last executing test programs: 47.097775391s ago: executing program 0 (id=210): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4f8a, 0x4) sendmmsg$unix(r1, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x14, 0x1, 0x51}}], 0x20, 0x20000010}}], 0x1, 0x3400c0c4) 46.041754091s ago: executing program 0 (id=212): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0xc, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b000000850000004000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) getitimer(0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000380)='sys_enter\x00', r6}, 0x18) 45.668731577s ago: executing program 0 (id=215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) unshare(0x68040200) 45.564626661s ago: executing program 1 (id=216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r4, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x38}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="d0187f00ffffffffffff08021100000050505050505020000b"], 0x2f) 44.081341979s ago: executing program 0 (id=220): syz_clone3(&(0x7f00000004c0)={0xd0012000, 0x0, 0x0, 0x0, {}, 0x0, 0x1f, 0x0, &(0x7f0000000480), 0x1}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) open_by_handle_at(r3, &(0x7f0000000000)=@isofs={0x14, 0x1, {0x15, 0x10, 0x4, 0x6, 0xfffff4bb, 0x1}}, 0x60380) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000100)=[{0x0}], 0x1, 0x4f, 0x205) r5 = semget$private(0x0, 0x6, 0x0) close(0xffffffffffffffff) r6 = dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x200400, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) semtimedop(r5, &(0x7f0000000040), 0x0, 0x0) semop(r5, &(0x7f00000002c0)=[{0x3, 0x4, 0x1000}, {0x3, 0xfffc}], 0x2) semctl$IPC_RMID(r5, 0x0, 0x0) 43.957521309s ago: executing program 1 (id=221): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) 43.116928194s ago: executing program 0 (id=225): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0xc, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b000000850000004000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) getitimer(0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000380)='sys_enter\x00', r6}, 0x18) 42.017007812s ago: executing program 0 (id=226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_usb_connect(0x2, 0x27d, 0x0, 0x0) 41.958071638s ago: executing program 1 (id=228): r0 = socket(0xf, 0x3, 0x100000001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x6) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x33a, 0x258, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0x0, 0x8, 0x0, 0x1, 0x10000000, 0x5, 0x9}}}, @common=@unspec=@statistic={{0x38}, {0x600}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) 41.058101858s ago: executing program 4 (id=231): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) tgkill(r0, r0, 0x1a) 40.354482431s ago: executing program 4 (id=234): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x17, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30000000001000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 39.911485969s ago: executing program 4 (id=236): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 39.435043881s ago: executing program 3 (id=237): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3", 0x27}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4", 0x9e}], 0x2}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)="bd75ab52a196f199f3256d5629fe536582fbb1eab9bf3e6db2ddaabea370784be28f0fa31b270f6da1fd98dff3ca4ab6ec345c7053473c35766bb56fa335e09db73d61b4cb89f1e589c36548621eaa7414d9b52df37d372ee2a4b35445ca39d13ba47a9cba13c693a5033af6af5a8dd033796b685e2abcfd6e7f9d2acfa2668c5a60d947bfe6fc2bf8474c008426e10fc011d3f1259057a963dffb44315c6630c91f39ca549788868d6a8d60edde43e9383c471513a9b184bdd41dfe786ede7521bf56f869b76ce43548f12c50a82be7e1e1fc26b73c44e6a730c41dff61c86233e0", 0xe2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000900)="c25d6e10b66759dcd2275d70fbe825bc9c744627278921bad66b8fd5aecd19f11c", 0x21}, {&(0x7f0000000c00)="ce2d6bb7989520f7476ec0bf14a75a1eb75dcae8e67c5f5ac74be54c5f3e07255ab030494e17ea4946ff0c13b9c30a223b297197ed25c06dc64e5b556f568b95512220d85b31251c0e4eb8", 0x4b}], 0x2}}], 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ef824348f4e1a3747be14d1df9923823c13cddc018f4fe4ad75a6fea974681c44d6541d350e1fcfd11cf56f65426df149bda467abdd7b1f556b7031f852d287dbcfa7e", 0x43}, {&(0x7f00000003c0)="aa9c954d8980a95b50bf5e986af3f3cbdfca466ddf3bdf1549df9ebad42f0abc92024bd2a6530d564ceea82c9caaf1571c86009ac33dbab74023b2b9df96b9a8767f96a0a28d0bc940e8398ac731a5ed4672f272888c334140864a474a6a98c93528b7feb916b0ebd27de250d93fce25d762b6e4936fa6b317b4906a81955155273eb8492bb1b2b1380c1082f6e802ec30f4e24e4ce3aa5e447bc080a8aba23c27be9d131c5e78165097cfba03b120b6e2be16cc4069473363f34d5b17d83ce0c1d1a353e2de16030a7992ed", 0xcc}], 0x2}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)="9d", 0x1}], 0x1}}], 0x2, 0x4000843) 39.402378857s ago: executing program 4 (id=238): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0xc, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b000000850000004000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) getitimer(0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000380)='sys_enter\x00', r6}, 0x18) 39.209922551s ago: executing program 3 (id=239): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) 38.850802441s ago: executing program 4 (id=241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]}) 38.582817567s ago: executing program 2 (id=242): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r5, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d72bf29a7a2800018008000100000000001c00038008000200020000000600010000030000060003005d550000050002"], 0x64}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r2, 0x31f, 0x70bc29, 0x1, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x200040d1}, 0x41800) 38.09156593s ago: executing program 3 (id=243): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x64, r3, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x64}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x14) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 37.826171536s ago: executing program 1 (id=244): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0xa382) r1 = memfd_create(&(0x7f0000001a40)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7\x06\x00\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x82h\xb2\xba0x|Zs\xfcN\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000ff0)={0x0}, 0x2}, 0x4000000) 35.293880161s ago: executing program 3 (id=248): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000a00)="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", &(0x7f0000000040)=""/38}, 0x20) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000900)=""/212, 0xd4}], 0x1, 0xa2, 0x0) 35.28280294s ago: executing program 4 (id=249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x80000000000008f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket(0xa, 0x3, 0x3a) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000600)=@v3={0x3000000, [{0x4, 0x3}, {0xffff, 0xc4}]}, 0x18, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 35.208630552s ago: executing program 2 (id=250): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) 35.208208187s ago: executing program 1 (id=251): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="05000000"], 0x50) 34.864736621s ago: executing program 3 (id=252): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x4e20, @multicast2}}}, 0x88) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r4, 0x0, 0x41000004, 0x0) 34.78389139s ago: executing program 2 (id=253): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r1, 0xd, &(0x7f00000000c0)={0x0, 0x98}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) getsockname$inet(r5, 0x0, &(0x7f0000000040)) 32.9181351s ago: executing program 2 (id=254): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 32.762898654s ago: executing program 2 (id=255): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x4) ioctl(r1, 0x8b27, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, 0x0, 0x0) 26.768689934s ago: executing program 32 (id=226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_usb_connect(0x2, 0x27d, 0x0, 0x0) 21.292051129s ago: executing program 5 (id=257): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a"], 0x48}}, 0x0) 21.110945622s ago: executing program 5 (id=258): r0 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000ff0)={0x0}, 0x2}, 0x4000000) 19.322858304s ago: executing program 33 (id=251): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="05000000"], 0x50) 19.237574425s ago: executing program 34 (id=252): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x4e20, @multicast2}}}, 0x88) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r4, 0x0, 0x41000004, 0x0) 19.092740458s ago: executing program 35 (id=249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x80000000000008f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket(0xa, 0x3, 0x3a) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000600)=@v3={0x3000000, [{0x4, 0x3}, {0xffff, 0xc4}]}, 0x18, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 19.027477229s ago: executing program 5 (id=262): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r2, 0x25, 0x8, @val=@iter={0x0}}, 0x20) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 18.684748513s ago: executing program 5 (id=263): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x0, 0x10, 0xa, {0xa, 0x23, "5cb99e3e60c240d1"}}, 0x0, 0x0, 0x0}, 0x0) 17.554162709s ago: executing program 36 (id=255): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x4) ioctl(r1, 0x8b27, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, 0x0, 0x0) 15.867229892s ago: executing program 5 (id=265): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 15.576013922s ago: executing program 5 (id=266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x4, 0x0, 0x0) 0s ago: executing program 37 (id=266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.15.192' (ED25519) to the list of known hosts. [ 83.424303][ T5819] cgroup: Unknown subsys name 'net' [ 83.560418][ T5819] cgroup: Unknown subsys name 'cpuset' [ 83.569302][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.170671][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.921738][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.930086][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.937705][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.942569][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.953021][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.960578][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.968639][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.975979][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.983211][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.985258][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.999432][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.009110][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.010411][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.016901][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.027065][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.030878][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.051894][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.057304][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.071297][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.078448][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.079411][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.088146][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.093812][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.107342][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.117053][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.650953][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 88.856425][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 89.012027][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 89.023749][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 89.046799][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 89.075762][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.083079][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.091254][ T5830] bridge_slave_0: entered allmulticast mode [ 89.099079][ T5830] bridge_slave_0: entered promiscuous mode [ 89.164969][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.172226][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.179913][ T5831] bridge_slave_0: entered allmulticast mode [ 89.187439][ T5831] bridge_slave_0: entered promiscuous mode [ 89.195483][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.203146][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.210665][ T5830] bridge_slave_1: entered allmulticast mode [ 89.218389][ T5830] bridge_slave_1: entered promiscuous mode [ 89.265322][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.272658][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.280319][ T5831] bridge_slave_1: entered allmulticast mode [ 89.287735][ T5831] bridge_slave_1: entered promiscuous mode [ 89.415103][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.428609][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.472578][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.498060][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.580592][ T5831] team0: Port device team_slave_0 added [ 89.601719][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.609487][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.617448][ T5842] bridge_slave_0: entered allmulticast mode [ 89.624795][ T5842] bridge_slave_0: entered promiscuous mode [ 89.646720][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.653864][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.661494][ T5833] bridge_slave_0: entered allmulticast mode [ 89.669037][ T5833] bridge_slave_0: entered promiscuous mode [ 89.679594][ T5831] team0: Port device team_slave_1 added [ 89.691687][ T5830] team0: Port device team_slave_0 added [ 89.698832][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.706122][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.713316][ T5842] bridge_slave_1: entered allmulticast mode [ 89.721228][ T5842] bridge_slave_1: entered promiscuous mode [ 89.728351][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.735472][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.743238][ T5832] bridge_slave_0: entered allmulticast mode [ 89.750562][ T5832] bridge_slave_0: entered promiscuous mode [ 89.758751][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.766329][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.773495][ T5833] bridge_slave_1: entered allmulticast mode [ 89.780947][ T5833] bridge_slave_1: entered promiscuous mode [ 89.816210][ T5830] team0: Port device team_slave_1 added [ 89.834699][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.842433][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.849960][ T5832] bridge_slave_1: entered allmulticast mode [ 89.857806][ T5832] bridge_slave_1: entered promiscuous mode [ 89.964156][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.976710][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.987161][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.994132][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.020546][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.032887][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.040310][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.066318][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.077751][ T5143] Bluetooth: hci1: command tx timeout [ 90.086727][ T5143] Bluetooth: hci2: command tx timeout [ 90.088004][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.103968][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.117321][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.139618][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.146912][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.173068][ T5845] Bluetooth: hci0: command tx timeout [ 90.173079][ T5838] Bluetooth: hci3: command tx timeout [ 90.174972][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.179027][ T5143] Bluetooth: hci4: command tx timeout [ 90.209849][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.216870][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.243086][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.257047][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.310394][ T5833] team0: Port device team_slave_0 added [ 90.320477][ T5833] team0: Port device team_slave_1 added [ 90.362284][ T5832] team0: Port device team_slave_0 added [ 90.399563][ T5842] team0: Port device team_slave_0 added [ 90.421664][ T5832] team0: Port device team_slave_1 added [ 90.459391][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.466724][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.492871][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.506417][ T5842] team0: Port device team_slave_1 added [ 90.530574][ T5831] hsr_slave_0: entered promiscuous mode [ 90.537392][ T5831] hsr_slave_1: entered promiscuous mode [ 90.572202][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.579473][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.605757][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.646172][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.653130][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.679595][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.691400][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.699174][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.725484][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.738412][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.745373][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.771646][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.788327][ T5830] hsr_slave_0: entered promiscuous mode [ 90.794643][ T5830] hsr_slave_1: entered promiscuous mode [ 90.801444][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.809242][ T5830] Cannot create hsr debugfs directory [ 90.837601][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.844586][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.870593][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.010193][ T5833] hsr_slave_0: entered promiscuous mode [ 91.017350][ T5833] hsr_slave_1: entered promiscuous mode [ 91.023474][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.031142][ T5833] Cannot create hsr debugfs directory [ 91.057098][ T5842] hsr_slave_0: entered promiscuous mode [ 91.063620][ T5842] hsr_slave_1: entered promiscuous mode [ 91.070298][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.078407][ T5842] Cannot create hsr debugfs directory [ 91.163447][ T5832] hsr_slave_0: entered promiscuous mode [ 91.170675][ T5832] hsr_slave_1: entered promiscuous mode [ 91.177031][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.184598][ T5832] Cannot create hsr debugfs directory [ 91.687657][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.701662][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.721494][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.740466][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.776451][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.813290][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.838742][ T976] cfg80211: failed to load regulatory.db [ 91.841629][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.864537][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.919903][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.945353][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.960120][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.974990][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.090631][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.102435][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.115479][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.131787][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.156552][ T5845] Bluetooth: hci1: command tx timeout [ 92.159431][ T5143] Bluetooth: hci2: command tx timeout [ 92.236980][ T5143] Bluetooth: hci4: command tx timeout [ 92.238957][ T5845] Bluetooth: hci0: command tx timeout [ 92.242459][ T5838] Bluetooth: hci3: command tx timeout [ 92.272790][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.289662][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.301691][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.314232][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.332685][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.385153][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.423324][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.436469][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.443748][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.504944][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.512093][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.537345][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.578961][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.614040][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.624698][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.651591][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.658776][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.674596][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.681771][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.708474][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.715804][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.744734][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.751938][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.783569][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.833142][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.840313][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.883787][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.891034][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.922834][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.051141][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.093554][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.100743][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.142384][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.149610][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.294852][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.432073][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.494524][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.632822][ T5830] veth0_vlan: entered promiscuous mode [ 93.652796][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.709165][ T5830] veth1_vlan: entered promiscuous mode [ 93.722803][ T5831] veth0_vlan: entered promiscuous mode [ 93.782202][ T5831] veth1_vlan: entered promiscuous mode [ 93.868225][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.925185][ T5831] veth0_macvtap: entered promiscuous mode [ 93.950529][ T5832] veth0_vlan: entered promiscuous mode [ 93.961922][ T5831] veth1_macvtap: entered promiscuous mode [ 93.979723][ T5832] veth1_vlan: entered promiscuous mode [ 93.991312][ T5830] veth0_macvtap: entered promiscuous mode [ 94.015580][ T5830] veth1_macvtap: entered promiscuous mode [ 94.039822][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.072904][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.085364][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.105100][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.117722][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.125308][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.137116][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.148752][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.180001][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.189810][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.198570][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.207907][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.231510][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.240660][ T5143] Bluetooth: hci2: command tx timeout [ 94.242874][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.247670][ T5838] Bluetooth: hci1: command tx timeout [ 94.261153][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.269907][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.293918][ T5833] veth0_vlan: entered promiscuous mode [ 94.301110][ T5832] veth0_macvtap: entered promiscuous mode [ 94.317130][ T5838] Bluetooth: hci3: command tx timeout [ 94.322582][ T5143] Bluetooth: hci0: command tx timeout [ 94.322592][ T5845] Bluetooth: hci4: command tx timeout [ 94.340822][ T5832] veth1_macvtap: entered promiscuous mode [ 94.384224][ T5842] veth0_vlan: entered promiscuous mode [ 94.393552][ T5833] veth1_vlan: entered promiscuous mode [ 94.418653][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.431452][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.442822][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.453992][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.465343][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.477957][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.488954][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.498830][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.509396][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.520676][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.563769][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.575287][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.584222][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.592997][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.604981][ T5842] veth1_vlan: entered promiscuous mode [ 94.680799][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.699556][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.736971][ T5833] veth0_macvtap: entered promiscuous mode [ 94.747959][ T5833] veth1_macvtap: entered promiscuous mode [ 94.759220][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.767982][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.840420][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.841507][ T5842] veth0_macvtap: entered promiscuous mode [ 94.866330][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.881832][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.896603][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.911962][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.922516][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.932389][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.942960][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.954218][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.013715][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.014527][ T5842] veth1_macvtap: entered promiscuous mode [ 95.023740][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.035338][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.053082][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.063003][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.076122][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.086267][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.096974][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.110794][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.136329][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.152224][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.162979][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.176615][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.187807][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.198452][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.209084][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.219015][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.229547][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.240958][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.256488][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.265243][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.274309][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.285745][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.304159][ T3000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.328127][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.346245][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.375947][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.391770][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.406074][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.415964][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.426483][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.437797][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.448847][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.461928][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.474565][ T5918] process 'syz.2.3' launched './file0' with NULL argv: empty string added [ 95.490299][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.505616][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.514353][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.532783][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.713946][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.756389][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.240281][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.329958][ T5838] Bluetooth: hci2: command tx timeout [ 96.335961][ T5143] Bluetooth: hci1: command tx timeout [ 96.396372][ T5838] Bluetooth: hci0: command tx timeout [ 96.403729][ T5143] Bluetooth: hci4: command tx timeout [ 96.409493][ T5838] Bluetooth: hci3: command tx timeout [ 96.442516][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.606057][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.613930][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.731717][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.765416][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.865885][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.889912][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.804436][ T5962] input: syz0 as /devices/virtual/input/input5 [ 98.816136][ T5962] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.632364][ T6016] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.835754][ T59] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.495777][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.532352][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.544284][ T6036] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.580749][ T59] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 103.645498][ T59] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.668011][ T59] usb 2-1: config 0 descriptor?? [ 103.725063][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.732803][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.740827][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.748722][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.756696][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.764165][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.783800][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.791756][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.799906][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.808028][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.815917][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.823383][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.833715][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.841698][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.849752][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.858332][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.866298][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.873824][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.891243][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.901327][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.910419][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.918488][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.926587][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.936623][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.944159][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.952192][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.960109][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.974435][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.985212][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.992981][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.003317][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.015209][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.032602][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.041185][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.052053][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.061249][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.068956][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.076989][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.086337][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.096002][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.105132][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.114234][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.124124][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.150587][ T5824] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 104.162512][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'. [ 104.514895][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 104.532243][ T6039] tipc: Started in network mode [ 104.537862][ T6039] tipc: Node identity 1, cluster identity 4711 [ 104.544065][ T6039] tipc: Node number set to 1 [ 104.723199][ T59] uclogic 0003:256C:006D.0002: interface is invalid, ignoring [ 104.782159][ T59] usb 2-1: USB disconnect, device number 2 [ 107.217223][ T6065] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 107.375903][ T1320] Bluetooth: hci5: Frame reassembly failed (-84) [ 107.399435][ T1320] Bluetooth: hci5: Frame reassembly failed (-84) [ 107.875651][ T5940] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.715850][ T5940] usb 3-1: Using ep0 maxpacket: 8 [ 108.721223][ T5143] Bluetooth: hci5: command 0x1003 tx timeout [ 108.756487][ T5838] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 108.925178][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.124663][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.157978][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.270989][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.320844][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.379976][ T9] usb 5-1: Product: syz [ 109.395718][ T9] usb 5-1: Manufacturer: syz [ 109.400401][ T9] usb 5-1: SerialNumber: syz [ 110.415752][ T6049] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.469592][ T5940] usb 3-1: device descriptor read/all, error -71 [ 110.910619][ T6049] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.187419][ T6049] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.369309][ T6049] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 111.399148][ T6049] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.472845][ T6049] usb 4-1: config 0 descriptor?? [ 111.708408][ T9] cdc_ncm 5-1:1.0: bind() failure [ 111.735928][ T9] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 111.788124][ T9] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 112.371338][ T9] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 112.394247][ T9] usb 5-1: USB disconnect, device number 2 [ 112.822365][ T6124] netlink: 144 bytes leftover after parsing attributes in process `syz.1.52'. [ 113.367117][ T6049] uclogic 0003:256C:006D.0003: interface is invalid, ignoring [ 113.688844][ T6049] usb 4-1: USB disconnect, device number 2 [ 115.391900][ T6140] bridge_slave_0: left allmulticast mode [ 115.490493][ T6140] bridge_slave_0: left promiscuous mode [ 115.564006][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 115.615056][ T6140] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.723103][ T6140] bridge_slave_1: left allmulticast mode [ 115.763956][ T6140] bridge_slave_1: left promiscuous mode [ 115.797538][ T6140] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.932974][ T6140] bond0: (slave bond_slave_0): Releasing backup interface [ 116.001195][ T6140] bond0: (slave bond_slave_1): Releasing backup interface [ 116.604959][ T6140] team0: Port device team_slave_0 removed [ 116.963177][ T5886] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 117.082702][ T6140] team0: Port device team_slave_1 removed [ 117.273604][ T6140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.315817][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 117.325654][ T6140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.343302][ T5886] usb 5-1: config 0 has an invalid interface number: 163 but max is 0 [ 117.356293][ T5886] usb 5-1: config 0 has no interface number 0 [ 117.362426][ T5886] usb 5-1: config 0 interface 163 has no altsetting 0 [ 117.367963][ T6140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.376880][ T5886] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=86.8d [ 117.409684][ T6140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.419684][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.458951][ T5886] usb 5-1: config 0 descriptor?? [ 117.641666][ T6159] bridge_slave_0: left allmulticast mode [ 117.709318][ T6159] bridge_slave_0: left promiscuous mode [ 117.740257][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.809026][ T6159] bridge_slave_1: left allmulticast mode [ 117.815090][ T6159] bridge_slave_1: left promiscuous mode [ 117.821466][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.846562][ T6159] bond0: (slave bond_slave_0): Releasing backup interface [ 117.859374][ T6159] bond0: (slave bond_slave_1): Releasing backup interface [ 117.881167][ T6159] team0: Failed to send options change via netlink (err -105) [ 117.889858][ T6159] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 117.912465][ T6159] team0: Port device team_slave_0 removed [ 117.945243][ T6159] team0: Failed to send options change via netlink (err -105) [ 117.953997][ T6159] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 117.979807][ T6159] team0: Port device team_slave_1 removed [ 117.998439][ T6159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.023377][ T6159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.854615][ T6159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.855019][ T5887] usb 5-1: USB disconnect, device number 3 [ 119.878975][ T6159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.557493][ T30] audit: type=1326 audit(1743894819.988:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6192 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3af8d169 code=0x7ffc0000 [ 121.587688][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'. [ 121.615462][ T6191] bridge_slave_0: left allmulticast mode [ 121.652331][ T30] audit: type=1326 audit(1743894820.008:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6192 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7efd3af8d169 code=0x7ffc0000 [ 121.658348][ T6191] bridge_slave_0: left promiscuous mode [ 121.929234][ T30] audit: type=1326 audit(1743894820.008:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6192 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3af8d169 code=0x7ffc0000 [ 122.167057][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.625722][ T30] audit: type=1326 audit(1743894820.008:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6192 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3af8d169 code=0x7ffc0000 [ 122.713624][ T6191] bridge_slave_1: left allmulticast mode [ 122.814497][ T6191] bridge_slave_1: left promiscuous mode [ 123.330916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 123.340130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.433293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 123.442515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.535703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 123.946272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.111276][ T30] audit: type=1326 audit(1743894820.008:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6192 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd3af8d169 code=0x7ffc0000 [ 124.133251][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.156032][ T30] audit: type=1326 audit(1743894820.008:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6192 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3af8d169 code=0x7ffc0000 [ 124.179757][ T30] audit: type=1326 audit(1743894820.008:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6192 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3af8d169 code=0x7ffc0000 [ 124.227951][ T30] audit: type=1326 audit(1743894820.028:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6192 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd3af8d169 code=0x7ffc0000 [ 124.294199][ T6191] bond0: (slave bond_slave_0): Releasing backup interface [ 124.335135][ T30] audit: type=1326 audit(1743894820.028:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6192 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3af8d169 code=0x7ffc0000 [ 124.571625][ T30] audit: type=1326 audit(1743894820.028:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6192 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3af8d169 code=0x7ffc0000 [ 124.601213][ T6215] netlink: 277 bytes leftover after parsing attributes in process `syz.3.75'. [ 124.618198][ T6191] bond0: (slave bond_slave_1): Releasing backup interface [ 124.728405][ T6218] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.746692][ T6191] team0: Port device team_slave_0 removed [ 124.888136][ T6191] team0: Port device team_slave_1 removed [ 124.946054][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.954302][ T6191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.981678][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.990064][ T6191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.251229][ T6195] vlan0: entered promiscuous mode [ 125.461750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.470757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.537275][ T6223] input: syz0 as /devices/virtual/input/input6 [ 125.890964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 126.095884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 126.995609][ T6237] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.288466][ T6241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.84'. [ 128.656827][ T6244] xt_hashlimit: max too large, truncated to 1048576 [ 130.012741][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 130.105025][ T6259] vlan0: entered promiscuous mode [ 131.975206][ T6273] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.817764][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.824441][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.497913][ T6280] input: syz0 as /devices/virtual/input/input7 [ 138.789039][ T6323] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.264877][ T6330] input: syz0 as /devices/virtual/input/input8 [ 139.657891][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 139.657913][ T30] audit: type=1326 audit(1743894838.098:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6334 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68cf8d169 code=0x7ffc0000 [ 141.730099][ T6353] mmap: syz.4.115 (6353) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 144.133005][ T30] audit: type=1326 audit(1743894842.568:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6372 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3af8d169 code=0x7ffc0000 [ 144.244603][ T30] audit: type=1326 audit(1743894842.568:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6372 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3af8d169 code=0x7ffc0000 [ 144.374950][ T6375] netlink: 32 bytes leftover after parsing attributes in process `syz.2.122'. [ 144.452559][ T6375] Zero length message leads to an empty skb [ 144.552116][ T6377] input: syz0 as /devices/virtual/input/input9 [ 145.053170][ T6386] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.040232][ T30] audit: type=1326 audit(1743894845.488:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6410 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28478d169 code=0x7ffc0000 [ 147.138223][ T30] audit: type=1326 audit(1743894845.508:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6410 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28478d169 code=0x7ffc0000 [ 147.336062][ T30] audit: type=1326 audit(1743894845.788:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6414 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68cf8d169 code=0x7ffc0000 [ 147.420259][ T30] audit: type=1326 audit(1743894845.808:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6414 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68cf8d169 code=0x7ffc0000 [ 147.485680][ T30] audit: type=1326 audit(1743894845.848:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6414 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd68cf8d169 code=0x7ffc0000 [ 147.606320][ T30] audit: type=1326 audit(1743894845.848:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6414 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68cf8d169 code=0x7ffc0000 [ 147.637794][ T30] audit: type=1326 audit(1743894845.848:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6414 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68cf8d169 code=0x7ffc0000 [ 147.666272][ T30] audit: type=1326 audit(1743894845.848:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6414 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd68cf8d169 code=0x7ffc0000 [ 147.691966][ T30] audit: type=1326 audit(1743894845.848:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6414 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68cf8d169 code=0x7ffc0000 [ 147.730904][ T30] audit: type=1326 audit(1743894845.848:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6414 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68cf8d169 code=0x7ffc0000 [ 148.098189][ T976] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 148.265637][ T976] usb 3-1: Using ep0 maxpacket: 16 [ 148.277873][ T976] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.315592][ T976] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.354183][ T976] usb 3-1: config 0 interface 0 has no altsetting 0 [ 148.381493][ T976] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 148.431087][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.460740][ T976] usb 3-1: config 0 descriptor?? [ 149.563393][ T976] hid (null): unknown global tag 0xe [ 150.544059][ T976] hid (null): report_id 1564596566 is invalid [ 150.563997][ T976] hid (null): unknown global tag 0xc [ 150.707577][ T976] usb 3-1: USB disconnect, device number 4 [ 153.857713][ T6448] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.909746][ T6435] warning: `syz.1.141' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 159.005625][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 159.622672][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.645585][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 159.654760][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.680086][ T9] usb 4-1: config 0 descriptor?? [ 160.739439][ T9] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 160.804975][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0005/input/input10 [ 160.927363][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'. [ 161.087217][ T9] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 161.157862][ T9] usb 4-1: USB disconnect, device number 3 [ 161.371934][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.157'. [ 166.303349][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 166.303369][ T30] audit: type=1326 audit(1743895317.752:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6538 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750658d169 code=0x7ffc0000 [ 166.436222][ T30] audit: type=1326 audit(1743895317.782:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6538 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750658d169 code=0x7ffc0000 [ 166.515576][ T30] audit: type=1326 audit(1743895317.792:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6538 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f750658d169 code=0x7ffc0000 [ 166.614550][ T30] audit: type=1326 audit(1743895317.792:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6538 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750658d169 code=0x7ffc0000 [ 166.712612][ T30] audit: type=1326 audit(1743895317.792:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6538 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750658d169 code=0x7ffc0000 [ 166.737602][ T30] audit: type=1326 audit(1743895317.792:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6538 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f750658d169 code=0x7ffc0000 [ 166.760574][ T30] audit: type=1326 audit(1743895317.792:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6538 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750658d169 code=0x7ffc0000 [ 166.783398][ T30] audit: type=1326 audit(1743895317.792:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6538 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f750658d169 code=0x7ffc0000 [ 166.823946][ T30] audit: type=1326 audit(1743895317.802:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6538 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750658d169 code=0x7ffc0000 [ 166.845729][ T5886] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 166.877532][ T30] audit: type=1326 audit(1743895317.802:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6538 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f750658d169 code=0x7ffc0000 [ 167.028133][ T5886] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.049331][ T5886] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.077345][ T5886] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 167.087118][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 167.107627][ T5886] usb 4-1: SerialNumber: syz [ 167.653343][ T5886] usb 4-1: 0:2 : does not exist [ 167.709938][ T5886] usb 4-1: USB disconnect, device number 4 [ 167.982997][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.064027][ T6614] capability: warning: `syz.0.197' uses 32-bit capabilities (legacy support in use) [ 173.685199][ T6619] input: syz0 as /devices/virtual/input/input11 [ 178.049860][ T6654] input: syz0 as /devices/virtual/input/input12 [ 178.535691][ T6663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.635859][ T6663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.345841][ T6667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.475648][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 179.475674][ T30] audit: type=1326 audit(1743895330.922:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6670 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d358d169 code=0x7ffc0000 [ 179.520294][ T6671] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.551132][ T30] audit: type=1326 audit(1743895330.942:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6670 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d358d169 code=0x7ffc0000 [ 180.718319][ T30] audit: type=1326 audit(1743895332.162:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6684 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28478d169 code=0x7ffc0000 [ 180.836992][ T30] audit: type=1326 audit(1743895332.162:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6684 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28478d169 code=0x7ffc0000 [ 180.897063][ T30] audit: type=1326 audit(1743895332.192:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6684 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff28478d169 code=0x7ffc0000 [ 180.929091][ T30] audit: type=1326 audit(1743895332.192:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6684 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28478d169 code=0x7ffc0000 [ 180.955254][ T30] audit: type=1326 audit(1743895332.202:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6684 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff28478d169 code=0x7ffc0000 [ 181.021945][ T30] audit: type=1326 audit(1743895332.202:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6684 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28478d169 code=0x7ffc0000 [ 181.077980][ T6692] input: syz0 as /devices/virtual/input/input13 [ 181.122613][ T30] audit: type=1326 audit(1743895332.212:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6684 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff28478bad0 code=0x7ffc0000 [ 181.292982][ T6695] xt_TPROXY: Can be used only with -p tcp or -p udp [ 181.800073][ T30] audit: type=1326 audit(1743895332.212:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6684 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28478d169 code=0x7ffc0000 [ 182.613844][ T6708] xt_hashlimit: max too large, truncated to 1048576 [ 183.345030][ T6715] netlink: 'syz.2.232': attribute type 11 has an invalid length. [ 183.382259][ T6715] netlink: 224 bytes leftover after parsing attributes in process `syz.2.232'. [ 183.754559][ T6719] netlink: 'syz.2.233': attribute type 11 has an invalid length. [ 183.803923][ T6719] netlink: 224 bytes leftover after parsing attributes in process `syz.2.233'. [ 184.292810][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'. [ 184.312213][ T6724] netlink: 'syz.4.236': attribute type 11 has an invalid length. [ 184.398191][ T6724] netlink: 224 bytes leftover after parsing attributes in process `syz.4.236'. [ 184.843018][ T6730] input: syz0 as /devices/virtual/input/input14 [ 186.820511][ T6760] netlink: 'syz.2.246': attribute type 11 has an invalid length. [ 186.889541][ T6760] netlink: 224 bytes leftover after parsing attributes in process `syz.2.246'. [ 191.736132][ T6791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.251'. [ 192.695656][ T6797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'. [ 193.705510][ C1] sched: DL replenish lagged too much [ 194.255687][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.262125][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.982259][ T6697] Set syz1 is full, maxelem 65536 reached [ 198.010957][ T5143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 198.019284][ T5143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 198.027926][ T5143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 198.044067][ T5143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 198.052492][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 198.372324][ T6803] chnl_net:caif_netlink_parms(): no params data found [ 198.615402][ T6803] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.627972][ T6803] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.635234][ T6803] bridge_slave_0: entered allmulticast mode [ 198.652170][ T6803] bridge_slave_0: entered promiscuous mode [ 198.663135][ T6803] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.674631][ T6803] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.683087][ T6803] bridge_slave_1: entered allmulticast mode [ 198.695401][ T6803] bridge_slave_1: entered promiscuous mode [ 198.801294][ T6803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.823220][ T6803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.931702][ T6803] team0: Port device team_slave_0 added [ 198.950241][ T6803] team0: Port device team_slave_1 added [ 199.047724][ T6803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.054730][ T6803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.091294][ T6803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.113289][ T6803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.122769][ T6803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.154608][ T6803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.331606][ T6803] hsr_slave_0: entered promiscuous mode [ 199.338465][ T6803] hsr_slave_1: entered promiscuous mode [ 199.344902][ T6803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.358116][ T6803] Cannot create hsr debugfs directory [ 199.703674][ T6803] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.732511][ T6803] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 199.766355][ T6803] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 199.786833][ T6803] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 199.948858][ T6803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.012751][ T6803] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.032785][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.040648][ T5984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.075923][ T5838] Bluetooth: hci3: command tx timeout [ 200.103230][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.110430][ T5984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.302171][ T993] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.663252][ T6803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.049923][ T6803] veth0_vlan: entered promiscuous mode [ 201.072573][ T6803] veth1_vlan: entered promiscuous mode [ 201.149843][ T6803] veth0_macvtap: entered promiscuous mode [ 201.167404][ T6803] veth1_macvtap: entered promiscuous mode [ 201.213889][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.229405][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.240208][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.255647][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.268816][ T6803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.295562][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.312502][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.327251][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.342747][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.362358][ T6803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.385909][ T6803] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.395335][ T6803] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.411533][ T6803] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.424749][ T6803] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.604451][ T5983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.633943][ T5983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.703642][ T5995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.718976][ T5995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.166291][ T5838] Bluetooth: hci3: command tx timeout [ 202.613613][ T993] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.743563][ T6826] netlink: 12 bytes leftover after parsing attributes in process `syz.5.257'. [ 204.236008][ T5838] Bluetooth: hci3: command tx timeout [ 205.705608][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 205.779023][ T993] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.947696][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.983534][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.045564][ T9] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 206.095554][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.149306][ T9] usb 6-1: config 0 descriptor?? [ 206.253533][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 206.338734][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 206.347460][ T5838] Bluetooth: hci3: command tx timeout [ 206.426893][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 206.436818][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 206.444551][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 206.452780][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 206.465756][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 206.500170][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 206.517962][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 206.528729][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 206.687507][ T5845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 206.696965][ T5845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 206.725526][ T5845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 206.736120][ T5845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 206.744051][ T5845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 207.238399][ T9] uclogic 0003:256C:006D.0006: interface is invalid, ignoring [ 207.455288][ T9] usb 6-1: USB disconnect, device number 2 [ 208.161978][ T5845] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 208.174323][ T5845] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 208.182991][ T5845] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 208.200976][ T5845] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 208.209355][ T5845] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 208.565755][ T5845] Bluetooth: hci6: command tx timeout [ 208.635907][ T5845] Bluetooth: hci5: command tx timeout [ 208.718756][ T6838] chnl_net:caif_netlink_parms(): no params data found [ 208.794894][ T6845] chnl_net:caif_netlink_parms(): no params data found [ 208.805582][ T5845] Bluetooth: hci7: command tx timeout [ 209.297266][ T6840] chnl_net:caif_netlink_parms(): no params data found [ 209.732950][ T6838] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.745862][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.788902][ T6838] bridge_slave_0: entered allmulticast mode [ 209.817864][ T6838] bridge_slave_0: entered promiscuous mode [ 210.053554][ T6838] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.095963][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.136664][ T6838] bridge_slave_1: entered allmulticast mode [ 210.168267][ T6838] bridge_slave_1: entered promiscuous mode [ 210.238551][ T5839] Bluetooth: hci8: command tx timeout [ 210.452038][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.495940][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.503323][ T6845] bridge_slave_0: entered allmulticast mode [ 210.562387][ T6845] bridge_slave_0: entered promiscuous mode [ 210.645586][ T5839] Bluetooth: hci6: command tx timeout [ 210.715837][ T5839] Bluetooth: hci5: command tx timeout [ 210.841093][ T993] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.876048][ T5839] Bluetooth: hci7: command tx timeout [ 211.085682][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.124301][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.152860][ T6845] bridge_slave_1: entered allmulticast mode [ 211.179516][ T6845] bridge_slave_1: entered promiscuous mode [ 211.191517][ T6838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.388038][ T6838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.407710][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.423489][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.432538][ T6840] bridge_slave_0: entered allmulticast mode [ 211.454990][ T6840] bridge_slave_0: entered promiscuous mode [ 211.682698][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 211.756485][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 211.762557][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 211.768808][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 211.826857][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.834053][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.850543][ T6840] bridge_slave_1: entered allmulticast mode [ 211.870005][ T6840] bridge_slave_1: entered promiscuous mode [ 211.902216][ T6845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.933536][ T6838] team0: Port device team_slave_0 added [ 212.026040][ T6845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.049093][ T6838] team0: Port device team_slave_1 added [ 212.317181][ T5850] Bluetooth: hci8: command tx timeout [ 212.444833][ T6840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.488680][ T6840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.585649][ T6838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.592671][ T6838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.632735][ T6838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.662159][ T6845] team0: Port device team_slave_0 added [ 212.721074][ T5850] Bluetooth: hci6: command tx timeout [ 212.734572][ T6854] chnl_net:caif_netlink_parms(): no params data found [ 212.763457][ T6838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.776153][ T6838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.811630][ T5850] Bluetooth: hci5: command tx timeout [ 212.822424][ T6838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.849977][ T6845] team0: Port device team_slave_1 added [ 212.933159][ T6840] team0: Port device team_slave_0 added [ 212.955902][ T5850] Bluetooth: hci7: command tx timeout [ 213.114423][ T6840] team0: Port device team_slave_1 added [ 213.205272][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.222121][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.255554][ T6845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.464184][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.481602][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.536809][ T6845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.659748][ T6838] hsr_slave_0: entered promiscuous mode [ 213.708753][ T6838] hsr_slave_1: entered promiscuous mode [ 213.724535][ T6838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.732188][ T6838] Cannot create hsr debugfs directory [ 213.843462][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.864354][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.902633][ T6840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.201403][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.215587][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.252931][ T6840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.361049][ T6845] hsr_slave_0: entered promiscuous mode [ 214.377174][ T6845] hsr_slave_1: entered promiscuous mode [ 214.384554][ T6845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.395639][ T5850] Bluetooth: hci8: command tx timeout [ 214.410376][ T6845] Cannot create hsr debugfs directory [ 214.750873][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.765988][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.773274][ T6854] bridge_slave_0: entered allmulticast mode [ 214.796137][ T5850] Bluetooth: hci6: command tx timeout [ 214.803632][ T6854] bridge_slave_0: entered promiscuous mode [ 214.826783][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.834329][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.845854][ T6854] bridge_slave_1: entered allmulticast mode [ 214.863534][ T6854] bridge_slave_1: entered promiscuous mode [ 214.877673][ T5850] Bluetooth: hci5: command tx timeout [ 215.035919][ T5850] Bluetooth: hci7: command tx timeout [ 215.197253][ T6840] hsr_slave_0: entered promiscuous mode [ 215.204757][ T6840] hsr_slave_1: entered promiscuous mode [ 215.240039][ T6840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.275700][ T6840] Cannot create hsr debugfs directory [ 215.281517][ T993] bridge_slave_1: left allmulticast mode [ 215.305575][ T993] bridge_slave_1: left promiscuous mode [ 215.312476][ T993] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.404571][ T993] bridge_slave_0: left allmulticast mode [ 215.430599][ T993] bridge_slave_0: left promiscuous mode [ 215.452026][ T993] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.476103][ T5850] Bluetooth: hci8: command tx timeout [ 220.579803][ T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.611892][ T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.634160][ T993] bond0 (unregistering): Released all slaves [ 220.772207][ T6854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.804424][ T6854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.258416][ T6854] team0: Port device team_slave_0 added [ 221.491821][ T6854] team0: Port device team_slave_1 added [ 221.904430][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.936096][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.005532][ T6854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.206355][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.213355][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.333948][ T6854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.833630][ T6854] hsr_slave_0: entered promiscuous mode [ 222.846702][ T6854] hsr_slave_1: entered promiscuous mode [ 222.862019][ T6854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.873812][ T6854] Cannot create hsr debugfs directory [ 223.070753][ T6838] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 223.136181][ T993] tipc: Left network mode [ 223.269830][ T6838] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 223.518000][ T6838] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 223.615127][ T6838] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 223.799720][ T6845] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 223.916944][ T6845] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 224.219115][ T6845] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 224.277030][ T6845] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 224.686068][ T6840] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 224.834203][ T6840] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 225.030852][ T6840] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 225.089364][ T6840] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 225.467794][ T6838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.478554][ T6854] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 225.577354][ T6854] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 225.612776][ T5838] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 225.621739][ T5838] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 225.630432][ T5838] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 225.644314][ T5838] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 225.657013][ T5838] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 225.836689][ T6854] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 225.877693][ T6854] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 225.952336][ T6838] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.139315][ T6845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.335118][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.342338][ T5983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.410363][ T6845] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.468861][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.476073][ T5983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.601959][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.609174][ T5983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.775915][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.783081][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.355007][ T6840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.525021][ T6854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.722781][ T6840] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.756032][ T5838] Bluetooth: hci9: command tx timeout [ 227.951885][ T6854] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.002140][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.009415][ T5995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.440995][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.448208][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.545321][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.552577][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.624394][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.631600][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.824268][ T6845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.835830][ T5838] Bluetooth: hci9: command tx timeout [ 231.915853][ T5838] Bluetooth: hci9: command tx timeout [ 234.055588][ T5838] Bluetooth: hci9: command tx timeout [ 234.263174][ T6931] chnl_net:caif_netlink_parms(): no params data found [ 255.687802][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.694145][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.058343][ T993] hsr_slave_0: left promiscuous mode [ 262.535943][ T993] hsr_slave_1: left promiscuous mode [ 262.591038][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.610787][ T993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.870092][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.890972][ T993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.583614][ T993] veth1_macvtap: left promiscuous mode [ 264.615900][ T993] veth0_macvtap: left promiscuous mode [ 264.622498][ T993] veth1_vlan: left promiscuous mode [ 264.665909][ T993] veth0_vlan: left promiscuous mode [ 267.938590][ T5850] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 267.958985][ T5850] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 267.967281][ T5850] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 267.975641][ T5850] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 267.985313][ T5850] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 268.083636][ T5838] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 268.097749][ T5838] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 268.113746][ T5838] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 268.122461][ T5838] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 268.131572][ T5838] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 268.184213][ T5850] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 268.195867][ T5850] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 268.204448][ T5850] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 268.216653][ T5850] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 268.224622][ T5850] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 268.573802][ T5850] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 268.582593][ T5850] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 268.593747][ T5850] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 268.602264][ T5850] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 268.627456][ T5850] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 270.075669][ T5850] Bluetooth: hci10: command tx timeout [ 270.164703][ T5850] Bluetooth: hci11: command tx timeout [ 270.316336][ T5850] Bluetooth: hci12: command tx timeout [ 270.716250][ T5850] Bluetooth: hci13: command tx timeout [ 272.155950][ T5850] Bluetooth: hci10: command tx timeout [ 272.246087][ T5850] Bluetooth: hci11: command tx timeout [ 272.396139][ T5850] Bluetooth: hci12: command tx timeout [ 272.795960][ T5850] Bluetooth: hci13: command tx timeout [ 274.236220][ T5850] Bluetooth: hci10: command tx timeout [ 274.315896][ T5850] Bluetooth: hci11: command tx timeout [ 274.475806][ T5850] Bluetooth: hci12: command tx timeout [ 274.876290][ T5838] Bluetooth: hci13: command tx timeout [ 276.325984][ T5850] Bluetooth: hci10: command tx timeout [ 276.405930][ T5850] Bluetooth: hci11: command tx timeout [ 276.556315][ T5850] Bluetooth: hci12: command tx timeout [ 276.974973][ T5850] Bluetooth: hci13: command tx timeout [ 285.094103][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.104584][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.118663][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.127514][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.140072][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 286.585928][ T993] team0 (unregistering): Port device team_slave_1 removed [ 286.734992][ T993] team0 (unregistering): Port device team_slave_0 removed [ 287.199349][ T5845] Bluetooth: hci0: command tx timeout [ 289.305561][ T5845] Bluetooth: hci0: command tx timeout [ 291.355727][ T5845] Bluetooth: hci0: command tx timeout [ 293.435891][ T5845] Bluetooth: hci0: command tx timeout [ 317.132797][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.144541][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.602310][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 329.616665][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 329.624453][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 329.632505][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 329.640496][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 329.876177][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 329.889425][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 329.897174][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 329.910351][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 329.918211][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 330.044836][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 330.055253][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 330.063340][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 330.072780][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 330.081919][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 330.222737][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 330.246485][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 330.257323][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 330.265397][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 330.273458][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 331.755793][ T5845] Bluetooth: hci1: command tx timeout [ 331.995962][ T5845] Bluetooth: hci2: command tx timeout [ 332.156199][ T5845] Bluetooth: hci3: command tx timeout [ 332.315777][ T5845] Bluetooth: hci4: command tx timeout [ 333.836134][ T5845] Bluetooth: hci1: command tx timeout [ 334.076032][ T5845] Bluetooth: hci2: command tx timeout [ 334.236096][ T5845] Bluetooth: hci3: command tx timeout [ 334.399138][ T5845] Bluetooth: hci4: command tx timeout [ 335.926201][ T5845] Bluetooth: hci1: command tx timeout [ 336.166029][ T5845] Bluetooth: hci2: command tx timeout [ 336.315755][ T5845] Bluetooth: hci3: command tx timeout [ 336.475560][ T5845] Bluetooth: hci4: command tx timeout [ 337.995926][ T5845] Bluetooth: hci1: command tx timeout [ 338.235892][ T5850] Bluetooth: hci2: command tx timeout [ 338.396033][ T5845] Bluetooth: hci3: command tx timeout [ 338.555762][ T5845] Bluetooth: hci4: command tx timeout [ 345.550138][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 345.559197][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 345.569889][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 345.578811][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 345.586704][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.675846][ T5850] Bluetooth: hci5: command tx timeout [ 349.756175][ T5850] Bluetooth: hci5: command tx timeout [ 351.835782][ T5850] Bluetooth: hci5: command tx timeout [ 353.915752][ T5850] Bluetooth: hci5: command tx timeout [ 378.567357][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.573707][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.026553][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 390.036298][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 390.044253][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 390.057842][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 390.082437][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 390.810830][ T7010] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 390.820846][ T7010] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 390.829733][ T7010] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 390.838678][ T7010] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 390.846692][ T7010] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 390.888041][ T5849] Bluetooth: hci11: command 0x0406 tx timeout [ 390.894203][ T5849] Bluetooth: hci10: command 0x0406 tx timeout [ 390.904377][ T5849] Bluetooth: hci12: command 0x0406 tx timeout [ 390.910687][ T5849] Bluetooth: hci13: command 0x0406 tx timeout [ 391.005140][ T5839] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 391.015187][ T5839] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 391.024968][ T5839] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 391.034673][ T5839] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 391.043669][ T5839] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 391.161045][ T7010] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 391.176334][ T5143] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 391.185022][ T5143] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 391.203596][ T5143] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 391.216221][ T5143] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 392.155898][ T5143] Bluetooth: hci6: command tx timeout [ 393.196086][ T5143] Bluetooth: hci8: command tx timeout [ 393.202107][ T5143] Bluetooth: hci7: command tx timeout [ 393.275698][ T5143] Bluetooth: hci9: command tx timeout [ 394.235808][ T5143] Bluetooth: hci6: command tx timeout [ 395.279322][ T5845] Bluetooth: hci8: command tx timeout [ 395.286078][ T5143] Bluetooth: hci7: command tx timeout [ 395.355731][ T5143] Bluetooth: hci9: command tx timeout [ 396.326226][ T5143] Bluetooth: hci6: command tx timeout [ 397.355979][ T5845] Bluetooth: hci8: command tx timeout [ 397.362440][ T5143] Bluetooth: hci7: command tx timeout [ 397.436127][ T5143] Bluetooth: hci9: command tx timeout [ 398.396597][ T5143] Bluetooth: hci6: command tx timeout [ 399.435778][ T5845] Bluetooth: hci8: command tx timeout [ 399.441295][ T5143] Bluetooth: hci7: command tx timeout [ 399.515742][ T5143] Bluetooth: hci9: command tx timeout [ 406.359381][ T5845] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 406.375657][ T5845] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 406.384692][ T5845] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 406.393469][ T5845] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 406.402374][ T5845] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 408.485997][ T5845] Bluetooth: hci14: command tx timeout [ 410.555747][ T5845] Bluetooth: hci14: command tx timeout [ 411.361876][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 412.635781][ T5143] Bluetooth: hci14: command tx timeout [ 414.715658][ T5143] Bluetooth: hci14: command tx timeout [ 431.675988][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 431.683624][ T31] Not tainted 6.14.0-syzkaller-13443-g56f944529ec2 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 431.733371][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.779369][ T31] task:kworker/0:1 state:D stack:24296 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 431.825210][ T31] Workqueue: events switchdev_deferred_process_work [ 431.902144][ T31] Call Trace: [ 431.937026][ T31] [ 431.940023][ T31] __schedule+0x1b33/0x51f0 [ 431.944575][ T31] ? do_raw_spin_lock+0x151/0x370 [ 432.048150][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 432.053608][ T31] ? schedule+0x163/0x360 [ 432.106220][ T31] ? __pfx___schedule+0x10/0x10 [ 432.111169][ T31] ? schedule+0x90/0x360 [ 432.156476][ T31] ? schedule+0x90/0x360 [ 432.160786][ T31] schedule+0x163/0x360 [ 432.164980][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 432.225613][ T31] schedule_preempt_disabled+0x13/0x30 [ 432.231142][ T31] __mutex_lock+0x805/0x10c0 [ 432.284139][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 432.313319][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 432.341660][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 432.385758][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 432.420219][ T31] switchdev_deferred_process_work+0xe/0x20 [ 432.445598][ T31] process_scheduled_works+0xac3/0x18e0 [ 432.451241][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 432.505715][ T31] ? assign_work+0x367/0x3d0 [ 432.510393][ T31] worker_thread+0x870/0xd50 [ 432.515030][ T31] ? __kthread_parkme+0x1a8/0x200 [ 432.585454][ T31] ? __pfx_worker_thread+0x10/0x10 [ 432.590640][ T31] kthread+0x7b7/0x940 [ 432.595287][ T31] ? __pfx_worker_thread+0x10/0x10 [ 432.676085][ T31] ? __pfx_kthread+0x10/0x10 [ 432.681163][ T31] ? __pfx_kthread+0x10/0x10 [ 432.726754][ T31] ? __pfx_kthread+0x10/0x10 [ 432.735793][ T31] ? __pfx_kthread+0x10/0x10 [ 432.740438][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.771668][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 432.799401][ T31] ? __pfx_kthread+0x10/0x10 [ 432.804056][ T31] ret_from_fork+0x4b/0x80 [ 432.844635][ T31] ? __pfx_kthread+0x10/0x10 [ 432.865491][ T31] ret_from_fork_asm+0x1a/0x30 [ 432.870335][ T31] [ 432.886388][ T31] INFO: task kworker/u8:13:5984 blocked for more than 144 seconds. [ 432.894319][ T31] Not tainted 6.14.0-syzkaller-13443-g56f944529ec2 #0 [ 432.921120][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.947009][ T31] task:kworker/u8:13 state:D stack:21480 pid:5984 tgid:5984 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 432.969163][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 432.975299][ T31] Call Trace: [ 432.984951][ T31] [ 432.992974][ T31] __schedule+0x1b33/0x51f0 [ 433.004005][ T31] ? schedule+0x163/0x360 [ 433.012991][ T31] ? __pfx___schedule+0x10/0x10 [ 433.023308][ T31] ? schedule+0x90/0x360 [ 433.057912][ T31] ? schedule+0x90/0x360 [ 433.062209][ T31] schedule+0x163/0x360 [ 433.075796][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 433.080605][ T31] schedule_preempt_disabled+0x13/0x30 [ 433.094947][ T31] __mutex_lock+0x805/0x10c0 [ 433.100731][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 433.115261][ T31] ? addrconf_dad_work+0x110/0x16a0 [ 433.122135][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 433.135468][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 433.140724][ T31] ? look_up_lock_class+0x7b/0x170 [ 433.154154][ T31] addrconf_dad_work+0x110/0x16a0 [ 433.175687][ T31] ? __lock_acquire+0xad5/0xd80 [ 433.180587][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 433.199136][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 433.205031][ T31] process_scheduled_works+0xac3/0x18e0 [ 433.215579][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 433.221609][ T31] ? assign_work+0x367/0x3d0 [ 433.235842][ T31] worker_thread+0x870/0xd50 [ 433.240493][ T31] ? __kthread_parkme+0x1a8/0x200 [ 433.254395][ T31] ? __pfx_worker_thread+0x10/0x10 [ 433.259823][ T31] kthread+0x7b7/0x940 [ 433.263925][ T31] ? __pfx_worker_thread+0x10/0x10 [ 433.285259][ T31] ? __pfx_kthread+0x10/0x10 [ 433.292603][ T31] ? __pfx_kthread+0x10/0x10 [ 433.305744][ T31] ? __pfx_kthread+0x10/0x10 [ 433.313194][ T31] ? __pfx_kthread+0x10/0x10 [ 433.325852][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.331082][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 433.347995][ T31] ? __pfx_kthread+0x10/0x10 [ 433.352628][ T31] ret_from_fork+0x4b/0x80 [ 433.366853][ T31] ? __pfx_kthread+0x10/0x10 [ 433.371494][ T31] ret_from_fork_asm+0x1a/0x30 [ 433.385466][ T31] [ 433.388731][ T31] INFO: task syz.4.249:6771 blocked for more than 145 seconds. [ 433.410336][ T31] Not tainted 6.14.0-syzkaller-13443-g56f944529ec2 #0 [ 433.424877][ T31] Blocked by coredump. [ 433.433655][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.448528][ T31] task:syz.4.249 state:D stack:26152 pid:6771 tgid:6769 ppid:5842 task_flags:0x40054c flags:0x00004006 [ 433.465443][ T31] Call Trace: [ 433.468758][ T31] [ 433.471719][ T31] __schedule+0x1b33/0x51f0 [ 433.484853][ T31] ? schedule+0x163/0x360 [ 433.505527][ T31] ? __pfx___schedule+0x10/0x10 [ 433.510434][ T31] ? schedule+0x90/0x360 [ 433.514741][ T31] ? schedule+0x90/0x360 [ 433.540812][ T31] schedule+0x163/0x360 [ 433.545024][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 433.560532][ T31] schedule_preempt_disabled+0x13/0x30 [ 433.571102][ T31] __mutex_lock+0x805/0x10c0 [ 433.580475][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 433.585296][ T31] ? tun_chr_close+0x3b/0x1b0 [ 433.594715][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 433.620090][ T31] tun_chr_close+0x3b/0x1b0 [ 433.624780][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 433.641512][ T31] __fput+0x3e9/0x9f0 [ 433.648476][ T31] task_work_run+0x251/0x310 [ 433.653122][ T31] ? __pfx_task_work_run+0x10/0x10 [ 433.665545][ T31] ? do_exit+0xa0c/0x27f0 [ 433.669924][ T31] ? do_exit+0xa0c/0x27f0 [ 433.677662][ T31] do_exit+0xa11/0x27f0 [ 433.681877][ T31] ? do_raw_spin_lock+0x151/0x370 [ 433.694496][ T31] ? __pfx_do_exit+0x10/0x10 [ 433.701426][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 433.715455][ T31] do_group_exit+0x207/0x2c0 [ 433.723455][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.735470][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 433.740714][ T31] get_signal+0x1696/0x1730 [ 433.745267][ T31] ? sched_setaffinity+0x364/0x4b0 [ 433.762912][ T31] ? __pfx_get_signal+0x10/0x10 [ 433.771285][ T31] ? sched_setaffinity+0x3c4/0x4b0 [ 433.785635][ T31] arch_do_signal_or_restart+0x98/0x840 [ 433.791247][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 433.806619][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 433.812964][ T31] syscall_exit_to_user_mode+0xce/0x340 [ 433.832354][ T31] do_syscall_64+0x100/0x230 [ 433.838646][ T31] ? clear_bhb_loop+0x45/0xa0 [ 433.843380][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.860274][ T31] RIP: 0033:0x7f31d358d169 [ 433.864751][ T31] RSP: 002b:00007f31d44c3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000cb [ 433.880072][ T31] RAX: 0000000000000000 RBX: 00007f31d37a5fa0 RCX: 00007f31d358d169 [ 433.895372][ T31] RDX: 00002000000002c0 RSI: 0000000000000008 RDI: 0000000000000000 [ 433.903431][ T31] RBP: 00007f31d360e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 433.921774][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.945786][ T31] R13: 0000000000000000 R14: 00007f31d37a5fa0 R15: 00007ffcf26d9a18 [ 433.953831][ T31] [ 433.971630][ T31] INFO: task syz-executor:6976 blocked for more than 145 seconds. [ 433.983150][ T31] Not tainted 6.14.0-syzkaller-13443-g56f944529ec2 #0 [ 434.005212][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.024038][ T31] task:syz-executor state:D stack:25640 pid:6976 tgid:6976 ppid:1 task_flags:0x400140 flags:0x00000004 [ 434.049890][ T31] Call Trace: [ 434.053761][ T31] [ 434.067544][ T31] __schedule+0x1b33/0x51f0 [ 434.072116][ T31] ? stack_trace_save+0x11a/0x1d0 [ 434.086452][ T31] ? schedule+0x163/0x360 [ 434.090838][ T31] ? __pfx___schedule+0x10/0x10 [ 434.107085][ T31] ? schedule+0x90/0x360 [ 434.112276][ T31] ? schedule+0x90/0x360 [ 434.125758][ T31] schedule+0x163/0x360 [ 434.132139][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 434.148289][ T31] schedule_preempt_disabled+0x13/0x30 [ 434.153795][ T31] __mutex_lock+0x805/0x10c0 [ 434.170819][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 434.180947][ T31] ? rtnl_newlink+0xd68/0x1fe0 [ 434.195000][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 434.204167][ T31] ? safesetid_security_capable+0xb2/0x1d0 [ 434.219400][ T31] ? ns_capable+0x8a/0xf0 [ 434.223783][ T31] ? rtnl_link_get_net_capable+0x168/0x340 [ 434.235446][ T31] rtnl_newlink+0xd68/0x1fe0 [ 434.240121][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 434.245176][ T31] ? rcu_preempt_deferred_qs_irqrestore+0x8c6/0xcb0 [ 434.272559][ T31] ? __lock_acquire+0xad5/0xd80 [ 434.284129][ T31] ? __lock_acquire+0xad5/0xd80 [ 434.293532][ T31] ? __lock_acquire+0xad5/0xd80 [ 434.309427][ T31] ? is_bpf_text_address+0x26/0x2a0 [ 434.314667][ T31] ? 0xffffffffa0000948 [ 434.325578][ T31] ? is_bpf_text_address+0x288/0x2a0 [ 434.331005][ T31] ? is_bpf_text_address+0x26/0x2a0 [ 434.346123][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 434.352324][ T31] ? kernel_text_address+0xa7/0xe0 [ 434.365896][ T31] ? __kernel_text_address+0xd/0x40 [ 434.372461][ T31] ? unwind_get_return_address+0x4d/0x90 [ 434.385436][ T31] ? arch_stack_walk+0xff/0x150 [ 434.390345][ T31] ? __lock_acquire+0xad5/0xd80 [ 434.395237][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 434.414807][ T31] rtnetlink_rcv_msg+0x80f/0xd70 [ 434.424953][ T31] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 434.435439][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 434.443147][ T31] ? __lock_acquire+0xad5/0xd80 [ 434.459262][ T31] netlink_rcv_skb+0x208/0x480 [ 434.464083][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 434.476647][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 434.482017][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 434.498828][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 434.504068][ T31] netlink_unicast+0x7f8/0x9a0 [ 434.519958][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 434.526247][ T31] ? smack_socket_getpeersec_dgram+0x190/0x410 [ 434.532455][ T31] ? skb_put+0x114/0x1f0 [ 434.545507][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 434.550334][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.570386][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.581521][ T31] __sock_sendmsg+0x221/0x270 [ 434.590327][ T31] __sys_sendto+0x365/0x4c0 [ 434.594886][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 434.614430][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 434.621003][ T31] ? blkcg_maybe_throttle_current+0x1ad/0xbb0 [ 434.635689][ T31] __x64_sys_sendto+0xde/0x100 [ 434.640519][ T31] do_syscall_64+0xf3/0x230 [ 434.651211][ T31] ? clear_bhb_loop+0x45/0xa0 [ 434.663932][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.680945][ T31] RIP: 0033:0x7fd45d58effc [ 434.689805][ T31] RSP: 002b:00007ffc0d2f4430 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 434.703752][ T31] RAX: ffffffffffffffda RBX: 00007fd45e2d4620 RCX: 00007fd45d58effc [ 434.722006][ T31] RDX: 000000000000002c RSI: 00007fd45e2d4670 RDI: 0000000000000003 [ 434.744563][ T31] RBP: 0000000000000000 R08: 00007ffc0d2f4484 R09: 000000000000000c [ 434.754549][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 434.774795][ T31] R13: 0000000000000000 R14: 00007fd45e2d4670 R15: 0000000000000000 [ 434.793697][ T31] [ 434.798202][ T31] INFO: task syz-executor:6985 blocked for more than 146 seconds. [ 434.819791][ T31] Not tainted 6.14.0-syzkaller-13443-g56f944529ec2 #0 [ 434.836431][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.845127][ T31] task:syz-executor state:D stack:26664 pid:6985 tgid:6985 ppid:1 task_flags:0x400140 flags:0x00004004 [ 434.869641][ T31] Call Trace: [ 434.873423][ T31] [ 434.891272][ T31] __schedule+0x1b33/0x51f0 [ 434.900316][ T31] ? schedule+0x163/0x360 [ 434.904697][ T31] ? __pfx___schedule+0x10/0x10 [ 434.915636][ T31] ? schedule+0x90/0x360 [ 434.919940][ T31] ? schedule+0x90/0x360 [ 434.924211][ T31] schedule+0x163/0x360 [ 434.940953][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 434.952938][ T31] schedule_preempt_disabled+0x13/0x30 [ 434.967633][ T31] __mutex_lock+0x805/0x10c0 [ 434.972284][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 434.988052][ T31] ? inet_rtm_newaddr+0x406/0x1c40 [ 434.994689][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 435.005696][ T31] ? is_bpf_text_address+0x26/0x2a0 [ 435.010947][ T31] ? 0xffffffffa0000948 [ 435.015126][ T31] ? is_bpf_text_address+0x26/0x2a0 [ 435.033364][ T31] ? __nla_parse+0x40/0x60 [ 435.052047][ T31] inet_rtm_newaddr+0x406/0x1c40 [ 435.061557][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 435.072292][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 435.084218][ T31] rtnetlink_rcv_msg+0x80f/0xd70 [ 435.095333][ T31] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 435.108531][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 435.114041][ T31] ? __lock_acquire+0xad5/0xd80 [ 435.132241][ T31] netlink_rcv_skb+0x208/0x480 [ 435.143476][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 435.154400][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 435.166802][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 435.176621][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 435.181888][ T31] netlink_unicast+0x7f8/0x9a0 [ 435.198367][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 435.203693][ T31] ? skb_put+0x114/0x1f0 [ 435.217908][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 435.222738][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.237394][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.243343][ T31] __sock_sendmsg+0x221/0x270 [ 435.255721][ T31] __sys_sendto+0x365/0x4c0 [ 435.260855][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 435.279960][ T31] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 435.285241][ T31] __x64_sys_sendto+0xde/0x100 [ 435.301661][ T31] do_syscall_64+0xf3/0x230 [ 435.311761][ T31] ? clear_bhb_loop+0x45/0xa0 [ 435.323626][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.335533][ T31] RIP: 0033:0x7f397178effc [ 435.340004][ T31] RSP: 002b:00007ffce3c11380 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 435.358234][ T31] RAX: ffffffffffffffda RBX: 00007f39724d4620 RCX: 00007f397178effc [ 435.373142][ T31] RDX: 0000000000000028 RSI: 00007f39724d4670 RDI: 0000000000000003 [ 435.396392][ T31] RBP: 0000000000000000 R08: 00007ffce3c113d4 R09: 000000000000000c [ 435.404411][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 435.429722][ T31] R13: 0000000000000000 R14: 00007f39724d4670 R15: 0000000000000000 [ 435.445877][ T31] [ 435.449013][ T31] [ 435.449013][ T31] Showing all locks held in the system: [ 435.465517][ T31] 3 locks held by kworker/0:1/10: [ 435.470582][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 435.490541][ T31] #1: ffffc900000f7c60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 435.515145][ T31] #2: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 435.542304][ T31] 3 locks held by kworker/u8:1/13: [ 435.555512][ T31] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 435.577598][ T31] #1: ffffc90000127c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 435.598884][ T31] #2: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 435.617734][ T31] 1 lock held by khungtaskd/31: [ 435.622613][ T31] #0: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 435.642662][ T31] 4 locks held by kworker/u8:5/993: [ 435.654808][ T31] #0: ffff88801bef3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 435.676293][ T31] #1: ffffc900037afc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 435.699766][ T31] #2: ffffffff900de590 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 435.713974][ T31] #3: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: wg_destruct+0x25/0x2e0 [ 435.735457][ T31] 2 locks held by dhcpcd/5497: [ 435.740350][ T31] #0: ffff88805b89b6c8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0x119/0x790 [ 435.767837][ T31] #1: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x99/0x200 [ 435.788387][ T31] 2 locks held by getty/5595: [ 435.793096][ T31] #0: ffff8880315030a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 435.810433][ T31] #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 435.825066][ T31] 3 locks held by kworker/u8:13/5984: [ 435.837920][ T31] #0: ffff888030e6f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 435.865492][ T31] #1: ffffc9000a90fc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 435.891735][ T31] #2: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x110/0x16a0 [ 435.913271][ T31] 1 lock held by syz.4.249/6771: [ 435.919737][ T31] #0: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 435.937583][ T31] 3 locks held by syz.1.251/6774: [ 435.942642][ T31] 1 lock held by syz-executor/6838: [ 435.955885][ T31] #0: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 435.979228][ T31] 1 lock held by syz-executor/6840: [ 435.984475][ T31] #0: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 436.005687][ T31] 1 lock held by syz-executor/6845: [ 436.010918][ T31] #0: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 436.029716][ T31] 1 lock held by syz-executor/6854: [ 436.034965][ T31] #0: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 436.055514][ T31] 1 lock held by syz-executor/6931: [ 436.061393][ T31] #0: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 436.080544][ T31] 2 locks held by syz-executor/6970: [ 436.096572][ T31] #0: ffffffff900de590 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 436.122994][ T31] #1: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x87/0x270 [ 436.143923][ T31] 2 locks held by syz-executor/6972: [ 436.149647][ T31] #0: ffffffff900de590 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 436.174727][ T31] #1: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x87/0x270 [ 436.195141][ T31] 1 lock held by syz-executor/6976: [ 436.204771][ T31] #0: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 436.229024][ T31] 2 locks held by syz-executor/6980: [ 436.234341][ T31] #0: ffffffff900de590 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 436.254701][ T31] #1: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x87/0x270 [ 436.275469][ T31] 1 lock held by syz-executor/6985: [ 436.282252][ T31] #0: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 436.300943][ T31] 1 lock held by syz-executor/6991: [ 436.311672][ T31] #0: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 436.342020][ T31] 1 lock held by syz-executor/6996: [ 436.350595][ T31] #0: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 436.365531][ T31] 1 lock held by syz-executor/6998: [ 436.375036][ T31] #0: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 436.395942][ T31] 1 lock held by syz-executor/7000: [ 436.401649][ T31] #0: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 436.423762][ T31] 1 lock held by syz-executor/7003: [ 436.434093][ T31] #0: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 436.455490][ T31] 1 lock held by syz-executor/7013: [ 436.460813][ T31] #0: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 436.482020][ T31] 1 lock held by syz-executor/7017: [ 436.491962][ T31] #0: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 436.513429][ T31] 1 lock held by syz-executor/7020: [ 436.523643][ T31] #0: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 436.547905][ T31] 1 lock held by syz-executor/7022: [ 436.553150][ T31] #0: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 436.576161][ T31] 5 locks held by kworker/1:11/7024: [ 436.581491][ T31] 1 lock held by syz-executor/7026: [ 436.599639][ T31] #0: ffffffff900eb0c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 436.621364][ T31] [ 436.623725][ T31] ============================================= [ 436.623725][ T31] [ 436.642657][ T31] NMI backtrace for cpu 0 [ 436.642684][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-13443-g56f944529ec2 #0 PREEMPT(full) [ 436.642709][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 436.642721][ T31] Call Trace: [ 436.642729][ T31] [ 436.642738][ T31] dump_stack_lvl+0x241/0x360 [ 436.642775][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.642803][ T31] ? __pfx__printk+0x10/0x10 [ 436.642842][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 436.642880][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 436.642909][ T31] ? _printk+0xd5/0x120 [ 436.642935][ T31] ? __wake_up_klogd+0xcc/0x110 [ 436.642965][ T31] ? __pfx__printk+0x10/0x10 [ 436.642995][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 436.643016][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 436.643052][ T31] watchdog+0x1058/0x10a0 [ 436.643074][ T31] ? watchdog+0x1ea/0x10a0 [ 436.643098][ T31] ? __pfx_watchdog+0x10/0x10 [ 436.643118][ T31] kthread+0x7b7/0x940 [ 436.643147][ T31] ? __pfx_watchdog+0x10/0x10 [ 436.643167][ T31] ? __pfx_kthread+0x10/0x10 [ 436.643190][ T31] ? __pfx_kthread+0x10/0x10 [ 436.643216][ T31] ? __pfx_kthread+0x10/0x10 [ 436.643242][ T31] ? __pfx_kthread+0x10/0x10 [ 436.643267][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 436.643286][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 436.643308][ T31] ? __pfx_kthread+0x10/0x10 [ 436.643335][ T31] ret_from_fork+0x4b/0x80 [ 436.643354][ T31] ? __pfx_kthread+0x10/0x10 [ 436.643380][ T31] ret_from_fork_asm+0x1a/0x30 [ 436.643426][ T31] [ 436.643433][ T31] Sending NMI from CPU 0 to CPUs 1: [ 436.807154][ C1] NMI backtrace for cpu 1 [ 436.807172][ C1] CPU: 1 UID: 0 PID: 60 Comm: kworker/1:1H Not tainted 6.14.0-syzkaller-13443-g56f944529ec2 #0 PREEMPT(full) [ 436.807193][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 436.807204][ C1] Workqueue: events_highpri flush_backlog [ 436.807233][ C1] RIP: 0010:check_preemption_disabled+0x43/0x120 [ 436.807258][ C1] Code: 48 89 44 24 08 65 8b 1d 7f c0 3c 07 65 8b 05 74 c0 3c 07 a9 ff ff ff 7f 74 24 65 49 8b 04 24 48 3b 44 24 08 0f 85 cc 00 00 00 <89> d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 48 c7 [ 436.807272][ C1] RSP: 0018:ffffc90000a07be8 EFLAGS: 00000246 [ 436.807285][ C1] RAX: 869e2a17fd351000 RBX: 0000000000000001 RCX: ffff8880212abc00 [ 436.807298][ C1] RDX: dffffc0000000000 RSI: ffffffff8ca0e200 RDI: ffffffff8ca0e1c0 [ 436.807310][ C1] RBP: dffffc0000000001 R08: ffffc90000a08150 R09: 0000000000000000 [ 436.807322][ C1] R10: ffffc90000a07d70 R11: fffff52000140fb0 R12: ffffffff93657020 [ 436.807334][ C1] R13: dffffc0000000000 R14: ffffc90000a08160 R15: ffffffff816debc8 [ 436.807347][ C1] FS: 0000000000000000(0000) GS:ffff8881250c9000(0000) knlGS:0000000000000000 [ 436.807360][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 436.807372][ C1] CR2: 00007f779d8bef57 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 436.807386][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 436.807396][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 436.807406][ C1] Call Trace: [ 436.807419][ C1] [ 436.807425][ C1] ? deref_stack_reg+0x17c/0x210 [ 436.807448][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 436.807466][ C1] rcu_is_watching+0x15/0xb0 [ 436.807486][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 436.807504][ C1] unwind_next_frame+0x1a5b/0x23b0 [ 436.807526][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 436.807546][ C1] ? kmem_cache_free+0x197/0x410 [ 436.807564][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 436.807588][ C1] arch_stack_walk+0x11e/0x150 [ 436.807612][ C1] ? nft_synproxy_eval_v4+0x3d4/0x610 [ 436.807641][ C1] stack_trace_save+0x11a/0x1d0 [ 436.807664][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 436.807686][ C1] ? do_raw_spin_lock+0x151/0x370 [ 436.807713][ C1] kasan_save_track+0x3f/0x80 [ 436.807735][ C1] ? kasan_save_track+0x3f/0x80 [ 436.807756][ C1] ? kasan_save_free_info+0x40/0x50 [ 436.807774][ C1] ? __kasan_slab_free+0x59/0x70 [ 436.807796][ C1] ? kmem_cache_free+0x197/0x410 [ 436.807848][ C1] ? skb_release_data+0x67a/0x8b0 [ 436.807876][ C1] kasan_save_free_info+0x40/0x50 [ 436.807892][ C1] __kasan_slab_free+0x59/0x70 [ 436.807912][ C1] ? nft_synproxy_eval_v4+0x3d4/0x610 [ 436.807952][ C1] kmem_cache_free+0x197/0x410 [ 436.807967][ C1] ? nft_synproxy_eval_v4+0x3d4/0x610 [ 436.807994][ C1] nft_synproxy_eval_v4+0x3d4/0x610 [ 436.808021][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 436.808047][ C1] ? nf_ip_checksum+0x13a/0x500 [ 436.808073][ C1] nft_synproxy_do_eval+0x36a/0xa90 [ 436.808100][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 436.808125][ C1] ? __lock_acquire+0xad5/0xd80 [ 436.808149][ C1] nft_do_chain+0x4b2/0x1db0 [ 436.808182][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 436.808205][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 436.808244][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 436.808263][ C1] nft_do_chain_inet+0x41f/0x6b0 [ 436.808288][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 436.808311][ C1] ? ipt_do_table+0x314/0x1870 [ 436.808338][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 436.808361][ C1] nf_hook_slow+0xc8/0x220 [ 436.808382][ C1] NF_HOOK+0x29b/0x450 [ 436.808404][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 436.808430][ C1] ? NF_HOOK+0x9e/0x450 [ 436.808448][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 436.808469][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 436.808492][ C1] ? ip_rcv_finish+0x409/0x560 [ 436.808514][ C1] NF_HOOK+0x3a0/0x450 [ 436.808534][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 436.808554][ C1] ? NF_HOOK+0x9e/0x450 [ 436.808572][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 436.808590][ C1] ? ip_rcv_core+0x80c/0xd20 [ 436.808611][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 436.808635][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 436.808654][ C1] __netif_receive_skb+0x2c9/0x670 [ 436.808678][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 436.808709][ C1] process_backlog+0x664/0x15c0 [ 436.808734][ C1] ? process_backlog+0x33d/0x15c0 [ 436.808760][ C1] ? __pfx_process_backlog+0x10/0x10 [ 436.808787][ C1] __napi_poll+0xcb/0x480 [ 436.808809][ C1] net_rx_action+0x89d/0x1240 [ 436.808842][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 436.808864][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 436.808898][ C1] handle_softirqs+0x2d6/0x9b0 [ 436.808917][ C1] ? do_softirq+0x11f/0x1e0 [ 436.808943][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 436.808962][ C1] do_softirq+0x11f/0x1e0 [ 436.808985][ C1] [ 436.808990][ C1] [ 436.808996][ C1] ? __pfx_do_softirq+0x10/0x10 [ 436.809022][ C1] ? flush_backlog+0xf2/0xe80 [ 436.809044][ C1] ? lockdep_softirqs_on+0x144/0x1d0 [ 436.809070][ C1] __local_bh_enable_ip+0x1be/0x200 [ 436.809094][ C1] ? flush_backlog+0xf2/0xe80 [ 436.809115][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 436.809142][ C1] ? flush_backlog+0xf2/0xe80 [ 436.809163][ C1] ? flush_backlog+0xf2/0xe80 [ 436.809186][ C1] flush_backlog+0xaaf/0xe80 [ 436.809207][ C1] ? register_lock_class+0x54/0x330 [ 436.809224][ C1] ? __lock_acquire+0xad5/0xd80 [ 436.809237][ C1] ? flush_backlog+0xf2/0xe80 [ 436.809259][ C1] ? __pfx_flush_backlog+0x10/0x10 [ 436.809290][ C1] ? process_scheduled_works+0x9cb/0x18e0 [ 436.809306][ C1] process_scheduled_works+0xac3/0x18e0 [ 436.809337][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 436.809359][ C1] ? assign_work+0x367/0x3d0 [ 436.809377][ C1] worker_thread+0x870/0xd50 [ 436.809402][ C1] ? __kthread_parkme+0x1a8/0x200 [ 436.809427][ C1] ? __pfx_worker_thread+0x10/0x10 [ 436.809444][ C1] kthread+0x7b7/0x940 [ 436.809465][ C1] ? __pfx_worker_thread+0x10/0x10 [ 436.809482][ C1] ? __pfx_kthread+0x10/0x10 [ 436.809501][ C1] ? __pfx_kthread+0x10/0x10 [ 436.809521][ C1] ? __pfx_kthread+0x10/0x10 [ 436.809540][ C1] ? __pfx_kthread+0x10/0x10 [ 436.809560][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 436.809574][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 436.809591][ C1] ? __pfx_kthread+0x10/0x10 [ 436.809612][ C1] ret_from_fork+0x4b/0x80 [ 436.809627][ C1] ? __pfx_kthread+0x10/0x10 [ 436.809647][ C1] ret_from_fork_asm+0x1a/0x30 [ 436.809690][ C1] [ 437.459151][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 437.466041][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-13443-g56f944529ec2 #0 PREEMPT(full) [ 437.477517][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 437.487593][ T31] Call Trace: [ 437.490888][ T31] [ 437.493835][ T31] dump_stack_lvl+0x241/0x360 [ 437.498542][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.503774][ T31] ? __pfx__printk+0x10/0x10 [ 437.508391][ T31] ? vscnprintf+0x5d/0x90 [ 437.512751][ T31] panic+0x349/0x880 [ 437.516687][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 437.522092][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 437.528280][ T31] ? __pfx_panic+0x10/0x10 [ 437.532717][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 437.538124][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 437.543529][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 437.549713][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 437.555900][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 437.562169][ T31] watchdog+0x1097/0x10a0 [ 437.566514][ T31] ? watchdog+0x1ea/0x10a0 [ 437.570977][ T31] ? __pfx_watchdog+0x10/0x10 [ 437.575671][ T31] kthread+0x7b7/0x940 [ 437.579768][ T31] ? __pfx_watchdog+0x10/0x10 [ 437.584465][ T31] ? __pfx_kthread+0x10/0x10 [ 437.589079][ T31] ? __pfx_kthread+0x10/0x10 [ 437.593690][ T31] ? __pfx_kthread+0x10/0x10 [ 437.598311][ T31] ? __pfx_kthread+0x10/0x10 [ 437.602928][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.608148][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 437.613374][ T31] ? __pfx_kthread+0x10/0x10 [ 437.618002][ T31] ret_from_fork+0x4b/0x80 [ 437.622445][ T31] ? __pfx_kthread+0x10/0x10 [ 437.627067][ T31] ret_from_fork_asm+0x1a/0x30 [ 437.631877][ T31] [ 437.635231][ T31] Kernel Offset: disabled [ 437.639557][ T31] Rebooting in 86400 seconds..