last executing test programs: 35.11413029s ago: executing program 0 (id=6553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, 0x0, 0xc014) 35.033111731s ago: executing program 0 (id=6554): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x2, r3}) sendmsg$NL80211_CMD_SET_PMK(r2, 0x0, 0x8001) 35.02058739s ago: executing program 0 (id=6555): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000540)="bd1f59", 0x3}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 34.969723381s ago: executing program 0 (id=6556): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x2e, 0x10, 0x1}}}}}}, 0x0) 34.881548259s ago: executing program 0 (id=6560): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000500)={0x11, 0x5, r3, 0x1, 0x3, 0x6, @broadcast}, 0x14) bind$packet(r1, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r3, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x11, r3, 0x1, 0xfe, 0x6, @local}, 0x14) syz_emit_ethernet(0x11, 0x0, 0x0) 34.775314503s ago: executing program 4 (id=6563): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 34.774648068s ago: executing program 0 (id=6564): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 34.640883163s ago: executing program 4 (id=6566): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x3, 0x84) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r4, 0x1}, {0xffffffffffffffff, 0x502}, {r1, 0x4}], 0x3, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000080)={'wg1\x00'}) epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff00", 0x1a) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x200000000000002c, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x200005, 0xce, &(0x7f0000000740)=""/206, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x6}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xc73, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffdffff, 0x7fffffff}, 0x0, 0x0) accept(r0, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34ab39363bd715c73cc792459f278c104c6d3b5cd31e56f902a5aa3f1d62e44ebb2a9fac42322544d5d706f4e59dc278eb749b92c8f43b8514ec1d85d3d85938a0a3f0dd51226594c6fac785781462482ff740ef85586d9fce3c0d192446ae8c88eee61229446450c7df7a9253c7be6be908ed49f2594993e5220537786640a0cb02c1de74056d6b7360ed682bfc84c31c863f38decbcf3567816bf63758878b4788126a5d639f9f31574fcc78c56fe774062f687f0521f", 0x7b47f8bcda0e7418}], 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 34.539571082s ago: executing program 2 (id=6571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x2e, 0x10, 0x1}}}}}}, 0x0) 34.48733451s ago: executing program 2 (id=6572): unshare(0x20000400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) 34.421734314s ago: executing program 2 (id=6575): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) setresuid(0x0, 0xee00, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 33.761206322s ago: executing program 4 (id=6578): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x2, r3}) sendmsg$NL80211_CMD_SET_PMK(r2, 0x0, 0x8001) 33.447011185s ago: executing program 1 (id=6580): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}}, 0x40440c0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="d6a365dd00ca"}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x880, 0x0, 0x0) 33.376823119s ago: executing program 1 (id=6581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x0, &(0x7f0000001300)) 33.133813073s ago: executing program 3 (id=6584): socket$netlink(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0x2}, 0x18) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) 33.130360809s ago: executing program 3 (id=6585): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x6, 0x5, 0x101, 0x200}}) 33.112502866s ago: executing program 1 (id=6586): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000001000005"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) 32.953539554s ago: executing program 3 (id=6587): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000240)="ff02040000b5ffffffffffff", 0xc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private2, 0xae3e}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0xb00) 32.953414131s ago: executing program 1 (id=6588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 32.92023424s ago: executing program 4 (id=6589): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r0}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x1}, 0x10}}, 0xd209f6d814827b13) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48000) recvmmsg(0xffffffffffffffff, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000001100)=""/246, 0xf6}], 0x1}, 0x7fffffff}], 0x2, 0x10023, 0x0) 32.891170341s ago: executing program 1 (id=6590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x6}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xfc}}, 0x0) 32.833312075s ago: executing program 3 (id=6591): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000580), 0x109000, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) 32.805894605s ago: executing program 4 (id=6592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 32.792558377s ago: executing program 1 (id=6593): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200407f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4503cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500000000", 0x3c}, {&(0x7f0000000e80)="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", 0x119}, {&(0x7f00000002c0)="641a6a2b863c0dd89801925ab48c844221841a87729aca4f2dd9194838b58523947f720c0ecddddb8e618e16ea418060862fdb55f8799bf9c3ecf3812b886138dc5e474541dc531f94fb9c624173cee8b8e3c30aee406b06e859075700000000bdd2bd8853ecedf6056e713bfa99afecaa4a5228f090006692a76749a831a000"/137, 0x89}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c3506", 0x43}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x149}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001e00)="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", 0x401}], 0x1}}], 0x3, 0x2090) 32.767279716s ago: executing program 2 (id=6594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x2e, 0x10, 0x1}}}}}}, 0x0) 32.750428052s ago: executing program 3 (id=6595): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="c401000010000700000000000000000020010000000000000000000000000002640101010000000000000000000000004e2400004e210000000000002f000000", @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b0000000000000000000000000000000000000100000000000000000000000000000028010000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000600fdffffff0104000000000000000000000a0005003400000000000000d30002"], 0x1c4}}, 0x0) 32.592715188s ago: executing program 2 (id=6596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x0, &(0x7f0000001300)) 32.579256746s ago: executing program 3 (id=6597): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, 0x0, 0x1000, {0x2, 0xff, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x3, 0x8}, {0xfff1, 0xa}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) 32.579065351s ago: executing program 4 (id=6598): r0 = memfd_create(&(0x7f0000000140)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x04f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[A\x00\x80\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g`\xc2L\xed\xdc\xc5\rPe\xaa@wu\xe5\xa7\x1aM\x1f\xb43\n\xbb\x02J\xce_\xcc\x13?\x8a\xc2\x18u\xf8H\xd1@\x8aO\xddA^\xc2\x15\xbe\"\xfb\x81\xb7\xf2\f\xae\x83\x0era\x9c9\xdc\xa4T\x03\x15\xeda\x1cW\x84O9\xbe\x9ee\x05\xaa\xd1\xd4\xe39\xaa\\\x9d\xa9\x02\xbct\xca\xcd\xee\x8e\xd4p\xa1G\xfap\xad\xff\x83\xecsd\x13)\xdc\xc2V\x01\xaer~F\x9e9+Z\xfch\xb3\xf8 rejected, failed to enable media [ 611.240715][T20648] bridge_slave_0: left allmulticast mode [ 611.263410][T20648] bridge_slave_0: left promiscuous mode [ 611.272597][T20648] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.303711][T20648] bridge_slave_1: left allmulticast mode [ 611.313566][T20648] bridge_slave_1: left promiscuous mode [ 611.321034][T20648] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.331842][T20648] bond0: (slave bond_slave_0): Releasing backup interface [ 611.344546][T20648] bond0: (slave bond_slave_1): Releasing backup interface [ 611.397649][T20648] team0: Port device team_slave_0 removed [ 611.426752][T20648] team0: Port device team_slave_1 removed [ 611.432964][T20648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.444395][T20666] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 611.453197][T20648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.464364][T20666] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 611.487610][T20648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.496008][T20648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.518341][T20648] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 611.746655][ T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 611.906632][ T10] usb 4-1: device descriptor read/64, error -71 [ 611.991908][T20698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5497'. [ 612.146656][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 612.332641][ T10] usb 4-1: device descriptor read/64, error -71 [ 612.414684][T20718] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5505'. [ 612.497518][ T10] usb usb4-port1: attempt power cycle [ 613.049481][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 613.087271][ T10] usb 4-1: device descriptor read/8, error -71 [ 613.366733][ T10] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 613.399353][ T10] usb 4-1: device descriptor read/8, error -71 [ 613.488345][T20733] random: crng reseeded on system resumption [ 613.519469][ T10] usb usb4-port1: unable to enumerate USB device [ 615.264041][T20756] vivid-003: disconnect [ 615.392921][T20754] vivid-003: reconnect [ 615.860034][T20771] syzkaller0: entered promiscuous mode [ 615.866470][T20771] syzkaller0: entered allmulticast mode [ 616.224124][T20778] binder: BINDER_SET_CONTEXT_MGR already set [ 616.260994][T20778] binder: 20777:20778 ioctl 4018620d 200000000040 returned -16 [ 617.033942][T20797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5522'. [ 617.043094][T20797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5522'. [ 617.116698][ T5906] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 617.211243][ T10] IPVS: starting estimator thread 0... [ 617.246876][ T5906] usb 4-1: device descriptor read/64, error -71 [ 617.376676][T20802] IPVS: using max 57 ests per chain, 136800 per kthread [ 617.417506][ T5825] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 617.576694][ T5906] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 617.651229][T20816] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5530'. [ 617.667665][T20816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5530'. [ 617.726935][ T5906] usb 4-1: device descriptor read/64, error -71 [ 617.837248][ T5906] usb usb4-port1: attempt power cycle [ 618.246659][ T5911] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 618.256954][ T5906] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 618.303454][ T5906] usb 4-1: device descriptor read/8, error -71 [ 618.436728][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 618.444458][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 618.459685][ T5911] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 618.523684][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.539336][ T5911] usb 3-1: Product: syz [ 618.543813][ T5911] usb 3-1: Manufacturer: syz [ 618.548939][ T5911] usb 3-1: SerialNumber: syz [ 618.556703][ T5906] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 618.565406][ T5911] usb 3-1: config 0 descriptor?? [ 618.580413][ T5906] usb 4-1: device descriptor read/8, error -71 [ 618.585190][ T5911] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 618.596281][ T5911] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 618.697570][ T5906] usb usb4-port1: unable to enumerate USB device [ 619.031524][T20843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5538'. [ 619.040702][T20843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5538'. [ 619.055306][T20843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5538'. [ 619.179225][ T5911] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 619.344053][T20852] syzkaller0: entered promiscuous mode [ 619.349788][T20852] syzkaller0: entered allmulticast mode [ 619.601735][ T5911] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 619.616711][ T5911] em28xx 3-1:0.0: board has no eeprom [ 619.699658][ T5911] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 619.786736][ T5911] em28xx 3-1:0.0: dvb set to bulk mode. [ 619.792384][ T5910] em28xx 3-1:0.0: Binding DVB extension [ 620.240220][ T5906] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 620.246971][ T5911] usb 3-1: USB disconnect, device number 66 [ 620.255066][ T5911] em28xx 3-1:0.0: Disconnecting em28xx [ 620.295551][ T5910] em28xx 3-1:0.0: Registering input extension [ 620.314390][ T5911] em28xx 3-1:0.0: Closing input extension [ 620.352315][T20882] binder: BINDER_SET_CONTEXT_MGR already set [ 620.358455][T20882] binder: 20881:20882 ioctl 4018620d 200000000040 returned -16 [ 620.424761][ T5906] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 620.455395][ T5911] em28xx 3-1:0.0: Freeing device [ 620.464001][ T5906] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 620.520647][ T5906] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 620.565095][ T5906] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 620.592534][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.606680][ T5906] usb 4-1: Product: syz [ 620.616676][ T5906] usb 4-1: Manufacturer: syz [ 620.621620][ T5906] usb 4-1: SerialNumber: syz [ 620.648199][ T5906] hub 4-1:1.0: bad descriptor, ignoring hub [ 620.658151][ T5906] hub 4-1:1.0: probe with driver hub failed with error -5 [ 620.851123][ T5906] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 75 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 620.892487][T20866] syz.4.5542 (20866): drop_caches: 2 [ 621.368270][T20917] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 621.375072][T20917] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 621.701146][T20921] netlink: set zone limit has 4 unknown bytes [ 621.758486][T20871] usb 4-1: reset high-speed USB device number 75 using dummy_hcd [ 621.964019][T20871] usb 4-1: device firmware changed [ 621.971392][T15054] usb 4-1: USB disconnect, device number 75 [ 621.999936][T15054] usblp0: removed [ 622.167273][T15054] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 622.318000][T15054] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 622.348913][T15054] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 622.378037][T15054] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 622.429658][T15054] usb 4-1: string descriptor 0 read error: -22 [ 622.436974][T15054] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 622.465088][T15054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.510819][T15054] hub 4-1:1.0: bad descriptor, ignoring hub [ 622.533143][T15054] hub 4-1:1.0: probe with driver hub failed with error -5 [ 622.718269][T15054] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 76 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 622.773728][T15054] usb 4-1: USB disconnect, device number 76 [ 622.808741][ T5911] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 622.809391][T15054] usblp0: removed [ 622.995873][ T5911] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 623.004766][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 623.017603][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 623.049972][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 623.061708][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 623.173186][ T5911] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 623.182677][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.221425][ T5911] usb 3-1: config 0 descriptor?? [ 623.237322][T20937] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 623.618089][T20967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5556'. [ 623.636743][T20967] netlink: 'syz.3.5556': attribute type 7 has an invalid length. [ 623.649761][T20967] netlink: 'syz.3.5556': attribute type 8 has an invalid length. [ 623.670452][ T5911] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 623.682800][ T5911] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 623.706989][T20967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5556'. [ 623.736118][ T5911] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 623.743917][ T5911] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 623.752654][ T5911] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 623.761999][ T5911] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 623.805979][ T5911] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 623.813741][ T5911] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 623.824891][ T5911] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 623.838983][ T5911] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 623.880578][ T5911] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 623.909043][ T5911] usb 3-1: USB disconnect, device number 67 [ 624.166489][T20974] fido_id[20974]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 624.183281][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.184889][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.403459][T20953] bridge0: port 4(erspan0) entered blocking state [ 625.415342][T20953] bridge0: port 4(erspan0) entered disabled state [ 625.448968][T20953] erspan0: entered allmulticast mode [ 625.456810][T20953] erspan0: entered promiscuous mode [ 625.462454][T20953] bridge0: port 4(erspan0) entered blocking state [ 625.468999][T20953] bridge0: port 4(erspan0) entered forwarding state [ 625.755369][ T5911] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 625.886636][ T5871] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 625.902739][T21017] CUSE: info not properly terminated [ 625.915552][T21017] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5562'. [ 626.036844][ T5911] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 626.106745][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 626.113111][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.136125][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.185718][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 626.206673][ T5911] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 626.224494][ T5871] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 626.266724][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.307249][ T5871] usb 1-1: config 0 descriptor?? [ 626.371738][ T5911] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 626.381299][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.436689][ T5911] usb 4-1: Product: syz [ 626.448658][ T5911] usb 4-1: Manufacturer: syz [ 626.521118][ T5911] usb 4-1: SerialNumber: syz [ 626.579323][ T5911] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 626.661208][ T5910] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 626.743291][ T5871] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0033/input/input46 [ 626.895322][ T5871] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0033/input/input47 [ 626.978127][ T887] usb 4-1: USB disconnect, device number 77 [ 627.117152][ T5871] kye 0003:0458:5011.0033: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 627.206622][ T5871] usb 1-1: USB disconnect, device number 48 [ 627.266350][ T30] audit: type=1326 audit(1772513362.285:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21050 comm="syz.2.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645a99c799 code=0x7ffc0000 [ 627.412575][ T30] audit: type=1326 audit(1772513362.295:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21050 comm="syz.2.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f645a99c42b code=0x7ffc0000 [ 627.435471][T21065] fido_id[21065]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 627.435847][ T30] audit: type=1326 audit(1772513362.295:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21050 comm="syz.2.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f645a99c42b code=0x7ffc0000 [ 627.652540][ T30] audit: type=1326 audit(1772513362.295:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21050 comm="syz.2.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f645a99c42b code=0x7ffc0000 [ 627.696659][ T5910] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 627.716127][ T5910] ath9k_htc: Failed to initialize the device [ 627.729655][ T30] audit: type=1326 audit(1772513362.295:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21050 comm="syz.2.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f645a99c42b code=0x7ffc0000 [ 627.735213][ T887] usb 4-1: ath9k_htc: USB layer deinitialized [ 627.862019][ T30] audit: type=1326 audit(1772513362.295:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21050 comm="syz.2.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f645a99c42b code=0x7ffc0000 [ 628.297902][ T30] audit: type=1326 audit(1772513362.295:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21050 comm="syz.2.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f645a99c42b code=0x7ffc0000 [ 628.357611][ T30] audit: type=1326 audit(1772513362.295:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21050 comm="syz.2.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f645a99c42b code=0x7ffc0000 [ 628.484433][ T30] audit: type=1326 audit(1772513362.295:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21050 comm="syz.2.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f645a99c42b code=0x7ffc0000 [ 628.538050][ T30] audit: type=1326 audit(1772513362.295:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21050 comm="syz.2.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f645a99c42b code=0x7ffc0000 [ 629.067006][T21125] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5579'. [ 629.106937][T21125] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5579'. [ 629.761570][T21149] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5587'. [ 629.971776][T21155] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5589'. [ 630.690116][T21166] CUSE: info not properly terminated [ 630.787555][T21164] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5590'. [ 630.860391][T21164] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5590'. [ 630.955960][T21174] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5592'. [ 630.970238][T21174] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5592'. [ 631.177065][ T887] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 631.267608][T21123] syz.0.5574 (21123): drop_caches: 2 [ 631.310513][ T5906] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 631.349767][ T887] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 631.368647][ T887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.403991][ T887] usb 3-1: Product: syz [ 631.408297][ T887] usb 3-1: Manufacturer: syz [ 631.412905][ T887] usb 3-1: SerialNumber: syz [ 631.475878][ T887] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 631.485258][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 631.499547][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 631.512395][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 631.544551][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 631.604831][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 631.663869][ T5906] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 631.676252][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.694737][ T5906] usb 2-1: Product: syz [ 631.709215][ T5906] usb 2-1: Manufacturer: syz [ 631.724022][ T5906] usb 2-1: SerialNumber: syz [ 631.770534][ T5906] usb 2-1: config 0 descriptor?? [ 631.887059][ T887] usb 3-1: USB disconnect, device number 68 [ 631.955572][ T5906] rc_core: IR keymap rc-streamzap not found [ 631.973694][ T5906] Registered IR keymap rc-empty [ 632.056917][ T5906] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 632.097213][ T5906] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input48 [ 632.164302][ T5906] usb 2-1: USB disconnect, device number 59 [ 632.567290][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 632.585255][ T10] ath9k_htc: Failed to initialize the device [ 632.646429][ T887] usb 3-1: ath9k_htc: USB layer deinitialized [ 632.835867][T21241] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5600'. [ 633.036628][ T5910] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 633.121270][T21253] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5603'. [ 633.189466][ T5910] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 633.204435][ T5910] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 633.224706][ T5910] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 633.255286][ T5910] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 633.270234][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.286511][ T5910] usb 2-1: Product: syz [ 633.295511][ T5910] usb 2-1: Manufacturer: syz [ 633.305178][ T5910] usb 2-1: SerialNumber: syz [ 633.324092][ T5910] hub 2-1:1.0: bad descriptor, ignoring hub [ 633.336752][ T5910] hub 2-1:1.0: probe with driver hub failed with error -5 [ 633.524594][ T5910] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 633.558784][T21268] syzkaller0: entered promiscuous mode [ 633.587337][T21268] syzkaller0: entered allmulticast mode [ 633.873722][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 633.873741][ T30] audit: type=1326 audit(1772513368.945:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21281 comm="syz.2.5611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f645a996517 code=0x7ffc0000 [ 633.929907][ T30] audit: type=1326 audit(1772513368.985:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21281 comm="syz.2.5611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f645a93db19 code=0x7ffc0000 [ 633.953036][ T30] audit: type=1326 audit(1772513368.985:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21281 comm="syz.2.5611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f645a996517 code=0x7ffc0000 [ 633.986704][ T30] audit: type=1326 audit(1772513368.985:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21281 comm="syz.2.5611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f645a93db19 code=0x7ffc0000 [ 634.025248][ T30] audit: type=1326 audit(1772513368.985:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21281 comm="syz.2.5611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f645a996517 code=0x7ffc0000 [ 634.067883][ T30] audit: type=1326 audit(1772513368.985:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21281 comm="syz.2.5611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f645a93db19 code=0x7ffc0000 [ 634.101543][ T30] audit: type=1326 audit(1772513368.985:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21281 comm="syz.2.5611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f645a996517 code=0x7ffc0000 [ 634.117350][T21297] syzkaller0: entered promiscuous mode [ 634.127015][ T30] audit: type=1326 audit(1772513368.985:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21281 comm="syz.2.5611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f645a93db19 code=0x7ffc0000 [ 634.153828][ T30] audit: type=1326 audit(1772513368.985:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21281 comm="syz.2.5611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f645a996517 code=0x7ffc0000 [ 634.156666][T21297] syzkaller0: entered allmulticast mode [ 634.182550][ T30] audit: type=1326 audit(1772513368.985:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21281 comm="syz.2.5611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f645a93db19 code=0x7ffc0000 [ 634.744213][T21328] __nla_validate_parse: 3 callbacks suppressed [ 634.744231][T21328] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5625'. [ 634.804427][T21328] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5625'. [ 634.965060][T21339] syzkaller0: entered promiscuous mode [ 634.981784][T21339] syzkaller0: entered allmulticast mode [ 635.086647][ T10] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 635.248474][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 635.259493][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 635.275033][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 635.309149][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 635.318876][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.328369][ T10] usb 4-1: Product: syz [ 635.335747][ T10] usb 4-1: Manufacturer: syz [ 635.346019][ T10] usb 4-1: SerialNumber: syz [ 635.368524][ T10] hub 4-1:1.0: bad descriptor, ignoring hub [ 635.374520][ T10] hub 4-1:1.0: probe with driver hub failed with error -5 [ 636.077920][T21368] binder: 21367:21368 ioctl 4018620d 0 returned -22 [ 636.254852][T21374] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5637'. [ 636.425781][T21374] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5637'. [ 637.039131][ T887] usb 2-1: USB disconnect, device number 60 [ 637.050490][ T10] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 78 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 637.068394][ T887] usblp0: removed [ 637.120992][ T10] usb 4-1: USB disconnect, device number 78 [ 637.129875][ T10] usblp1: removed [ 637.679720][T21442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5650'. [ 637.694313][T21442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5650'. [ 638.309603][T21460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5656'. [ 638.466684][T21460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5656'. [ 638.475749][T21460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5656'. [ 638.669657][T21469] syzkaller0: entered promiscuous mode [ 638.680810][T21469] syzkaller0: entered allmulticast mode [ 638.743119][ T5825] Bluetooth: hci2: Unable to find connection with handle 0x00c9 [ 639.009737][ T5825] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 639.535707][T21503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5667'. [ 640.044921][T21508] bridge0: port 3(gretap0) entered blocking state [ 640.052395][T21508] bridge0: port 3(gretap0) entered disabled state [ 640.077350][T21508] gretap0: entered allmulticast mode [ 640.088045][T21508] gretap0: entered promiscuous mode [ 640.093956][T21508] bridge0: port 3(gretap0) entered blocking state [ 640.100468][T21508] bridge0: port 3(gretap0) entered forwarding state [ 640.194340][T21522] __nla_validate_parse: 2 callbacks suppressed [ 640.194372][T21522] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5670'. [ 640.338102][T21528] binder_alloc: 21527: binder_alloc_buf, no vma [ 640.969272][T21552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5680'. [ 640.978414][T21552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5680'. [ 641.012339][T21552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5680'. [ 641.963339][T21570] binder: BINDER_SET_CONTEXT_MGR already set [ 641.969390][T21570] binder: 21569:21570 ioctl 4018620d 200000000040 returned -16 [ 642.270491][ T30] kauditd_printk_skb: 4253 callbacks suppressed [ 642.270509][ T30] audit: type=1326 audit(1772513377.345:5044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21578 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ba59c799 code=0x7ffc0000 [ 642.351176][ T30] audit: type=1326 audit(1772513377.375:5045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21578 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7fe6ba59c799 code=0x7ffc0000 [ 642.382954][T21585] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5688'. [ 642.402419][ T30] audit: type=1326 audit(1772513377.385:5046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21578 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ba59c799 code=0x7ffc0000 [ 642.427451][T21584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5691'. [ 642.465832][T21579] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5688'. [ 642.469709][T21584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5691'. [ 642.494218][ T30] audit: type=1326 audit(1772513377.385:5047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21578 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ba59c799 code=0x7ffc0000 [ 642.536680][ T30] audit: type=1326 audit(1772513377.385:5048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21578 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe6ba59c799 code=0x7ffc0000 [ 642.537593][T21575] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5688'. [ 642.566703][T21584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5691'. [ 642.606880][ T30] audit: type=1326 audit(1772513377.385:5049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21578 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ba59c799 code=0x7ffc0000 [ 642.650111][ T30] audit: type=1326 audit(1772513377.385:5050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21578 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ba59c799 code=0x7ffc0000 [ 642.706645][ T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 642.714385][ T30] audit: type=1326 audit(1772513377.385:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21578 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fe6ba59c799 code=0x7ffc0000 [ 642.766633][ T30] audit: type=1326 audit(1772513377.385:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21578 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ba59c799 code=0x7ffc0000 [ 642.827610][ T30] audit: type=1326 audit(1772513377.385:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21578 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe6ba59c799 code=0x7ffc0000 [ 642.896660][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.917648][ T10] usb 3-1: config 0 has no interfaces? [ 642.933182][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 642.946415][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.954781][ T10] usb 3-1: Product: syz [ 642.962007][ T10] usb 3-1: Manufacturer: syz [ 642.967554][ T10] usb 3-1: SerialNumber: syz [ 642.985182][ T10] usb 3-1: config 0 descriptor?? [ 642.990026][T21604] binder_alloc: 21602: binder_alloc_buf, no vma [ 643.005717][T21608] random: crng reseeded on system resumption [ 643.230808][ T10] usb 3-1: USB disconnect, device number 69 [ 644.623252][T21671] 8021q: adding VLAN 0 to HW filter on device bond5 [ 644.630713][T21701] bond5: option resend_igmp: invalid value (2805) [ 644.645322][T21701] bond5: option resend_igmp: allowed values 0 - 255 [ 645.042729][T21738] xt_hashlimit: size too large, truncated to 1048576 [ 645.314737][T21757] __nla_validate_parse: 8 callbacks suppressed [ 645.314755][T21757] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5737'. [ 645.715452][T21789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5750'. [ 645.775293][T21793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5752'. [ 645.891048][T21801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5756'. [ 645.942096][T21807] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 645.942138][T21803] syzkaller0: entered promiscuous mode [ 645.948629][T21807] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 645.951716][T21807] vhci_hcd vhci_hcd.0: Device attached [ 645.959487][T21803] syzkaller0: entered allmulticast mode [ 645.975596][T21808] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 645.984312][ T12] vhci_hcd vhci_hcd.0: stop threads [ 645.991026][ T12] vhci_hcd vhci_hcd.0: release socket [ 645.997798][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 646.206242][T21821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5762'. [ 646.260553][T21827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5763'. [ 646.360474][T21834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5765'. [ 646.407240][T21838] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.5767' sets config #32778 [ 646.552182][T21844] syzkaller0: entered promiscuous mode [ 646.590551][T21844] syzkaller0: entered allmulticast mode [ 646.600279][T21852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5774'. [ 646.874007][T21866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5780'. [ 647.320325][T21890] rtc_cmos 00:00: Alarms can be up to one day in the future [ 647.475067][T21899] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5791'. [ 647.486780][T21899] netlink: 'syz.2.5791': attribute type 7 has an invalid length. [ 647.494524][T21899] netlink: 'syz.2.5791': attribute type 8 has an invalid length. [ 647.551439][T21899] ip6gretap0: entered promiscuous mode [ 647.576857][T21899] syz_tun: entered promiscuous mode [ 647.584009][T21899] gretap0: entered promiscuous mode [ 647.594732][T21899] debugfs: 'hsr1' already exists in 'hsr' [ 647.600637][T21899] Cannot create hsr debugfs directory [ 648.624731][T21937] syz.2.5796 (21937): drop_caches: 2 [ 649.617718][T21994] netlink: 'syz.0.5828': attribute type 1 has an invalid length. [ 650.328684][T22018] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 650.541639][T22024] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 650.853398][ T5825] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 650.884578][T22044] __nla_validate_parse: 5 callbacks suppressed [ 650.884598][T22044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5849'. [ 651.184458][T22056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5853'. [ 651.332794][T22060] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 651.460978][T22068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5859'. [ 651.638783][T22077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5861'. [ 652.469233][T22123] syzkaller0: entered promiscuous mode [ 652.474806][T22123] syzkaller0: entered allmulticast mode [ 652.746868][T22129] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 653.500892][T22185] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5901'. [ 653.521924][T22185] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5901'. [ 653.746924][ T5911] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 653.914125][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.966894][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 654.004421][ T5911] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 654.035361][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.056421][ T5911] usb 2-1: config 0 descriptor?? [ 654.088066][ T5911] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 654.119165][T22227] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5915'. [ 655.942470][T22390] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5945'. [ 655.957137][T22389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5944'. [ 656.572405][T22441] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5958'. [ 656.977247][ T5911] usb 2-1: USB disconnect, device number 61 [ 657.155288][T22478] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5970'. [ 657.631119][ T887] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 657.804759][T22513] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 657.819109][ T887] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 657.829640][T22513] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 657.839299][T22513] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 657.849923][T22513] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 657.860534][T22513] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 657.867969][ T887] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 657.881661][ T887] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 657.890785][ T887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.902530][ T887] usb 2-1: config 0 descriptor?? [ 657.925325][ T887] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 658.240335][T22554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5990'. [ 658.563850][T22525] chnl_net:caif_netlink_parms(): no params data found [ 658.707533][T22637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5994'. [ 658.716690][T22637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5994'. [ 659.132927][T16529] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.497317][T16529] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.549985][T22525] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.591352][T22525] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.611803][T22525] bridge_slave_0: entered allmulticast mode [ 659.639103][T22525] bridge_slave_0: entered promiscuous mode [ 659.739886][T16529] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.778327][T22525] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.808315][T22525] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.815559][T22525] bridge_slave_1: entered allmulticast mode [ 659.877690][T22525] bridge_slave_1: entered promiscuous mode [ 659.932707][ T5825] Bluetooth: hci1: command tx timeout [ 660.054988][T16529] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.143236][T22701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6008'. [ 660.220341][T22525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.255355][T22525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.393633][T22525] team0: Port device team_slave_0 added [ 660.458725][T22525] team0: Port device team_slave_1 added [ 660.578486][T22774] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6012'. [ 660.609152][T22525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.616136][T22525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.686936][T22525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.715023][T22525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.740821][T22525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.770458][T22785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6017'. [ 660.794963][T22525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.817137][T16529] gretap0: left allmulticast mode [ 660.823112][T16529] gretap0: left promiscuous mode [ 660.839276][T16529] bridge0: port 3(gretap0) entered disabled state [ 660.879066][T16529] bridge_slave_1: left allmulticast mode [ 660.899351][T16529] bridge_slave_1: left promiscuous mode [ 660.917581][T16529] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.981038][T16529] bridge_slave_0: left allmulticast mode [ 661.002811][T16529] bridge_slave_0: left promiscuous mode [ 661.023586][T16529] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.119293][ T10] usb 2-1: USB disconnect, device number 62 [ 661.931299][T16529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.942499][T16529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.954444][T16529] bond0 (unregistering): Released all slaves [ 661.965858][T16529] bond1 (unregistering): left allmulticast mode [ 661.972424][T16529] vcan1: left allmulticast mode [ 661.979888][T16529] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 661.988297][T16529] vcan1: left promiscuous mode [ 661.994472][T16529] bond1 (unregistering): Released all slaves [ 662.007520][ T5825] Bluetooth: hci1: command tx timeout [ 662.195834][T22525] hsr_slave_0: entered promiscuous mode [ 662.203761][T22525] hsr_slave_1: entered promiscuous mode [ 662.212808][T22525] debugfs: 'hsr0' already exists in 'hsr' [ 662.236758][T22525] Cannot create hsr debugfs directory [ 662.534172][T16529] hsr_slave_0: left promiscuous mode [ 662.552937][T16529] hsr_slave_1: left promiscuous mode [ 662.562335][T16529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.580733][T16529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.591830][T16529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.603749][T16529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.630936][T16529] veth1_macvtap: left promiscuous mode [ 662.647649][T16529] veth0_macvtap: left promiscuous mode [ 662.653287][T16529] veth1_vlan: left promiscuous mode [ 662.692070][T16529] veth0_vlan: left promiscuous mode [ 662.736649][ T5911] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 662.832958][T22908] __nla_validate_parse: 1 callbacks suppressed [ 662.832975][T22908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6037'. [ 662.940621][T16529] pim6reg (unregistering): left allmulticast mode [ 662.949149][ T5911] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 662.969775][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 663.006019][ T5911] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 663.015219][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.068108][ T5911] usb 5-1: config 0 descriptor?? [ 663.093672][ T5911] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 663.252173][T16529] team0 (unregistering): Port device team_slave_1 removed [ 663.310002][T16529] team0 (unregistering): Port device team_slave_0 removed [ 664.090992][ T5825] Bluetooth: hci1: command tx timeout [ 664.903901][T22525] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 664.963946][T22525] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 665.019674][T22525] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 665.062718][T22525] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 665.273515][T22525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.331464][T22525] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.375709][T15933] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.382911][T15933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.431869][T15933] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.439069][T15933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.595921][T22525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.693334][T22525] veth0_vlan: entered promiscuous mode [ 665.724573][T22525] veth1_vlan: entered promiscuous mode [ 665.815703][T22525] veth0_macvtap: entered promiscuous mode [ 665.833854][T23032] xt_hashlimit: size too large, truncated to 1048576 [ 665.846340][T22525] veth1_macvtap: entered promiscuous mode [ 665.910635][T22525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.949990][T22525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.984039][T23039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6046'. [ 665.991301][T15933] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.010666][T15933] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.040096][T23039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6046'. [ 666.058531][T15933] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.085428][T15933] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.167262][ T5825] Bluetooth: hci1: command tx timeout [ 666.311372][T16529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.344083][T16529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.450058][T15933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.451470][ T5911] usb 5-1: USB disconnect, device number 68 [ 666.506787][T15933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.083801][T23101] syzkaller1: entered promiscuous mode [ 667.103281][T22513] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 667.118487][T22513] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 667.129441][T22513] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 667.138249][T22513] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 667.145902][T22513] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 667.158480][T23101] syzkaller1: entered allmulticast mode [ 667.779659][T15054] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 667.998651][T15054] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 668.023807][T15054] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 668.058646][T15054] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 668.099186][T15054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.131994][T15054] usb 2-1: config 0 descriptor?? [ 668.155318][T15054] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 668.352403][T16529] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.419606][T23117] chnl_net:caif_netlink_parms(): no params data found [ 668.558677][T16529] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.812128][T16529] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.012451][T16529] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.111578][T23117] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.121397][T23117] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.129956][T23117] bridge_slave_0: entered allmulticast mode [ 669.137642][T23117] bridge_slave_0: entered promiscuous mode [ 669.154242][T23117] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.164918][T23117] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.172556][T23117] bridge_slave_1: entered allmulticast mode [ 669.205521][T23117] bridge_slave_1: entered promiscuous mode [ 669.212510][T22513] Bluetooth: hci5: command tx timeout [ 669.287930][T23117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.315014][T23117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.352608][T23297] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6071'. [ 669.398985][T23297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6071'. [ 669.735061][T22513] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 670.033693][T16529] bond0 (unregistering): Released all slaves [ 670.064823][T16529] bond1 (unregistering): Released all slaves [ 670.108267][T23117] team0: Port device team_slave_0 added [ 670.127616][T23117] team0: Port device team_slave_1 added [ 670.258796][T23117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.297057][T23117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.363126][T23117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.396570][T16529] !: left promiscuous mode [ 670.451117][T23117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.464834][T23117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.535526][T23117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.803932][T23117] hsr_slave_0: entered promiscuous mode [ 670.823947][T23117] hsr_slave_1: entered promiscuous mode [ 670.837393][T23117] debugfs: 'hsr0' already exists in 'hsr' [ 670.853315][T23117] Cannot create hsr debugfs directory [ 670.983745][ T887] usb 2-1: USB disconnect, device number 63 [ 671.296645][T22513] Bluetooth: hci5: command tx timeout [ 671.821072][T16529] hsr_slave_0: left promiscuous mode [ 671.844080][T16529] hsr_slave_1: left promiscuous mode [ 671.886402][T16529] veth1_macvtap: left promiscuous mode [ 671.905310][T16529] veth0_macvtap: left promiscuous mode [ 671.931313][T16529] veth1_vlan: left promiscuous mode [ 671.953708][T16529] veth0_vlan: left promiscuous mode [ 672.254430][T16529] pim6reg (unregistering): left allmulticast mode [ 673.376867][T22513] Bluetooth: hci5: command tx timeout [ 673.488310][T23568] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6096'. [ 674.076431][T23611] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6102'. [ 674.437581][T23629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6106'. [ 674.483561][T16529] IPVS: stop unused estimator thread 0... [ 674.515308][T23632] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6107'. [ 674.976770][T23653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6111'. [ 675.183545][T23653] 8021q: adding VLAN 0 to HW filter on device bond6 [ 675.329437][T23117] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 675.410625][T23117] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 675.447275][T22513] Bluetooth: hci5: command tx timeout [ 675.495787][T23117] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 675.551966][T23117] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 675.992498][T23117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.102030][T23117] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.162852][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.170064][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.210461][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.217637][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.236169][T23734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6118'. [ 676.514336][T23117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.637735][T23117] veth0_vlan: entered promiscuous mode [ 676.696448][T23117] veth1_vlan: entered promiscuous mode [ 676.899038][T23117] veth0_macvtap: entered promiscuous mode [ 676.929889][T23117] veth1_macvtap: entered promiscuous mode [ 677.044390][T23117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.088681][T23117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.134216][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.228289][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.274392][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.353767][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.565685][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.612519][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.691259][T23779] xt_hashlimit: size too large, truncated to 1048576 [ 677.727517][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.769357][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.977945][T23789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6054'. [ 678.199627][T23798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6128'. [ 678.571640][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 678.585586][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 678.593741][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 678.627705][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 678.641469][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 679.093975][T23851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6136'. [ 679.110371][T23851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6136'. [ 679.226385][T14356] syz_tun (unregistering): left promiscuous mode [ 679.482664][T14665] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.773615][T23890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6140'. [ 679.782788][T23890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6140'. [ 679.891541][T14665] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.215419][T14665] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.543226][T14665] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.726658][T22513] Bluetooth: hci4: command tx timeout [ 680.940899][T23822] chnl_net:caif_netlink_parms(): no params data found [ 680.986355][T23948] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 681.362254][T23822] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.369596][T23822] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.377758][T23822] bridge_slave_0: entered allmulticast mode [ 681.388948][T23822] bridge_slave_0: entered promiscuous mode [ 681.516738][T14665] ip6gretap0 (unregistering): left promiscuous mode [ 681.640966][T14665] gretap0 (unregistering): left promiscuous mode [ 681.850090][T14665] bond0 (unregistering): Released all slaves [ 681.864987][T14665] bond1 (unregistering): Released all slaves [ 681.886896][T14665] bond2 (unregistering): Released all slaves [ 681.945606][T14665] bond3 (unregistering): Released all slaves [ 682.011649][T14665] bond4 (unregistering): Released all slaves [ 682.141115][T14665] bond5 (unregistering): Released all slaves [ 682.201496][T14665] bond6 (unregistering): Released all slaves [ 682.258132][T23822] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.265388][T23822] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.294457][T23822] bridge_slave_1: entered allmulticast mode [ 682.337116][T23822] bridge_slave_1: entered promiscuous mode [ 682.576025][T24067] binder: 24065:24067 ioctl c0306201 200000000080 returned -14 [ 682.687490][T23822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.808825][T22513] Bluetooth: hci4: command tx timeout [ 682.829636][T23822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.951746][T23822] team0: Port device team_slave_0 added [ 683.017811][T23822] team0: Port device team_slave_1 added [ 683.168559][T14665] hsr_slave_0: left promiscuous mode [ 683.192947][T14665] hsr_slave_1: left promiscuous mode [ 683.232703][T14665] veth1_macvtap: left promiscuous mode [ 683.256685][T14665] veth0_macvtap: left promiscuous mode [ 683.271682][T14665] veth1_vlan: left promiscuous mode [ 683.287463][T14665] veth0_vlan: left promiscuous mode [ 683.552242][ T887] hid_parser_main: 5 callbacks suppressed [ 683.552264][ T887] hid-generic 0003:0003:0000.0034: unknown main item tag 0x0 [ 683.592454][ T887] hid-generic 0003:0003:0000.0034: unknown main item tag 0x0 [ 683.629425][ T887] hid-generic 0003:0003:0000.0034: unknown main item tag 0x0 [ 683.654636][ T887] hid-generic 0003:0003:0000.0034: unknown main item tag 0x0 [ 683.682729][ T887] hid-generic 0003:0003:0000.0034: unknown main item tag 0x0 [ 683.710880][ T887] hid-generic 0003:0003:0000.0034: unknown main item tag 0x0 [ 683.747390][ T887] hid-generic 0003:0003:0000.0034: unknown main item tag 0x0 [ 683.754825][ T887] hid-generic 0003:0003:0000.0034: unknown main item tag 0x0 [ 683.795406][ T887] hid-generic 0003:0003:0000.0034: unknown main item tag 0x0 [ 683.830796][ T887] hid-generic 0003:0003:0000.0034: unknown main item tag 0x0 [ 683.868948][ T887] hid-generic 0003:0003:0000.0034: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 684.124549][T24164] fido_id[24164]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 684.555930][T24172] Set syz1 is full, maxelem 6117 reached [ 684.642142][T23822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.660612][T23822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.688793][T23822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.860098][T23822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.886625][T22513] Bluetooth: hci4: command tx timeout [ 684.892169][T23822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.919470][T23822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.970476][T23822] hsr_slave_0: entered promiscuous mode [ 684.977487][T23822] hsr_slave_1: entered promiscuous mode [ 685.328632][T24267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6183'. [ 685.337637][T24267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6183'. [ 685.649809][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.656204][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.746352][T14665] IPVS: stop unused estimator thread 0... [ 686.314274][T24313] Set syz1 is full, maxelem 6117 reached [ 686.977433][T22513] Bluetooth: hci4: command tx timeout [ 687.157198][T23822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 687.356650][T23822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 687.379762][T23822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 687.461025][T23822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 687.925206][T24373] netlink: 212 bytes leftover after parsing attributes in process `syz.0.6198'. [ 687.967490][T15054] IPVS: starting estimator thread 0... [ 688.036045][T23822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.076684][T24376] IPVS: using max 34 ests per chain, 81600 per kthread [ 688.133607][T23822] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.149715][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.156890][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.224225][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.231445][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.421122][T23822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.522039][T24399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6202'. [ 688.531067][T24399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6202'. [ 688.590304][T23822] veth0_vlan: entered promiscuous mode [ 688.603300][T23822] veth1_vlan: entered promiscuous mode [ 688.655345][T23822] veth0_macvtap: entered promiscuous mode [ 688.675141][T23822] veth1_macvtap: entered promiscuous mode [ 688.731908][T23822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.773328][T23822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.832994][T14665] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.868958][T14665] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.913083][T16529] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.926105][T16529] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.134195][T16529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.166870][T16529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.274702][T15933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.297474][T15933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.969248][T24449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6215'. [ 690.006851][T24449] netlink: 'syz.2.6215': attribute type 7 has an invalid length. [ 690.014609][T24449] netlink: 'syz.2.6215': attribute type 8 has an invalid length. [ 690.037562][T24449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6215'. [ 690.082862][T24449] ip6gretap0: entered promiscuous mode [ 690.099913][T24449] syz_tun: entered promiscuous mode [ 690.126435][T24449] gretap0: entered promiscuous mode [ 690.136497][T24449] debugfs: 'hsr1' already exists in 'hsr' [ 690.159771][T24449] Cannot create hsr debugfs directory [ 690.183526][T24451] syzkaller0: entered promiscuous mode [ 690.194296][T24451] syzkaller0: entered allmulticast mode [ 690.548796][ T887] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 690.725812][ T887] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 690.779090][ T887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 690.815207][ T887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 690.860278][ T887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 690.910444][ T887] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 690.953279][ T887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.002234][ T887] usb 3-1: config 0 descriptor?? [ 691.509963][ T887] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 691.538058][T24505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6226'. [ 691.547234][T24505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6226'. [ 692.421662][T24516] erspan0: left allmulticast mode [ 692.427080][T24516] erspan0: left promiscuous mode [ 692.462717][T24516] bridge0: port 4(erspan0) entered disabled state [ 692.497793][T24516] syz_tun: left allmulticast mode [ 692.537891][T24516] syz_tun: left promiscuous mode [ 692.543064][T24516] bridge0: port 3(syz_tun) entered disabled state [ 692.602913][T24516] bridge_slave_0: left allmulticast mode [ 692.612371][T24516] bridge_slave_0: left promiscuous mode [ 692.620899][T24516] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.638318][T24516] bridge_slave_1: left allmulticast mode [ 692.644085][T24516] bridge_slave_1: left promiscuous mode [ 692.651830][T24516] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.673866][T24516] bond0: (slave bond_slave_0): Releasing backup interface [ 692.688548][T24516] bond_slave_0: left promiscuous mode [ 692.706590][ T887] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 692.716352][T24516] bond0: (slave bond_slave_1): Releasing backup interface [ 692.725823][T24516] bond_slave_1: left promiscuous mode [ 692.749307][T24516] team0: Port device team_slave_0 removed [ 692.762949][T24516] team0: Port device team_slave_1 removed [ 692.770392][T24516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.777900][T24516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.786929][T24516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.794394][T24516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.804429][T24516] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 692.868019][ T887] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 692.876234][ T887] usb 2-1: config 0 has no interface number 0 [ 692.883045][ T887] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 692.894132][ T887] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 692.908974][ T887] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 692.918552][ T887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.926605][ T887] usb 2-1: Product: syz [ 692.930782][ T887] usb 2-1: Manufacturer: syz [ 692.935371][ T887] usb 2-1: SerialNumber: syz [ 692.943339][ T887] usb 2-1: config 0 descriptor?? [ 692.948979][T24519] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 692.958033][ T887] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 692.969730][ T887] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 693.165784][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 693.370412][ T887] usb 2-1: USB disconnect, device number 64 [ 693.381818][ T887] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 693.394200][ T887] cyberjack 2-1:0.69: device disconnected [ 693.606267][ T796] usb 3-1: USB disconnect, device number 70 [ 694.207351][T24588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6241'. [ 694.216254][T24588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6241'. [ 694.436989][ T10] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 694.745196][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.780719][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 694.831502][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.854452][ T10] usb 4-1: config 0 descriptor?? [ 694.879287][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 695.280844][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 695.296474][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 695.303931][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 695.312499][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 695.320331][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 695.540826][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 695.548407][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 695.760736][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 695.768908][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 695.785241][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 695.800597][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 695.837847][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 695.865817][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 695.879300][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 695.904471][ T10] pwc: Registered as video103. [ 695.957968][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input50 [ 696.156789][ T10] usb 4-1: USB disconnect, device number 79 [ 697.229718][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 697.229734][ T30] audit: type=1326 audit(1772513432.305:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24676 comm="syz.4.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ba59c799 code=0x7ffc0000 [ 697.337901][ T30] audit: type=1326 audit(1772513432.305:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24676 comm="syz.4.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ba59c799 code=0x7ffc0000 [ 697.378469][ T30] audit: type=1326 audit(1772513432.355:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24676 comm="syz.4.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fe6ba59c799 code=0x7ffc0000 [ 697.423247][ T30] audit: type=1326 audit(1772513432.355:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24676 comm="syz.4.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ba59c799 code=0x7ffc0000 [ 697.496126][ T30] audit: type=1326 audit(1772513432.355:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24676 comm="syz.4.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ba59c799 code=0x7ffc0000 [ 698.023933][T24703] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 698.044095][T24703] bond1: (slave lo): Enslaving as an active interface with an up link [ 698.076623][ T5910] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 698.115102][T24703] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 698.253731][ T5910] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 698.263153][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.271773][ T5910] usb 3-1: Product: syz [ 698.275954][ T5910] usb 3-1: Manufacturer: syz [ 698.283956][ T5910] usb 3-1: SerialNumber: syz [ 698.303736][ T5910] usb 3-1: config 0 descriptor?? [ 698.311469][ T5910] hub 3-1:0.0: bad descriptor, ignoring hub [ 698.329321][ T5910] hub 3-1:0.0: probe with driver hub failed with error -5 [ 698.516372][ T5910] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 698.580694][ T5910] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 698.605544][ T5910] dib0700: firmware download failed at 7 with -22 [ 698.754591][T24779] netlink: 'syz.0.6291': attribute type 4 has an invalid length. [ 698.922751][T24788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6295'. [ 698.947294][T15054] usb 3-1: USB disconnect, device number 71 [ 699.206317][T24797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.272365][T24797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.284075][T24797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.306208][T24797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.954426][T24820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6306'. [ 700.389390][T24837] syzkaller0: entered promiscuous mode [ 700.405004][T24837] syzkaller0: entered allmulticast mode [ 700.497523][T24848] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6317'. [ 700.636028][T24853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6318'. [ 701.130043][T24873] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6327'. [ 701.532199][T24886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6332'. [ 701.567649][T24888] xt_connbytes: Forcing CT accounting to be enabled [ 702.071262][T24913] netlink: 212 bytes leftover after parsing attributes in process `syz.3.6343'. [ 702.180178][T24917] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6345'. [ 702.636924][T15054] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 702.686070][T24939] bridge0: port 1(batadv_slave_1) entered blocking state [ 702.710954][T24939] bridge0: port 1(batadv_slave_1) entered disabled state [ 702.738309][T24939] batadv_slave_1: entered allmulticast mode [ 702.758009][T24939] batadv_slave_1: entered promiscuous mode [ 702.787308][T24939] bridge0: port 1(batadv_slave_1) entered blocking state [ 702.794472][T24939] bridge0: port 1(batadv_slave_1) entered forwarding state [ 702.814246][T15054] usb 4-1: unable to get BOS descriptor or descriptor too short [ 702.835217][T15054] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 702.849290][T15054] usb 4-1: can't read configurations, error -71 [ 703.171930][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 703.182031][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 703.190073][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 703.198139][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 703.205972][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 703.804751][T24983] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6359'. [ 704.522810][T16529] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.626683][T25016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 704.663765][T25014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 704.677783][T25014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 704.762317][T16529] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.913546][T16529] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.967624][T24962] chnl_net:caif_netlink_parms(): no params data found [ 705.028432][T16529] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.177902][T24962] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.186156][T24962] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.193502][T24962] bridge_slave_0: entered allmulticast mode [ 705.202808][T24962] bridge_slave_0: entered promiscuous mode [ 705.212945][T24962] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.220777][T24962] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.228113][T24962] bridge_slave_1: entered allmulticast mode [ 705.235692][T24962] bridge_slave_1: entered promiscuous mode [ 705.287942][T22513] Bluetooth: hci0: command tx timeout [ 705.509175][T24962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.639891][T24962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.727751][T15054] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 705.793794][T25178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.839963][T24962] team0: Port device team_slave_0 added [ 705.865217][T24962] team0: Port device team_slave_1 added [ 705.882467][T16529] batadv_slave_1: left allmulticast mode [ 705.888878][T16529] batadv_slave_1: left promiscuous mode [ 705.899604][T15054] usb 5-1: Using ep0 maxpacket: 8 [ 705.916377][T15054] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 705.998160][T16529] bridge0: port 1(batadv_slave_1) entered disabled state [ 706.010141][T15054] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 706.066724][T15054] usb 5-1: config 179 has no interface number 0 [ 706.073203][T15054] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 706.111489][T15054] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 706.148171][T15054] usb 5-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 706.201643][T15054] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 706.252718][T15054] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.295215][T25136] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 706.440849][T25207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6382'. [ 706.533693][ T5910] usb 5-1: USB disconnect, device number 69 [ 706.664615][T25222] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 706.731951][T16529] bond0 (unregistering): Released all slaves [ 706.754970][T16529] bond1 (unregistering): Released all slaves [ 706.849164][T25247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6386'. [ 706.882213][T24962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.889710][T24962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.919233][T24962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.995020][T24962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.019459][T24962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.073954][T24962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.150058][T25265] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6390'. [ 707.271648][T24962] hsr_slave_0: entered promiscuous mode [ 707.289199][T24962] hsr_slave_1: entered promiscuous mode [ 707.296033][T24962] debugfs: 'hsr0' already exists in 'hsr' [ 707.303700][T24962] Cannot create hsr debugfs directory [ 707.369163][T22513] Bluetooth: hci0: command tx timeout [ 707.579554][T16529] hsr_slave_0: left promiscuous mode [ 707.602285][T16529] hsr_slave_1: left promiscuous mode [ 707.627034][T16529] veth1_macvtap: left promiscuous mode [ 707.648405][T16529] veth0_macvtap: left promiscuous mode [ 707.664584][T16529] veth1_vlan: left promiscuous mode [ 707.699421][T16529] veth0_vlan: left promiscuous mode [ 708.594496][T25362] syzkaller0: entered promiscuous mode [ 708.600072][T25362] syzkaller0: entered allmulticast mode [ 708.700443][T25378] netlink: 'syz.3.6404': attribute type 10 has an invalid length. [ 708.844816][T25382] tls_set_device_offload: netdev not found [ 709.456869][T22513] Bluetooth: hci0: command tx timeout [ 710.869687][T25378] syz_tun: entered promiscuous mode [ 710.903371][T25378] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 710.915729][ T1008] bond0: (slave bond_slave_0): interface is now down [ 710.924810][ T1008] bond0: (slave bond_slave_1): interface is now down [ 710.943811][ T1008] bond0: (slave syz_tun): interface is now down [ 710.985480][ T1008] bond0: now running without any active interface! [ 711.458826][T25476] syzkaller0: entered promiscuous mode [ 711.464327][T25476] syzkaller0: entered allmulticast mode [ 711.537046][T22513] Bluetooth: hci0: command tx timeout [ 711.871951][T16529] IPVS: stop unused estimator thread 0... [ 712.326997][T25573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6431'. [ 712.336189][T25573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6431'. [ 712.509668][T25585] netlink: 388 bytes leftover after parsing attributes in process `syz.4.6434'. [ 712.593232][T24962] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 712.627531][T24962] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 712.664098][T24962] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 712.702644][T24962] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 712.980363][ T10] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 712.980745][T24962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.047845][T24962] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.068379][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.075491][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.141932][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.149081][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.160822][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.182338][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.200295][T25611] syzkaller0: entered promiscuous mode [ 713.205905][T25611] syzkaller0: entered allmulticast mode [ 713.233334][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 713.296751][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 713.305822][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.353732][ T10] usb 5-1: config 0 descriptor?? [ 713.644460][T24962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.722337][T25636] netlink: 388 bytes leftover after parsing attributes in process `syz.0.6444'. [ 713.763759][T24962] veth0_vlan: entered promiscuous mode [ 713.817012][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 713.818941][T24962] veth1_vlan: entered promiscuous mode [ 713.823014][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 713.886867][ T10] usb 5-1: USB disconnect, device number 70 [ 713.943656][T24962] veth0_macvtap: entered promiscuous mode [ 714.002189][T24962] veth1_macvtap: entered promiscuous mode [ 714.061553][T24962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.105763][T24962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.153458][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.196670][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.221675][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.240711][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.481588][T25683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6451'. [ 714.490695][T25683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6451'. [ 714.548686][T15933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.583517][T15933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.604974][T25687] netlink: 388 bytes leftover after parsing attributes in process `syz.2.6455'. [ 714.632224][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.670693][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.015682][T25705] netlink: 212 bytes leftover after parsing attributes in process `syz.1.6356'. [ 715.026101][T25704] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6458'. [ 715.455938][T25722] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6465'. [ 717.468267][T25765] loop5: detected capacity change from 0 to 2640 [ 717.502258][T17149] buffer_io_error: 5 callbacks suppressed [ 717.502275][T17149] Buffer I/O error on dev loop5, logical block 0, async page read [ 717.554137][T17149] Buffer I/O error on dev loop5, logical block 0, async page read [ 717.581591][T17149] Buffer I/O error on dev loop5, logical block 0, async page read [ 717.614710][T17149] Buffer I/O error on dev loop5, logical block 0, async page read [ 717.739384][T17149] Buffer I/O error on dev loop5, logical block 0, async page read [ 717.749761][T17149] Buffer I/O error on dev loop5, logical block 0, async page read [ 717.766871][T17149] Buffer I/O error on dev loop5, logical block 0, async page read [ 717.776234][T17149] Buffer I/O error on dev loop5, logical block 0, async page read [ 717.785114][T17149] ldm_validate_partition_table(): Disk read failed. [ 717.796040][T17149] Buffer I/O error on dev loop5, logical block 0, async page read [ 717.816601][T17149] Buffer I/O error on dev loop5, logical block 0, async page read [ 717.830277][T17149] Dev loop5: unable to read RDB block 0 [ 717.863745][T17149] loop5: unable to read partition table [ 717.880591][T25765] ldm_validate_partition_table(): Disk read failed. [ 717.888407][T25765] Dev loop5: unable to read RDB block 0 [ 717.898473][T25765] loop5: unable to read partition table [ 717.915102][T25765] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 718.041180][T25802] __nla_validate_parse: 4 callbacks suppressed [ 718.041195][T25802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6485'. [ 719.031495][T25823] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6493'. [ 719.704654][T25854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6503'. [ 719.713691][T25854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6503'. [ 720.546666][ T5910] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 720.956579][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 720.965760][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 720.990772][ T5910] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 721.053211][ T5910] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 721.079772][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.137880][ T5910] usb 5-1: Product: syz [ 721.153258][ T5910] usb 5-1: Manufacturer: syz [ 721.186691][ T5910] usb 5-1: SerialNumber: syz [ 721.223877][ T5910] usb 5-1: config 0 descriptor?? [ 721.521953][T25889] netlink: 'syz.2.6518': attribute type 13 has an invalid length. [ 721.667849][ T5910] usb 5-1: USB disconnect, device number 71 [ 722.817695][T25930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 723.152420][T25940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6527'. [ 723.215131][T25940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6527'. [ 723.508362][T25959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 723.541056][T25961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6537'. [ 723.550502][T25961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6537'. [ 724.102633][T25996] syzkaller0: entered promiscuous mode [ 724.123065][T25996] syzkaller0: entered allmulticast mode [ 724.298151][T26000] geneve2: entered promiscuous mode [ 724.689006][T26043] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 724.697008][T26043] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 724.817322][T15054] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 724.996588][T15054] usb 1-1: Using ep0 maxpacket: 8 [ 725.007239][T15054] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 725.018678][T15054] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 725.032083][T15054] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 725.062210][T15054] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 725.099624][T15054] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 725.125193][T15054] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.363531][T15054] usb 1-1: usb_control_msg returned -32 [ 725.370796][T15054] usbtmc 1-1:16.0: can't read capabilities [ 725.934401][T26087] syzkaller1: entered promiscuous mode [ 725.943783][T26087] syzkaller1: entered allmulticast mode [ 726.590347][T26119] netlink: 212 bytes leftover after parsing attributes in process `syz.3.6595'. [ 726.777578][T26125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6597'. [ 726.799472][T26126] syzkaller1: entered promiscuous mode [ 726.813792][T26126] syzkaller1: entered allmulticast mode [ 730.606542][ C0] sched: DL replenish lagged too much [ 747.724996][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.389855][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 785.314465][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 808.757041][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.511773][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.084207][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.175429][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.745076][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.249666][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 948.861432][ T796] usb 1-1: USB disconnect, device number 49 [ 980.136386][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 980.143360][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P26032/1:b..l [ 980.151876][ C1] rcu: (detected by 1, t=10503 jiffies, g=134161, q=2201 ncpus=2) [ 980.159779][ C1] task:syz.0.6564 state:R running task stack:26848 pid:26032 tgid:26031 ppid:23117 task_flags:0x40044c flags:0x00080003 [ 980.174304][ C1] Call Trace: [ 980.177662][ C1] [ 980.180643][ C1] __schedule+0x15dd/0x52d0 [ 980.185305][ C1] ? rcu_is_watching+0x15/0xb0 [ 980.190116][ C1] ? __pfx___schedule+0x10/0x10 [ 980.194997][ C1] preempt_schedule_irq+0x4d/0xa0 [ 980.200032][ C1] irqentry_exit+0x599/0x620 [ 980.204624][ C1] ? trace_irq_disable+0x3b/0x150 [ 980.209664][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 980.215686][ C1] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 980.221034][ C1] Code: e9 30 ff ff ff e8 d5 ed 0b 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 51 3b 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d ee 5a 73 [ 980.240643][ C1] RSP: 0018:ffffc9000607f158 EFLAGS: 00000282 [ 980.246767][ C1] RAX: 4f8937e18b53e000 RBX: 0000000000000246 RCX: 0000000000000046 [ 980.254738][ C1] RDX: 000000006d719872 RSI: ffffffff8e16369b RDI: ffffffff8c27ae80 [ 980.262715][ C1] RBP: 0000000000000000 R08: ffffffff81767a45 R09: ffffffff8e7602e0 [ 980.270689][ C1] R10: ffffc9000607f2b8 R11: ffffffff81b0bb90 R12: 0000000000000002 [ 980.278659][ C1] R13: ffffffff8e7602e0 R14: 0000000000000000 R15: 0000000000000000 [ 980.286639][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 980.292803][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 980.297933][ C1] ? stack_trace_save+0xa9/0x100 [ 980.302877][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 980.308000][ C1] unwind_next_frame+0xc2/0x23c0 [ 980.312945][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 980.318084][ C1] ? __unwind_start+0x5b8/0x760 [ 980.322947][ C1] ? stack_trace_save+0xa9/0x100 [ 980.327889][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 980.334045][ C1] arch_stack_walk+0x11b/0x150 [ 980.338847][ C1] ? stack_trace_save+0xa9/0x100 [ 980.343791][ C1] stack_trace_save+0xa9/0x100 [ 980.348565][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 980.353949][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 980.358901][ C1] save_stack+0x122/0x230 [ 980.363280][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 980.368224][ C1] ? __pfx_save_stack+0x10/0x10 [ 980.373102][ C1] __reset_page_owner+0x71/0x1f0 [ 980.378045][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 980.383190][ C1] __slab_free+0x263/0x2b0 [ 980.387639][ C1] qlist_free_all+0x97/0x100 [ 980.392233][ C1] kasan_quarantine_reduce+0x148/0x160 [ 980.397700][ C1] __kasan_slab_alloc+0x22/0x80 [ 980.402556][ C1] kmem_cache_alloc_node_noprof+0x384/0x690 [ 980.408461][ C1] ? __alloc_skb+0x27d/0x7d0 [ 980.413172][ C1] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 980.419258][ C1] __alloc_skb+0x27d/0x7d0 [ 980.423689][ C1] alloc_uevent_skb+0x7d/0x230 [ 980.428543][ C1] kobject_uevent_net_broadcast+0x2fa/0x560 [ 980.434455][ C1] kobject_uevent_env+0x55c/0x9e0 [ 980.439493][ C1] device_release_driver_internal+0x76f/0x860 [ 980.445651][ C1] driver_detach+0x1f3/0x2d0 [ 980.450247][ C1] bus_remove_driver+0x226/0x320 [ 980.455197][ C1] usb_gadget_unregister_driver+0x4e/0x70 [ 980.461027][ C1] raw_release+0xd7/0x260 [ 980.465423][ C1] ? __pfx_raw_release+0x10/0x10 [ 980.470360][ C1] __fput+0x44f/0xa70 [ 980.474360][ C1] task_work_run+0x1d9/0x270 [ 980.478974][ C1] ? __pfx_task_work_run+0x10/0x10 [ 980.484087][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 980.489206][ C1] do_exit+0x69b/0x2320 [ 980.493389][ C1] ? down_interruptible+0x6d/0xe0 [ 980.498469][ C1] ? __pfx_do_exit+0x10/0x10 [ 980.503058][ C1] ? cgroup1_freezing+0x20/0x350 [ 980.508008][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 980.513043][ C1] do_group_exit+0x21b/0x2d0 [ 980.517635][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 980.522847][ C1] get_signal+0x1284/0x1330 [ 980.527378][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 980.532963][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 980.539128][ C1] ? __fget_files+0x2a/0x420 [ 980.543759][ C1] exit_to_user_mode_loop+0x86/0x480 [ 980.549050][ C1] ? rcu_is_watching+0x15/0xb0 [ 980.553825][ C1] do_syscall_64+0x32d/0xf80 [ 980.558472][ C1] ? trace_irq_disable+0x3b/0x150 [ 980.563510][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.569587][ C1] ? clear_bhb_loop+0x40/0x90 [ 980.574269][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.580164][ C1] RIP: 0033:0x7f0fe399c42b [ 980.584580][ C1] RSP: 002b:00007f0fe4911f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 980.592997][ C1] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f0fe399c42b [ 980.600970][ C1] RDX: 00007f0fe4912fe0 RSI: 0000000080085502 RDI: 0000000000000003 [ 980.608940][ C1] RBP: 00007f0fe3a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 980.616909][ C1] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 980.624876][ C1] R13: 0000000000000000 R14: 00007f0fe3c15fa0 R15: 00007f0fe3d3fa48 [ 980.632867][ C1] [ 980.635884][ C1] rcu: rcu_preempt kthread starved for 627 jiffies! g134161 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 980.646986][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 980.656956][ C1] rcu: RCU grace-period kthread stack dump: [ 980.662837][ C1] task:rcu_preempt state:R running task stack:28120 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 980.676329][ C1] Call Trace: [ 980.679610][ C1] [ 980.682556][ C1] __schedule+0x15dd/0x52d0 [ 980.687080][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 980.692041][ C1] ? __pfx___schedule+0x10/0x10 [ 980.696908][ C1] ? schedule+0x90/0x360 [ 980.701160][ C1] schedule+0x164/0x360 [ 980.705327][ C1] schedule_timeout+0x158/0x2c0 [ 980.710188][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 980.715565][ C1] ? __pfx_process_timeout+0x10/0x10 [ 980.720866][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 980.726689][ C1] ? prepare_to_swait_event+0x340/0x370 [ 980.732243][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 980.737101][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 980.742311][ C1] ? rcu_gp_init+0x1315/0x15b0 [ 980.747085][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 980.753252][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 980.758547][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 980.763765][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 980.769587][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 980.774184][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 980.779384][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 980.785203][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 980.790174][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 980.795214][ C1] kthread+0x388/0x470 [ 980.799289][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 980.804489][ C1] ? __pfx_kthread+0x10/0x10 [ 980.809085][ C1] ret_from_fork+0x51e/0xb90 [ 980.813687][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 980.818799][ C1] ? __switch_to+0xc7d/0x1450 [ 980.823485][ C1] ? __pfx_kthread+0x10/0x10 [ 980.828080][ C1] ret_from_fork_asm+0x1a/0x30 [ 980.832895][ C1] [ 980.835911][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 980.842233][ C1] Sending NMI from CPU 1 to CPUs 0: [ 980.847434][ C0] NMI backtrace for cpu 0 [ 980.847459][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 980.847481][ C0] Tainted: [L]=SOFTLOCKUP [ 980.847487][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 980.847498][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 980.847623][ C0] RIP: 0010:__lock_acquire+0x460/0x2cf0 [ 980.847645][ C0] Code: 0f 44 ca 89 0c 24 45 8b a6 50 0b 00 00 41 8d 4c 24 ff 83 f9 ff 41 bd ff ff ff ff 44 0f 4c e9 41 ff c5 41 8d 5c 24 01 49 ff cc <89> d9 83 c1 fe 78 40 45 89 e7 41 81 e7 ff ff ff 7f 83 f9 31 73 1d [ 980.847660][ C0] RSP: 0018:ffffc90000006458 EFLAGS: 00000003 [ 980.847673][ C0] RAX: 0000000000022007 RBX: 0000000000000009 RCX: 0000000000000007 [ 980.847683][ C0] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 0000000000000000 [ 980.847694][ C0] RBP: ffff88801d6fc998 R08: ffffffff81767a45 R09: ffffffff8e7602e0 [ 980.847707][ C0] R10: ffffc90000006738 R11: ffffffff81b0bb90 R12: 0000000000000007 [ 980.847718][ C0] R13: 0000000000000000 R14: ffff88801d6fbd00 R15: ffff88801d6fc858 [ 980.847729][ C0] FS: 0000000000000000(0000) GS:ffff888125464000(0000) knlGS:0000000000000000 [ 980.847743][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 980.847754][ C0] CR2: 000055558d0bea28 CR3: 000000007cd56000 CR4: 00000000003526f0 [ 980.847768][ C0] Call Trace: [ 980.847775][ C0] [ 980.847784][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 980.847811][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 980.847834][ C0] lock_acquire+0xf0/0x2e0 [ 980.847852][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 980.847874][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 980.847895][ C0] ? unwind_next_frame+0x1aaf/0x23c0 [ 980.847917][ C0] ? stack_trace_save+0xa9/0x100 [ 980.847933][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 980.847955][ C0] unwind_next_frame+0xc2/0x23c0 [ 980.847976][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 980.848003][ C0] ? __unwind_start+0x5b8/0x760 [ 980.848029][ C0] ? stack_trace_save+0xa9/0x100 [ 980.848045][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 980.848060][ C0] arch_stack_walk+0x11b/0x150 [ 980.848084][ C0] ? stack_trace_save+0xa9/0x100 [ 980.848100][ C0] stack_trace_save+0xa9/0x100 [ 980.848115][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 980.848130][ C0] ? stack_depot_save_flags+0x33/0x810 [ 980.848202][ C0] ? __qdisc_run+0xa95/0x15d0 [ 980.848247][ C0] kasan_save_track+0x3e/0x80 [ 980.848280][ C0] kasan_save_free_info+0x46/0x50 [ 980.848301][ C0] __kasan_slab_free+0x5c/0x80 [ 980.848317][ C0] kmem_cache_free+0x187/0x630 [ 980.848333][ C0] ? enqueue_to_backlog+0x69b/0xee0 [ 980.848383][ C0] enqueue_to_backlog+0x69b/0xee0 [ 980.848399][ C0] ? skb_clone+0x212/0x3a0 [ 980.848414][ C0] ? kasan_save_track+0x3e/0x80 [ 980.848428][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 980.848446][ C0] netif_rx_internal+0x120/0x590 [ 980.848491][ C0] ? __pfx_netif_rx_internal+0x10/0x10 [ 980.848514][ C0] __netif_rx+0x78/0xc0 [ 980.848529][ C0] loopback_xmit+0x43a/0x660 [ 980.848570][ C0] dev_hard_start_xmit+0x2d8/0x870 [ 980.848589][ C0] sch_direct_xmit+0x251/0x4c0 [ 980.848608][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 980.848623][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 980.848646][ C0] ? ktime_get+0x45/0x200 [ 980.848663][ C0] __qdisc_run+0xa95/0x15d0 [ 980.848685][ C0] __dev_queue_xmit+0x1bad/0x3890 [ 980.848702][ C0] ? __dev_queue_xmit+0x277/0x3890 [ 980.848717][ C0] ? __asan_memset+0x22/0x50 [ 980.848739][ C0] ? ipv4_synproxy_hook+0x293/0xd80 [ 980.848797][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 980.848822][ C0] ? ip_finish_output2+0xa1e/0x1070 [ 980.848899][ C0] ? ip_finish_output2+0x3c2/0x1070 [ 980.848921][ C0] ip_finish_output2+0xc68/0x1070 [ 980.848942][ C0] ? ip_finish_output2+0x3c2/0x1070 [ 980.848967][ C0] ip_output+0x29f/0x450 [ 980.848986][ C0] ? ip_output+0x5b/0x450 [ 980.849006][ C0] synproxy_send_client_synack+0x8c1/0xe30 [ 980.849037][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 980.849057][ C0] ? nft_redir_eval+0x318/0x4a0 [ 980.849123][ C0] ? synproxy_pernet+0x45/0x270 [ 980.849147][ C0] nft_synproxy_eval_v4+0x34a/0x4e0 [ 980.849172][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 980.849196][ C0] ? nf_ip_checksum+0x13c/0x510 [ 980.849272][ C0] nft_synproxy_do_eval+0x305/0x580 [ 980.849296][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 980.849318][ C0] ? nft_trace_init+0x283/0x4c0 [ 980.849386][ C0] ? __pfx_nf_log_trace+0x10/0x10 [ 980.849408][ C0] ? netlink_has_listeners+0x339/0x3f0 [ 980.849453][ C0] nft_do_chain+0x45e/0x1990 [ 980.849500][ C0] ? nft_osf_eval+0x56a/0x770 [ 980.849523][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 980.849555][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 980.849572][ C0] nft_do_chain_inet+0x29d/0x380 [ 980.849594][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 980.849615][ C0] ? ipt_do_table+0x2b2/0x1630 [ 980.849675][ C0] ? nf_nat_ipv4_local_in+0x223/0x720 [ 980.849694][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 980.849716][ C0] nf_hook_slow+0xc5/0x220 [ 980.849737][ C0] NF_HOOK+0x21f/0x3c0 [ 980.849754][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 980.849771][ C0] ? NF_HOOK+0x9e/0x3c0 [ 980.849786][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 980.849800][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 980.849818][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 980.849836][ C0] ? skb_dst+0x4f/0xd0 [ 980.849851][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 980.849868][ C0] NF_HOOK+0x336/0x3c0 [ 980.849884][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 980.849900][ C0] ? NF_HOOK+0x9e/0x3c0 [ 980.849914][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 980.849931][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 980.849948][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 980.849963][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 980.849978][ C0] ? process_backlog+0x3eb/0x1950 [ 980.850020][ C0] process_backlog+0xaa3/0x1950 [ 980.850052][ C0] __napi_poll+0xae/0x340 [ 980.850069][ C0] ? skb_defer_free_flush+0x233/0x260 [ 980.850088][ C0] net_rx_action+0x627/0xf70 [ 980.850112][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 980.850130][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 980.850199][ C0] ? net_tx_action+0x5e1/0xc80 [ 980.850219][ C0] ? net_tx_action+0xc42/0xc80 [ 980.850239][ C0] handle_softirqs+0x22a/0x870 [ 980.850260][ C0] ? do_softirq+0x76/0xd0 [ 980.850280][ C0] ? kernel_fpu_end+0x62/0x80 [ 980.850295][ C0] do_softirq+0x76/0xd0 [ 980.850313][ C0] [ 980.850318][ C0] [ 980.850324][ C0] __local_bh_enable_ip+0xf8/0x130 [ 980.850344][ C0] blake2s_compress+0xf9/0x1eb0 [ 980.850413][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 980.850432][ C0] ? blake2s_compress+0x1e17/0x1eb0 [ 980.850460][ C0] ? __pfx_encode_point+0x10/0x10 [ 980.850479][ C0] ? kernel_fpu_begin_mask+0x2b6/0x380 [ 980.850496][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 980.850518][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 980.850540][ C0] ? trace_irq_disable+0x3b/0x150 [ 980.850564][ C0] ? blake2s_update+0x255/0x450 [ 980.850587][ C0] ? blake2s_update+0x134/0x450 [ 980.850610][ C0] blake2s_update+0x14b/0x450 [ 980.850634][ C0] hmac+0x2d3/0x3b0 [ 980.850681][ C0] ? __pfx_hmac+0x10/0x10 [ 980.850713][ C0] kdf+0xff/0x2b0 [ 980.850735][ C0] ? __pfx_kdf+0x10/0x10 [ 980.850762][ C0] wg_noise_handshake_consume_initiation+0x276/0x9a0 [ 980.850787][ C0] ? stack_trace_save+0xa9/0x100 [ 980.850802][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 980.850817][ C0] ? __pfx_wg_noise_handshake_consume_initiation+0x10/0x10 [ 980.850840][ C0] ? stack_depot_save_flags+0x33/0x810 [ 980.850858][ C0] ? blake2s_update+0x255/0x450 [ 980.850882][ C0] ? __asan_memset+0x22/0x50 [ 980.850903][ C0] ? blake2s_final+0x14c/0x270 [ 980.850926][ C0] ? compute_mac1+0x184/0x200 [ 980.850947][ C0] ? __pfx_compute_mac1+0x10/0x10 [ 980.850972][ C0] ? __crypto_memneq+0x42/0x470 [ 980.850999][ C0] ? wg_packet_handshake_receive_worker+0x2e6/0x10c0 [ 980.851018][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 980.851044][ C0] wg_packet_handshake_receive_worker+0x674/0x10c0 [ 980.851067][ C0] ? wg_packet_handshake_receive_worker+0x72f/0x10c0 [ 980.851085][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 980.851106][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 980.851122][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 980.851141][ C0] ? process_scheduled_works+0xa25/0x1830 [ 980.851160][ C0] ? process_scheduled_works+0xa25/0x1830 [ 980.851179][ C0] process_scheduled_works+0xb02/0x1830 [ 980.851207][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 980.851227][ C0] ? assign_work+0x3d5/0x5e0 [ 980.851247][ C0] worker_thread+0xa50/0xfc0 [ 980.851275][ C0] kthread+0x388/0x470 [ 980.851289][ C0] ? __pfx_worker_thread+0x10/0x10 [ 980.851307][ C0] ? __pfx_kthread+0x10/0x10 [ 980.851322][ C0] ret_from_fork+0x51e/0xb90 [ 980.851341][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 980.851360][ C0] ? __switch_to+0xc7d/0x1450 [ 980.851377][ C0] ? __pfx_kthread+0x10/0x10 [ 980.851391][ C0] ret_from_fork_asm+0x1a/0x30 [ 980.851418][ C0] [ 986.942090][ T31] INFO: task kworker/R-ipv6_:3184 blocked for more than 143 seconds.