/0x1d0 [ 290.676129][ T30] ? __pfx_kjournald2+0x10/0x10 [ 290.686473][ T30] kthread+0x2f0/0x390 [ 290.693319][ T30] ? __pfx_kjournald2+0x10/0x10 [ 290.706114][ T30] ? __pfx_kthread+0x10/0x10 [ 290.711193][ T30] ret_from_fork+0x4b/0x80 [ 290.715678][ T30] ? __pfx_kthread+0x10/0x10 [ 290.729682][ T30] ret_from_fork_asm+0x1a/0x30 [ 290.734546][ T30] [ 290.744406][ T30] INFO: task dhcpcd:4901 blocked for more than 146 seconds. [ 290.753903][ T30] Not tainted 6.12.0-rc2-syzkaller #0 [ 290.766189][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.778467][ T30] task:dhcpcd state:D stack:22960 pid:4901 tgid:4901 ppid:1 flags:0x00000002 [ 290.797509][ T30] Call Trace: [ 290.800940][ T30] [ 290.803910][ T30] __schedule+0x1895/0x4b30 [ 290.815190][ T30] ? __pfx___schedule+0x10/0x10 [ 290.820474][ T30] ? __pfx_lock_release+0x10/0x10 [ 290.825569][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 290.837365][ T30] ? schedule+0x90/0x320 [ 290.843474][ T30] schedule+0x14b/0x320 [ 290.854275][ T30] schedule_preempt_disabled+0x13/0x30 [ 290.863364][ T30] __mutex_lock+0x6a7/0xd70 [ 290.873275][ T30] ? __mutex_lock+0x52a/0xd70 [ 290.882042][ T30] ? vlan_ioctl_handler+0x112/0x9d0 [ 290.892519][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 290.900370][ T30] ? __might_fault+0xc6/0x120 [ 290.905115][ T30] vlan_ioctl_handler+0x112/0x9d0 [ 290.917043][ T30] ? sock_ioctl+0x661/0x8e0 [ 290.921627][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 290.933715][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 290.939984][ T30] sock_ioctl+0x680/0x8e0 [ 290.945047][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 290.957403][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 290.962336][ T30] __se_sys_ioctl+0xf9/0x170 [ 290.975987][ T30] do_syscall_64+0xf3/0x230 [ 290.981484][ T30] ? clear_bhb_loop+0x35/0x90 [ 290.986313][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.997411][ T30] RIP: 0033:0x7fc206e20d49 [ 291.001902][ T30] RSP: 002b:00007ffd8a5eaa78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.017453][ T30] RAX: ffffffffffffffda RBX: 00005566f6d87040 RCX: 00007fc206e20d49 [ 291.025492][ T30] RDX: 00007ffd8a5eaa80 RSI: 0000000000008982 RDI: 0000000000000011 [ 291.051597][ T30] RBP: 0000000000000002 R08: 0000000000000008 R09: 0000000000000000 [ 291.062506][ T30] R10: 00007ffd8a5fb100 R11: 0000000000000246 R12: 00007ffd8a5eaa80 [ 291.075712][ T30] R13: 00007ffd8a5eab40 R14: 00005566f6d87040 R15: 00005566f6ed7300 [ 291.093966][ T30] [ 291.107500][ T30] INFO: task syz-executor:5251 blocked for more than 146 seconds. [ 291.115382][ T30] Not tainted 6.12.0-rc2-syzkaller #0 [ 291.128597][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.144759][ T30] task:syz-executor state:D stack:20704 pid:5251 tgid:5251 ppid:1 flags:0x20004006 [ 291.159585][ T30] Call Trace: [ 291.162949][ T30] [ 291.165931][ T30] __schedule+0x1895/0x4b30 [ 291.174946][ T30] ? __pfx___schedule+0x10/0x10 [ 291.182823][ T30] ? __pfx_lock_release+0x10/0x10 [ 291.193229][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 291.201856][ T30] ? schedule+0x90/0x320 [ 291.206193][ T30] schedule+0x14b/0x320 [ 291.220498][ T30] schedule_preempt_disabled+0x13/0x30 [ 291.226067][ T30] __mutex_lock+0x6a7/0xd70 [ 291.235975][ T30] ? __mutex_lock+0x52a/0xd70 [ 291.243615][ T30] ? tun_chr_close+0x3b/0x1b0 [ 291.253917][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 291.263542][ T30] ? __pfx_call_rcu+0x10/0x10 [ 291.273304][ T30] tun_chr_close+0x3b/0x1b0 [ 291.281007][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 291.286198][ T30] __fput+0x23f/0x880 [ 291.294207][ T30] task_work_run+0x24f/0x310 [ 291.302822][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 291.312141][ T30] ? __pfx_task_work_run+0x10/0x10 [ 291.323037][ T30] ? do_exit+0xa2a/0x28e0 [ 291.331386][ T30] ? kmem_cache_free+0x1a2/0x420 [ 291.336411][ T30] ? do_exit+0xa2a/0x28e0 [ 291.345140][ T30] do_exit+0xa2f/0x28e0 [ 291.352617][ T30] ? __pfx_do_exit+0x10/0x10 [ 291.362474][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 291.370680][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 291.383369][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 291.392459][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 291.402682][ T30] do_group_exit+0x207/0x2c0 [ 291.410081][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.415445][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 291.426119][ T30] get_signal+0x16a3/0x1740 [ 291.435196][ T30] ? __pfx_get_signal+0x10/0x10 [ 291.445375][ T30] ? __pfx_vfs_read+0x10/0x10 [ 291.453014][ T30] arch_do_signal_or_restart+0x96/0x860 [ 291.464231][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 291.473439][ T30] ? ksys_read+0x241/0x2b0 [ 291.482941][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 291.491452][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 291.505445][ T30] __do_fast_syscall_32+0xc4/0x110 [ 291.513365][ T30] ? exc_page_fault+0x590/0x8c0 [ 291.523300][ T30] do_fast_syscall_32+0x34/0x80 [ 291.531054][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.543037][ T30] RIP: 0023:0xf741d579 [ 291.551482][ T30] RSP: 002b:00000000f756fd80 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 291.565570][ T30] RAX: fffffffffffffe00 RBX: 00000000000000f9 RCX: 00000000f756fe54 [ 291.576305][ T30] RDX: 0000000000000024 RSI: 00000000f740bff4 RDI: 0000000000000000 [ 291.592874][ T30] RBP: 00000000f756fe54 R08: 0000000000000000 R09: 0000000000000000 [ 291.604466][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 291.617247][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.625309][ T30] [ 291.635376][ T30] INFO: task syz-executor:5343 blocked for more than 146 seconds. [ 291.643678][ T30] Not tainted 6.12.0-rc2-syzkaller #0 [ 291.659207][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.675907][ T30] task:syz-executor state:D stack:20272 pid:5343 tgid:5343 ppid:1 flags:0x20004006 [ 291.686790][ T30] Call Trace: [ 291.692531][ T30] [ 291.695516][ T30] __schedule+0x1895/0x4b30 [ 291.705870][ T30] ? __pfx___schedule+0x10/0x10 [ 291.712446][ T30] ? __pfx_lock_release+0x10/0x10 [ 291.725867][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 291.732942][ T30] ? schedule+0x90/0x320 [ 291.746631][ T30] schedule+0x14b/0x320 [ 291.751332][ T30] schedule_preempt_disabled+0x13/0x30 [ 291.756854][ T30] __mutex_lock+0x6a7/0xd70 [ 291.770135][ T30] ? __mutex_lock+0x52a/0xd70 [ 291.774888][ T30] ? tun_chr_close+0x3b/0x1b0 [ 291.784777][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 291.794488][ T30] ? __pfx_call_rcu+0x10/0x10 [ 291.803179][ T30] tun_chr_close+0x3b/0x1b0 [ 291.811593][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 291.816767][ T30] __fput+0x23f/0x880 [ 291.826035][ T30] task_work_run+0x24f/0x310 [ 291.834546][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 291.845221][ T30] ? __pfx_task_work_run+0x10/0x10 [ 291.854289][ T30] ? do_exit+0xa2a/0x28e0 [ 291.862978][ T30] ? kmem_cache_free+0x1a2/0x420 [ 291.872311][ T30] ? do_exit+0xa2a/0x28e0 [ 291.876709][ T30] do_exit+0xa2f/0x28e0 [ 291.885456][ T30] ? __pfx_do_exit+0x10/0x10 [ 291.893993][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 291.905700][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 291.915741][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 291.926046][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 291.935073][ T30] do_group_exit+0x207/0x2c0 [ 291.943690][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.952895][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 291.963443][ T30] get_signal+0x16a3/0x1740 [ 291.972368][ T30] ? __pfx_get_signal+0x10/0x10 [ 291.981097][ T30] ? __pfx_vfs_read+0x10/0x10 [ 291.985860][ T30] arch_do_signal_or_restart+0x96/0x860 [ 292.001046][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 292.010276][ T30] ? ksys_read+0x241/0x2b0 [ 292.014767][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 292.030297][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 292.035949][ T30] __do_fast_syscall_32+0xc4/0x110 [ 292.045238][ T30] ? exc_page_fault+0x590/0x8c0 [ 292.054040][ T30] do_fast_syscall_32+0x34/0x80 [ 292.070138][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.076549][ T30] RIP: 0023:0xf7fb2579 [ 292.089128][ T30] RSP: 002b:00000000f759fd80 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 292.104577][ T30] RAX: fffffffffffffe00 RBX: 00000000000000f9 RCX: 00000000f759fe54 [ 292.114235][ T30] RDX: 0000000000000024 RSI: 00000000f743bff4 RDI: 0000000000000000 [ 292.131179][ T30] RBP: 00000000f759fe54 R08: 0000000000000000 R09: 0000000000000000 [ 292.145739][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 292.157130][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 292.165200][ T30] [ 292.176174][ T30] INFO: task syz-executor:6420 blocked for more than 147 seconds. [ 292.186257][ T30] Not tainted 6.12.0-rc2-syzkaller #0 [ 292.199856][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 292.213149][ T30] task:syz-executor state:D stack:26544 pid:6420 tgid:6420 ppid:1 flags:0x20004006 [ 292.236877][ T30] Call Trace: [ 292.240303][ T30] [ 292.243283][ T30] __schedule+0x1895/0x4b30 [ 292.257023][ T30] ? __pfx___schedule+0x10/0x10 [ 292.261987][ T30] ? __pfx_lock_release+0x10/0x10 [ 292.274567][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 292.280616][ T30] ? schedule+0x90/0x320 [ 292.284927][ T30] schedule+0x14b/0x320 [ 292.297221][ T30] schedule_preempt_disabled+0x13/0x30 [ 292.302773][ T30] __mutex_lock+0x6a7/0xd70 [ 292.317487][ T30] ? __mutex_lock+0x52a/0xd70 [ 292.322260][ T30] ? register_nexthop_notifier+0x84/0x290 [ 292.334529][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 292.340065][ T30] ? __asan_memset+0x23/0x50 [ 292.344734][ T30] register_nexthop_notifier+0x84/0x290 [ 292.357003][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 292.362904][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 292.383753][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 292.396372][ T30] ? __asan_memset+0x23/0x50 [ 292.402605][ T30] ops_init+0x31e/0x590 [ 292.413231][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 292.422248][ T30] setup_net+0x287/0x9e0 [ 292.426584][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 292.440373][ T30] ? __pfx_setup_net+0x10/0x10 [ 292.445264][ T30] copy_net_ns+0x33f/0x570 [ 292.453882][ T30] create_new_namespaces+0x425/0x7b0 [ 292.463665][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 292.473594][ T30] ksys_unshare+0x57d/0xa70 [ 292.482641][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 292.493404][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 292.503991][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 292.515102][ T30] __ia32_sys_unshare+0x37/0x40 [ 292.524211][ T30] __do_fast_syscall_32+0xb4/0x110 [ 292.533350][ T30] ? exc_page_fault+0x590/0x8c0 [ 292.545136][ T30] do_fast_syscall_32+0x34/0x80 [ 292.555391][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.565737][ T30] RIP: 0023:0xf7fb7579 [ 292.573859][ T30] RSP: 002b:00000000f759ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 292.586838][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 292.602611][ T30] RDX: 00000000f743bff4 RSI: 00000000f731224b RDI: 0000000030000000 [ 292.613572][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 292.627391][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 292.635530][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 292.650641][ T30] [ 292.662141][ T30] INFO: task syz-executor:6422 blocked for more than 147 seconds. [ 292.673609][ T30] Not tainted 6.12.0-rc2-syzkaller #0 [ 292.684030][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 292.701933][ T30] task:syz-executor state:D stack:26496 pid:6422 tgid:6422 ppid:1 flags:0x20000004 [ 292.716396][ T30] Call Trace: [ 292.725449][ T30] [ 292.732276][ T30] __schedule+0x1895/0x4b30 [ 292.736880][ T30] ? __pfx___schedule+0x10/0x10 [ 292.745842][ T30] ? __pfx_lock_release+0x10/0x10 [ 292.755027][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 292.764523][ T30] ? schedule+0x90/0x320 [ 292.773166][ T30] schedule+0x14b/0x320 [ 292.786294][ T30] schedule_preempt_disabled+0x13/0x30 [ 292.795968][ T30] __mutex_lock+0x6a7/0xd70 [ 292.804480][ T30] ? __mutex_lock+0x52a/0xd70 [ 292.813390][ T30] ? register_nexthop_notifier+0x84/0x290 [ 292.823093][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 292.832094][ T30] ? __asan_memset+0x23/0x50 [ 292.836775][ T30] register_nexthop_notifier+0x84/0x290 [ 292.851470][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 292.861729][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 292.873125][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 292.882450][ T30] ? __asan_memset+0x23/0x50 [ 292.892768][ T30] ops_init+0x31e/0x590 [ 292.899751][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 292.905290][ T30] setup_net+0x287/0x9e0 [ 292.916409][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 292.924989][ T30] ? __pfx_setup_net+0x10/0x10 [ 292.934834][ T30] copy_net_ns+0x33f/0x570 [ 292.942338][ T30] create_new_namespaces+0x425/0x7b0 [ 292.952721][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 292.961246][ T30] ksys_unshare+0x57d/0xa70 [ 292.965863][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 292.977154][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 292.983571][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 292.997243][ T30] __ia32_sys_unshare+0x37/0x40 [ 293.002167][ T30] __do_fast_syscall_32+0xb4/0x110 [ 293.015494][ T30] ? exc_page_fault+0x590/0x8c0 [ 293.022286][ T30] do_fast_syscall_32+0x34/0x80 [ 293.034632][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.041373][ T30] RIP: 0023:0xf749d579 [ 293.045491][ T30] RSP: 002b:00000000f75eff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 293.056982][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 293.065019][ T30] RDX: 00000000f748bff4 RSI: 00000000f736224b RDI: 0000000030000000 [ 293.079567][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 293.094867][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 293.113978][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.130179][ T30] [ 293.140158][ T30] INFO: task syz-executor:6425 blocked for more than 148 seconds. [ 293.155896][ T30] Not tainted 6.12.0-rc2-syzkaller #0 [ 293.162338][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.176967][ T30] task:syz-executor state:D stack:26560 pid:6425 tgid:6425 ppid:1 flags:0x20004006 [ 293.197891][ T30] Call Trace: [ 293.201232][ T30] [ 293.204204][ T30] __schedule+0x1895/0x4b30 [ 293.215867][ T30] ? __pfx___schedule+0x10/0x10 [ 293.221294][ T30] ? __pfx_lock_release+0x10/0x10 [ 293.226389][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 293.237688][ T30] ? schedule+0x90/0x320 [ 293.242016][ T30] schedule+0x14b/0x320 [ 293.246224][ T30] schedule_preempt_disabled+0x13/0x30 [ 293.259994][ T30] __mutex_lock+0x6a7/0xd70 [ 293.264665][ T30] ? __mutex_lock+0x52a/0xd70 [ 293.275702][ T30] ? register_nexthop_notifier+0x84/0x290 [ 293.283081][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 293.294383][ T30] ? __asan_memset+0x23/0x50 [ 293.301153][ T30] register_nexthop_notifier+0x84/0x290 [ 293.306890][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 293.320667][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 293.334549][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 293.342717][ T30] ? __asan_memset+0x23/0x50 [ 293.353931][ T30] ops_init+0x31e/0x590 [ 293.359913][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 293.365366][ T30] setup_net+0x287/0x9e0 [ 293.376098][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 293.384962][ T30] ? __pfx_setup_net+0x10/0x10 [ 293.396405][ T30] copy_net_ns+0x33f/0x570 [ 293.403154][ T30] create_new_namespaces+0x425/0x7b0 [ 293.414975][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 293.422594][ T30] ksys_unshare+0x57d/0xa70 [ 293.434818][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 293.441576][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.454196][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 293.462999][ T30] __ia32_sys_unshare+0x37/0x40 [ 293.474265][ T30] __do_fast_syscall_32+0xb4/0x110 [ 293.481105][ T30] ? exc_page_fault+0x590/0x8c0 [ 293.486052][ T30] do_fast_syscall_32+0x34/0x80 [ 293.498641][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.505648][ T30] RIP: 0023:0xf7ff5579 [ 293.517359][ T30] RSP: 002b:00000000f75dff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 293.526597][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 293.541150][ T30] RDX: 00000000f747bff4 RSI: 00000000f735224b RDI: 0000000030000000 [ 293.553152][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 293.566362][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 293.584650][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.594361][ T30] [ 293.605469][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 293.631300][ T30] INFO: task syz-executor:6426 blocked for more than 148 seconds. [ 293.646502][ T30] Not tainted 6.12.0-rc2-syzkaller #0 [ 293.665396][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.685709][ T30] task:syz-executor state:D stack:26528 pid:6426 tgid:6426 ppid:1 flags:0x20004004 [ 293.696720][ T30] Call Trace: [ 293.707918][ T30] [ 293.710968][ T30] __schedule+0x1895/0x4b30 [ 293.715563][ T30] ? __pfx___schedule+0x10/0x10 [ 293.729105][ T30] ? __pfx_lock_release+0x10/0x10 [ 293.734218][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 293.745898][ T30] ? schedule+0x90/0x320 [ 293.753675][ T30] schedule+0x14b/0x320 [ 293.761763][ T30] schedule_preempt_disabled+0x13/0x30 [ 293.771378][ T30] __mutex_lock+0x6a7/0xd70 [ 293.776048][ T30] ? __mutex_lock+0x52a/0xd70 [ 293.784875][ T30] ? register_nexthop_notifier+0x84/0x290 [ 293.795348][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 293.805739][ T30] ? __asan_memset+0x23/0x50 [ 293.813588][ T30] register_nexthop_notifier+0x84/0x290 [ 293.827479][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 293.833374][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 293.846320][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 293.855326][ T30] ? __asan_memset+0x23/0x50 [ 293.866564][ T30] ops_init+0x31e/0x590 [ 293.872328][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 293.883964][ T30] setup_net+0x287/0x9e0 [ 293.889808][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 293.895427][ T30] ? __pfx_setup_net+0x10/0x10 [ 293.907049][ T30] copy_net_ns+0x33f/0x570 [ 293.911565][ T30] create_new_namespaces+0x425/0x7b0 [ 293.925201][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 293.931354][ T30] ksys_unshare+0x57d/0xa70 [ 293.935931][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 293.948755][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.955187][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 293.969099][ T30] __ia32_sys_unshare+0x37/0x40 [ 293.974040][ T30] __do_fast_syscall_32+0xb4/0x110 [ 293.986783][ T30] ? exc_page_fault+0x590/0x8c0 [ 293.992126][ T30] do_fast_syscall_32+0x34/0x80 [ 294.004546][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 294.011779][ T30] RIP: 0023:0xf73fd579 [ 294.016498][ T30] RSP: 002b:00000000f754ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 294.034392][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 294.043166][ T30] RDX: 00000000f73ebff4 RSI: 00000000f72c224b RDI: 0000000030000000 [ 294.057269][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 294.065304][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 294.081745][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 294.093676][ T30] [ 294.096750][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 294.122013][ T30] [ 294.122013][ T30] Showing all locks held in the system: [ 294.133686][ T30] 1 lock held by pool_workqueue_/3: [ 294.154100][ T30] #0: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 294.172697][ T30] 5 locks held by kworker/u8:0/11: [ 294.196720][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 294.215177][ T30] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 294.237017][ T30] #2: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 294.246763][ T30] #3: ffff88805f8e9428 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_destruct+0x110/0x2e0 [ 294.266212][ T30] #4: ffffffff8e93d240 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 294.276614][ T30] 3 locks held by kworker/1:0/25: [ 294.286976][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 294.307068][ T30] #1: ffffc900001f7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 294.323823][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 294.340509][ T30] 1 lock held by khungtaskd/30: [ 294.345413][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 294.359606][ T30] 3 locks held by kworker/u8:3/52: [ 294.364771][ T30] #0: ffff88802dad7948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 294.386347][ T30] #1: ffffc90000bd7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 294.406082][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 294.416073][ T30] 3 locks held by kworker/u8:5/137: [ 294.426978][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 294.446886][ T30] #1: ffffc90002d8fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 294.466189][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 294.475694][ T30] 6 locks held by kworker/1:2/2634: [ 294.490250][ T30] 1 lock held by dhcpcd/4902: [ 294.494987][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 294.509842][ T30] 2 locks held by getty/4985: [ 294.514758][ T30] #0: ffff88814c1c10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 294.532782][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 294.546781][ T30] 1 lock held by syz-executor/5251: [ 294.558269][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 294.574135][ T30] 2 locks held by syz-executor/5343: [ 294.581159][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 294.597766][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 294.616881][ T30] 7 locks held by syz-executor/6259: [ 294.624758][ T30] #0: ffff888032bf6420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 294.641795][ T30] #1: ffff88802a7a7488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 294.654858][ T30] #2: ffff888027223968 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 294.671287][ T30] #3: ffffffff8f56fda8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 294.684978][ T30] #4: ffff88806ea180e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 294.700900][ T30] #5: ffff88806ea19250 (&devlink->lock_key#5){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 294.716697][ T30] #6: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 294.730799][ T30] 2 locks held by syz-executor/6420: [ 294.736845][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 294.753345][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 294.771262][ T30] 2 locks held by syz-executor/6422: [ 294.776606][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 294.792516][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 294.805963][ T30] 2 locks held by syz-executor/6425: [ 294.816368][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 294.834317][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 294.846314][ T30] 2 locks held by syz-executor/6426: [ 294.856669][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 294.872313][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 294.889014][ T30] 2 locks held by syz-executor/6431: [ 294.894359][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 294.907487][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 294.925287][ T30] 2 locks held by syz-executor/6439: [ 294.931069][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 294.951436][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 294.965681][ T30] 2 locks held by syz-executor/6444: [ 294.974973][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 294.992125][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 295.006173][ T30] 2 locks held by syz-executor/6446: [ 295.017465][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 295.034606][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 295.045699][ T30] 2 locks held by syz-executor/6447: [ 295.058904][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 295.073808][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 295.092904][ T30] 2 locks held by syz-executor/6452: [ 295.100940][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 295.115535][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 295.128612][ T30] 2 locks held by syz-executor/6460: [ 295.133997][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 295.154663][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 295.174104][ T30] 2 locks held by syz-executor/6465: [ 295.189439][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 295.206314][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 295.216900][ T30] 2 locks held by syz-executor/6466: [ 295.229666][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 295.244011][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 295.259622][ T30] 2 locks held by syz-executor/6468: [ 295.264973][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 295.285521][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 295.296272][ T30] [ 295.307858][ T30] ============================================= [ 295.307858][ T30] [ 295.316324][ T30] NMI backtrace for cpu 0 [ 295.320694][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller #0 [ 295.329511][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 295.339602][ T30] Call Trace: [ 295.342910][ T30] [ 295.345867][ T30] dump_stack_lvl+0x241/0x360 [ 295.350593][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.355829][ T30] ? __pfx__printk+0x10/0x10 [ 295.360481][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 295.365469][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 295.370986][ T30] ? _printk+0xd5/0x120 [ 295.375201][ T30] ? __pfx__printk+0x10/0x10 [ 295.379843][ T30] ? __wake_up_klogd+0xcc/0x110 [ 295.384743][ T30] ? __pfx__printk+0x10/0x10 [ 295.389392][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 295.394465][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 295.400492][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 295.406519][ T30] watchdog+0xff4/0x1040 [ 295.410810][ T30] ? watchdog+0x1ea/0x1040 [ 295.415276][ T30] ? __pfx_watchdog+0x10/0x10 [ 295.420003][ T30] kthread+0x2f0/0x390 [ 295.424122][ T30] ? __pfx_watchdog+0x10/0x10 [ 295.428847][ T30] ? __pfx_kthread+0x10/0x10 [ 295.433490][ T30] ret_from_fork+0x4b/0x80 [ 295.437965][ T30] ? __pfx_kthread+0x10/0x10 [ 295.442601][ T30] ret_from_fork_asm+0x1a/0x30 [ 295.447444][ T30] [ 295.451063][ T30] Sending NMI from CPU 0 to CPUs 1: [ 295.456336][ C1] NMI backtrace for cpu 1 [ 295.456351][ C1] CPU: 1 UID: 0 PID: 2634 Comm: kworker/1:2 Not tainted 6.12.0-rc2-syzkaller #0 [ 295.456372][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 295.456385][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 295.456415][ C1] RIP: 0010:cache_from_obj+0x2/0x120 [ 295.456444][ C1] Code: 08 0f 42 c8 4c 8d 64 0b 40 e9 3d fe ff ff 90 0f 0b 90 e9 fe fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 <41> 56 53 49 89 ff 66 90 4c 89 fb 48 89 d8 5b 41 5e 41 5f c3 cc cc [ 295.456459][ C1] RSP: 0018:ffffc90000a18be0 EFLAGS: 00000286 [ 295.456474][ C1] RAX: fc1dc8cf1b7ed900 RBX: ffff8880350d1c00 RCX: ffff88802d92bc00 [ 295.456489][ C1] RDX: 0000000000000100 RSI: ffff8880350d1c00 RDI: ffff8881436a6c80 [ 295.456502][ C1] RBP: 00000000000026ef R08: ffffffff89960c73 R09: 1ffff1100c1aa0c3 [ 295.456515][ C1] R10: dffffc0000000000 R11: ffffed100c1aa0c4 R12: ffff8880350d1c00 [ 295.456529][ C1] R13: dffffc0000000000 R14: 1ffff11006a1a387 R15: 1ffff11006a1a381 [ 295.456543][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 295.456559][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.456572][ C1] CR2: 000000000c3b19ef CR3: 000000000e734000 CR4: 00000000003526f0 [ 295.456588][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 295.456599][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 295.456611][ C1] Call Trace: [ 295.456616][ C1] [ 295.456624][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 295.456646][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 295.456676][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 295.456697][ C1] ? nmi_handle+0x2a/0x5a0 [ 295.456725][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 295.456751][ C1] ? nmi_handle+0x14f/0x5a0 [ 295.456769][ C1] ? nmi_handle+0x2a/0x5a0 [ 295.456789][ C1] ? cache_from_obj+0x2/0x120 [ 295.456814][ C1] ? default_do_nmi+0x63/0x160 [ 295.456837][ C1] ? exc_nmi+0x123/0x1f0 [ 295.456858][ C1] ? end_repeat_nmi+0xf/0x53 [ 295.456878][ C1] ? dst_destroy+0x263/0x460 [ 295.456898][ C1] ? cache_from_obj+0x2/0x120 [ 295.456929][ C1] ? cache_from_obj+0x2/0x120 [ 295.456962][ C1] ? cache_from_obj+0x2/0x120 [ 295.456989][ C1] [ 295.456995][ C1] [ 295.457003][ C1] kmem_cache_free+0x28/0x420 [ 295.457034][ C1] dst_destroy+0x2ac/0x460 [ 295.457054][ C1] ? rcu_core+0xa37/0x17a0 [ 295.457073][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 295.457093][ C1] rcu_core+0xaaa/0x17a0 [ 295.457118][ C1] ? __pfx_rcu_core+0x10/0x10 [ 295.457154][ C1] handle_softirqs+0x2c5/0x980 [ 295.457181][ C1] ? do_softirq+0x11b/0x1e0 [ 295.457207][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 295.457236][ C1] do_softirq+0x11b/0x1e0 [ 295.457259][ C1] [ 295.457265][ C1] [ 295.457271][ C1] ? __pfx_do_softirq+0x10/0x10 [ 295.457295][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 295.457325][ C1] ? rcu_is_watching+0x15/0xb0 [ 295.457347][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 295.457372][ C1] ? wg_socket_send_skb_to_peer+0x176/0x1d0 [ 295.457398][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 295.457423][ C1] ? mod_peer_timer+0x21/0x260 [ 295.457448][ C1] wg_socket_send_skb_to_peer+0x176/0x1d0 [ 295.457476][ C1] wg_packet_tx_worker+0x1bf/0x810 [ 295.457502][ C1] ? process_scheduled_works+0x976/0x1850 [ 295.457529][ C1] process_scheduled_works+0xa63/0x1850 [ 295.457568][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 295.457598][ C1] ? assign_work+0x364/0x3d0 [ 295.457624][ C1] worker_thread+0x870/0xd30 [ 295.457657][ C1] ? __kthread_parkme+0x169/0x1d0 [ 295.457686][ C1] ? __pfx_worker_thread+0x10/0x10 [ 295.457713][ C1] kthread+0x2f0/0x390 [ 295.457730][ C1] ? __pfx_worker_thread+0x10/0x10 [ 295.457755][ C1] ? __pfx_kthread+0x10/0x10 [ 295.457773][ C1] ret_from_fork+0x4b/0x80 [ 295.457800][ C1] ? __pfx_kthread+0x10/0x10 [ 295.457818][ C1] ret_from_fork_asm+0x1a/0x30 [ 295.457851][ C1] [ 295.864472][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 295.871559][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller #0 [ 295.880362][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 295.890456][ T30] Call Trace: [ 295.893770][ T30] [ 295.896727][ T30] dump_stack_lvl+0x241/0x360 [ 295.901457][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.906741][ T30] ? __pfx__printk+0x10/0x10 [ 295.911389][ T30] ? vscnprintf+0x5d/0x90 [ 295.915784][ T30] panic+0x349/0x880 [ 295.919731][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 295.925938][ T30] ? __pfx_panic+0x10/0x10 [ 295.930397][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 295.935814][ T30] ? __irq_work_queue_local+0x137/0x410 [ 295.941492][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 295.946904][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 295.953097][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 295.959382][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 295.965584][ T30] watchdog+0x1033/0x1040 [ 295.969958][ T30] ? watchdog+0x1ea/0x1040 [ 295.974428][ T30] ? __pfx_watchdog+0x10/0x10 [ 295.979153][ T30] kthread+0x2f0/0x390 [ 295.983264][ T30] ? __pfx_watchdog+0x10/0x10 [ 295.987989][ T30] ? __pfx_kthread+0x10/0x10 [ 295.992706][ T30] ret_from_fork+0x4b/0x80 [ 295.997177][ T30] ? __pfx_kthread+0x10/0x10 [ 296.001816][ T30] ret_from_fork_asm+0x1a/0x30 [ 296.006641][ T30] [ 296.010017][ T30] Kernel Offset: disabled [ 296.014436][ T30] Rebooting in 86400 seconds..