last executing test programs: 37.357727567s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x4}]}, 0x20}}, 0x0) 37.1909166s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x4}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x4}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 36.930992699s ago: executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) splice(r1, 0x0, r0, &(0x7f0000000000)=0xfffffffffffffffe, 0x7fffffffffffffff, 0x0) 36.786850187s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x44, r3, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0b}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cabee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}]}, 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000002bc0)=[{{0x0, 0x40002, 0x0, 0x0, 0x0, 0xf0ff7f, 0x100000}, 0x8000000}, {{0x0, 0x8, &(0x7f0000000600)=[{0x0, 0x10}], 0x1}}], 0x3fffffffffffca8, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64, @ANYBLOB="220e"], 0x50}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, 0x0, &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, 0x0}, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 32.392457246s ago: executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3f0, 0x0, 0x0, 0x100, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00', {}, {}, 0x2}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 32.228199704s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000a5000000d000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='global_dirty_state\x00', r0}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet(0xa, 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r5, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES64=r3], 0x24}}, 0x0) 32.000289701s ago: executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000023000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 31.816628702s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d0, 0x108, 0x318, 0x228, 0x0, 0x0, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@ipv6={@loopback={0x6200000000000000}, @local, [], [], 'syzkaller1\x00', 'veth0_macvtap\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0xfffe}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netpci0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ipv6={@local, @private1, [], [], 'veth0_macvtap\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@multicast1}}}, {{@ipv6={@private0, @local, [], [], 'team0\x00', 'bond_slave_0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "e109"}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) 31.771916787s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x58, 0x1, 0x2, 0xcff, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1}}}]}]}, 0x58}}, 0x0) 31.76722948s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0xe, 0x590, &(0x7f00000002c0)="4ce02b9d64e50d293ddb0ae4b8a0", 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 31.653240687s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 31.565857043s ago: executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x5, &(0x7f0000000040)=0xfffffffe, 0x4) 31.467530145s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0xfcc1, 0x10, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe56, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) 31.412807951s ago: executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) sendmmsg$unix(r0, &(0x7f0000003440)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{0x0}], 0x1}}], 0x2, 0x0) 31.341806144s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='jbd2_handle_stats\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 31.279613239s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_tcp_int(r1, 0x11e, 0x1, 0x0, &(0x7f0000000200)) 31.206289628s ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000023000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 31.160781666s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)={r2, 0x0, 0x1, "cd"}, 0x9) 31.1333115s ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @mptcp=@ack={0x1e, 0xc, 0x40, 0x4, "92aa1ef27b023fa4"}]}}}}}}}}, 0x0) 31.021345962s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000060000000000000000000085000000bc00000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 31.017516086s ago: executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x2001) 30.883108956s ago: executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000100)={@private=0xa010102, @local, 0x1, "3f15ecb61ff260b321276a88e02eaca3d9e3519db6fd0c59d5a7ca984412a6c0", 0x3, 0x1, 0x8001, 0x7}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x7, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007910910000000000950000000006000091d48e3463644e0c990f0cfe372468fab0709af75c1f9ac4193b63df5a2b32e8a9d92bb5647e7584e8c85d98bae78237dd0ba3e6e9004cfb496bf91217b7fa85b7caa79bf845a506aa"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="0b03060020fc020002004788800809103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 30.857428603s ago: executing program 4: syz_emit_ethernet(0xae, &(0x7f0000000180)={@random="757e938fd660", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9ff0600000000000000a2"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) 30.759611146s ago: executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"], 0x210) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 30.012003124s ago: executing program 1: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x170, 0xc8, 0x8, 0x0, 0x5803, 0xa40, 0x2e8, 0x2e8, 0xa40, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000140)={&(0x7f0000000100)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "9e1050ecb1edca6a70e745f26c9e33a58584842d15e6db3d077146605345ac5f04837fcc6bbd44274bba9a5ed38d5d3a58fbb5680f38c0a19ec746ed1a1dcc6d"}, 0x48}, 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000050000140600fc020000000000000000000000000000ff02"], 0x0) r5 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000340)=ANY=[], 0x0, 0x1a}, 0x20) pipe(&(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0700996a8a7f"}) 1.631377763s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), 0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x34, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}}, 0x0) 1.002135508s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f00002b0000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x1000) mmap(&(0x7f00002dc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 859.563378ms ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) recvmsg$can_raw(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/16, 0xf000}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0x2}, 0x0) 742.856837ms ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x49) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf04000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) 0s ago: executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000030005000000000002004e21ac1e0001000000000000000003000600000000000200000000000000000000000000000008001200000002"], 0x80}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.199' (ED25519) to the list of known hosts. 2024/06/17 17:44:19 fuzzer started 2024/06/17 17:44:20 dialing manager at 10.128.0.169:30016 [ 57.057352][ T5092] cgroup: Unknown subsys name 'net' [ 57.226932][ T5092] cgroup: Unknown subsys name 'rlimit' 2024/06/17 17:44:21 starting 5 executor processes [ 58.357684][ T5093] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.167828][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.180153][ T5122] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.189711][ T5122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.197750][ T5122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.201544][ T5126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.205903][ T5122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.220882][ T5122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.222761][ T5127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.229212][ T5122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.237144][ T5126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.243250][ T5122] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.251411][ T5127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.258248][ T5122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.265445][ T5127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.272914][ T5122] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.279319][ T5127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.285352][ T5122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.292742][ T5127] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 59.299673][ T5122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.305944][ T5127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.314445][ T5122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.323154][ T5127] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.327650][ T5122] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.334052][ T5127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.341308][ T5122] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.355978][ T5122] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.366796][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.385818][ T5122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.393905][ T5122] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.407765][ T5122] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.846401][ T5120] chnl_net:caif_netlink_parms(): no params data found [ 60.027330][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 60.047716][ T5121] chnl_net:caif_netlink_parms(): no params data found [ 60.145560][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.152890][ T5120] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.161832][ T5120] bridge_slave_0: entered allmulticast mode [ 60.169030][ T5120] bridge_slave_0: entered promiscuous mode [ 60.181657][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 60.207330][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.214597][ T5120] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.221820][ T5120] bridge_slave_1: entered allmulticast mode [ 60.228522][ T5120] bridge_slave_1: entered promiscuous mode [ 60.235983][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 60.314825][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.322288][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.329761][ T5121] bridge_slave_0: entered allmulticast mode [ 60.336485][ T5121] bridge_slave_0: entered promiscuous mode [ 60.355672][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.363286][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.370655][ T5111] bridge_slave_0: entered allmulticast mode [ 60.377390][ T5111] bridge_slave_0: entered promiscuous mode [ 60.408060][ T5120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.422781][ T5120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.432407][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.439915][ T5121] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.447062][ T5121] bridge_slave_1: entered allmulticast mode [ 60.454068][ T5121] bridge_slave_1: entered promiscuous mode [ 60.460689][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.467890][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.475546][ T5111] bridge_slave_1: entered allmulticast mode [ 60.482335][ T5111] bridge_slave_1: entered promiscuous mode [ 60.564594][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.594068][ T5120] team0: Port device team_slave_0 added [ 60.602200][ T5120] team0: Port device team_slave_1 added [ 60.624828][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.667390][ T5121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.705308][ T5111] team0: Port device team_slave_0 added [ 60.721879][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.729302][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.736470][ T5112] bridge_slave_0: entered allmulticast mode [ 60.744494][ T5112] bridge_slave_0: entered promiscuous mode [ 60.766203][ T5121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.797850][ T5111] team0: Port device team_slave_1 added [ 60.814181][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.821624][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.828994][ T5112] bridge_slave_1: entered allmulticast mode [ 60.835772][ T5112] bridge_slave_1: entered promiscuous mode [ 60.844617][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.852716][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.881905][ T5120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.909505][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.916648][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.924260][ T5113] bridge_slave_0: entered allmulticast mode [ 60.931203][ T5113] bridge_slave_0: entered promiscuous mode [ 60.961485][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.968541][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.994870][ T5120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.009640][ T5121] team0: Port device team_slave_0 added [ 61.015898][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.023442][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.030975][ T5113] bridge_slave_1: entered allmulticast mode [ 61.037800][ T5113] bridge_slave_1: entered promiscuous mode [ 61.045819][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.053384][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.080225][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.104629][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.134233][ T5121] team0: Port device team_slave_1 added [ 61.149823][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.156793][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.182940][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.201955][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.252922][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.280876][ T5120] hsr_slave_0: entered promiscuous mode [ 61.287562][ T5120] hsr_slave_1: entered promiscuous mode [ 61.307600][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.323534][ T5112] team0: Port device team_slave_0 added [ 61.332612][ T5112] team0: Port device team_slave_1 added [ 61.351250][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.358288][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.384727][ T5121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.419850][ T5115] Bluetooth: hci2: command tx timeout [ 61.425611][ T5115] Bluetooth: hci4: command tx timeout [ 61.431258][ T53] Bluetooth: hci0: command tx timeout [ 61.432168][ T5122] Bluetooth: hci3: command tx timeout [ 61.456709][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.464374][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.490862][ T5121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.501752][ T5122] Bluetooth: hci1: command tx timeout [ 61.529260][ T5111] hsr_slave_0: entered promiscuous mode [ 61.535920][ T5111] hsr_slave_1: entered promiscuous mode [ 61.543181][ T5111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.551285][ T5111] Cannot create hsr debugfs directory [ 61.557454][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.565084][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.592089][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.606187][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.613322][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.639979][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.678908][ T5113] team0: Port device team_slave_0 added [ 61.687847][ T5113] team0: Port device team_slave_1 added [ 61.815709][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.826405][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.854587][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.877468][ T5112] hsr_slave_0: entered promiscuous mode [ 61.884103][ T5112] hsr_slave_1: entered promiscuous mode [ 61.890738][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.898306][ T5112] Cannot create hsr debugfs directory [ 61.911470][ T5121] hsr_slave_0: entered promiscuous mode [ 61.917792][ T5121] hsr_slave_1: entered promiscuous mode [ 61.924287][ T5121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.932166][ T5121] Cannot create hsr debugfs directory [ 61.943698][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.950715][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.976697][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.142762][ T5113] hsr_slave_0: entered promiscuous mode [ 62.154215][ T5113] hsr_slave_1: entered promiscuous mode [ 62.160426][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.168071][ T5113] Cannot create hsr debugfs directory [ 62.408677][ T5120] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.419720][ T5120] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.453092][ T5120] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.482388][ T5120] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.547846][ T5111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.562854][ T5111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.581429][ T5111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.592809][ T5111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.678011][ T5112] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.690959][ T5112] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.724024][ T5112] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.734812][ T5112] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.772502][ T5113] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.792313][ T5113] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.810116][ T5113] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.824504][ T5113] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.911777][ T5121] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.933475][ T5121] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.947478][ T5121] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.961882][ T5120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.982013][ T5121] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.035031][ T5120] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.078787][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.086084][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.151217][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.158918][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.184403][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.259898][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.305440][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.337474][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.344664][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.356661][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.363807][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.406336][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.452429][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.500325][ T5122] Bluetooth: hci3: command tx timeout [ 63.503185][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.505837][ T5122] Bluetooth: hci2: command tx timeout [ 63.512950][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.519868][ T53] Bluetooth: hci0: command tx timeout [ 63.528536][ T5122] Bluetooth: hci4: command tx timeout [ 63.561965][ T5121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.574799][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.582006][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.591057][ T5122] Bluetooth: hci1: command tx timeout [ 63.603987][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.693996][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.701208][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.710789][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.718001][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.834057][ T5121] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.867125][ T5120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.903209][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.910394][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.922365][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.929623][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.035891][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.157290][ T5120] veth0_vlan: entered promiscuous mode [ 64.206268][ T5120] veth1_vlan: entered promiscuous mode [ 64.340154][ T5120] veth0_macvtap: entered promiscuous mode [ 64.366904][ T5120] veth1_macvtap: entered promiscuous mode [ 64.428501][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.448519][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.475704][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.511592][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.522715][ T5120] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.532916][ T5120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.545359][ T5120] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.563897][ T5120] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.671089][ T5121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.747568][ T5112] veth0_vlan: entered promiscuous mode [ 64.794184][ T5113] veth0_vlan: entered promiscuous mode [ 64.807421][ T5112] veth1_vlan: entered promiscuous mode [ 64.814134][ T5111] veth0_vlan: entered promiscuous mode [ 64.837499][ T5113] veth1_vlan: entered promiscuous mode [ 64.851213][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.862503][ T5111] veth1_vlan: entered promiscuous mode [ 64.879021][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.956503][ T5121] veth0_vlan: entered promiscuous mode [ 64.977587][ T5112] veth0_macvtap: entered promiscuous mode [ 64.983945][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.999574][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.012063][ T5121] veth1_vlan: entered promiscuous mode [ 65.036395][ T5113] veth0_macvtap: entered promiscuous mode [ 65.061187][ T5112] veth1_macvtap: entered promiscuous mode [ 65.082066][ T5111] veth0_macvtap: entered promiscuous mode [ 65.113602][ T5113] veth1_macvtap: entered promiscuous mode [ 65.158070][ T5121] veth0_macvtap: entered promiscuous mode [ 65.184274][ T5111] veth1_macvtap: entered promiscuous mode [ 65.221526][ T5121] veth1_macvtap: entered promiscuous mode [ 65.235675][ T5196] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 65.250432][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.267100][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.280388][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.307672][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.318813][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.335418][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.355259][ T5113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.364191][ T5113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.379247][ T5113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.388203][ T5113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.400411][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.411490][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.422109][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.432823][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.445892][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.479157][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.491007][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.501188][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.513792][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.523758][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.534225][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.545516][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.556047][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.567233][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.578930][ T5122] Bluetooth: hci0: command tx timeout [ 65.584968][ T5122] Bluetooth: hci2: command tx timeout [ 65.585459][ T5115] Bluetooth: hci3: command tx timeout [ 65.591011][ T5122] Bluetooth: hci4: command tx timeout [ 65.609113][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.620092][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.630354][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.641255][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.653425][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.665754][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.676413][ T5122] Bluetooth: hci1: command tx timeout [ 65.691302][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.710415][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.746767][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.757699][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.768571][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.781514][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.802588][ T5200] sch_fq: defrate 0 ignored. [ 65.809928][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.821558][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.831482][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.845875][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.855802][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.866349][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.879614][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.892978][ T5111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.902331][ T5111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.912783][ T5111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.924589][ T5111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.954952][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.968196][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.989498][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.016052][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.027034][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.037874][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.048636][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.060261][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.072900][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.084299][ T5112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.093632][ T5112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.102939][ T5112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.114084][ T5112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.158319][ T5121] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.178096][ T5121] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.187066][ T5121] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.196204][ T5121] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.289091][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.308812][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.426943][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.459866][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.485386][ T5212] Illegal XDP return value 4294967274 on prog (id 7) dev N/A, expect packet loss! [ 66.571047][ T2425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.599081][ T2425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.735462][ T2425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.770092][ T2425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.865867][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.884343][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.924786][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.952665][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.007840][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.032239][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.054657][ T5225] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 67.068954][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.088935][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.449134][ T5238] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 67.457351][ T5238] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 67.659034][ T5122] Bluetooth: hci3: command tx timeout [ 67.660564][ T5115] Bluetooth: hci2: command tx timeout [ 67.668815][ T5122] Bluetooth: hci4: command tx timeout [ 67.670375][ T53] Bluetooth: hci0: command tx timeout [ 67.739079][ T5115] Bluetooth: hci1: command tx timeout [ 67.811955][ T5254] sch_fq: defrate 0 ignored. [ 68.072679][ T5267] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 68.456917][ T5283] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 68.478212][ T5283] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.648849][ T5288] sch_fq: defrate 0 ignored. [ 69.490325][ T5323] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 69.673774][ T5326] sch_fq: defrate 0 ignored. [ 69.734008][ T5331] geneve2: entered promiscuous mode [ 69.780996][ T5331] geneve2: entered allmulticast mode [ 69.932094][ T5338] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 70.212760][ T5350] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 70.645842][ T5370] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.903393][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.911100][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.115095][ T5425] xt_CT: You must specify a L4 protocol and not use inversions on it [ 72.256982][ T5429] geneve2: entered promiscuous mode [ 72.280138][ T5429] geneve2: entered allmulticast mode [ 72.355567][ T5434] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 72.383379][ T5434] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 72.406848][ T5434] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. [ 72.838283][ T5450] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 72.868253][ T5453] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.151810][ T5462] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 73.201774][ T5462] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 73.518446][ T5483] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 73.771920][ T5491] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.850338][ T5491] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 77.045345][ T29] audit: type=1804 audit(1718646280.366:2): pid=5626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3263766753/syzkaller.XFSDoX/48/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 77.894957][ T5669] Bluetooth: MGMT ver 1.22 [ 77.914517][ T29] audit: type=1804 audit(1718646281.236:3): pid=5664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2730417406/syzkaller.FN2GXB/46/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 79.068924][ T29] audit: type=1804 audit(1718646282.356:4): pid=5698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3263766753/syzkaller.XFSDoX/55/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 79.460976][ T5716] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 79.544703][ T5721] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 79.594028][ T5721] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.4'. [ 79.709673][ T5728] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.133935][ T5748] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 80.814395][ T5771] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 82.145673][ T25] cfg80211: failed to load regulatory.db [ 110.580164][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 110.592316][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 110.600553][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 110.616096][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 110.625988][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 110.637974][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 111.172155][ T5115] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.189528][ T5115] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.205159][ T5115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.220552][ T5115] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 111.233494][ T5115] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 111.241536][ T5115] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.382459][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.391582][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.405304][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.413568][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.422106][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 111.429527][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 111.601894][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 111.610633][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 111.620677][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 111.629245][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 111.637549][ T53] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 111.645732][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 112.121192][ T5115] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 112.129996][ T5115] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 112.137810][ T5115] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 112.146634][ T5115] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 112.155036][ T5115] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 112.162598][ T5115] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 112.699295][ T5115] Bluetooth: hci5: command tx timeout [ 113.348838][ T5115] Bluetooth: hci6: command tx timeout [ 113.498834][ T5115] Bluetooth: hci7: command tx timeout [ 113.739036][ T5115] Bluetooth: hci8: command tx timeout [ 114.218732][ T5115] Bluetooth: hci9: command tx timeout [ 114.794283][ T5115] Bluetooth: hci5: command tx timeout [ 115.429262][ T5115] Bluetooth: hci6: command tx timeout [ 115.588793][ T5115] Bluetooth: hci7: command tx timeout [ 115.819151][ T5115] Bluetooth: hci8: command tx timeout [ 116.301041][ T5115] Bluetooth: hci9: command tx timeout [ 116.858817][ T5115] Bluetooth: hci5: command tx timeout [ 117.498867][ T5115] Bluetooth: hci6: command tx timeout [ 117.658802][ T5115] Bluetooth: hci7: command tx timeout [ 117.898923][ T5115] Bluetooth: hci8: command tx timeout [ 118.378816][ T5115] Bluetooth: hci9: command tx timeout [ 118.938747][ T5115] Bluetooth: hci5: command tx timeout [ 119.580141][ T5115] Bluetooth: hci6: command tx timeout [ 119.738758][ T5115] Bluetooth: hci7: command tx timeout [ 119.979100][ T5115] Bluetooth: hci8: command tx timeout [ 120.460092][ T5115] Bluetooth: hci9: command tx timeout [ 133.353293][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.359711][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 175.859636][ T53] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 175.872267][ T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 175.880921][ T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 175.901959][ T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 175.911039][ T53] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 175.918668][ T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 176.248090][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 176.259017][ T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 176.268136][ T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 176.281560][ T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 176.289793][ T53] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 176.297276][ T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 176.609861][ T5115] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 176.622044][ T5115] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 176.630916][ T5115] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 176.653697][ T5115] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 176.667209][ T5115] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 176.675938][ T5122] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 176.709057][ T5122] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 176.720721][ T5122] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 176.730203][ T5122] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 176.739090][ T5122] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 176.747070][ T5122] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 176.755317][ T5122] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 177.151880][ T5115] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 177.161046][ T5115] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 177.169809][ T5115] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 177.178047][ T5115] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 177.186536][ T5115] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 177.198213][ T5115] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 177.978823][ T5115] Bluetooth: hci10: command tx timeout [ 178.378930][ T5115] Bluetooth: hci11: command tx timeout [ 178.778924][ T5115] Bluetooth: hci13: command tx timeout [ 178.785139][ T5115] Bluetooth: hci12: command tx timeout [ 179.258763][ T5115] Bluetooth: hci14: command tx timeout [ 180.058770][ T5115] Bluetooth: hci10: command tx timeout [ 180.468690][ T5115] Bluetooth: hci11: command tx timeout [ 180.858841][ T5115] Bluetooth: hci12: command tx timeout [ 180.864483][ T5115] Bluetooth: hci13: command tx timeout [ 181.338721][ T5115] Bluetooth: hci14: command tx timeout [ 181.503520][ T5115] Bluetooth: hci3: command 0x0406 tx timeout [ 181.503591][ T5118] Bluetooth: hci2: command 0x0406 tx timeout [ 181.510163][ T5115] Bluetooth: hci0: command 0x0406 tx timeout [ 181.523554][ T5123] Bluetooth: hci4: command 0x0406 tx timeout [ 182.138791][ T53] Bluetooth: hci10: command tx timeout [ 182.538821][ T53] Bluetooth: hci11: command tx timeout [ 182.939230][ T53] Bluetooth: hci13: command tx timeout [ 182.944777][ T53] Bluetooth: hci12: command tx timeout [ 183.418749][ T53] Bluetooth: hci14: command tx timeout [ 184.218832][ T53] Bluetooth: hci10: command tx timeout [ 184.618761][ T53] Bluetooth: hci11: command tx timeout [ 185.019257][ T53] Bluetooth: hci12: command tx timeout [ 185.019272][ T5122] Bluetooth: hci13: command tx timeout [ 185.498740][ T5122] Bluetooth: hci14: command tx timeout [ 186.618721][ T5122] Bluetooth: hci1: command 0x0406 tx timeout [ 194.789637][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.796051][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 237.818836][ T5115] Bluetooth: hci7: command 0x0406 tx timeout [ 237.826163][ T5122] Bluetooth: hci6: command 0x0406 tx timeout [ 237.837026][ T5122] Bluetooth: hci9: command 0x0406 tx timeout [ 237.843694][ T5115] Bluetooth: hci5: command 0x0406 tx timeout [ 237.849755][ T5123] Bluetooth: hci8: command 0x0406 tx timeout [ 240.858999][ T30] INFO: task kworker/1:0:25 blocked for more than 143 seconds. [ 240.867034][ T30] Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 [ 240.898952][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/17 17:47:24 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 240.919069][ T5118] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 240.931032][ T5118] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 240.951698][ T5118] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 240.958682][ T30] task:kworker/1:0 state:D stack:23440 pid:25 tgid:25 ppid:2 flags:0x00004000 [ 240.978960][ T5118] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 240.987199][ T5118] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 240.988639][ T30] Workqueue: events request_firmware_work_func [ 240.996361][ T5118] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 241.002886][ T30] [ 241.056501][ T30] Call Trace: [ 241.061638][ T30] [ 241.064698][ T30] __schedule+0x17e8/0x4a20 [ 241.071430][ T30] ? __pfx___schedule+0x10/0x10 [ 241.076425][ T30] ? __pfx_lock_release+0x10/0x10 [ 241.082158][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 241.088107][ T30] ? kthread_data+0x52/0xd0 [ 241.093478][ T30] ? schedule+0x90/0x320 [ 241.100217][ T30] ? wq_worker_sleeping+0x66/0x240 [ 241.105480][ T30] ? schedule+0x90/0x320 [ 241.110516][ T30] schedule+0x14b/0x320 [ 241.114733][ T30] schedule_preempt_disabled+0x13/0x30 [ 241.120878][ T30] __mutex_lock+0x6a4/0xd70 [ 241.125608][ T30] ? __mutex_lock+0x527/0xd70 [ 241.131203][ T30] ? regdb_fw_cb+0x82/0x1c0 [ 241.135762][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 241.141896][ T30] ? __pfx_regdb_fw_cb+0x10/0x10 [ 241.146928][ T30] regdb_fw_cb+0x82/0x1c0 [ 241.152230][ T30] ? __pfx_regdb_fw_cb+0x10/0x10 [ 241.157565][ T30] request_firmware_work_func+0x1a4/0x280 [ 241.163951][ T30] ? __pfx_request_firmware_work_func+0x10/0x10 [ 241.170870][ T30] ? process_scheduled_works+0x945/0x1830 [ 241.176825][ T30] process_scheduled_works+0xa2c/0x1830 [ 241.188731][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 241.194811][ T30] ? assign_work+0x364/0x3d0 [ 241.209397][ T30] worker_thread+0x86d/0xd70 [ 241.214065][ T30] ? __kthread_parkme+0x169/0x1d0 [ 241.228656][ T30] ? __pfx_worker_thread+0x10/0x10 [ 241.234035][ T30] kthread+0x2f0/0x390 [ 241.238307][ T30] ? __pfx_worker_thread+0x10/0x10 [ 241.258824][ T30] ? __pfx_kthread+0x10/0x10 [ 241.268776][ T30] ret_from_fork+0x4b/0x80 [ 241.273423][ T30] ? __pfx_kthread+0x10/0x10 [ 241.278039][ T30] ret_from_fork_asm+0x1a/0x30 [ 241.300147][ T30] [ 241.303562][ T30] INFO: task kworker/0:2:784 blocked for more than 143 seconds. [ 241.328659][ T30] Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 [ 241.336489][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [