last executing test programs: 1m41.010564068s ago: executing program 4 (id=73): sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x10, 0xe000}, 0x5}], 0x1, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) 1m40.362795647s ago: executing program 4 (id=78): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r1, 0x2}, 0x8) 1m39.683816756s ago: executing program 4 (id=82): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60, 0x0, 0x5c}) 1m38.969549175s ago: executing program 4 (id=87): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r3, @ANYBLOB="080001000000000008000200e0000002080009000e00000008000100ac1414"], 0x54}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) 1m38.183941197s ago: executing program 4 (id=92): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m37.31604218s ago: executing program 4 (id=98): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1m30.086768142s ago: executing program 3 (id=116): rename(&(0x7f0000000f80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') socket$pppoe(0x18, 0x1, 0x0) readlinkat(r0, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000001600)=""/4119, 0x1017) 1m27.111896908s ago: executing program 3 (id=117): r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x242002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpeername$unix(r0, 0x0, 0x0) 1m26.837897474s ago: executing program 3 (id=118): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$igmp6(0xa, 0x3, 0x2) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @empty, [], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 1m26.378044765s ago: executing program 3 (id=120): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m22.722827133s ago: executing program 3 (id=123): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) 1m20.459975775s ago: executing program 32 (id=98): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1m20.262819384s ago: executing program 3 (id=128): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30010000140001000000000000000000fc0000000000000000000000000000000000000000000000fe8000"/52, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000008001f0002000000ce0d97a3991280c5b494e4c6b1865fc4d6d63739f67971a6e177cf871b120f491be9bdf697a6c3e23823454cc2b62f151a8a40758caadfbd1d3104d2545a8fb541d594e1e23aa026a0a3"], 0x130}}, 0x0) getrlimit(0x0, &(0x7f0000000280)) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x22}}) eventfd(0x0) 1m9.357024264s ago: executing program 1 (id=145): unshare(0x2a020400) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) 1m8.954924246s ago: executing program 1 (id=146): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x24a9, &(0x7f0000000300)={0x0, 0x40001000, 0x10100, 0x3, 0x5c}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) 1m8.384314662s ago: executing program 1 (id=150): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x3c}}, 0x0) 1m7.145252291s ago: executing program 1 (id=154): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={@mcast2, 0x2000007, r1}) 1m6.026631917s ago: executing program 1 (id=161): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000140)={0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100"/20, @ANYRES32=r2, @ANYBLOB="c89904bd0000000008000d000000000034001680300001802c000c80140001"], 0x5c}}, 0x0) 1m5.228255768s ago: executing program 1 (id=163): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 1m5.038307959s ago: executing program 33 (id=128): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30010000140001000000000000000000fc0000000000000000000000000000000000000000000000fe8000"/52, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000008001f0002000000ce0d97a3991280c5b494e4c6b1865fc4d6d63739f67971a6e177cf871b120f491be9bdf697a6c3e23823454cc2b62f151a8a40758caadfbd1d3104d2545a8fb541d594e1e23aa026a0a3"], 0x130}}, 0x0) getrlimit(0x0, &(0x7f0000000280)) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x22}}) eventfd(0x0) 1m2.490129696s ago: executing program 2 (id=170): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x2d, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa002800a}) 50.53804854s ago: executing program 2 (id=183): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x448d0) 49.906428588s ago: executing program 34 (id=163): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 49.896473213s ago: executing program 2 (id=185): recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x100) r0 = syz_io_uring_setup(0x24a9, &(0x7f0000000300)={0x0, 0x40001000, 0x10100, 0x3, 0x5c}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) 49.125911826s ago: executing program 2 (id=187): syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 45.117011451s ago: executing program 2 (id=190): r0 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000680)="03", 0x1}], 0x1}], 0x1, 0x880) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) 44.622708249s ago: executing program 2 (id=192): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r8 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x35, 0x39, 0x39, 0x36, 0x65, 0x60, 0x61, 0x31, 0x54, 0x36, 0x34, 0x63, 0x66, 0x66, 0x64, 0x65]}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r8, r7, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 41.145122564s ago: executing program 0 (id=194): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x4, 0xc, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xe}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) 40.635310989s ago: executing program 0 (id=196): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000480)={0x0, 0x800, 0x8}, 0xc) 40.148245178s ago: executing program 0 (id=198): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED) wait4(0x0, 0xfffffffffffffffe, 0x8, 0x0) 39.170802594s ago: executing program 0 (id=201): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x88001}, 0x4000) recvmmsg(r0, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000003d80)}, 0x10000}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x20, 0x0) 38.741631307s ago: executing program 0 (id=202): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000300)=@req3={0x1000, 0x2a, 0x1000, 0x200, 0x0, 0xffffffff, 0x3}, 0x1c) 38.318568454s ago: executing program 0 (id=203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000780)='./bus\x00', 0x20008c0, &(0x7f0000000300)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0xff}}, {@shortname_lower}, {@shortname_winnt}, {@shortname_lower}, {@fat=@check_strict}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlate}]}, 0x80, 0x364, &(0x7f0000000400)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000180)='./bus\x00', 0x41, &(0x7f0000001200)={[{@barrier_val={'barrier', 0x3d, 0x8000000000000001}}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'noload'}}, {@euid_gt}, {@uid_eq}, {@euid_eq}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0xffffffff, 0x0, @void, @value, @void, @value}, 0x50) 30.055722494s ago: executing program 5 (id=212): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@ipv6_deladdrlabel={0x24, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x24}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000380)=""/14, 0xe}], 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x130, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x9c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x59}, @TCA_ROUTE4_ACT={0x80, 0x6, [@m_nat={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x1d, 0x6, "3eaed48f5023f5c36bc9d8619f3e2af20800000000000000a4"}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 29.523724189s ago: executing program 35 (id=192): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r8 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x35, 0x39, 0x39, 0x36, 0x65, 0x60, 0x61, 0x31, 0x54, 0x36, 0x34, 0x63, 0x66, 0x66, 0x64, 0x65]}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r8, r7, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 26.272908717s ago: executing program 5 (id=217): r0 = syz_io_uring_setup(0xe02, &(0x7f0000000140)={0x0, 0x4001003, 0x1000, 0x0, 0x800}, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 25.776525802s ago: executing program 5 (id=219): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001140)={0x44, &(0x7f0000000f00)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23.209225292s ago: executing program 36 (id=203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000780)='./bus\x00', 0x20008c0, &(0x7f0000000300)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0xff}}, {@shortname_lower}, {@shortname_winnt}, {@shortname_lower}, {@fat=@check_strict}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlate}]}, 0x80, 0x364, &(0x7f0000000400)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000180)='./bus\x00', 0x41, &(0x7f0000001200)={[{@barrier_val={'barrier', 0x3d, 0x8000000000000001}}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'noload'}}, {@euid_gt}, {@uid_eq}, {@euid_eq}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0xffffffff, 0x0, @void, @value, @void, @value}, 0x50) 22.417526626s ago: executing program 5 (id=224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x28, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) 21.866676136s ago: executing program 5 (id=226): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x4, 0x5518, &(0x7f0000002080)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0xa6af401c81cc4462, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 19.199618451s ago: executing program 6 (id=230): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a"], 0x2c}}, 0x0) 18.890562771s ago: executing program 6 (id=231): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) 18.502711258s ago: executing program 5 (id=232): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001140)={0x44, &(0x7f0000000f00)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.30991856s ago: executing program 6 (id=233): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000200)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0xfffffffffffffffe, 0x8, 0x0) 15.930649333s ago: executing program 6 (id=234): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x28, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) 15.478628055s ago: executing program 6 (id=235): setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x101, 0x4, 0x1f4bf1ba}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[], 0x48}}, 0x0) 15.405510327s ago: executing program 6 (id=236): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x20000) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004200000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 2.756362095s ago: executing program 37 (id=232): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001140)={0x44, &(0x7f0000000f00)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 38 (id=236): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x20000) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004200000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. [ 68.917256][ T5816] cgroup: Unknown subsys name 'net' [ 69.034795][ T5816] cgroup: Unknown subsys name 'cpuset' [ 69.043052][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.506906][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.873407][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.879832][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.220899][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.229648][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.237770][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.246523][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.254274][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.255158][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.262441][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.270475][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.277042][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.290360][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.291910][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.297953][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.312291][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.320060][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.321420][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.329730][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.341844][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.344082][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.356885][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.358871][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.365121][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.380321][ T5853] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 73.380601][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.395646][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.396212][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.412906][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.419785][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.431042][ T5855] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.441120][ T5851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.441549][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.455653][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.457086][ T5852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.473006][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.482055][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.494530][ T5852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.515248][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.011325][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 74.057332][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 74.075929][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 74.203297][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 74.217973][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 74.250325][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 74.389398][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.400520][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.408326][ T5832] bridge_slave_0: entered allmulticast mode [ 74.418786][ T5832] bridge_slave_0: entered promiscuous mode [ 74.461057][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.468164][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.475607][ T5834] bridge_slave_0: entered allmulticast mode [ 74.482657][ T5834] bridge_slave_0: entered promiscuous mode [ 74.490320][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.497547][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.504782][ T5832] bridge_slave_1: entered allmulticast mode [ 74.511928][ T5832] bridge_slave_1: entered promiscuous mode [ 74.518930][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.526124][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.533832][ T5831] bridge_slave_0: entered allmulticast mode [ 74.541368][ T5831] bridge_slave_0: entered promiscuous mode [ 74.576977][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.584244][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.591587][ T5834] bridge_slave_1: entered allmulticast mode [ 74.598398][ T5834] bridge_slave_1: entered promiscuous mode [ 74.622642][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.629769][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.637660][ T5831] bridge_slave_1: entered allmulticast mode [ 74.644754][ T5831] bridge_slave_1: entered promiscuous mode [ 74.745243][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.752674][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.759864][ T5827] bridge_slave_0: entered allmulticast mode [ 74.767281][ T5827] bridge_slave_0: entered promiscuous mode [ 74.775896][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.783243][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.790454][ T5827] bridge_slave_1: entered allmulticast mode [ 74.797729][ T5827] bridge_slave_1: entered promiscuous mode [ 74.823164][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.835839][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.846994][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.858795][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.870403][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.883558][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.890642][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.898767][ T5828] bridge_slave_0: entered allmulticast mode [ 74.905656][ T5828] bridge_slave_0: entered promiscuous mode [ 74.922300][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.929456][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.936794][ T5829] bridge_slave_0: entered allmulticast mode [ 74.944258][ T5829] bridge_slave_0: entered promiscuous mode [ 74.977616][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.987084][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.994596][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.002890][ T5828] bridge_slave_1: entered allmulticast mode [ 75.009634][ T5828] bridge_slave_1: entered promiscuous mode [ 75.034699][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.045990][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.054156][ T5829] bridge_slave_1: entered allmulticast mode [ 75.061220][ T5829] bridge_slave_1: entered promiscuous mode [ 75.087572][ T5832] team0: Port device team_slave_0 added [ 75.122231][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.143185][ T5834] team0: Port device team_slave_0 added [ 75.152851][ T5832] team0: Port device team_slave_1 added [ 75.161179][ T5831] team0: Port device team_slave_0 added [ 75.169117][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.183387][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.194569][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.216071][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.226647][ T5834] team0: Port device team_slave_1 added [ 75.260169][ T5831] team0: Port device team_slave_1 added [ 75.294207][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.320080][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.327273][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.353778][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.386557][ T5827] team0: Port device team_slave_0 added [ 75.394810][ T5827] team0: Port device team_slave_1 added [ 75.408482][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.415511][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.441697][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.454143][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.461568][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.487848][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.505058][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.512150][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.513949][ T5837] Bluetooth: hci4: command tx timeout [ 75.538750][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.550611][ T55] Bluetooth: hci3: command tx timeout [ 75.554400][ T5852] Bluetooth: hci5: command tx timeout [ 75.567903][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.575117][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.590933][ T5852] Bluetooth: hci0: command tx timeout [ 75.601587][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.606799][ T55] Bluetooth: hci1: command tx timeout [ 75.621669][ T5828] team0: Port device team_slave_0 added [ 75.622772][ T5837] Bluetooth: hci2: command tx timeout [ 75.641657][ T5829] team0: Port device team_slave_0 added [ 75.648292][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.655651][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.682664][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.713168][ T5828] team0: Port device team_slave_1 added [ 75.744055][ T5829] team0: Port device team_slave_1 added [ 75.777561][ T5832] hsr_slave_0: entered promiscuous mode [ 75.784464][ T5832] hsr_slave_1: entered promiscuous mode [ 75.792070][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.799281][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.826211][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.849405][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.857013][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.883453][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.908906][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.916013][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.943641][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.957002][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.964390][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.991272][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.024753][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.031861][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.059531][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.106040][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.113171][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.139896][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.171656][ T5831] hsr_slave_0: entered promiscuous mode [ 76.178980][ T5831] hsr_slave_1: entered promiscuous mode [ 76.185577][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.193688][ T5831] Cannot create hsr debugfs directory [ 76.269533][ T5834] hsr_slave_0: entered promiscuous mode [ 76.276147][ T5834] hsr_slave_1: entered promiscuous mode [ 76.283280][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.291146][ T5834] Cannot create hsr debugfs directory [ 76.328104][ T5828] hsr_slave_0: entered promiscuous mode [ 76.334765][ T5828] hsr_slave_1: entered promiscuous mode [ 76.341427][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.349009][ T5828] Cannot create hsr debugfs directory [ 76.374121][ T5829] hsr_slave_0: entered promiscuous mode [ 76.382381][ T5829] hsr_slave_1: entered promiscuous mode [ 76.388488][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.397559][ T5829] Cannot create hsr debugfs directory [ 76.413688][ T5827] hsr_slave_0: entered promiscuous mode [ 76.420123][ T5827] hsr_slave_1: entered promiscuous mode [ 76.426708][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.434415][ T5827] Cannot create hsr debugfs directory [ 76.894283][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.906722][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.917960][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.929594][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.978315][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.002843][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.015375][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.026346][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.088386][ T5832] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 77.103493][ T5832] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 77.133687][ T5832] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 77.147266][ T5832] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 77.215309][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.225227][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.257581][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.296310][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.339833][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.370224][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.389809][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.403802][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.418776][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.474989][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.506248][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.513492][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.528063][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.546525][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.564287][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.574370][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.586006][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.593148][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.602043][ T5837] Bluetooth: hci5: command tx timeout [ 77.607468][ T5837] Bluetooth: hci4: command tx timeout [ 77.609804][ T5852] Bluetooth: hci3: command tx timeout [ 77.633302][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.671426][ T5852] Bluetooth: hci2: command tx timeout [ 77.673497][ T55] Bluetooth: hci1: command tx timeout [ 77.682846][ T5837] Bluetooth: hci0: command tx timeout [ 77.714968][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.748391][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.755584][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.823942][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.831126][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.929103][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.993833][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.026828][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.034001][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.058458][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.103405][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.110547][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.138683][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.163969][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.205144][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.254744][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.289833][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.303680][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.310862][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.330109][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.337310][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.360498][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.377955][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.385123][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.426863][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.434045][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.456079][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.463263][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.483173][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.490302][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.557119][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.586938][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.760048][ T5827] veth0_vlan: entered promiscuous mode [ 78.816627][ T5827] veth1_vlan: entered promiscuous mode [ 78.826222][ T5831] veth0_vlan: entered promiscuous mode [ 78.838507][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.876872][ T5831] veth1_vlan: entered promiscuous mode [ 78.963113][ T5827] veth0_macvtap: entered promiscuous mode [ 79.012905][ T5827] veth1_macvtap: entered promiscuous mode [ 79.029564][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.052643][ T5831] veth0_macvtap: entered promiscuous mode [ 79.099648][ T5831] veth1_macvtap: entered promiscuous mode [ 79.113934][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.173496][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.206195][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.220086][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.229710][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.239121][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.260138][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.276598][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.298848][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.317978][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.330140][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.342175][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.371702][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.385096][ T5829] veth0_vlan: entered promiscuous mode [ 79.409973][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.433253][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.442939][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.461352][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.548995][ T5829] veth1_vlan: entered promiscuous mode [ 79.569146][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.671647][ T55] Bluetooth: hci3: command tx timeout [ 79.671693][ T5837] Bluetooth: hci4: command tx timeout [ 79.677088][ T55] Bluetooth: hci5: command tx timeout [ 79.743535][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.752099][ T55] Bluetooth: hci0: command tx timeout [ 79.762174][ T55] Bluetooth: hci1: command tx timeout [ 79.767608][ T55] Bluetooth: hci2: command tx timeout [ 79.771708][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.818577][ T5832] veth0_vlan: entered promiscuous mode [ 79.833839][ T5829] veth0_macvtap: entered promiscuous mode [ 79.841575][ T5832] veth1_vlan: entered promiscuous mode [ 79.868762][ T5828] veth0_vlan: entered promiscuous mode [ 79.879908][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.898717][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.899520][ T5829] veth1_macvtap: entered promiscuous mode [ 79.906442][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.925969][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.937915][ T5828] veth1_vlan: entered promiscuous mode [ 80.005305][ T5832] veth0_macvtap: entered promiscuous mode [ 80.014102][ T5834] veth0_vlan: entered promiscuous mode [ 80.020165][ T5832] veth1_macvtap: entered promiscuous mode [ 80.035867][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.056401][ T5834] veth1_vlan: entered promiscuous mode [ 80.066964][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.075338][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.075811][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.095501][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.105943][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.116793][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.129055][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.152896][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.163599][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.173548][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.184124][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.194234][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.204952][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.216041][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.287134][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.298517][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.310146][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.321543][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.332674][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.341991][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.353183][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.376713][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.388379][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.418574][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.429276][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.441664][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.461916][ T5828] veth0_macvtap: entered promiscuous mode [ 80.503948][ T5832] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.528932][ T5832] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.544177][ T5832] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.559570][ T5940] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 80.560907][ T5832] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.597900][ T5834] veth0_macvtap: entered promiscuous mode [ 80.632333][ T5828] veth1_macvtap: entered promiscuous mode [ 80.666410][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.715479][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.725632][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.734595][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.755660][ T5834] veth1_macvtap: entered promiscuous mode [ 80.805667][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.824900][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.836456][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.848141][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.859862][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.871881][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.900996][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.927373][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.951156][ T967] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.994880][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.039892][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.054420][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.067632][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.080504][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.091413][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.105468][ T967] usb 2-1: device descriptor read/64, error -71 [ 81.120997][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.140830][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.164194][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.191631][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.220698][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.237961][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.264993][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.289110][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.302474][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.313612][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.362910][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.380731][ T967] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.394710][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.437627][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.468021][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.494580][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.521671][ T967] usb 2-1: device descriptor read/64, error -71 [ 81.564218][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.611005][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.631332][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.691281][ T967] usb usb2-port1: attempt power cycle [ 81.701264][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.740830][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.756722][ T5837] Bluetooth: hci5: command tx timeout [ 81.756722][ T5852] Bluetooth: hci3: command tx timeout [ 81.756779][ T55] Bluetooth: hci4: command tx timeout [ 81.791826][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.824892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.857583][ T55] Bluetooth: hci2: command tx timeout [ 81.863141][ T55] Bluetooth: hci1: command tx timeout [ 81.868546][ T55] Bluetooth: hci0: command tx timeout [ 81.915064][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'. [ 81.924144][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'. [ 81.959355][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.969923][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.979804][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.990322][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.001974][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.026071][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.035300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.050420][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.059175][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.068098][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.157985][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.158378][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.165913][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.194081][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.208024][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.218464][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.380899][ T967] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 82.402015][ T967] usb 2-1: device descriptor read/8, error -71 [ 82.442872][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.472442][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.541377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 82.583785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.605183][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.621939][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.689054][ T5957] syzkaller1: entered promiscuous mode [ 82.702662][ T5957] syzkaller1: entered allmulticast mode [ 82.721368][ T967] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 82.744514][ T967] usb 2-1: device descriptor read/8, error -71 [ 82.769932][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.781401][ T5958] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 4032 [ 82.860427][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.871431][ T967] usb usb2-port1: unable to enumerate USB device [ 82.987502][ T5962] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.057746][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.096759][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.164780][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.221234][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.360982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 83.445391][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.470908][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.657090][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.665010][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.880768][ T5973] loop1: detected capacity change from 0 to 8192 [ 83.887994][ T5973] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 84.182241][ T967] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.211808][ T5947] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 84.298215][ T5983] Illegal XDP return value 2659040496 on prog (id 4) dev N/A, expect packet loss! [ 85.022639][ T967] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 85.047773][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.123753][ T5947] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 85.135330][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.153294][ T967] usb 4-1: config 0 descriptor?? [ 85.174680][ T967] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 85.296684][ T5992] vlan2: entered promiscuous mode [ 85.301809][ T5992] veth1_to_batadv: entered promiscuous mode [ 85.321652][ T5992] veth1_to_batadv: left promiscuous mode [ 85.402169][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.420870][ T5841] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 85.439571][ T5947] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 85.601205][ T5947] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 85.610370][ T5947] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 85.620228][ T5947] usb 6-1: Manufacturer: syz [ 85.628076][ T5947] usb 6-1: config 0 descriptor?? [ 85.641000][ T5841] usb 2-1: Using ep0 maxpacket: 16 [ 85.683816][ T5841] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 85.700769][ T5841] usb 2-1: config 0 has no interface number 0 [ 85.708804][ T5841] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 85.719519][ T5841] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 85.748066][ T5841] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 85.811378][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.828723][ T5841] usb 2-1: Product: syz [ 85.835033][ T5841] usb 2-1: Manufacturer: syz [ 85.840307][ T5841] usb 2-1: SerialNumber: syz [ 85.861784][ T5841] usb 2-1: config 0 descriptor?? [ 85.873052][ T5990] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 85.890771][ T5990] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 86.107050][ T5898] IPVS: starting estimator thread 0... [ 86.118466][ T5990] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 86.127453][ T6007] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 86.137504][ T5990] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 86.220984][ T6013] IPVS: using max 19 ests per chain, 45600 per kthread [ 86.281226][ T47] cfg80211: failed to load regulatory.db [ 86.284304][ T5947] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 86.294778][ T6017] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 86.314715][ T6017] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 86.315743][ T5947] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 86.380906][ T5841] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 86.392511][ T5841] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 86.423162][ T5841] asix 2-1:0.251: probe with driver asix failed with error -5 [ 86.431707][ T5947] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 86.462092][ T5841] usb 2-1: USB disconnect, device number 6 [ 86.697435][ T967] usb 4-1: USB disconnect, device number 2 [ 86.867084][ T6029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.35'. [ 87.302351][ T5947] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.483325][ T5947] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 87.491873][ T5947] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.502630][ T5947] usb 1-1: config 0 has no interface number 0 [ 87.508817][ T5947] usb 1-1: config 0 interface 239 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 87.530827][ T967] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.559856][ T5947] usb 1-1: config 0 interface 239 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 87.580170][ T5947] usb 1-1: config 0 interface 239 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.615499][ T5947] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 87.629266][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.655258][ T5947] usb 1-1: Product: syz [ 87.659571][ T5947] usb 1-1: Manufacturer: syz [ 87.677038][ T5947] usb 1-1: SerialNumber: syz [ 87.694463][ T967] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 87.704098][ T967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.717605][ T967] usb 5-1: Product: syz [ 87.736029][ T5947] usb 1-1: config 0 descriptor?? [ 87.742344][ T967] usb 5-1: Manufacturer: syz [ 87.761230][ T967] usb 5-1: SerialNumber: syz [ 87.786661][ T967] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 87.826290][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 87.987837][ T5947] usb 1-1: probing VID:PID(2201:012C) [ 88.003804][ T5947] usb 1-1: vub300 testing BULK OUT EndPoint(0) 02 [ 88.020871][ T5841] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 88.050900][ T5947] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 88.122826][ T5947] vub300 1-1:0.239: probe with driver vub300 failed with error -22 [ 88.183500][ T5947] usb 1-1: USB disconnect, device number 2 [ 88.213051][ T5841] usb 2-1: Using ep0 maxpacket: 16 [ 88.236569][ T5841] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 88.265898][ T5841] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.330537][ T5841] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.370387][ T5841] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.401544][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.462256][ T5841] usb 2-1: Product: syz [ 88.466522][ T5841] usb 2-1: Manufacturer: syz [ 88.520976][ T5841] usb 2-1: SerialNumber: syz [ 89.021913][ T5841] usb 2-1: 0:2 : does not exist [ 92.016534][ T5841] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 92.044935][ T5841] usb 2-1: USB disconnect, device number 7 [ 92.600996][ T6103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.651796][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.909549][ T6106] netlink: 'syz.1.65': attribute type 10 has an invalid length. [ 93.250831][ T6106] netlink: 40 bytes leftover after parsing attributes in process `syz.1.65'. [ 94.791494][ C1] sched: DL replenish lagged too much [ 95.685174][ T6106] team0: Port device geneve0 added [ 96.851621][ T6136] syz.0.77 uses obsolete (PF_INET,SOCK_PACKET) [ 97.241691][ T5896] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.540292][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.603781][ T5896] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 97.716073][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.818796][ T5896] usb 4-1: config 0 descriptor?? [ 97.854228][ T5896] pwc: Askey VC010 type 2 USB webcam detected. [ 98.287154][ T5896] pwc: recv_control_msg error -32 req 02 val 2b00 [ 98.321602][ T6155] netlink: 28 bytes leftover after parsing attributes in process `syz.4.87'. [ 98.357077][ T5896] pwc: recv_control_msg error -32 req 02 val 2700 [ 98.405252][ T5896] pwc: recv_control_msg error -32 req 02 val 2c00 [ 98.441649][ T5896] pwc: recv_control_msg error -32 req 04 val 1000 [ 98.494825][ T5896] pwc: recv_control_msg error -32 req 04 val 1300 [ 98.563786][ T5896] pwc: recv_control_msg error -32 req 04 val 1400 [ 98.638191][ T5896] pwc: recv_control_msg error -32 req 02 val 2000 [ 98.666843][ T5896] pwc: recv_control_msg error -32 req 02 val 2100 [ 98.701674][ T5896] pwc: recv_control_msg error -32 req 04 val 1500 [ 98.798856][ T5896] pwc: recv_control_msg error -32 req 02 val 2500 [ 98.834476][ T5896] pwc: recv_control_msg error -32 req 02 val 2400 [ 98.902061][ T5896] pwc: recv_control_msg error -32 req 02 val 2600 [ 98.966190][ T5896] pwc: recv_control_msg error -32 req 02 val 2900 [ 99.012461][ T5896] pwc: recv_control_msg error -32 req 02 val 2800 [ 99.087603][ T5896] pwc: recv_control_msg error -32 req 04 val 1100 [ 99.098393][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93'. [ 99.118311][ T6169] process 'syz.4.92' launched '/dev/fd/3' with NULL argv: empty string added [ 99.155872][ T5896] pwc: Registered as video103. [ 99.209697][ T5896] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 99.534224][ T5896] usb 4-1: USB disconnect, device number 3 [ 99.862644][ T6180] netlink: 224 bytes leftover after parsing attributes in process `syz.1.97'. [ 101.425211][ T6185] loop5: detected capacity change from 0 to 8192 [ 101.530357][ T6185] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 101.675046][ T6197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.104'. [ 101.822513][ T6194] vlan2: entered promiscuous mode [ 104.192725][ T5841] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 105.291994][ T6194] veth1_to_batadv: entered promiscuous mode [ 105.328289][ T5841] usb 2-1: device descriptor read/all, error -71 [ 105.488030][ T6194] veth1_to_batadv: left promiscuous mode [ 109.532775][ T5852] Bluetooth: hci1: command 0x206a tx timeout [ 109.749084][ T55] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 110.218784][ T6247] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.589968][ T6249] loop5: detected capacity change from 0 to 8192 [ 110.669848][ T6249] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 113.750744][ T5997] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 120.584569][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 120.699349][ T5841] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 120.742151][ T5852] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 120.811117][ T5852] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 121.090879][ T5852] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 121.098559][ T5852] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 121.905937][ T6298] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.186215][ T6298] xt_TCPMSS: Only works on TCP SYN packets [ 124.143821][ T5852] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 124.706948][ T5841] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 124.733627][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.811726][ T5841] usb 2-1: Product: syz [ 124.852490][ T5841] usb 2-1: Manufacturer: syz [ 124.898443][ T5841] usb 2-1: SerialNumber: syz [ 125.010466][ T5841] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 125.570194][ T5997] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 125.618631][ T5997] usb 2-1: ath9k_htc: USB layer deinitialized [ 125.741828][ T5841] usb 2-1: USB disconnect, device number 10 [ 126.130163][ T6284] chnl_net:caif_netlink_parms(): no params data found [ 126.147626][ T5841] IPVS: starting estimator thread 0... [ 126.270915][ T6315] IPVS: using max 19 ests per chain, 45600 per kthread [ 126.563313][ T6284] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.598596][ T6284] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.647483][ T6284] bridge_slave_0: entered allmulticast mode [ 126.693269][ T6284] bridge_slave_0: entered promiscuous mode [ 126.750819][ T6284] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.757988][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.829529][ T6284] bridge_slave_1: entered allmulticast mode [ 126.867137][ T6284] bridge_slave_1: entered promiscuous mode [ 126.873951][ T55] Bluetooth: hci6: command tx timeout [ 127.303024][ T29] audit: type=1326 audit(1736988929.018:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6326 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36f785d29 code=0x7ffc0000 [ 127.358295][ T6284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.373569][ T29] audit: type=1326 audit(1736988929.018:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6326 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36f785d29 code=0x7ffc0000 [ 127.422557][ T29] audit: type=1326 audit(1736988929.028:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6326 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc36f785d29 code=0x7ffc0000 [ 127.503101][ T6284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.582780][ T29] audit: type=1326 audit(1736988929.028:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6326 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36f785d29 code=0x7ffc0000 [ 127.695619][ T29] audit: type=1326 audit(1736988929.028:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6326 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36f785d29 code=0x7ffc0000 [ 127.756982][ T6284] team0: Port device team_slave_0 added [ 127.774256][ T6284] team0: Port device team_slave_1 added [ 127.779930][ T29] audit: type=1326 audit(1736988929.028:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6326 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fc36f785d29 code=0x7ffc0000 [ 128.067906][ T29] audit: type=1326 audit(127.340:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6326 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36f785d29 code=0x7ffc0000 [ 128.153837][ T6284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.208086][ T6284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.262617][ T29] audit: type=1326 audit(127.340:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6326 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36f785d29 code=0x7ffc0000 [ 128.410189][ T29] audit: type=1326 audit(127.340:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6326 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc36f785d29 code=0x7ffc0000 [ 128.435078][ T6284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.801112][ T6284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.866029][ T6284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.896893][ T29] audit: type=1326 audit(127.340:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6326 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36f785d29 code=0x7ffc0000 [ 128.972997][ T55] Bluetooth: hci6: command tx timeout [ 129.100914][ T6284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.123988][ T6339] Zero length message leads to an empty skb [ 129.665957][ T6344] vlan2: entered promiscuous mode [ 129.698850][ T6344] dummy0: entered promiscuous mode [ 129.712640][ T5841] IPVS: starting estimator thread 0... [ 129.751659][ T6344] vlan2: entered allmulticast mode [ 129.790769][ T6344] dummy0: entered allmulticast mode [ 129.852924][ T6347] IPVS: using max 19 ests per chain, 45600 per kthread [ 130.292534][ T6284] hsr_slave_0: entered promiscuous mode [ 130.380117][ T6284] hsr_slave_1: entered promiscuous mode [ 130.498635][ T6284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.554485][ T6284] Cannot create hsr debugfs directory [ 131.041858][ T55] Bluetooth: hci6: command tx timeout [ 131.239688][ T6365] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 131.296827][ T6365] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 131.805247][ T6366] syzkaller1: entered promiscuous mode [ 131.863755][ T6366] syzkaller1: entered allmulticast mode [ 132.414086][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.421372][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.764648][ T1148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.047101][ T6284] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 133.120384][ T6284] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 133.133585][ T5852] Bluetooth: hci6: command tx timeout [ 133.154179][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 133.163250][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 133.171685][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 133.180054][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 133.190972][ T5852] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 133.198264][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 133.249695][ T6284] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 133.320547][ T1148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.442858][ T6284] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 133.570776][ T1148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.812390][ T5896] IPVS: starting estimator thread 0... [ 133.954351][ T6386] IPVS: using max 19 ests per chain, 45600 per kthread [ 134.097841][ T1148] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.426876][ T6284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.615206][ T6284] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.675282][ T6395] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.856486][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.863728][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.116033][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.123315][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.281028][ T5852] Bluetooth: hci5: command tx timeout [ 135.399346][ T6382] chnl_net:caif_netlink_parms(): no params data found [ 135.474581][ T1148] bridge_slave_1: left allmulticast mode [ 135.510776][ T1148] bridge_slave_1: left promiscuous mode [ 135.553067][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.651583][ T1148] bridge_slave_0: left allmulticast mode [ 135.690439][ T1148] bridge_slave_0: left promiscuous mode [ 135.721731][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.739343][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.768160][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.823272][ T1148] bond0 (unregistering): Released all slaves [ 137.107285][ T6284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.514209][ T5852] Bluetooth: hci5: command tx timeout [ 137.845665][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.877009][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.911033][ T6382] bridge_slave_0: entered allmulticast mode [ 137.945535][ T6382] bridge_slave_0: entered promiscuous mode [ 138.177636][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.208002][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.248938][ T6382] bridge_slave_1: entered allmulticast mode [ 138.307797][ T6382] bridge_slave_1: entered promiscuous mode [ 138.532750][ T6382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.613051][ T1148] hsr_slave_0: left promiscuous mode [ 138.653553][ T1148] hsr_slave_1: left promiscuous mode [ 138.732006][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.775155][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.847773][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.912204][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.049128][ T1148] veth1_macvtap: left promiscuous mode [ 139.111033][ T1148] veth0_macvtap: left promiscuous mode [ 139.116763][ T1148] veth1_vlan: left promiscuous mode [ 139.176846][ T1148] veth0_vlan: left promiscuous mode [ 139.600858][ T5852] Bluetooth: hci5: command tx timeout [ 141.355001][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 141.511654][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 141.673667][ T5852] Bluetooth: hci5: command tx timeout [ 142.829060][ T6382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.079039][ T6382] team0: Port device team_slave_0 added [ 143.217179][ T6382] team0: Port device team_slave_1 added [ 143.298432][ T6284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.082749][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.089749][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.301595][ T6382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.390973][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.402429][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.570823][ T6382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.257600][ T6382] hsr_slave_0: entered promiscuous mode [ 147.558148][ T6382] hsr_slave_1: entered promiscuous mode [ 147.683888][ T6382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.729127][ T6382] Cannot create hsr debugfs directory [ 148.290819][ T5841] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 148.486431][ T5841] usb 3-1: Using ep0 maxpacket: 16 [ 148.502176][ T6284] veth0_vlan: entered promiscuous mode [ 148.555359][ T5841] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 148.585022][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.641297][ T5841] usb 3-1: Product: syz [ 148.645499][ T5841] usb 3-1: Manufacturer: syz [ 148.685152][ T6284] veth1_vlan: entered promiscuous mode [ 148.700509][ T5841] usb 3-1: SerialNumber: syz [ 148.742155][ T5841] usb 3-1: config 0 descriptor?? [ 148.871092][ T5841] as10x_usb: device has been detected [ 148.918228][ T5841] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 149.055133][ T5841] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 149.132234][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.140730][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.149020][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.157417][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.188678][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.202085][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.258307][ T5841] as10x_usb: error during firmware upload part1 [ 149.318897][ T5841] Registered device Sky IT Digital Key (green led) [ 149.395629][ T6382] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 149.555828][ T6284] veth0_macvtap: entered promiscuous mode [ 149.652044][ T6382] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 149.755768][ T6284] veth1_macvtap: entered promiscuous mode [ 149.793484][ T6382] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 149.848722][ T6382] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 150.148200][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.200930][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.249876][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.302518][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.354158][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.398870][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.445798][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.515668][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.579359][ T5841] usb 3-1: USB disconnect, device number 2 [ 150.595718][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.665242][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.680098][ T5841] Unregistered device Sky IT Digital Key (green led) [ 150.696602][ T5841] as10x_usb: device has been disconnected [ 150.729708][ T6284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.980827][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.046014][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.097686][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.159027][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.219683][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.281450][ T55] Bluetooth: hci2: command tx timeout [ 151.289401][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.330853][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.420761][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.500935][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.539695][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.594419][ T6284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.983596][ T6284] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.037592][ T6284] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.080817][ T6284] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.119062][ T6284] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.493713][ T55] Bluetooth: hci2: command tx timeout [ 154.759262][ T1148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.294989][ T1148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.438110][ T6518] team0: entered promiscuous mode [ 155.485730][ T6518] team_slave_0: entered promiscuous mode [ 155.506561][ T6518] team_slave_1: entered promiscuous mode [ 155.561391][ T6518] batadv_slave_0: entered promiscuous mode [ 155.628081][ T6518] team0: left promiscuous mode [ 155.634275][ T6518] team_slave_0: left promiscuous mode [ 155.657645][ T6518] team_slave_1: left promiscuous mode [ 155.703646][ T6518] batadv_slave_0: left promiscuous mode [ 155.760202][ T6483] chnl_net:caif_netlink_parms(): no params data found [ 155.999726][ T1148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.375229][ T6382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.441419][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.449282][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.561353][ T55] Bluetooth: hci2: command tx timeout [ 156.597430][ T1148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.749782][ T6382] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.931049][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.938190][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.309987][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.317251][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.408090][ T6483] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.446689][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.491951][ T6483] bridge_slave_0: entered allmulticast mode [ 157.530608][ T6483] bridge_slave_0: entered promiscuous mode [ 157.582330][ T6483] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.589464][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.660987][ T6483] bridge_slave_1: entered allmulticast mode [ 157.680501][ T6483] bridge_slave_1: entered promiscuous mode [ 157.772382][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.780252][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.959239][ T6483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.156452][ T6483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.609398][ T1148] bridge_slave_1: left allmulticast mode [ 158.631948][ T1148] bridge_slave_1: left promiscuous mode [ 158.647950][ T55] Bluetooth: hci2: command tx timeout [ 158.669292][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.708609][ T1148] bridge_slave_0: left allmulticast mode [ 158.720023][ T1148] bridge_slave_0: left promiscuous mode [ 158.735173][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.511299][ T6563] loop0: detected capacity change from 0 to 256 [ 159.518280][ T6563] ======================================================= [ 159.518280][ T6563] WARNING: The mand mount option has been deprecated and [ 159.518280][ T6563] and is ignored by this kernel. Remove the mand [ 159.518280][ T6563] option from the mount to silence this warning. [ 159.518280][ T6563] ======================================================= [ 161.135683][ T6563] FAT-fs (loop0): Directory bread(block 64) failed [ 161.143080][ T6563] FAT-fs (loop0): Directory bread(block 65) failed [ 161.149688][ T6563] FAT-fs (loop0): Directory bread(block 66) failed [ 161.156385][ T6563] FAT-fs (loop0): Directory bread(block 67) failed [ 161.163035][ T6563] FAT-fs (loop0): Directory bread(block 68) failed [ 161.169581][ T6563] FAT-fs (loop0): Directory bread(block 69) failed [ 161.176425][ T6563] FAT-fs (loop0): Directory bread(block 70) failed [ 161.183229][ T6563] FAT-fs (loop0): Directory bread(block 71) failed [ 161.191255][ T6563] FAT-fs (loop0): Directory bread(block 72) failed [ 161.197814][ T6563] FAT-fs (loop0): Directory bread(block 73) failed [ 161.954240][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 163.054780][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.104344][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.123707][ T9] ath9k_htc: Failed to initialize the device [ 163.145978][ T1148] bond0 (unregistering): Released all slaves [ 163.224597][ T6483] team0: Port device team_slave_0 added [ 163.576076][ T6483] team0: Port device team_slave_1 added [ 163.871101][ T6483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.901559][ T6483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.005192][ T6483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.418308][ T6483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.454933][ T6483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.609173][ T6483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.510191][ T6483] hsr_slave_0: entered promiscuous mode [ 165.603384][ T6483] hsr_slave_1: entered promiscuous mode [ 165.640918][ T6483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.698023][ T6483] Cannot create hsr debugfs directory [ 165.853921][ T1148] hsr_slave_0: left promiscuous mode [ 166.004312][ T1148] hsr_slave_1: left promiscuous mode [ 166.157661][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.192176][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.259117][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.300842][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.476112][ T1148] veth1_macvtap: left promiscuous mode [ 166.514934][ T1148] veth0_macvtap: left promiscuous mode [ 166.554843][ T1148] veth1_vlan: left promiscuous mode [ 166.560199][ T1148] veth0_vlan: left promiscuous mode [ 168.456101][ T5852] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 168.465342][ T5852] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 168.474034][ T5852] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 168.482318][ T5852] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 168.491109][ T5852] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 168.498600][ T5852] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 169.233627][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 169.398464][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 170.562181][ T55] Bluetooth: hci7: command tx timeout [ 170.875945][ T6382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.103997][ T6618] chnl_net:caif_netlink_parms(): no params data found [ 172.191593][ T6483] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 172.791161][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.6.220'. [ 172.802767][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.6.220'. [ 172.848830][ T55] Bluetooth: hci7: command tx timeout [ 172.946885][ T6483] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 173.136725][ T6483] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 173.269667][ T6483] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 173.681995][ T6618] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.741196][ T6618] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.748525][ T6618] bridge_slave_0: entered allmulticast mode [ 173.817879][ T6618] bridge_slave_0: entered promiscuous mode [ 173.900988][ T6618] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.908119][ T6618] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.980976][ T6618] bridge_slave_1: entered allmulticast mode [ 174.041301][ T6618] bridge_slave_1: entered promiscuous mode [ 174.114451][ T6382] veth0_vlan: entered promiscuous mode [ 174.349493][ T6618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.419673][ T6618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.567126][ T6382] veth1_vlan: entered promiscuous mode [ 174.887958][ T55] Bluetooth: hci7: command tx timeout [ 174.939283][ T6618] team0: Port device team_slave_0 added [ 175.027859][ T6618] team0: Port device team_slave_1 added [ 175.322840][ T6618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.338690][ T5852] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 175.363581][ T5852] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 175.393754][ T5852] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 175.422737][ T5852] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 175.432173][ T5852] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 175.439501][ T5852] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 175.449404][ T6618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.577804][ T6618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.714543][ T6618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.767251][ T6618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.891264][ T6618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.042319][ T6382] veth0_macvtap: entered promiscuous mode [ 176.306133][ T6483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.353727][ T6382] veth1_macvtap: entered promiscuous mode [ 176.466657][ T6618] hsr_slave_0: entered promiscuous mode [ 176.563412][ T6618] hsr_slave_1: entered promiscuous mode [ 176.641154][ T6618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.650298][ T6618] Cannot create hsr debugfs directory [ 176.774280][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.818783][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.849937][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.893893][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.934188][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.961009][ T5852] Bluetooth: hci7: command tx timeout [ 176.976703][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.015347][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.055182][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.092660][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.134047][ T6672] loop5: detected capacity change from 0 to 40427 [ 177.144127][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.191346][ T6672] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1fffff [ 177.211795][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.321456][ T6672] F2FS-fs (loop5): invalid crc value [ 177.397513][ T6672] F2FS-fs (loop5): Found nat_bits in checkpoint [ 177.451126][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.479475][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.519435][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.581037][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.607143][ T5852] Bluetooth: hci8: command tx timeout [ 177.634860][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.701540][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.720065][ T6672] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 177.752930][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.820753][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.865910][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.911431][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.939905][ T6672] F2FS-fs (loop5): inject checkpoint error in f2fs_balance_fs of f2fs_mkdir+0x44c/0x530 [ 177.966810][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.014398][ T6672] F2FS-fs (loop5): Stopped filesystem due to reason: 1 [ 178.036729][ T6672] overlayfs: failed to create directory ./file0/index (errno: 5); mounting read-only [ 178.096065][ T6483] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.112861][ T6672] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 178.193096][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.200242][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.275263][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.282443][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.305799][ T5832] syz-executor: attempt to access beyond end of device [ 178.305799][ T5832] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 178.427031][ T6382] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.436281][ T5896] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 178.473148][ T6382] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.516917][ T6382] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.550780][ T6382] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.601429][ T5896] usb 7-1: Using ep0 maxpacket: 32 [ 178.636534][ T5896] usb 7-1: config 0 has an invalid interface number: 146 but max is 0 [ 178.653284][ T5896] usb 7-1: config 0 has no interface number 0 [ 178.709137][ T5896] usb 7-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 178.783652][ T5896] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 178.847293][ T5896] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 178.901632][ T5896] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 178.980928][ T5896] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 179.030668][ T5896] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.102315][ T5896] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 179.181137][ T5896] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 179.257289][ T5896] usb 7-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.321387][ T5896] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 179.338263][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.410285][ T5896] usb 7-1: Product: syz [ 179.423649][ T5896] usb 7-1: Manufacturer: syz [ 179.449412][ T5896] usb 7-1: SerialNumber: syz [ 179.469293][ T48] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.516513][ T5896] usb 7-1: config 0 descriptor?? [ 179.556090][ T6693] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 179.598654][ T5896] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 179.684788][ T5852] Bluetooth: hci8: command tx timeout [ 179.701212][ T5896] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 179.972528][ T5896] usb 7-1: USB disconnect, device number 2 [ 181.761222][ T5852] Bluetooth: hci8: command tx timeout [ 183.841187][ T5852] Bluetooth: hci8: command tx timeout [ 193.694925][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.712226][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.720568][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.731315][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.738839][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 193.755965][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.772293][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.778593][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.596560][ T5851] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 194.613322][ T5851] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 194.644596][ T5851] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 194.656072][ T5851] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 194.678316][ T5851] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 194.689616][ T5851] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 195.841229][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 195.921437][ T5138] Bluetooth: hci0: command 0x0406 tx timeout [ 195.927563][ T5851] Bluetooth: hci4: command tx timeout [ 196.722411][ T5851] Bluetooth: hci9: command tx timeout [ 197.426877][ T5138] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 197.450650][ T5138] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 197.459317][ T5138] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 197.471384][ T5138] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 197.480258][ T5138] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 197.488145][ T5138] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 198.001080][ T5138] Bluetooth: hci4: command tx timeout [ 198.801127][ T5138] Bluetooth: hci9: command tx timeout [ 199.522730][ T5138] Bluetooth: hci10: command tx timeout [ 200.081043][ T5138] Bluetooth: hci4: command tx timeout [ 200.871179][ T5138] Bluetooth: hci9: command tx timeout [ 201.603376][ T5138] Bluetooth: hci10: command tx timeout [ 202.161136][ T5138] Bluetooth: hci4: command tx timeout [ 202.960954][ T5138] Bluetooth: hci9: command tx timeout [ 203.681630][ T5138] Bluetooth: hci10: command tx timeout [ 205.765986][ T5138] Bluetooth: hci10: command tx timeout [ 208.137024][ T5851] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 208.155738][ T5851] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 208.164836][ T5851] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 208.174309][ T5851] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 208.182149][ T5851] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 208.191074][ T5851] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 210.321531][ T5138] Bluetooth: hci11: command tx timeout [ 212.401136][ T5138] Bluetooth: hci11: command tx timeout [ 214.481011][ T5138] Bluetooth: hci11: command tx timeout [ 216.560990][ T5138] Bluetooth: hci11: command tx timeout [ 230.001361][ T5851] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 230.014568][ T5851] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 230.022767][ T5851] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 230.031088][ T5851] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 230.052260][ T5851] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 230.061624][ T5851] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 232.151164][ T5851] Bluetooth: hci12: command tx timeout [ 232.811000][ T30] INFO: task kworker/1:1:47 blocked for more than 143 seconds. [ 232.820375][ T30] Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 232.849947][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 232.865871][ T30] task:kworker/1:1 state:D stack:23824 pid:47 tgid:47 ppid:2 flags:0x00004000 [ 232.921422][ T30] Workqueue: usb_hub_wq hub_event [ 232.926542][ T30] Call Trace: [ 232.929835][ T30] [ 233.060750][ T30] __schedule+0x1850/0x4c30 [ 233.065360][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.198479][ T30] ? schedule+0x90/0x320 [ 233.222489][ T30] ? __pfx___schedule+0x10/0x10 [ 233.227432][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 233.297470][ T30] ? __pfx_lock_release+0x10/0x10 [ 233.310905][ T30] ? kick_pool+0x1bd/0x620 [ 233.315374][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 233.335802][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.350678][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 233.359382][ T30] ? schedule+0x90/0x320 [ 233.370634][ T30] schedule+0x14b/0x320 [ 233.374848][ T30] schedule_preempt_disabled+0x13/0x30 [ 233.388191][ T30] __mutex_lock+0x7e7/0xee0 [ 233.405067][ T30] ? __mutex_lock+0x5ef/0xee0 [ 233.409821][ T30] ? hub_event+0x7d5/0x5150 [ 233.425187][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 233.430284][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 233.450710][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 233.455983][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.470683][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 233.475954][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.493757][ T30] ? pm_runtime_barrier+0x152/0x1d0 [ 233.499020][ T30] hub_event+0x7d5/0x5150 [ 233.517182][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.530918][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.551007][ T30] ? __pfx_register_lock_class+0x10/0x10 [ 233.556722][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 233.572201][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 233.577468][ T30] ? __pfx_hub_event+0x10/0x10 [ 233.595823][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 233.608516][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.620627][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 233.626658][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 233.644360][ T30] ? process_scheduled_works+0x976/0x1840 [ 233.650139][ T30] process_scheduled_works+0xa68/0x1840 [ 233.669613][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 233.680658][ T30] ? assign_work+0x364/0x3d0 [ 233.689698][ T30] worker_thread+0x870/0xd30 [ 233.707115][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.717973][ T30] ? __kthread_parkme+0x169/0x1d0 [ 233.730918][ T30] ? __pfx_worker_thread+0x10/0x10 [ 233.736085][ T30] kthread+0x2f2/0x390 [ 233.750668][ T30] ? __pfx_worker_thread+0x10/0x10 [ 233.755857][ T30] ? __pfx_kthread+0x10/0x10 [ 233.760485][ T30] ret_from_fork+0x4d/0x80 [ 233.774825][ T30] ? __pfx_kthread+0x10/0x10 [ 233.779497][ T30] ret_from_fork_asm+0x1a/0x30 [ 233.798346][ T30] [ 233.810797][ T30] [ 233.810797][ T30] Showing all locks held in the system: [ 233.818566][ T30] 2 locks held by kworker/0:1/9: [ 233.834160][ T30] 3 locks held by kworker/u8:0/11: [ 233.839311][ T30] #0: ffff8880304e3948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 233.861119][ T30] #1: ffffc90000107d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 233.887021][ T30] #2: ffffffff8fcb2f48 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0xd0/0x16f0 [ 233.915887][ T30] 1 lock held by khungtaskd/30: [ 233.929302][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 233.943765][ T30] 4 locks held by kworker/1:1/47: [ 233.949458][ T30] #0: ffff8880212d5548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 233.975441][ T30] #1: ffffc90000b77d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 233.998882][ T30] #2: ffff888028550190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 [ 234.011005][ T30] #3: ffff888028553510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x7d5/0x5150 [ 234.028073][ T30] 6 locks held by kworker/u8:3/48: [ 234.043571][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 234.070190][ T30] #1: ffffc90000b87d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 234.097225][ T30] #2: ffffffff8fca6a90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xd50 [ 234.111765][ T30] #3: ffff88805bb3c0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 234.126771][ T30] #4: ffff88805bb3d250 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 234.142584][ T30] #5: ffffffff8fcb2f48 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x71/0x5c0 [ 234.161639][ T30] 4 locks held by kworker/u9:0/55: [ 234.166774][ T30] #0: ffff888033b25148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 234.193569][ T30] #1: ffffc90000bf7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 234.221043][ T30] #2: ffff8880302ccd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 [ 234.236427][ T30] #3: ffff8880302cc078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1e4/0x11f0 [ 234.250642][ T5851] Bluetooth: hci12: command tx timeout [ 234.262701][ T30] 2 locks held by kworker/0:2/967: [ 234.267841][ T30] 4 locks held by kworker/u8:6/1148: [ 234.280624][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 234.305460][ T30] #1: ffffc90004277d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 234.337165][ T30] #2: ffffffff8fcb2f48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 234.357794][ T30] #3: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 234.376106][ T30] 2 locks held by kworker/u8:7/3444: [ 234.390907][ T30] #0: ffff888021ab7148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 234.410838][ T30] #1: ffffc9000c9efd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 234.433314][ T30] 3 locks held by kworker/u8:9/3504: [ 234.438617][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 234.469681][ T30] #1: ffffc9000ce7fd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 234.497078][ T30] #2: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 234.520075][ T30] 4 locks held by udevd/5200: [ 234.531914][ T30] #0: ffff88805e2cd1c8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70 [ 234.549433][ T30] #1: ffff88802801b488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 [ 234.565753][ T30] #2: ffff88807d4e1c38 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 234.591395][ T30] #3: ffff888030f5d0e8 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 [ 234.600522][ T30] 1 lock held by dhcpcd/5494: [ 234.625924][ T30] #0: ffffffff8fcb2f48 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x31a/0x1ac0 [ 234.645406][ T30] 2 locks held by getty/5591: [ 234.650138][ T30] #0: ffff88814ddae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 234.667256][ T30] #1: ffffc90002fd62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 234.683540][ T30] 2 locks held by syz-executor/5832: [ 234.688872][ T30] #0: ffff88804a9d80e0 (&type->s_umount_key#57){+.+.}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 234.709176][ T30] #1: ffffffff8e93cec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 234.745582][ T30] 4 locks held by kworker/u9:2/5837: [ 234.753054][ T30] #0: ffff888026c71948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 234.774455][ T30] #1: ffffc9000302fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 234.795451][ T30] #2: ffff88807e63cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 [ 234.820563][ T30] #3: ffff88807e63c078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1e4/0x11f0 [ 234.830466][ T30] 4 locks held by kworker/0:3/5844: [ 234.851852][ T30] 2 locks held by kworker/1:5/5894: [ 234.857091][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 234.889231][ T30] #1: ffffc9000317fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 234.905424][ T30] 3 locks held by kworker/1:6/5896: [ 234.917470][ T30] #0: ffff88801ac79948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 234.937790][ T30] #1: ffffc9000314fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 234.953866][ T30] #2: ffffffff8fcb2f48 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x99/0xfb0 [ 234.985586][ T30] 6 locks held by kworker/0:6/5898: [ 234.994567][ T30] 3 locks held by kworker/0:7/5947: [ 234.999790][ T30] 3 locks held by syz-executor/6382: [ 235.013597][ T30] #0: ffffffff8fd15970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 235.030715][ T30] #1: ffffffff8fd15828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 235.039780][ T30] #2: ffffffff8fcb2f48 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_register_hw+0x2c4e/0x3e10 [ 235.062020][ T30] 1 lock held by syz-executor/6483: [ 235.067242][ T30] #0: ffffffff8fcb2f48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 235.086269][ T30] 2 locks held by syz.2.192/6512: [ 235.108959][ T30] #0: ffff888034e08d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 235.128418][ T30] #1: ffff888034e08078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 235.142697][ T30] 2 locks held by syz.0.203/6559: [ 235.147751][ T30] 7 locks held by syz-executor/6618: [ 235.169425][ T30] #0: ffff8880350e4420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd30 [ 235.182058][ T30] #1: ffff88802988bc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 235.200477][ T30] #2: ffff8880278642d8 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 235.212297][ T30] #3: ffffffff8f55e988 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x1b4/0x890 [ 235.232144][ T30] #4: ffff888030f5d0e8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 [ 235.263731][ T30] #5: ffff88805a150250 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_drv_probe+0xcb/0xb80 [ 235.281137][ T30] #6: ffffffff8fcb2f48 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x84/0x290 [ 235.300529][ T30] 2 locks held by syz-executor/6673: [ 235.306087][ T30] #0: ffffffff9019bbe0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 235.320623][ T30] #1: ffffffff8fcb2f48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210 [ 235.337865][ T30] 1 lock held by syz.6.236/6720: [ 235.350657][ T30] #0: ffffffff8fcb2f48 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x31a/0x1ac0 [ 235.360299][ T30] 1 lock held by syz-executor/6725: [ 235.366729][ T30] #0: ffffffff8fcb2f48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 235.398002][ T30] 1 lock held by syz-executor/6728: [ 235.411890][ T30] #0: ffffffff8fcb2f48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 235.422994][ T30] 1 lock held by syz-executor/6731: [ 235.430257][ T30] #0: ffffffff8fcb2f48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 235.450711][ T30] 1 lock held by syz-executor/6734: [ 235.455945][ T30] #0: ffffffff8fcb2f48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 235.478337][ T30] 1 lock held by syz-executor/6737: [ 235.487863][ T30] #0: ffffffff8fcb2f48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 235.506689][ T30] [ 235.509069][ T30] ============================================= [ 235.509069][ T30] [ 235.540861][ T30] NMI backtrace for cpu 1 [ 235.545238][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 235.555754][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 235.565826][ T30] Call Trace: [ 235.569116][ T30] [ 235.572058][ T30] dump_stack_lvl+0x241/0x360 [ 235.576776][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.582007][ T30] ? __pfx__printk+0x10/0x10 [ 235.586642][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 235.591623][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 235.597125][ T30] ? _printk+0xd5/0x120 [ 235.601327][ T30] ? __pfx__printk+0x10/0x10 [ 235.605972][ T30] ? __wake_up_klogd+0xcc/0x110 [ 235.610852][ T30] ? __pfx__printk+0x10/0x10 [ 235.615476][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.621138][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 235.626188][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 235.632194][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 235.638211][ T30] watchdog+0xff6/0x1040 [ 235.642484][ T30] ? watchdog+0x1ea/0x1040 [ 235.646939][ T30] ? __pfx_watchdog+0x10/0x10 [ 235.651640][ T30] kthread+0x2f2/0x390 [ 235.655739][ T30] ? __pfx_watchdog+0x10/0x10 [ 235.660442][ T30] ? __pfx_kthread+0x10/0x10 [ 235.665064][ T30] ret_from_fork+0x4d/0x80 [ 235.669504][ T30] ? __pfx_kthread+0x10/0x10 [ 235.674122][ T30] ret_from_fork_asm+0x1a/0x30 [ 235.678921][ T30] [ 235.683603][ T30] Sending NMI from CPU 1 to CPUs 0: [ 235.689741][ C0] NMI backtrace for cpu 0 [ 235.689762][ C0] CPU: 0 UID: 0 PID: 967 Comm: kworker/0:2 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 235.689787][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 235.689802][ C0] Workqueue: wg-crypt-wg2 wg_packet_encrypt_worker [ 235.689843][ C0] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 235.689879][ C0] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 4c cc 80 00 48 c7 c3 d8 7c 03 00 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 22 8b 03 65 ff 0d 81 b5 7e 7e 74 10 83 e0 04 c1 e8 02 5b [ 235.689897][ C0] RSP: 0018:ffffc900000075b8 EFLAGS: 00000012 [ 235.689916][ C0] RAX: 0000000000000000 RBX: ffff8880b8637cd8 RCX: 0000000000000100 [ 235.689931][ C0] RDX: 0000000000000068 RSI: ffffffff8c5fb200 RDI: ffffffff8c5fb1c0 [ 235.689948][ C0] RBP: 0000000000000068 R08: 0000000000000820 R09: 00000000ffffffff [ 235.689962][ C0] R10: dffffc0000000000 R11: ffffffff8799bc10 R12: 0000000000000080 [ 235.689979][ C0] R13: 0000000000000068 R14: ffffffff8e2e6b50 R15: dffffc0000000000 [ 235.689998][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 235.690017][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.690033][ C0] CR2: 0000555564f0e808 CR3: 00000000716ae000 CR4: 0000000000350ef0 [ 235.690051][ C0] Call Trace: [ 235.690059][ C0] [ 235.690068][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 235.690098][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 235.690127][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 235.690155][ C0] ? nmi_handle+0x2a/0x5a0 [ 235.690194][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 235.690216][ C0] ? nmi_handle+0x151/0x5a0 [ 235.690243][ C0] ? nmi_handle+0x2a/0x5a0 [ 235.690272][ C0] ? rcu_is_watching+0x5a/0xb0 [ 235.690304][ C0] ? default_do_nmi+0x63/0x160 [ 235.690331][ C0] ? exc_nmi+0x123/0x1f0 [ 235.690357][ C0] ? end_repeat_nmi+0xf/0x53 [ 235.690382][ C0] ? __pfx_dummy_urb_enqueue+0x10/0x10 [ 235.690409][ C0] ? rcu_is_watching+0x5a/0xb0 [ 235.690441][ C0] ? rcu_is_watching+0x5a/0xb0 [ 235.690475][ C0] ? rcu_is_watching+0x5a/0xb0 [ 235.690507][ C0] [ 235.690515][ C0] [ 235.690524][ C0] trace_kmalloc+0x1f/0xd0 [ 235.690554][ C0] __kmalloc_cache_noprof+0x232/0x390 [ 235.690589][ C0] ? dummy_urb_enqueue+0x7d/0x780 [ 235.690615][ C0] dummy_urb_enqueue+0x7d/0x780 [ 235.690645][ C0] usb_hcd_submit_urb+0x36e/0x1e80 [ 235.690685][ C0] ? __pfx_usb_hcd_submit_urb+0x10/0x10 [ 235.690717][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 235.690741][ C0] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 235.690784][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.690809][ C0] ? usb_submit_urb+0x10e4/0x1930 [ 235.690844][ C0] ? kcov_remote_start+0x97/0x7d0 [ 235.690872][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.690900][ C0] ath9k_hif_usb_reg_in_cb+0x4ce/0x6e0 [ 235.690937][ C0] ? usb_unanchor_urb+0x7d/0xc0 [ 235.690973][ C0] __usb_hcd_giveback_urb+0x42e/0x6e0 [ 235.691005][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 235.691038][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 235.691059][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.691088][ C0] dummy_timer+0x856/0x4620 [ 235.691111][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.691140][ C0] ? debug_object_deactivate+0x2d5/0x390 [ 235.691190][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.691231][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 235.691258][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 235.691280][ C0] __hrtimer_run_queues+0x59d/0xd30 [ 235.691313][ C0] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 235.691350][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 235.691383][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.691407][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.691431][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 235.691462][ C0] hrtimer_run_softirq+0x19a/0x2c0 [ 235.691498][ C0] handle_softirqs+0x2d6/0x9b0 [ 235.691535][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.691564][ C0] ? __irq_exit_rcu+0xf7/0x220 [ 235.691601][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 235.691638][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.691662][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 235.691692][ C0] __irq_exit_rcu+0xf7/0x220 [ 235.691727][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 235.691778][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.691805][ C0] irq_exit_rcu+0x9/0x30 [ 235.691837][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 235.691870][ C0] [ 235.691878][ C0] [ 235.691886][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 235.691923][ C0] RIP: 0010:__local_bh_enable_ip+0x170/0x200 [ 235.691959][ C0] Code: 8c e8 d4 43 67 0a 65 66 8b 05 b4 00 a2 7e 66 85 c0 75 5d bf 01 00 00 00 e8 0d be 0b 00 e8 08 67 45 00 fb 65 8b 05 78 00 a2 7e <85> c0 75 05 e8 f7 81 a8 ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c [ 235.691977][ C0] RSP: 0018:ffffc90003c875a0 EFLAGS: 00000286 [ 235.691997][ C0] RAX: 0000000080000000 RBX: 1ffff92000790eb8 RCX: ffffffff817b387a [ 235.692013][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0a98e0 RDI: ffffffff8c5fb220 [ 235.692031][ C0] RBP: ffffc90003c87650 R08: ffffffff942a5987 R09: 1ffffffff2854b30 [ 235.692048][ C0] R10: dffffc0000000000 R11: fffffbfff2854b31 R12: dffffc0000000000 [ 235.692065][ C0] R13: 1ffff92000790ebc R14: ffffc90003c875e0 R15: 0000000000000201 [ 235.692087][ C0] ? mark_lock+0x9a/0x360 [ 235.692120][ C0] ? wg_packet_encrypt_worker+0x2c4/0x16b0 [ 235.692156][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 235.692190][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.692217][ C0] ? wg_packet_encrypt_worker+0xd5/0x16b0 [ 235.692255][ C0] wg_packet_encrypt_worker+0x2c4/0x16b0 [ 235.692306][ C0] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 235.692347][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.692375][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.692399][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.692423][ C0] ? look_up_lock_class+0x77/0x170 [ 235.692457][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.692480][ C0] ? register_lock_class+0x102/0x980 [ 235.692506][ C0] ? try_to_wake_up+0x91b/0x1470 [ 235.692534][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 235.692555][ C0] ? __pfx_lock_release+0x10/0x10 [ 235.692582][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 235.692611][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.692635][ C0] ? mark_lock+0x9a/0x360 [ 235.692665][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.692689][ C0] ? __lock_acquire+0x1397/0x2100 [ 235.692718][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 235.692751][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.692780][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 235.692806][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.692830][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 235.692858][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.692892][ C0] ? process_scheduled_works+0x976/0x1840 [ 235.692916][ C0] process_scheduled_works+0xa68/0x1840 [ 235.692956][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 235.692985][ C0] ? assign_work+0x364/0x3d0 [ 235.693010][ C0] worker_thread+0x870/0xd30 [ 235.693036][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.693061][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.693085][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 235.693119][ C0] ? __kthread_parkme+0x169/0x1d0 [ 235.693146][ C0] ? __pfx_worker_thread+0x10/0x10 [ 235.693170][ C0] kthread+0x2f2/0x390 [ 235.693197][ C0] ? __pfx_worker_thread+0x10/0x10 [ 235.693221][ C0] ? __pfx_kthread+0x10/0x10 [ 235.693249][ C0] ret_from_fork+0x4d/0x80 [ 235.693272][ C0] ? __pfx_kthread+0x10/0x10 [ 235.693299][ C0] ret_from_fork_asm+0x1a/0x30 [ 235.693330][ C0] [ 236.473083][ T5138] Bluetooth: hci12: command tx timeout [ 236.530509][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 236.537405][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 236.547918][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 236.557985][ T30] Call Trace: [ 236.561274][ T30] [ 236.564215][ T30] dump_stack_lvl+0x241/0x360 [ 236.568927][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.574153][ T30] ? __pfx__printk+0x10/0x10 [ 236.578764][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 236.584779][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.590428][ T30] ? vscnprintf+0x5d/0x90 [ 236.594787][ T30] panic+0x349/0x880 [ 236.598706][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.604361][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 236.610539][ T30] ? __pfx_panic+0x10/0x10 [ 236.614977][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 236.620383][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.626034][ T30] ? __irq_work_queue_local+0x137/0x410 [ 236.631602][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.637253][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 236.642652][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 236.648832][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 236.655014][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.660674][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 236.666859][ T30] watchdog+0x1035/0x1040 [ 236.671214][ T30] ? watchdog+0x1ea/0x1040 [ 236.675659][ T30] ? __pfx_watchdog+0x10/0x10 [ 236.680357][ T30] kthread+0x2f2/0x390 [ 236.684453][ T30] ? __pfx_watchdog+0x10/0x10 [ 236.689158][ T30] ? __pfx_kthread+0x10/0x10 [ 236.693776][ T30] ret_from_fork+0x4d/0x80 [ 236.698208][ T30] ? __pfx_kthread+0x10/0x10 [ 236.702824][ T30] ret_from_fork_asm+0x1a/0x30 [ 236.707619][ T30] [ 236.711374][ T30] Kernel Offset: disabled [ 236.715695][ T30] Rebooting in 86400 seconds..