last executing test programs: 8.552179925s ago: executing program 2 (id=2684): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x1, 0x1, 0x1}, {0x0, 0x1}}, {{0x1, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}], 0x10) close(r0) 8.375718067s ago: executing program 2 (id=2687): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x18, 0x2b, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 7.996826746s ago: executing program 2 (id=2693): bpf$MAP_CREATE(0x0, 0x0, 0x0) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={0x0}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0x4a, 0x0, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff290000003b0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8", 0x0, 0x31, 0x6000000000000000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) 7.712143672s ago: executing program 2 (id=2696): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x7c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x45, 0xe, {{{}, {}, @device_b, @device_a, @from_mac=@device_b}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @val={0x5, 0x3, {0xeb, 0x3a, 0xb0}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x5, 0x99, 0x2}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x9, 0x11, 0x5}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x7c}}, 0xc094) 7.414204643s ago: executing program 3 (id=2699): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) 7.410745076s ago: executing program 2 (id=2700): socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_int(r1, 0x0, 0x2) 7.155043213s ago: executing program 3 (id=2703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 7.021755462s ago: executing program 0 (id=2705): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a00)={0x0, &(0x7f0000000800)=""/192, 0x0, 0x0, 0x6, r0, 0x4}, 0x38) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88b59edace0000033e8283f2305e02000002ff02000000000000000000000000000104004e20004d03"], 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003380)=""/4074, 0xfea}], 0x1}, 0x0) 6.91742153s ago: executing program 3 (id=2706): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x174, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xb}, [@IFLA_AF_SPEC={0x154, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8}]}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x80, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x174}}, 0x0) 6.876897036s ago: executing program 1 (id=2707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 6.828755597s ago: executing program 4 (id=2708): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040), 0x4) 6.810913458s ago: executing program 3 (id=2709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x1, 0x8}]}, 0x58}, 0x1, 0x7}, 0x0) write$dsp(r2, &(0x7f00000001c0)='j', 0x1) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) pwrite64(r1, 0x0, 0x0, 0x1f) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1f, 0x6, 0xab}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000740)={0x1, 0x0, @pic={0x0, 0xff, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfe}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000680)={[0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2104c9, 0x8c5, 0x0, 0x100000000000000, 0x0, 0x0, 0x200000000000, 0x20000000000], 0x4, 0x2c0710}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$udambuf(0xffffff9c, &(0x7f0000000040), 0x2) 6.679196493s ago: executing program 1 (id=2710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x7c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x45, 0xe, {{{}, {}, @device_b, @device_a, @from_mac=@device_b}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @val={0x5, 0x3, {0xeb, 0x3a, 0xb0}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x5, 0x99, 0x2}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x9, 0x11, 0x5}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x7c}}, 0xc094) 6.523348837s ago: executing program 1 (id=2711): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000140), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x1, 0x1, 0x1}, {0x0, 0x1}}, {{0x1, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}], 0x10) close(r0) 6.386107928s ago: executing program 1 (id=2712): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x9) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000600)=0x8, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) shutdown(r0, 0x1) 6.285391014s ago: executing program 2 (id=2713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) unshare(0x8000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x90, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x50, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x10}}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x2}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x18, 0x2}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x90}}, 0x0) 5.966213851s ago: executing program 0 (id=2714): syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10101}, &(0x7f0000000300), &(0x7f0000000000)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x0, 0x9}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x2, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) mknod(0x0, 0x8001420, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001480)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000013c0), 0x0, 0xa3, &(0x7f00000014c0)={r2, r3+10000000}) fcntl$notify(r1, 0x402, 0x8000003d) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, 0x0) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000701, r4, &(0x7f00000007c0)) creat(&(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fsetxattr(r0, &(0x7f0000000880)=@known='system.advise\x00', &(0x7f00000008c0)=']\',*,\x00', 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000180)) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0xff}, 0x9c) 5.882676517s ago: executing program 4 (id=2715): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x40e2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000080)=@udp}, 0x20) syz_emit_ethernet(0x491, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x45b, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xd, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d98"}, {0x0, 0x9, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8bedb8ecd2"}, {0x0, 0x1, "d429145c793e823829b4376332"}, {0x0, 0x70, "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"}]}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.669262183s ago: executing program 3 (id=2716): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="080001cc94f600", @ANYRES32=r2], 0x90}}, 0x0) io_uring_setup(0x2000497a, &(0x7f00000001c0)={0x0, 0x0, 0x400, 0x100, 0x366}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0x7}, 'port1\x00', 0xe3, 0x10c02, 0x800, 0x80000, 0x0, 0x3, 0x3, 0x0, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x881, 0x0) syz_usb_connect(0x0, 0x29c, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000841b7420da040d39bb2d0102030109028a020100000000090408f80af179fa020f24020205000d000cf67df8e6988f0724014004000009050c0340000e040809050201000208066c7c0f15bf333a2cfa4b5988a994c5a0a791e7c152e54cf4a7365652fbca61e1134d5344b757ffb0b23324a6f46d44bc198b8fef8717c0cdb48f2468368cce7eb19d9b12148ac290d78d5eb28c52d853c2d68a7990979177a5e8ed511a5d4486e988aa026863bc5422790acfb184f36bbf"], 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x20) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000f, 0x40a2012, r4, 0x0) 5.666571581s ago: executing program 1 (id=2717): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 5.596630129s ago: executing program 0 (id=2718): syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000600)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="9ae38f591df8f1e5"}}}}}, 0x0) 5.500248422s ago: executing program 4 (id=2719): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x174, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xb}, [@IFLA_AF_SPEC={0x154, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8}]}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x80, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x174}}, 0x0) 5.361481845s ago: executing program 0 (id=2720): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$tipc(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x7c}}, 0x11) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 5.230686473s ago: executing program 0 (id=2721): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1a8aacd, 0x0) 4.998042512s ago: executing program 0 (id=2722): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000140), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x1, 0x1, 0x1}, {0x0, 0x1}}, {{0x1, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}], 0x10) close(r0) 3.377482423s ago: executing program 3 (id=2723): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x28}], 0x1}, 0x0) 550.983066ms ago: executing program 4 (id=2724): r0 = syz_io_uring_setup(0x10c, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x3, 0x9}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r0, 0x20003d16, 0x80000, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup(r3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendfile(r6, r4, 0x0, 0x8a000) 452.125236ms ago: executing program 1 (id=2725): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90324fc6004001c050a000200053582c137153e37000c0480fc0b10000300", 0x33fe0}], 0x1}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r2 = syz_io_uring_setup(0x4e5f, &(0x7f0000000580)={0x0, 0xf3b1, 0x10100, 0x0, 0x276}, &(0x7f0000000480)=0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socket$alg(0x26, 0x5, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000100), 0x4) listen(r6, 0x100000001) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xe) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x34, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}}, 0x0) syz_io_uring_submit(r3, 0x0, 0x0) r11 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800) preadv(r11, &(0x7f0000002e80)=[{&(0x7f0000002a40)=""/137, 0x89}], 0x1, 0x0, 0x6ca) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) io_uring_enter(r2, 0x13a2, 0x2, 0x0, 0x0, 0x0) 262.119947ms ago: executing program 4 (id=2726): syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x20, 0x2b, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, {[@dstopts={0x89}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 0s ago: executing program 4 (id=2727): bind$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x50, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): 0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.913080][T15960] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.922147][T15960] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.932280][T15960] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.980074][T10984] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.987236][T10984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.059104][T16223] team0: Port device team_slave_0 added [ 668.075562][ T5285] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 668.086797][T16223] team0: Port device team_slave_1 added [ 668.208148][T16223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.215138][T16223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.261502][T15286] Bluetooth: hci3: command tx timeout [ 668.267604][ T5285] usb 1-1: Using ep0 maxpacket: 16 [ 668.272928][T16223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.285080][ T5285] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 668.294254][ T5285] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 668.304941][ T5285] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 668.314728][ T5285] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 668.324517][ T5285] usb 1-1: config 1 interface 0 has no altsetting 0 [ 668.331362][ T5285] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 668.340488][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.352643][ T5285] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 668.392223][T16223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.401806][T16223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.434123][T16223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.492463][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.535763][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.668306][T16035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.741878][T16223] hsr_slave_0: entered promiscuous mode [ 668.757592][T16223] hsr_slave_1: entered promiscuous mode [ 668.775593][T16223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 668.783179][T16223] Cannot create hsr debugfs directory [ 668.847175][T10971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.855040][T10971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.934541][T16035] veth0_vlan: entered promiscuous mode [ 669.018880][T16035] veth1_vlan: entered promiscuous mode [ 669.110840][T16035] veth0_macvtap: entered promiscuous mode [ 669.148281][T16035] veth1_macvtap: entered promiscuous mode [ 669.360007][T16035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.380225][T16035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.410598][T16035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.435623][T16035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.445939][T16035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.458023][T16035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.470886][T16035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.522479][T16035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.573881][T16035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.595167][T16035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.628336][T16035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.686128][T16035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.719473][T16035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.751029][T16035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.827552][T16035] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.845552][T16035] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.854631][T16035] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.871333][T16035] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.109471][T10971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.153161][T10971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.296501][T10971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.325688][T15286] Bluetooth: hci3: command tx timeout [ 670.333974][T16223] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 670.341543][T10971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.348709][T16223] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 670.375007][T16223] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 670.391507][T16223] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 670.621087][T16223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.690663][T16223] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.767164][T10984] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.774335][T10984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.822129][T10984] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.829335][T10984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.277952][ T5284] usb 1-1: USB disconnect, device number 74 [ 671.367214][T10984] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.440296][T16223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.551000][T10984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.841673][T10984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.075879][T10984] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.113781][ T4622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 672.123172][ T4622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 672.133436][ T4622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 672.141940][ T4622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 672.149883][ T4622] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 672.157322][ T4622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 672.218442][T16223] veth0_vlan: entered promiscuous mode [ 672.346211][T16223] veth1_vlan: entered promiscuous mode [ 672.407327][T15286] Bluetooth: hci3: command tx timeout [ 672.461181][T16223] veth0_macvtap: entered promiscuous mode [ 672.470211][T16223] veth1_macvtap: entered promiscuous mode [ 672.485030][T16223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.496126][T16223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.506524][T16223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.517448][T16223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.527326][T16223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.537837][T16223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.547729][T16223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.558224][T16223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.569541][T16223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.579113][T16223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.589609][T16223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.599873][T16223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.610946][T16223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.627640][T16223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.641999][T16223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.655085][T16223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.718952][T16223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.754697][T16223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.817229][T16223] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.836855][T16223] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.865569][T16223] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.893095][T16223] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.961279][T10984] bridge_slave_1: left allmulticast mode [ 672.975630][T10984] bridge_slave_1: left promiscuous mode [ 672.981365][T10984] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.036383][T10984] bridge_slave_0: left allmulticast mode [ 673.042071][T10984] bridge_slave_0: left promiscuous mode [ 673.056146][T10984] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.931470][T10984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.963184][T10984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.985223][T10984] bond0 (unregistering): Released all slaves [ 674.153062][T16367] chnl_net:caif_netlink_parms(): no params data found [ 674.247659][T15286] Bluetooth: hci2: command tx timeout [ 674.741335][T16367] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.748618][T16367] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.775733][T16367] bridge_slave_0: entered allmulticast mode [ 674.782781][T16367] bridge_slave_0: entered promiscuous mode [ 674.801162][T16367] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.836017][T16367] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.843254][T16367] bridge_slave_1: entered allmulticast mode [ 674.864630][T16367] bridge_slave_1: entered promiscuous mode [ 674.952119][T10984] hsr_slave_0: left promiscuous mode [ 675.026464][T10984] hsr_slave_1: left promiscuous mode [ 675.045027][T10984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.057414][T10984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.076257][T10984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.093971][T10984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.121444][T10984] veth1_macvtap: left promiscuous mode [ 675.135919][T10984] veth0_macvtap: left promiscuous mode [ 675.175683][T10984] veth1_vlan: left promiscuous mode [ 675.181045][T10984] veth0_vlan: left promiscuous mode [ 675.885772][ T25] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 676.052412][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 676.056280][T10984] team0 (unregistering): Port device team_slave_1 removed [ 676.064843][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 676.083906][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 676.098301][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 676.108650][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.124328][ T25] usb 3-1: config 0 descriptor?? [ 676.136126][T16427] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 676.153249][T10984] team0 (unregistering): Port device team_slave_0 removed [ 676.336497][ T4622] Bluetooth: hci2: command tx timeout [ 676.559479][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 676.573830][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 676.605790][ T25] usb 3-1: USB disconnect, device number 93 [ 676.832920][T10969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.853622][T16367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.862579][T10969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.878954][T16367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.899313][T16429] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 676.913105][T16429] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 676.942396][T16429] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 676.950516][T16367] team0: Port device team_slave_0 added [ 676.967896][T16429] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 676.970932][T16367] team0: Port device team_slave_1 added [ 676.975006][T16429] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 676.998569][T16429] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 677.017146][T16429] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 677.030444][T16429] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 677.044923][T16429] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 677.067244][T10971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.075118][T10971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.094694][T16367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.106352][T16367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.111892][T16429] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 677.141470][T16367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.142007][T16429] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 677.175240][T16367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.183299][T16367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.212353][T16429] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 677.232299][T16367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.243682][T16429] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 677.256497][T16429] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 677.283865][T16429] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 677.383054][T16367] hsr_slave_0: entered promiscuous mode [ 677.411428][T16367] hsr_slave_1: entered promiscuous mode [ 677.442436][T16367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 677.481444][T16367] Cannot create hsr debugfs directory [ 678.446017][T16470] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.453581][T16470] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.543960][T16367] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 678.571822][T16367] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 678.606095][T16367] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 678.652456][T16473] bridge_slave_1: left allmulticast mode [ 678.670507][T16475] ptrace attach of "./syz-executor exec"[15960] was attempted by "./syz-executor exec"[16475] [ 678.681033][T16473] bridge_slave_1: left promiscuous mode [ 678.710999][T16473] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.757748][T16473] bridge_slave_0: left allmulticast mode [ 678.783553][T16473] bridge_slave_0: left promiscuous mode [ 678.806105][T16473] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.939727][T16367] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 678.965650][ T4622] Bluetooth: hci0: command 0x0c1a tx timeout [ 679.045563][ T4622] Bluetooth: hci1: command 0x0c1a tx timeout [ 679.046300][T16477] veth1_macvtap: left promiscuous mode [ 679.052316][ T4622] Bluetooth: hci4: command 0x0c1a tx timeout [ 679.205666][ T4622] Bluetooth: hci3: command 0x0c1a tx timeout [ 679.286926][ T4622] Bluetooth: hci2: command 0x0419 tx timeout [ 679.445693][T12220] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 679.582709][T16367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.624992][T12220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 679.645506][T12220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 679.683032][T12220] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 679.683415][T16367] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.745174][T12220] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 679.753503][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.761377][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.768831][T12220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.811397][T12220] usb 3-1: config 0 descriptor?? [ 679.822095][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.829258][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.844993][T16488] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 680.006381][T16367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.161465][T16367] veth0_vlan: entered promiscuous mode [ 680.208469][T16367] veth1_vlan: entered promiscuous mode [ 680.300066][T16367] veth0_macvtap: entered promiscuous mode [ 680.308156][T12220] usbhid 3-1:0.0: can't add hid device: -71 [ 680.314284][T12220] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 680.334836][T12220] usb 3-1: USB disconnect, device number 94 [ 680.351590][T16367] veth1_macvtap: entered promiscuous mode [ 680.408707][T16367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.445563][T16367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.471456][T16367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.505541][T16367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.515402][T16367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.589603][T16367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.609789][T16367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.625561][T16367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.645119][T16367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.671510][T16367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.687973][T16367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.705059][T16367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.727340][T16367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.752956][T16367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.769675][T16367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.788158][T16367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.801121][T16367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.813149][T16367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.836410][T16505] veth1_macvtap: left promiscuous mode [ 680.862560][T16505] veth1_macvtap: entered promiscuous mode [ 680.891768][T16505] macsec0: entered allmulticast mode [ 680.905538][T16505] veth1_macvtap: entered allmulticast mode [ 680.939305][T16367] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.953263][T16367] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.968413][T16367] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.981000][T16367] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.065654][ T4622] Bluetooth: hci0: command 0x0c1a tx timeout [ 681.126178][ T4622] Bluetooth: hci4: command 0x0c1a tx timeout [ 681.132782][ T4622] Bluetooth: hci1: command 0x0c1a tx timeout [ 681.158629][T10971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.173932][T10971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.251955][T10971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.286268][T15286] Bluetooth: hci3: command 0x0c1a tx timeout [ 681.292491][T10971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.365620][T15286] Bluetooth: hci2: command 0x0419 tx timeout [ 683.125656][T15286] Bluetooth: hci0: command 0x0c1a tx timeout [ 683.207333][ T4622] Bluetooth: hci4: command 0x0c1a tx timeout [ 683.213413][T15286] Bluetooth: hci1: command 0x0c1a tx timeout [ 683.366606][T15286] Bluetooth: hci3: command 0x0c1a tx timeout [ 683.445725][T15286] Bluetooth: hci2: command 0x0419 tx timeout [ 684.066600][T16552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2436'. [ 684.082850][T16552] netlink: 'syz.4.2436': attribute type 7 has an invalid length. [ 684.115518][ T5280] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 684.295541][ T5280] usb 3-1: Using ep0 maxpacket: 32 [ 684.302678][ T5280] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 684.317017][ T5280] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 684.340388][ T5280] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 684.367066][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 684.395499][ T5280] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 684.405207][ T5280] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 684.435488][ T5280] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 684.444554][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.486101][ T5280] usb 3-1: config 0 descriptor?? [ 684.697854][T16548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.717159][ T5280] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 95 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 684.747112][T16548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.165663][T12220] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 685.339149][T12220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 685.365851][T12220] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 685.391528][T12220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.438208][T12220] usb 1-1: config 0 descriptor?? [ 685.525849][T15286] Bluetooth: hci2: command 0x0419 tx timeout [ 685.831789][T16574] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2442'. [ 685.848961][T12220] usbhid 1-1:0.0: can't add hid device: -71 [ 685.865252][T12220] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 685.891135][T12220] usb 1-1: USB disconnect, device number 75 [ 685.929673][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.936703][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.432216][T12220] usb 3-1: USB disconnect, device number 95 [ 687.460771][T12220] usblp0: removed [ 687.571944][T16593] veth1_macvtap: left promiscuous mode [ 687.618116][T16593] veth1_macvtap: entered promiscuous mode [ 687.635162][T16593] macsec0: entered allmulticast mode [ 687.681527][T16593] veth1_macvtap: entered allmulticast mode [ 689.507750][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.650246][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.912605][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.145370][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.206146][ T4622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 690.218898][ T4622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 690.229589][ T4622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 690.239579][ T4622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 690.247878][ T4622] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 690.256707][ T4622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 690.765546][ T25] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 690.925620][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 690.938939][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 690.955088][ T25] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 690.974329][ T52] bridge_slave_1: left allmulticast mode [ 690.980824][ T52] bridge_slave_1: left promiscuous mode [ 691.005212][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.040719][ T25] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 691.059106][ T52] bridge_slave_0: left allmulticast mode [ 691.071545][ T25] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 691.090407][ T25] usb 3-1: config 1 interface 0 has no altsetting 0 [ 691.097074][ T52] bridge_slave_0: left promiscuous mode [ 691.097252][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.103272][ T25] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 691.119170][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.138793][ T25] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 691.583710][ T4622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 691.593532][ T4622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 691.605166][ T4622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 691.617195][ T4622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 691.630214][ T4622] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 691.642301][ T4622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 691.855943][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.878186][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.897457][ T52] bond0 (unregistering): Released all slaves [ 691.914572][T16635] chnl_net:caif_netlink_parms(): no params data found [ 692.327513][ T4622] Bluetooth: hci3: command tx timeout [ 692.697272][ T52] hsr_slave_0: left promiscuous mode [ 692.703448][ T52] hsr_slave_1: left promiscuous mode [ 692.718917][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.734596][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.770650][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.790255][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.829267][ T52] veth0_macvtap: left promiscuous mode [ 692.834892][ T52] veth1_vlan: left promiscuous mode [ 692.840337][ T52] veth0_vlan: left promiscuous mode [ 693.612383][ T52] team0 (unregistering): Port device team_slave_1 removed [ 693.659492][ T52] team0 (unregistering): Port device team_slave_0 removed [ 693.688189][ T4622] Bluetooth: hci2: command tx timeout [ 693.720283][T16689] ptrace attach of "./syz-executor exec"[14474] was attempted by "./syz-executor exec"[16689] [ 694.127254][T16635] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.134370][T16635] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.143216][T16635] bridge_slave_0: entered allmulticast mode [ 694.152376][T16635] bridge_slave_0: entered promiscuous mode [ 694.161860][T16635] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.177842][T16635] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.184975][T16635] bridge_slave_1: entered allmulticast mode [ 694.191804][T16635] bridge_slave_1: entered promiscuous mode [ 694.339154][T10375] usb 3-1: USB disconnect, device number 96 [ 694.405728][ T4622] Bluetooth: hci3: command tx timeout [ 694.422222][T16635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.453274][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2479'. [ 694.494123][T16635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.516071][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2479'. [ 694.701681][T16635] team0: Port device team_slave_0 added [ 694.751910][T16635] team0: Port device team_slave_1 added [ 694.920729][T16635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.951024][T16635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.001531][T16635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.033013][T16635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.053841][T16635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.086961][T16635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.109910][T16650] chnl_net:caif_netlink_parms(): no params data found [ 695.255583][T12220] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 695.415731][T12220] usb 1-1: Using ep0 maxpacket: 8 [ 695.421172][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.445149][T12220] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 695.488388][T12220] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 695.512959][T16635] hsr_slave_0: entered promiscuous mode [ 695.518753][T12220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.547389][T16635] hsr_slave_1: entered promiscuous mode [ 695.562687][T12220] usb 1-1: config 0 descriptor?? [ 695.569144][T16635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 695.583062][T16635] Cannot create hsr debugfs directory [ 695.588399][T12220] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 695.678132][T16725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2480'. [ 695.738405][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.766039][ T4622] Bluetooth: hci2: command tx timeout [ 695.842548][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.887128][T16650] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.894252][T16650] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.922308][T16650] bridge_slave_0: entered allmulticast mode [ 695.943944][T16650] bridge_slave_0: entered promiscuous mode [ 695.962762][T16650] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.976547][T16650] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.994390][T16650] bridge_slave_1: entered allmulticast mode [ 696.005031][T16650] bridge_slave_1: entered promiscuous mode [ 696.062902][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.228793][T16650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.275909][T16650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.390866][T16650] team0: Port device team_slave_0 added [ 696.418968][T16650] team0: Port device team_slave_1 added [ 696.488155][ T4622] Bluetooth: hci3: command tx timeout [ 696.555379][T16650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.565888][T16650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.596506][T16650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.613317][ T52] bridge_slave_1: left allmulticast mode [ 696.619834][ T52] bridge_slave_1: left promiscuous mode [ 696.626112][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.657283][ T52] bridge_slave_0: left allmulticast mode [ 696.663288][ T52] bridge_slave_0: left promiscuous mode [ 696.670796][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.406774][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.448402][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.478640][ T52] bond0 (unregistering): Released all slaves [ 697.639295][T16650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.651947][T16650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.680113][T16650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.845826][ T4622] Bluetooth: hci2: command tx timeout [ 697.881774][T16759] veth1_macvtap: left allmulticast mode [ 697.888680][T16759] veth1_macvtap: left promiscuous mode [ 697.894690][T16759] macsec0: left allmulticast mode [ 697.920977][T16650] hsr_slave_0: entered promiscuous mode [ 697.932779][T16650] hsr_slave_1: entered promiscuous mode [ 697.945672][T16650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 697.953496][T16650] Cannot create hsr debugfs directory [ 698.181302][T10375] usb 1-1: USB disconnect, device number 76 [ 698.214874][ T52] hsr_slave_0: left promiscuous mode [ 698.275535][ T52] hsr_slave_1: left promiscuous mode [ 698.317027][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.338007][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.378907][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.421154][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.481940][ T52] veth1_macvtap: left promiscuous mode [ 698.512758][ T52] veth0_macvtap: left promiscuous mode [ 698.535451][ T52] veth1_vlan: left promiscuous mode [ 698.561730][ T52] veth0_vlan: left promiscuous mode [ 698.571768][ T4622] Bluetooth: hci3: command tx timeout [ 699.105722][T10375] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 699.318387][T10375] usb 1-1: Using ep0 maxpacket: 8 [ 699.329567][T10375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.349345][T10375] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 699.368305][T10375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.384695][T10375] usb 1-1: config 0 descriptor?? [ 699.398720][T10375] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 699.550364][ T52] team0 (unregistering): Port device team_slave_1 removed [ 699.631214][ T52] team0 (unregistering): Port device team_slave_0 removed [ 699.927486][ T4622] Bluetooth: hci2: command tx timeout [ 700.323207][T16790] ptrace attach of "./syz-executor exec"[16035] was attempted by "./syz-executor exec"[16790] [ 700.324098][T16635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 700.363031][T16635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 700.381862][T16635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 700.421414][T16635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 700.541391][T16795] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2494'. [ 700.559869][T16795] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2494'. [ 700.854580][T16635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.891244][T16635] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.903991][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.911234][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.967466][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.974683][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.118140][T16650] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 701.149343][T16650] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 701.162352][T16650] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 701.187965][T16635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.197872][T16650] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 701.287050][T16635] veth0_vlan: entered promiscuous mode [ 701.330242][T16635] veth1_vlan: entered promiscuous mode [ 701.361376][ T8] usb 1-1: USB disconnect, device number 77 [ 701.457247][T16650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.471480][T16635] veth0_macvtap: entered promiscuous mode [ 701.503089][T16635] veth1_macvtap: entered promiscuous mode [ 701.531172][T16650] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.552372][T10971] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.559574][T10971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.584175][T16635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.596578][T16635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.611295][T16635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.622454][T16635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.647196][T16635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.668953][T16635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.693818][T16635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.719284][T10971] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.726475][T10971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.758860][T16635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.786881][T16635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.808778][T16635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.819577][T16635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.829921][T16635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.840538][T16635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.867103][T16635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.884557][T16635] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.893616][T16635] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.902589][T16635] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.911431][T16635] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.055850][T10982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.068973][T10982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.109834][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.126875][T16650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.130512][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.224627][T16650] veth0_vlan: entered promiscuous mode [ 702.235795][T16650] veth1_vlan: entered promiscuous mode [ 702.261477][T16650] veth0_macvtap: entered promiscuous mode [ 702.278107][T16650] veth1_macvtap: entered promiscuous mode [ 702.293833][T16650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.305223][T16650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.315608][T16650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.330866][T16650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.345571][T16650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.365473][T16650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.375398][T16650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.387884][T16650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.439439][T16650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.482563][T16650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.505620][T16650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.530441][T16650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.549649][T16650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.590562][T16650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.615828][T16650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.637179][T16650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.669506][T16650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.691286][T16650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.727682][T16650] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.758061][T16650] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.784064][T16650] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.803356][T16650] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.030816][T10982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.066327][T10982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.235130][T10982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.276402][T10982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.235625][ T5280] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 704.386804][ T5280] usb 2-1: Using ep0 maxpacket: 16 [ 704.403456][ T5280] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 704.433341][ T5280] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 704.462748][ T5280] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 704.500152][ T5280] usb 2-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 704.518407][ T5280] usb 2-1: config 1 interface 0 has no altsetting 0 [ 704.525227][ T5280] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 704.534744][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.564174][ T5280] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 706.055126][T16928] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2506'. [ 707.303796][T16967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2511'. [ 707.468224][ T5280] usb 2-1: USB disconnect, device number 73 [ 709.865008][T10971] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.275272][T10971] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.382903][T15286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 710.399390][T15286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 710.428069][T15286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 710.446796][T15286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 710.459080][T15286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 710.466700][T15286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 710.515173][T10971] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.663423][T10971] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.701926][ T7133] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 710.845864][T10971] bridge_slave_1: left allmulticast mode [ 710.851579][T10971] bridge_slave_1: left promiscuous mode [ 710.857682][T10971] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.907191][T10971] bridge_slave_0: left allmulticast mode [ 710.912980][T10971] bridge_slave_0: left promiscuous mode [ 710.923207][T10971] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.061967][ T7133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.076901][ T7133] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 711.089875][ T7133] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 711.099100][ T7133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.126422][ T7133] usb 3-1: config 0 descriptor?? [ 711.151740][ T7133] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 711.916163][T10971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.930081][T10971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.941298][T10971] bond0 (unregistering): Released all slaves [ 711.965911][T17026] chnl_net:caif_netlink_parms(): no params data found [ 712.269004][T17026] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.285863][T17026] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.303264][T17026] bridge_slave_0: entered allmulticast mode [ 712.313920][T17026] bridge_slave_0: entered promiscuous mode [ 712.371802][T17026] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.407194][T17026] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.414663][T17026] bridge_slave_1: entered allmulticast mode [ 712.431559][T17026] bridge_slave_1: entered promiscuous mode [ 712.515244][T10971] hsr_slave_0: left promiscuous mode [ 712.552495][T10971] hsr_slave_1: left promiscuous mode [ 712.562449][T10971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.570415][T10971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.575834][ T4622] Bluetooth: hci2: command tx timeout [ 712.589305][T10971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.607292][T10971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.643844][T10971] veth1_macvtap: left promiscuous mode [ 712.660982][T10971] veth0_macvtap: left promiscuous mode [ 712.673929][T10971] veth1_vlan: left promiscuous mode [ 712.688296][T10971] veth0_vlan: left promiscuous mode [ 713.482343][ T5280] usb 3-1: USB disconnect, device number 97 [ 713.881228][T10971] team0 (unregistering): Port device team_slave_1 removed [ 713.961936][T10971] team0 (unregistering): Port device team_slave_0 removed [ 714.574869][T17101] veth1_macvtap: left promiscuous mode [ 714.587881][T17102] veth1_macvtap: entered promiscuous mode [ 714.600440][T17102] macsec0: entered allmulticast mode [ 714.621309][T17102] veth1_macvtap: entered allmulticast mode [ 714.645779][ T4622] Bluetooth: hci2: command tx timeout [ 714.655356][T17026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.718023][T17026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.943432][T17026] team0: Port device team_slave_0 added [ 714.952158][T17026] team0: Port device team_slave_1 added [ 715.044998][T17026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.069666][T17026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.103975][T17026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.142375][T17026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.165073][T17026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.203000][T17122] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2563'. [ 715.225920][T17122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2563'. [ 715.248534][T17122] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2563'. [ 715.255702][T17026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.285797][T17122] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2563'. [ 715.590774][T17026] hsr_slave_0: entered promiscuous mode [ 715.616171][T17026] hsr_slave_1: entered promiscuous mode [ 715.640943][T17026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 715.668277][T17026] Cannot create hsr debugfs directory [ 716.104809][T15286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 716.113703][T15286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 716.121841][T15286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 716.130542][T15286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 716.139267][T15286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 716.147253][T15286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 716.287917][T10971] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.391284][T17165] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2577'. [ 716.400961][T17165] openvswitch: netlink: Multiple metadata blocks provided [ 716.497191][T10971] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.668737][T10971] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.725878][ T4622] Bluetooth: hci2: command tx timeout [ 716.846335][ T5280] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 716.881515][T10971] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.995526][ T5280] usb 5-1: device descriptor read/64, error -71 [ 717.238943][ T5280] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 717.301914][T17195] ip6tnl0: entered promiscuous mode [ 717.307682][T17195] vlan2: entered promiscuous mode [ 717.326756][T17195] ip6tnl0: left promiscuous mode [ 717.376313][ T5280] usb 5-1: device descriptor read/64, error -71 [ 717.485748][ T5280] usb usb5-port1: attempt power cycle [ 717.826284][ T5280] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 717.848974][T10971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.858815][ T5280] usb 5-1: device descriptor read/8, error -71 [ 717.868298][T10971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.879424][T10971] bond0 (unregistering): Released all slaves [ 717.988481][T17159] chnl_net:caif_netlink_parms(): no params data found [ 718.039749][T17208] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2588'. [ 718.051617][T17208] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 718.084362][T17026] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 718.096348][ T5280] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 718.109209][T17026] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 718.147574][ T5280] usb 5-1: device descriptor read/8, error -71 [ 718.190422][T17026] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 718.246018][ T4622] Bluetooth: hci1: command tx timeout [ 718.266376][ T5280] usb usb5-port1: unable to enumerate USB device [ 718.293445][T17026] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 718.338817][T10971] hsr_slave_0: left promiscuous mode [ 718.344809][T10971] hsr_slave_1: left promiscuous mode [ 718.350855][T10971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.358514][T10971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.367902][T10971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.375406][T10971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.390643][T10971] veth1_macvtap: left promiscuous mode [ 718.396556][T10971] veth0_macvtap: left promiscuous mode [ 718.402091][T10971] veth1_vlan: left promiscuous mode [ 718.413189][T10971] veth0_vlan: left promiscuous mode [ 718.811421][ T4622] Bluetooth: hci2: command tx timeout [ 718.823777][T10971] team0 (unregistering): Port device team_slave_1 removed [ 718.871226][T10971] team0 (unregistering): Port device team_slave_0 removed [ 719.273698][T17159] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.281014][T17159] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.291205][T17159] bridge_slave_0: entered allmulticast mode [ 719.301358][T17159] bridge_slave_0: entered promiscuous mode [ 719.313717][T17159] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.324898][T17159] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.332393][T17159] bridge_slave_1: entered allmulticast mode [ 719.339438][T17159] bridge_slave_1: entered promiscuous mode [ 719.346813][T17221] pim6reg1: entered promiscuous mode [ 719.352133][T17221] pim6reg1: entered allmulticast mode [ 719.422531][T17159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.436686][T17159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.553175][T17159] team0: Port device team_slave_0 added [ 719.572481][T17159] team0: Port device team_slave_1 added [ 719.715060][T17159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.731747][T17159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.781728][T17159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.848019][T17159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.855001][T17159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.921637][T17159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.044589][T17159] hsr_slave_0: entered promiscuous mode [ 720.058706][T17159] hsr_slave_1: entered promiscuous mode [ 720.097162][T17026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.222583][T17026] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.252649][T10971] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.259814][T10971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.300996][T17253] fuse: Bad value for 'fd' [ 720.307438][T10984] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.314547][T10984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.326146][ T4622] Bluetooth: hci1: command tx timeout [ 720.559439][T17026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.589992][T17026] veth0_vlan: entered promiscuous mode [ 720.646137][T17026] veth1_vlan: entered promiscuous mode [ 720.674953][T17026] veth0_macvtap: entered promiscuous mode [ 720.685203][T17026] veth1_macvtap: entered promiscuous mode [ 720.700848][T17026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.711631][T17026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.721671][T17026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.732439][T17026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.742552][T17026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.753051][T17026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.764463][T17026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.775302][T17026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.785805][T17026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.795715][T17026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.806413][T17026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.816479][T17026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.827204][T17026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.838774][T17026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.962500][T17026] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.971677][T17026] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.980526][T17026] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.989495][T17026] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.296604][T10984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.323679][T10984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.408873][T10969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.446054][T10969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.497554][T17290] fuse: Bad value for 'fd' [ 721.524277][T17159] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 721.581768][T17159] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 721.632940][T17159] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 721.656830][T17159] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 721.884330][T17305] syz.3.2612 uses obsolete (PF_INET,SOCK_PACKET) [ 721.976198][T17159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.162645][T17323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2618'. [ 722.208401][T17323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2618'. [ 722.210506][T17326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2619'. [ 722.231335][T17323] netlink: 'syz.1.2618': attribute type 25 has an invalid length. [ 722.318856][T17159] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.353794][T10982] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.360976][T10982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.400678][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.407955][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.416714][ T4622] Bluetooth: hci1: command tx timeout [ 722.482453][T17159] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 722.494370][T17159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 722.526462][T17159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.613556][T17159] veth0_vlan: entered promiscuous mode [ 722.630519][T17159] veth1_vlan: entered promiscuous mode [ 722.677570][T17341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2624'. [ 722.686976][T17159] veth0_macvtap: entered promiscuous mode [ 722.700086][T17159] veth1_macvtap: entered promiscuous mode [ 722.747363][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.773188][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.805293][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.822192][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.845516][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.865861][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.882178][T17349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2625'. [ 722.892356][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.919290][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.968742][T17159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.019699][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.060763][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.097978][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.119080][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.133577][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.151800][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.161914][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.178428][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.190859][T17159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.250185][T17159] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.268667][T17159] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.277456][T17159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.286384][T17159] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.420350][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.442707][T10984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.460869][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.491872][ C0] Unknown status report in ack skb [ 723.521522][T10984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.765320][T17374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2632'. [ 724.007971][T17380] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2634'. [ 724.037003][T17380] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 724.501991][ T4622] Bluetooth: hci1: command tx timeout [ 725.176966][T17431] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2655'. [ 725.242118][T17431] tipc: Started in network mode [ 725.262344][T17431] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 725.285868][T17431] tipc: Enabled bearer , priority 10 [ 725.536563][T17447] bridge0: port 3(veth1_to_bridge) entered blocking state [ 725.565805][T17447] bridge0: port 3(veth1_to_bridge) entered disabled state [ 725.573282][T17447] veth1_to_bridge: entered allmulticast mode [ 725.587472][T17447] veth1_to_bridge: entered promiscuous mode [ 725.593632][T17447] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 725.616996][T17447] bridge0: port 3(veth1_to_bridge) entered blocking state [ 725.624328][T17447] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 726.343687][T17480] mac80211_hwsim hwsim97 syzkaller0: entered promiscuous mode [ 726.355836][T17480] mac80211_hwsim hwsim97 syzkaller0: entered allmulticast mode [ 726.369616][T17483] netlink: 'syz.4.2678': attribute type 10 has an invalid length. [ 726.402596][T17483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.415735][T10375] tipc: Node number set to 15444650 [ 726.416667][T17483] team0: Port device bond0 added [ 726.815056][T17499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2685'. [ 726.886897][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 726.899246][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 726.911620][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 726.923971][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 726.936353][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 726.948682][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 726.961038][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 726.973378][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 726.985725][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 728.116571][T17531] netlink: 'syz.0.2701': attribute type 7 has an invalid length. [ 728.251131][T17537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 728.258873][T17537] IPv6: NLM_F_CREATE should be set when creating new route [ 728.266207][T17537] IPv6: NLM_F_CREATE should be set when creating new route [ 728.273436][T17537] IPv6: NLM_F_CREATE should be set when creating new route [ 728.519207][ C0] Unknown status report in ack skb [ 729.045514][ C1] net_ratelimit: 7244 callbacks suppressed [ 729.045536][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 729.063680][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 729.070184][T17561] netlink: 'syz.1.2712': attribute type 18 has an invalid length. [ 729.076037][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 729.095980][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 729.108388][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 729.120750][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 729.133131][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 729.145555][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 729.158024][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 729.171190][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 729.182272][T17561] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.192308][T17561] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.201130][T17561] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.210310][T17561] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.975644][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 730.126692][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 730.142904][ T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 730.170087][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.209963][ T9] usb 4-1: config 0 has no interface number 0 [ 730.230841][ T9] usb 4-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 730.279338][ T9] usb 4-1: config 0 interface 8 has no altsetting 0 [ 730.305300][ T9] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 730.319114][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.344014][ T9] usb 4-1: Product: syz [ 730.359762][ T9] usb 4-1: Manufacturer: syz [ 730.371104][ T9] usb 4-1: SerialNumber: syz [ 730.385271][ T9] usb 4-1: config 0 descriptor?? [ 731.260231][ T9] ath6kl: Failed to submit usb control message: -71 [ 731.267184][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 731.285361][ T9] ath6kl: Unable to send get target info: -71 [ 731.294746][ T9] ath6kl: Failed to init ath6kl core: -71 [ 731.312776][ T9] ath6kl_usb 4-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 731.340402][ T9] usb 4-1: USB disconnect, device number 60 [ 732.218658][ T24] sched: DL replenish lagged too much [ 734.055523][ C1] net_ratelimit: 25162 callbacks suppressed [ 734.055545][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 734.073795][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 734.086180][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 734.098531][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 734.110906][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 734.123103][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 734.135450][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 734.147783][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 734.160109][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 734.172362][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 734.687115][T17581] vlan2: entered promiscuous mode [ 734.911054][T17603] netlink: 'syz.1.2725': attribute type 4 has an invalid length. [ 734.939350][T17603] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2725'. [ 739.065566][ C1] net_ratelimit: 29070 callbacks suppressed [ 739.065590][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 739.083883][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 739.096232][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 739.108982][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 739.121274][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 739.133670][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 739.146046][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 739.158380][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 739.170709][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 739.182914][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 739.589336][T15286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 739.602272][T15286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 739.610653][T15286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 739.619030][T15286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 739.627731][T15286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 739.642756][T15286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 740.867956][ T4622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 740.883173][ T4622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 740.893025][ T4622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 740.909457][ T4622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 740.921586][ T4622] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 740.932230][ T4622] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 741.685884][ T4622] Bluetooth: hci5: command tx timeout [ 742.979623][ T4622] Bluetooth: hci6: command tx timeout [ 743.014373][T15286] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 743.029152][T15286] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 743.038801][T15286] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 743.049007][T15286] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 743.058047][T15286] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 743.067077][T15286] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 743.765891][T15286] Bluetooth: hci5: command tx timeout [ 744.075623][ C1] net_ratelimit: 26462 callbacks suppressed [ 744.075645][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 744.093974][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 744.106225][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 744.118613][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 744.130849][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 744.143156][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 744.155379][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 744.167674][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 744.180035][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 744.192365][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 745.045829][T15286] Bluetooth: hci6: command tx timeout [ 745.125714][T15286] Bluetooth: hci7: command tx timeout [ 745.852062][T15286] Bluetooth: hci5: command tx timeout [ 746.428342][ T4622] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 746.438661][ T4622] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 746.450430][ T4622] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 746.461350][ T4622] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 746.469303][ T4622] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 746.476821][ T4622] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 746.622535][ T4622] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 746.633145][ T4622] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 746.642879][ T4622] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 746.653096][ T4622] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 746.661273][ T4622] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 746.668947][ T4622] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 747.125845][ T4622] Bluetooth: hci6: command tx timeout [ 747.205758][ T4622] Bluetooth: hci7: command tx timeout [ 747.368353][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.374692][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.931502][ T4622] Bluetooth: hci5: command tx timeout [ 748.565932][ T4622] Bluetooth: hci8: command tx timeout [ 748.725666][ T4622] Bluetooth: hci9: command tx timeout [ 749.085582][ C1] net_ratelimit: 25946 callbacks suppressed [ 749.085599][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 749.103886][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 749.116138][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 749.128489][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 749.140972][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 749.153437][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 749.165801][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 749.178184][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 749.190439][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 749.202798][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 749.216536][ T4622] Bluetooth: hci6: command tx timeout [ 749.290862][ T4622] Bluetooth: hci7: command tx timeout [ 750.645639][ T4622] Bluetooth: hci8: command tx timeout [ 750.805683][ T4622] Bluetooth: hci9: command tx timeout [ 751.365650][ T4622] Bluetooth: hci7: command tx timeout [ 752.725721][ T4622] Bluetooth: hci8: command tx timeout [ 752.885744][ T4622] Bluetooth: hci9: command tx timeout [ 754.095542][ C1] net_ratelimit: 29472 callbacks suppressed [ 754.095565][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 754.113868][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 754.126245][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 754.138636][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 754.151019][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 754.163362][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 754.175737][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 754.187974][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 754.200273][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 754.212615][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 754.805659][ T4622] Bluetooth: hci8: command tx timeout [ 754.965617][ T4622] Bluetooth: hci9: command tx timeout [ 759.105492][ C1] net_ratelimit: 29903 callbacks suppressed [ 759.105510][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 759.123714][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 759.136085][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 759.148479][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 759.160787][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 759.173153][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 759.185534][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 759.197866][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 759.210219][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 759.222713][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 764.115613][ C1] net_ratelimit: 29860 callbacks suppressed [ 764.115636][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 764.133948][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 764.146354][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 764.158784][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 764.171191][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 764.183591][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 764.196001][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 764.208454][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 764.220876][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 764.233278][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 769.125582][ C1] net_ratelimit: 31018 callbacks suppressed [ 769.125604][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 769.143887][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 769.156270][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 769.168673][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 769.181053][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 769.193416][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 769.205807][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 769.218176][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 769.230559][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 769.242933][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 774.135551][ C1] net_ratelimit: 31257 callbacks suppressed [ 774.135573][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 774.153827][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 774.166223][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 774.178678][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 774.191058][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 774.203445][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 774.215839][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 774.228232][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 774.240588][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 774.252961][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 779.145560][ C1] net_ratelimit: 30708 callbacks suppressed [ 779.145584][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 779.163842][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 779.176222][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 779.188592][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 779.200956][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 779.213448][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 779.225837][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 779.238188][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 779.250524][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 779.262949][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 784.155511][ C1] net_ratelimit: 30304 callbacks suppressed [ 784.155535][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 784.173774][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 784.186151][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 784.198569][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 784.210902][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 784.223237][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 784.235770][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 784.248081][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 784.260377][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 784.272710][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 789.165520][ C1] net_ratelimit: 30293 callbacks suppressed [ 789.165546][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 789.183779][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 789.196175][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 789.208540][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 789.220903][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 789.233299][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 789.245682][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 789.258026][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 789.270368][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 789.282711][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 794.175617][ C1] net_ratelimit: 30756 callbacks suppressed [ 794.175633][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 794.193827][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 794.206198][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 794.218565][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 794.230859][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 794.243058][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 794.255367][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 794.267607][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 794.279967][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 794.292214][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 799.185567][ C1] net_ratelimit: 31062 callbacks suppressed [ 799.185585][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 799.203847][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 799.216203][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 799.228565][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 799.240778][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 799.253126][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 799.265544][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 799.277750][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 799.290123][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 799.302338][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 799.846259][T15286] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 799.861726][T15286] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 799.870307][T15286] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 799.878512][T15286] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 799.887352][T15286] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 799.894748][T15286] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 800.929519][T15286] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 800.940151][T15286] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 800.948816][T15286] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 800.964244][T15286] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 800.972255][T15286] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 800.985856][T15286] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 801.925695][T15286] Bluetooth: hci10: command tx timeout [ 803.045929][T15286] Bluetooth: hci11: command tx timeout [ 803.857687][ T4622] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 803.872818][ T4622] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 803.882150][ T4622] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 803.890333][ T4622] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 803.898109][ T4622] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 803.905621][ T4622] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 804.007236][ T4622] Bluetooth: hci10: command tx timeout [ 804.195586][ C1] net_ratelimit: 27381 callbacks suppressed [ 804.195610][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 804.213852][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 804.226105][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 804.238482][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 804.250719][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 804.263061][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 804.275297][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 804.287619][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 804.300001][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 804.312341][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 805.125589][ T4622] Bluetooth: hci11: command tx timeout [ 805.925711][ T4622] Bluetooth: hci12: command tx timeout [ 806.085619][ T4622] Bluetooth: hci10: command tx timeout [ 807.114096][T15286] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 807.128573][T15286] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 807.137165][T15286] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 807.145941][T15286] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 807.154762][T15286] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 807.163578][T15286] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 807.205619][T15286] Bluetooth: hci11: command tx timeout [ 807.243245][ T4622] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 807.255107][ T4622] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 807.264213][ T4622] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 807.272557][ T4622] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 807.280569][ T4622] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 807.288362][ T4622] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 808.005736][ T4622] Bluetooth: hci12: command tx timeout [ 808.165603][ T4622] Bluetooth: hci10: command tx timeout [ 808.808425][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.814756][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.205523][ C1] net_ratelimit: 27350 callbacks suppressed [ 809.205548][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 809.223526][ T4622] Bluetooth: hci13: command tx timeout [ 809.223857][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 809.241707][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 809.254230][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 809.266667][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 809.278985][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 809.291317][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 809.295596][ T4622] Bluetooth: hci11: command tx timeout [ 809.303624][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 809.321119][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 809.333440][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 809.365625][ T4622] Bluetooth: hci14: command tx timeout [ 810.085676][ T4622] Bluetooth: hci12: command tx timeout [ 811.285593][ T4622] Bluetooth: hci13: command tx timeout [ 811.445779][ T4622] Bluetooth: hci14: command tx timeout [ 812.165661][ T4622] Bluetooth: hci12: command tx timeout [ 813.365631][ T4622] Bluetooth: hci13: command tx timeout [ 813.525760][ T4622] Bluetooth: hci14: command tx timeout [ 814.215558][ C1] net_ratelimit: 29469 callbacks suppressed [ 814.215581][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 814.233878][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 814.246241][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 814.258587][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 814.270854][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 814.283152][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 814.295351][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 814.307637][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 814.319986][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 814.332319][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 815.445596][ T4622] Bluetooth: hci13: command tx timeout [ 815.605708][ T4622] Bluetooth: hci14: command tx timeout [ 816.017797][ T4622] Bluetooth: hci3: command 0x0406 tx timeout [ 819.225973][ C1] net_ratelimit: 29559 callbacks suppressed [ 819.225995][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 819.244802][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 819.257413][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 819.270277][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 819.282773][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 819.295625][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 819.308200][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 819.320931][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 819.333475][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 819.346505][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 824.236117][ C1] net_ratelimit: 9119 callbacks suppressed [ 824.236142][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 824.254895][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 824.267827][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 824.280760][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 824.294115][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 824.307061][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 824.319971][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 824.332871][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 824.345877][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 824.358828][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 829.246156][ C1] net_ratelimit: 8987 callbacks suppressed [ 829.246182][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 829.264892][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 829.277857][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 829.290798][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 829.303772][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 829.316732][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 829.331058][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 829.344491][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 829.357445][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 829.370358][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 834.256307][ C1] net_ratelimit: 9021 callbacks suppressed [ 834.256331][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 834.275114][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 834.288109][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 834.301106][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 834.314100][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 834.327221][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 834.340216][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 834.353310][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 834.366376][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 834.379405][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 836.497862][ T4622] Bluetooth: hci2: command 0x0406 tx timeout [ 839.265866][ C1] net_ratelimit: 16814 callbacks suppressed [ 839.265882][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 839.284069][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.296333][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.309242][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 839.321584][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.333885][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.346874][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 839.359265][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.371579][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.384578][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 841.605695][T15286] Bluetooth: hci1: command 0x0406 tx timeout [ 844.275565][ C1] net_ratelimit: 17028 callbacks suppressed [ 844.275588][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.293871][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.306828][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 844.319185][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.331460][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.344398][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 844.356758][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.369052][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.382005][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 844.394343][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.285817][ C1] net_ratelimit: 17321 callbacks suppressed [ 849.285833][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.303927][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.316946][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 849.329261][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.341557][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.354438][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 849.366732][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.378968][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.391855][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 849.404174][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.295692][ C1] net_ratelimit: 19744 callbacks suppressed [ 854.295716][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 854.313940][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.326224][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.339265][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 854.351546][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 854.363912][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.376173][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.389154][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 854.401428][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 854.413774][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.305998][ C1] net_ratelimit: 19445 callbacks suppressed [ 859.306021][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 859.324236][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 859.336588][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.348864][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.361814][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 859.373957][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 859.386279][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.398527][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.411308][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 859.423663][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 860.477344][ T54] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 860.491581][ T54] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 860.500566][ T54] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 860.511103][ T54] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 860.518867][ T54] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 860.526417][ T54] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 861.450584][ T54] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 861.459916][ T54] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 861.469237][ T54] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 861.478626][ T54] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 861.487697][ T54] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 861.512175][ T54] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 862.085711][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 862.566049][T15286] Bluetooth: hci15: command tx timeout [ 863.606071][T15286] Bluetooth: hci16: command tx timeout [ 863.935118][ T54] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 863.957021][ T54] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 863.965397][ T54] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 863.979999][ T54] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 863.994192][ T54] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 864.008400][ T54] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 864.315529][ C1] net_ratelimit: 18521 callbacks suppressed [ 864.315546][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 864.333902][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 864.346198][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 864.358528][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.370812][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.383353][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 864.395735][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 864.407882][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 864.420195][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.432322][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.645844][ T54] Bluetooth: hci15: command tx timeout [ 865.685966][ T54] Bluetooth: hci16: command tx timeout [ 866.085608][ T54] Bluetooth: hci17: command tx timeout [ 866.725763][ T54] Bluetooth: hci15: command tx timeout [ 867.001171][T17672] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 867.016105][T17672] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 867.027218][T17672] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 867.035273][T17672] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 867.043028][T17672] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 867.050808][T17672] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 867.213535][T17672] Bluetooth: hci7: command 0x0406 tx timeout [ 867.219644][ T54] Bluetooth: hci6: command 0x0406 tx timeout [ 867.765876][ T4622] Bluetooth: hci16: command tx timeout [ 868.016714][T15286] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 868.026731][T15286] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 868.036163][T15286] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 868.046797][T15286] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 868.054483][T15286] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 868.062377][T15286] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 868.165591][T15286] Bluetooth: hci17: command tx timeout [ 868.805766][T15286] Bluetooth: hci15: command tx timeout [ 869.126793][T15286] Bluetooth: hci18: command tx timeout [ 869.325771][ C1] net_ratelimit: 19105 callbacks suppressed [ 869.325795][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 869.344031][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 869.356175][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 869.368506][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.380621][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.393267][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 869.405499][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 869.417602][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 869.429956][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.442427][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.845880][T15286] Bluetooth: hci16: command tx timeout [ 870.085787][T15286] Bluetooth: hci19: command tx timeout [ 870.254922][T15286] Bluetooth: hci17: command tx timeout [ 870.264114][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.275479][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.205618][T15286] Bluetooth: hci18: command tx timeout [ 872.165709][T15286] Bluetooth: hci19: command tx timeout [ 872.333856][T17660] Bluetooth: hci8: command 0x0406 tx timeout [ 872.345722][T15286] Bluetooth: hci17: command tx timeout [ 872.351309][T17660] Bluetooth: hci9: command 0x0406 tx timeout [ 873.285617][T17672] Bluetooth: hci18: command tx timeout [ 874.245638][T17672] Bluetooth: hci19: command tx timeout [ 874.335756][ C1] net_ratelimit: 19275 callbacks suppressed [ 874.335771][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 874.353935][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 874.366041][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 874.378438][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.390548][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.403237][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 874.415399][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 874.428208][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 874.440523][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.452747][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 875.365912][T17672] Bluetooth: hci18: command tx timeout [ 876.325603][T17672] Bluetooth: hci19: command tx timeout [ 879.345506][ C1] net_ratelimit: 21287 callbacks suppressed [ 879.345530][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 879.363767][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.376004][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.388915][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 879.401310][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 879.413578][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 879.425914][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.438168][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.451568][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 879.463928][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 884.355634][ C1] net_ratelimit: 21514 callbacks suppressed [ 884.355659][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 884.373904][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 884.386240][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.398479][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.411396][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 884.423715][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 884.435966][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 884.448286][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.460530][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.473499][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 889.365899][ C1] net_ratelimit: 21134 callbacks suppressed [ 889.365922][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 889.384206][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 889.396523][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 889.408919][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.421241][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.434557][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 889.446962][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 889.459272][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 889.471630][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.483924][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 890.091240][ T30] INFO: task kworker/u8:2:35 blocked for more than 143 seconds. [ 890.100199][ T30] Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 890.115481][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 890.124183][ T30] task:kworker/u8:2 state:D stack:20416 pid:35 tgid:35 ppid:2 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 890.158833][ T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 890.185550][ T30] Call Trace: [ 890.188868][ T30] [ 890.191819][ T30] __schedule+0x1895/0x4b30 [ 890.210361][ T30] ? __pfx___schedule+0x10/0x10 [ 890.215263][ T30] ? __pfx_lock_release+0x10/0x10 [ 890.301670][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 890.342523][ T30] ? kthread_data+0x52/0xd0 [ 890.348585][ T30] ? schedule+0x90/0x320 [ 890.352882][ T30] ? wq_worker_sleeping+0x66/0x240 [ 890.367696][ T30] ? schedule+0x90/0x320 [ 890.372089][ T30] schedule+0x14b/0x320 [ 890.382273][ T30] schedule_preempt_disabled+0x13/0x30 [ 890.388514][ T30] __mutex_lock+0x6a7/0xd70 [ 890.393062][ T30] ? __mutex_lock+0x52a/0xd70 [ 890.403776][ T30] ? cfg80211_dfs_channels_update_work+0xbf/0x610 [ 890.415081][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 890.426201][ T30] cfg80211_dfs_channels_update_work+0xbf/0x610 [ 890.432666][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 890.443184][ T30] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 890.452166][ T30] ? process_scheduled_works+0x976/0x1850 [ 890.461601][ T30] process_scheduled_works+0xa63/0x1850 [ 890.469721][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 890.479399][ T30] ? assign_work+0x364/0x3d0 [ 890.484044][ T30] worker_thread+0x870/0xd30 [ 890.491493][ T30] ? __kthread_parkme+0x169/0x1d0 [ 890.501983][ T30] ? __pfx_worker_thread+0x10/0x10 [ 890.510664][ T30] kthread+0x2f0/0x390 [ 890.514779][ T30] ? __pfx_worker_thread+0x10/0x10 [ 890.523606][ T30] ? __pfx_kthread+0x10/0x10 [ 890.530846][ T30] ret_from_fork+0x4b/0x80 [ 890.535305][ T30] ? __pfx_kthread+0x10/0x10 [ 890.543622][ T30] ret_from_fork_asm+0x1a/0x30 [ 890.550965][ T30] [ 890.554159][ T30] INFO: task jbd2/sda1-8:4646 blocked for more than 143 seconds. [ 890.565664][ T30] Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 890.573323][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 890.587363][ T30] task:jbd2/sda1-8 state:D stack:24832 pid:4646 tgid:4646 ppid:2 flags:0x00004000 [ 890.601405][ T30] Call Trace: [ 890.604721][ T30] [ 890.611743][ T30] __schedule+0x1895/0x4b30 [ 890.619957][ T30] ? __pfx___schedule+0x10/0x10 [ 890.624857][ T30] ? __pfx_lock_release+0x10/0x10 [ 890.632698][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 890.653416][ T30] ? schedule+0x90/0x320 [ 890.661318][ T30] schedule+0x14b/0x320 [ 890.668046][ T30] io_schedule+0x8d/0x110 [ 890.672423][ T30] bit_wait_io+0x12/0xd0 [ 890.680340][ T30] __wait_on_bit+0xb0/0x2f0 [ 890.684882][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 890.692472][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 890.701650][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 890.709186][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 890.716530][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 890.722043][ T30] jbd2_journal_commit_transaction+0x3df6/0x67e0 [ 890.735836][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 890.742560][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 890.757657][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 890.763624][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 890.773116][ T30] ? __timer_delete_sync+0x15c/0x310 [ 890.784248][ T30] ? __timer_delete_sync+0x25d/0x310 [ 890.793209][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 890.801441][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 890.811905][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 890.821736][ T30] ? prepare_to_wait+0x186/0x210 [ 890.830315][ T30] ? finish_wait+0xd4/0x1e0 [ 890.835006][ T30] kjournald2+0x41c/0x7b0 [ 890.842394][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 890.852343][ T30] ? __pfx_kjournald2+0x10/0x10 [ 890.859722][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 890.869455][ T30] ? __kthread_parkme+0x169/0x1d0 [ 890.874537][ T30] ? __pfx_kjournald2+0x10/0x10 [ 890.882042][ T30] kthread+0x2f0/0x390 [ 890.889836][ T30] ? __pfx_kjournald2+0x10/0x10 [ 890.894738][ T30] ? __pfx_kthread+0x10/0x10 [ 890.901952][ T30] ret_from_fork+0x4b/0x80 [ 890.910085][ T30] ? __pfx_kthread+0x10/0x10 [ 890.914723][ T30] ret_from_fork_asm+0x1a/0x30 [ 890.930038][ T30] [ 890.933197][ T30] INFO: task kworker/u8:8:10969 blocked for more than 144 seconds. [ 890.942930][ T30] Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 890.957316][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 890.970891][ T30] task:kworker/u8:8 state:D stack:21264 pid:10969 tgid:10969 ppid:2 flags:0x00004000 [ 890.982641][ T30] Workqueue: events_unbound linkwatch_event [ 890.993371][ T30] Call Trace: [ 890.998138][ T30] [ 891.001108][ T30] __schedule+0x1895/0x4b30 [ 891.010536][ T30] ? __pfx___schedule+0x10/0x10 [ 891.015721][ T30] ? __pfx_lock_release+0x10/0x10 [ 891.021784][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 891.033549][ T30] ? kthread_data+0x52/0xd0 [ 891.038381][ T30] ? schedule+0x90/0x320 [ 891.042848][ T30] ? wq_worker_sleeping+0x66/0x240 [ 891.054478][ T30] ? schedule+0x90/0x320 [ 891.059136][ T30] schedule+0x14b/0x320 [ 891.063333][ T30] schedule_preempt_disabled+0x13/0x30 [ 891.075485][ T30] __mutex_lock+0x6a7/0xd70 [ 891.080038][ T30] ? __mutex_lock+0x52a/0xd70 [ 891.084738][ T30] ? linkwatch_event+0xe/0x60 [ 891.095104][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 891.100524][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 891.111783][ T30] ? process_scheduled_works+0x976/0x1850 [ 891.117832][ T30] linkwatch_event+0xe/0x60 [ 891.123440][ T30] process_scheduled_works+0xa63/0x1850 [ 891.135193][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 891.141508][ T30] ? assign_work+0x364/0x3d0 [ 891.152025][ T30] worker_thread+0x870/0xd30 [ 891.157111][ T30] ? __kthread_parkme+0x169/0x1d0 [ 891.162185][ T30] ? __pfx_worker_thread+0x10/0x10 [ 891.173382][ T30] kthread+0x2f0/0x390 [ 891.178171][ T30] ? __pfx_worker_thread+0x10/0x10 [ 891.183322][ T30] ? __pfx_kthread+0x10/0x10 [ 891.193932][ T30] ret_from_fork+0x4b/0x80 [ 891.198768][ T30] ? __pfx_kthread+0x10/0x10 [ 891.203398][ T30] ret_from_fork_asm+0x1a/0x30 [ 891.214262][ T30] [ 891.220957][ T30] INFO: task syz.2.2713:17581 blocked for more than 144 seconds. [ 891.235483][ T30] Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 891.243143][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 891.261089][ T30] task:syz.2.2713 state:D stack:24160 pid:17581 tgid:17559 ppid:17159 flags:0x20004006 [ 891.273952][ T30] Call Trace: [ 891.280906][ T30] [ 891.290367][ T30] __schedule+0x1895/0x4b30 [ 891.295030][ T30] ? __pfx___schedule+0x10/0x10 [ 891.303910][ T30] ? __pfx_lock_release+0x10/0x10 [ 891.311848][ T30] ? schedule+0x90/0x320 [ 891.319103][ T30] schedule+0x14b/0x320 [ 891.323301][ T30] schedule_timeout+0xb0/0x310 [ 891.332745][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 891.340688][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 891.350460][ T30] ? wait_for_completion+0x2fe/0x620 [ 891.361704][ T30] ? wait_for_completion+0x2fe/0x620 [ 891.381027][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 891.386601][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 891.391844][ T30] ? wait_for_completion+0x2fe/0x620 [ 891.403039][ T30] wait_for_completion+0x355/0x620 [ 891.408949][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 891.414633][ T30] ? __flush_work+0xe7/0xc50 [ 891.425138][ T30] __flush_work+0xa37/0xc50 [ 891.431050][ T30] ? __flush_work+0xe7/0xc50 [ 891.441502][ T30] ? __pfx___flush_work+0x10/0x10 [ 891.447215][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 891.452700][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 891.465054][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 891.470534][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 891.481658][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 891.488330][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 891.494704][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 891.510844][ T30] ? __pfx_call_rcu+0x10/0x10 [ 891.516271][ T30] ? vlan_vid_del+0x630/0x770 [ 891.520996][ T30] rtnl_newlink+0x1d7e/0x20a0 [ 891.528522][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 891.538161][ T30] ? __mutex_lock+0x9ab/0xd70 [ 891.542877][ T30] ? __mutex_lock+0x52a/0xd70 [ 891.550227][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 891.555290][ T30] rtnetlink_rcv_msg+0x73f/0xcf0 [ 891.564016][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 891.571658][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 891.580751][ T30] ? ref_tracker_free+0x643/0x7e0 [ 891.588368][ T30] netlink_rcv_skb+0x1e3/0x430 [ 891.593181][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 891.602435][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 891.610298][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 891.619099][ T30] netlink_unicast+0x7f6/0x990 [ 891.623914][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 891.632187][ T30] ? __virt_addr_valid+0x183/0x530 [ 891.641889][ T30] ? __check_object_size+0x48e/0x900 [ 891.651587][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 891.661152][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 891.669024][ T30] ? __pfx_lock_release+0x10/0x10 [ 891.674084][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 891.682722][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 891.693481][ T30] __sock_sendmsg+0x221/0x270 [ 891.701959][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 891.709283][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 891.714620][ T30] __sys_sendmsg+0x292/0x380 [ 891.722853][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 891.730541][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 891.742070][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 891.749837][ T30] __do_fast_syscall_32+0xb4/0x110 [ 891.754981][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 891.763778][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 891.775269][ T30] do_fast_syscall_32+0x34/0x80 [ 891.783744][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 891.799496][ T30] RIP: 0023:0xf73ad579 [ 891.803617][ T30] RSP: 002b:00000000f565456c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 891.813590][ T30] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000280 [ 891.825689][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 891.833702][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 891.852075][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 891.862774][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 891.874398][ T30] [ 891.880088][ T30] INFO: task syz.0.2722:17587 blocked for more than 145 seconds. [ 891.891740][ T30] Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 891.901910][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 891.914350][ T30] task:syz.0.2722 state:D stack:26816 pid:17587 tgid:17586 ppid:14474 flags:0x20000004 [ 891.930705][ T30] Call Trace: [ 891.934020][ T30] [ 891.941209][ T30] __schedule+0x1895/0x4b30 [ 891.949403][ T30] ? __pfx___schedule+0x10/0x10 [ 891.954300][ T30] ? __pfx_lock_release+0x10/0x10 [ 891.962449][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 891.971524][ T30] ? schedule+0x90/0x320 [ 891.978297][ T30] schedule+0x14b/0x320 [ 891.982519][ T30] schedule_preempt_disabled+0x13/0x30 [ 891.991652][ T30] __mutex_lock+0x6a7/0xd70 [ 891.998701][ T30] ? __mutex_lock+0x52a/0xd70 [ 892.003414][ T30] ? raw_bind+0x99/0x770 [ 892.011682][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 892.019296][ T30] ? aa_sk_perm+0x96d/0xab0 [ 892.023851][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 892.032446][ T30] ? __might_fault+0xaa/0x120 [ 892.039719][ T30] raw_bind+0x99/0x770 [ 892.044902][ T30] __sys_bind+0x22d/0x2d0 [ 892.052983][ T30] ? __pfx___sys_bind+0x10/0x10 [ 892.060458][ T30] __ia32_sys_bind+0x7a/0x90 [ 892.072621][ T30] __do_fast_syscall_32+0xb4/0x110 [ 892.080537][ T30] ? exc_page_fault+0x590/0x8c0 [ 892.089111][ T30] do_fast_syscall_32+0x34/0x80 [ 892.093998][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 892.103031][ T30] RIP: 0023:0xf739d579 [ 892.110699][ T30] RSP: 002b:00000000f568656c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 892.122109][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 892.133693][ T30] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 892.144431][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 892.159296][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 892.168974][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 892.182120][ T30] [ 892.185225][ T30] INFO: task syz.0.2722:17588 blocked for more than 145 seconds. [ 892.194518][ T30] Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 892.205702][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 892.214397][ T30] task:syz.0.2722 state:D stack:28576 pid:17588 tgid:17586 ppid:14474 flags:0x20000004 [ 892.232821][ T30] Call Trace: [ 892.237547][ T30] [ 892.240511][ T30] __schedule+0x1895/0x4b30 [ 892.245068][ T30] ? __pfx___schedule+0x10/0x10 [ 892.257932][ T30] ? __pfx_lock_release+0x10/0x10 [ 892.263013][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 892.272453][ T30] ? schedule+0x90/0x320 [ 892.279250][ T30] schedule+0x14b/0x320 [ 892.283451][ T30] schedule_preempt_disabled+0x13/0x30 [ 892.293070][ T30] __mutex_lock+0x6a7/0xd70 [ 892.300153][ T30] ? __mutex_lock+0x52a/0xd70 [ 892.304871][ T30] ? raw_setsockopt+0xe6d/0x1a80 [ 892.313643][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 892.321166][ T30] ? __might_fault+0xc6/0x120 [ 892.329443][ T30] ? _copy_from_user+0xa6/0xe0 [ 892.334253][ T30] raw_setsockopt+0xe6d/0x1a80 [ 892.341745][ T30] ? __pfx_raw_setsockopt+0x10/0x10 [ 892.350443][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 892.359447][ T30] ? aa_sock_opt_perm+0x79/0x120 [ 892.364429][ T30] ? __pfx_raw_setsockopt+0x10/0x10 [ 892.378884][ T30] do_sock_setsockopt+0x3af/0x720 [ 892.383954][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 892.392126][ T30] ? __fget_files+0x3f3/0x470 [ 892.400797][ T30] ? __fget_files+0x29/0x470 [ 892.419156][ T30] __sys_setsockopt+0x1a2/0x250 [ 892.424060][ T30] __ia32_sys_setsockopt+0xb5/0xd0 [ 892.430683][ T30] __do_fast_syscall_32+0xb4/0x110 [ 892.440452][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 892.447026][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 892.453292][ T30] do_fast_syscall_32+0x34/0x80 [ 892.463062][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 892.470812][ T30] RIP: 0023:0xf739d579 [ 892.475062][ T30] RSP: 002b:00000000f566556c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 892.489411][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000065 [ 892.498816][ T30] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000010 [ 892.516710][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 892.524715][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 892.538700][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 892.549352][ T30] [ 892.552405][ T30] INFO: task syz.3.2723:17596 blocked for more than 145 seconds. [ 892.564848][ T30] Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 892.575162][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 892.587424][ T30] task:syz.3.2723 state:D stack:26816 pid:17596 tgid:17595 ppid:17026 flags:0x20000004 [ 892.601145][ T30] Call Trace: [ 892.604455][ T30] [ 892.611840][ T30] __schedule+0x1895/0x4b30 [ 892.620415][ T30] ? __pfx___schedule+0x10/0x10 [ 892.625310][ T30] ? __pfx_lock_release+0x10/0x10 [ 892.632962][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 892.645043][ T30] ? schedule+0x90/0x320 [ 892.651783][ T30] schedule+0x14b/0x320 [ 892.660490][ T30] schedule_preempt_disabled+0x13/0x30 [ 892.668544][ T30] __mutex_lock+0x6a7/0xd70 [ 892.673090][ T30] ? __mutex_lock+0x52a/0xd70 [ 892.681691][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 892.689310][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 892.694381][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 892.703063][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 892.710682][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 892.719769][ T30] ? ref_tracker_free+0x643/0x7e0 [ 892.724833][ T30] netlink_rcv_skb+0x1e3/0x430 [ 892.735573][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 892.741082][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 892.752785][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 892.758351][ T30] netlink_unicast+0x7f6/0x990 [ 892.764070][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 892.775555][ T30] ? __virt_addr_valid+0x183/0x530 [ 892.780857][ T30] ? __check_object_size+0x48e/0x900 [ 892.795571][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 892.800390][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 892.815283][ T30] ? __pfx_lock_release+0x10/0x10 [ 892.820652][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 892.831337][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 892.837348][ T30] __sock_sendmsg+0x221/0x270 [ 892.842069][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 892.852768][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 892.858444][ T30] __sys_sendmsg+0x292/0x380 [ 892.864086][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 892.875595][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 892.882374][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 892.895937][ T30] __do_fast_syscall_32+0xb4/0x110 [ 892.901088][ T30] ? exc_page_fault+0x590/0x8c0 [ 892.911632][ T30] do_fast_syscall_32+0x34/0x80 [ 892.916822][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 892.923188][ T30] RIP: 0023:0xf739d579 [ 892.935529][ T30] RSP: 002b:00000000f568656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 892.943992][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001080 [ 892.958327][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 892.969966][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 892.981830][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 892.992477][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 893.004131][ T30] [ 893.009763][ T30] INFO: task syz.1.2725:17603 blocked for more than 146 seconds. [ 893.021208][ T30] Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 893.031404][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 893.043693][ T30] task:syz.1.2725 state:D stack:24080 pid:17603 tgid:17602 ppid:16635 flags:0x20000004 [ 893.060431][ T30] Call Trace: [ 893.063745][ T30] [ 893.068151][ T30] __schedule+0x1895/0x4b30 [ 893.072720][ T30] ? __pfx___schedule+0x10/0x10 [ 893.086941][ T30] ? __pfx_lock_release+0x10/0x10 [ 893.092014][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 893.103642][ T30] ? schedule+0x90/0x320 [ 893.108259][ T30] schedule+0x14b/0x320 [ 893.112455][ T30] schedule_preempt_disabled+0x13/0x30 [ 893.123799][ T30] __mutex_lock+0x6a7/0xd70 [ 893.129274][ T30] ? __mutex_lock+0x52a/0xd70 [ 893.133995][ T30] ? nl80211_pre_doit+0x5f/0x8b0 [ 893.144903][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 893.150278][ T30] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 893.162315][ T30] ? __nla_parse+0x40/0x60 [ 893.167315][ T30] nl80211_pre_doit+0x5f/0x8b0 [ 893.173377][ T30] genl_rcv_msg+0xaaa/0xec0 [ 893.183906][ T30] ? mark_lock+0x9a/0x360 [ 893.188715][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 893.193801][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 893.204891][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 893.214407][ T30] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 893.225483][ T30] ? __pfx_nl80211_post_doit+0x10/0x10 [ 893.230985][ T30] ? __pfx___might_resched+0x10/0x10 [ 893.241830][ T30] netlink_rcv_skb+0x1e3/0x430 [ 893.246914][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 893.251973][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 893.263247][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 893.269056][ T30] genl_rcv+0x28/0x40 [ 893.274022][ T30] netlink_unicast+0x7f6/0x990 [ 893.285319][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 893.291128][ T30] ? __virt_addr_valid+0x183/0x530 [ 893.302226][ T30] ? __check_object_size+0x48e/0x900 [ 893.307840][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 893.312649][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 893.327221][ T30] ? __pfx_lock_release+0x10/0x10 [ 893.332285][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 893.343118][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 893.348694][ T30] __sock_sendmsg+0x221/0x270 [ 893.353412][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 893.367897][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 893.373254][ T30] __sys_sendmsg+0x292/0x380 [ 893.381960][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 893.391211][ T30] ? fput+0x1a8/0x230 [ 893.395274][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 893.404683][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 893.413638][ T30] __do_fast_syscall_32+0xb4/0x110 [ 893.421408][ T30] ? exc_page_fault+0x590/0x8c0 [ 893.429912][ T30] do_fast_syscall_32+0x34/0x80 [ 893.434803][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 893.443963][ T30] RIP: 0023:0xf744d579 [ 893.464401][ T30] RSP: 002b:00000000f573656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 893.473172][ T30] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000020000200 [ 893.485481][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 893.493498][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 893.510569][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 893.522269][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 893.533192][ T30] [ 893.540058][ T30] INFO: task syz.4.2727:17608 blocked for more than 146 seconds. [ 893.550796][ T30] Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 893.562114][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 893.573379][ T30] task:syz.4.2727 state:D stack:25696 pid:17608 tgid:17607 ppid:15960 flags:0x20000004 [ 893.588321][ T30] Call Trace: [ 893.591645][ T30] [ 893.594601][ T30] __schedule+0x1895/0x4b30 [ 893.602007][ T30] ? __pfx___schedule+0x10/0x10 [ 893.613778][ T30] ? __pfx_lock_release+0x10/0x10 [ 893.621470][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 893.630670][ T30] ? schedule+0x90/0x320 [ 893.634952][ T30] schedule+0x14b/0x320 [ 893.644855][ T30] schedule_preempt_disabled+0x13/0x30 [ 893.653978][ T30] __mutex_lock+0x6a7/0xd70 [ 893.660989][ T30] ? __mutex_lock+0x52a/0xd70 [ 893.669258][ T30] ? nl80211_pre_doit+0x5f/0x8b0 [ 893.674239][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 893.682828][ T30] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 893.692688][ T30] ? __nla_parse+0x40/0x60 [ 893.699625][ T30] nl80211_pre_doit+0x5f/0x8b0 [ 893.704449][ T30] genl_rcv_msg+0xaaa/0xec0 [ 893.712812][ T30] ? mark_lock+0x9a/0x360 [ 893.720056][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 893.725145][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 893.733932][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 893.741893][ T30] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 893.751461][ T30] ? __pfx_nl80211_post_doit+0x10/0x10 [ 893.759477][ T30] ? __pfx___might_resched+0x10/0x10 [ 893.764831][ T30] netlink_rcv_skb+0x1e3/0x430 [ 893.775519][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 893.780589][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 893.795726][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 893.801246][ T30] genl_rcv+0x28/0x40 [ 893.811303][ T30] netlink_unicast+0x7f6/0x990 [ 893.817704][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 893.823037][ T30] ? __virt_addr_valid+0x183/0x530 [ 893.834738][ T30] ? __check_object_size+0x48e/0x900 [ 893.840397][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 893.845208][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 893.860468][ T30] ? __pfx_lock_release+0x10/0x10 [ 893.865876][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 893.870856][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 893.882064][ T30] __sock_sendmsg+0x221/0x270 [ 893.888594][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 893.893414][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 893.903421][ T30] __sys_sendmsg+0x292/0x380 [ 893.909850][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 893.915011][ T30] ? fput+0x1a8/0x230 [ 893.922829][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 893.942467][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 893.948404][ T30] __do_fast_syscall_32+0xb4/0x110 [ 893.953567][ T30] ? exc_page_fault+0x590/0x8c0 [ 893.964594][ T30] do_fast_syscall_32+0x34/0x80 [ 893.969832][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 893.981980][ T30] RIP: 0023:0xf73cd579 [ 893.986432][ T30] RSP: 002b:00000000f56b656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 893.996137][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000200 [ 894.004154][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 894.018725][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 894.029288][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 894.040983][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 894.052037][ T30] [ 894.055169][ T30] INFO: task syz.4.2727:17610 blocked for more than 147 seconds. [ 894.065549][ T30] Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 894.073213][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 894.090304][ T30] task:syz.4.2727 state:D stack:25696 pid:17610 tgid:17607 ppid:15960 flags:0x20000004 [ 894.105175][ T30] Call Trace: [ 894.111120][ T30] [ 894.114094][ T30] __schedule+0x1895/0x4b30 [ 894.122466][ T30] ? __pfx___schedule+0x10/0x10 [ 894.129884][ T30] ? __pfx_lock_release+0x10/0x10 [ 894.134953][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 894.144234][ T30] ? schedule+0x90/0x320 [ 894.151033][ T30] schedule+0x14b/0x320 [ 894.155238][ T30] schedule_preempt_disabled+0x13/0x30 [ 894.164917][ T30] __mutex_lock+0x6a7/0xd70 [ 894.172522][ T30] ? __mutex_lock+0x52a/0xd70 [ 894.181046][ T30] ? nl80211_pre_doit+0x5f/0x8b0 [ 894.188537][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 894.194718][ T30] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 894.204806][ T30] ? __nla_parse+0x40/0x60 [ 894.215539][ T30] nl80211_pre_doit+0x5f/0x8b0 [ 894.220371][ T30] genl_rcv_msg+0xaaa/0xec0 [ 894.224903][ T30] ? mark_lock+0x9a/0x360 [ 894.234142][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 894.239539][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 894.244604][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 894.256150][ T30] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 894.261484][ T30] ? __pfx_nl80211_post_doit+0x10/0x10 [ 894.272403][ T30] ? __pfx___might_resched+0x10/0x10 [ 894.279173][ T30] netlink_rcv_skb+0x1e3/0x430 [ 894.283980][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 894.293847][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 894.301768][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 894.312043][ T30] genl_rcv+0x28/0x40 [ 894.317469][ T30] netlink_unicast+0x7f6/0x990 [ 894.322444][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 894.332799][ T30] ? __virt_addr_valid+0x183/0x530 [ 894.339388][ T30] ? __check_object_size+0x48e/0x900 [ 894.344716][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 894.358871][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 894.364198][ T30] ? __pfx_lock_release+0x10/0x10 [ 894.371810][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 894.375684][ C1] net_ratelimit: 14208 callbacks suppressed [ 894.375700][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.394930][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.398479][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 894.407743][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 894.424562][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 894.436815][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 894.441270][ T30] __sock_sendmsg+0x221/0x270 [ 894.449085][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.456051][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 894.465836][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.483149][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 894.490552][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 894.495468][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 894.512630][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:61:59:15:82:00, vlan:0) [ 894.525560][ T30] __sys_sendmsg+0x292/0x380 [ 894.530197][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 894.535335][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 894.547121][ T30] ? call_rcu+0x731/0xa70 [ 894.551525][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 894.563076][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 894.569794][ T30] __do_fast_syscall_32+0xb4/0x110 [ 894.575030][ T30] ? exc_page_fault+0x590/0x8c0 [ 894.585006][ T30] do_fast_syscall_32+0x34/0x80 [ 894.591286][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 894.602425][ T30] RIP: 0023:0xf73cd579 [ 894.608986][ T30] RSP: 002b:00000000f569556c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 894.622318][ T30] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000c00 [ 894.631714][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 894.647633][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 894.661769][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 894.670089][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 894.683934][ T30] [ 894.687249][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 894.702157][ T30] INFO: task syz-executor:17614 blocked for more than 147 seconds. [ 894.711357][ T30] Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 894.724755][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 894.733883][ T30] task:syz-executor state:D stack:26816 pid:17614 tgid:17614 ppid:1 flags:0x20004004 [ 894.750083][ T30] Call Trace: [ 894.753392][ T30] [ 894.757889][ T30] __schedule+0x1895/0x4b30 [ 894.762458][ T30] ? __pfx___schedule+0x10/0x10 [ 894.772561][ T30] ? __pfx_lock_release+0x10/0x10 [ 894.782635][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 894.792820][ T30] ? schedule+0x90/0x320 [ 894.798510][ T30] schedule+0x14b/0x320 [ 894.802720][ T30] schedule_preempt_disabled+0x13/0x30 [ 894.815525][ T30] __mutex_lock+0x6a7/0xd70 [ 894.820073][ T30] ? __mutex_lock+0x52a/0xd70 [ 894.824780][ T30] ? register_nexthop_notifier+0x84/0x290 [ 894.836299][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 894.841385][ T30] ? __asan_memset+0x23/0x50 [ 894.850907][ T30] register_nexthop_notifier+0x84/0x290 [ 894.857909][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 894.863756][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 894.874796][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 894.882785][ T30] ? __asan_memset+0x23/0x50 [ 894.895496][ T30] ops_init+0x31e/0x590 [ 894.899699][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 894.905103][ T30] setup_net+0x287/0x9e0 [ 894.915792][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 894.921415][ T30] ? __pfx_setup_net+0x10/0x10 [ 894.935559][ T30] copy_net_ns+0x33f/0x570 [ 894.940022][ T30] create_new_namespaces+0x425/0x7b0 [ 894.945359][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 894.957506][ T30] ksys_unshare+0x57d/0xa70 [ 894.962056][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 894.973991][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 894.982863][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 894.993498][ T30] __ia32_sys_unshare+0x37/0x40 [ 895.000875][ T30] __do_fast_syscall_32+0xb4/0x110 [ 895.009572][ T30] ? exc_page_fault+0x590/0x8c0 [ 895.017940][ T30] do_fast_syscall_32+0x34/0x80 [ 895.022827][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 895.032967][ T30] RIP: 0023:0xf740d579 [ 895.039693][ T30] RSP: 002b:00000000f755ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 895.052143][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 895.062720][ T30] RDX: 00000000f73fbff4 RSI: 00000000f72d224b RDI: 0000000030000000 [ 895.076685][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 895.084700][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 895.098980][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 895.109482][ T30] [ 895.112530][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 895.128708][ T30] INFO: task syz-executor:17619 blocked for more than 148 seconds. [ 895.139379][ T30] Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 895.150600][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 895.161779][ T30] task:syz-executor state:D stack:26416 pid:17619 tgid:17619 ppid:1 flags:0x20004004 [ 895.175552][ T30] Call Trace: [ 895.178862][ T30] [ 895.181814][ T30] __schedule+0x1895/0x4b30 [ 895.191540][ T30] ? __pfx___schedule+0x10/0x10 [ 895.196696][ T30] ? __pfx_lock_release+0x10/0x10 [ 895.201760][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 895.215529][ T30] ? schedule+0x90/0x320 [ 895.222187][ T30] schedule+0x14b/0x320 [ 895.232582][ T30] schedule_preempt_disabled+0x13/0x30 [ 895.240726][ T30] __mutex_lock+0x6a7/0xd70 [ 895.245269][ T30] ? __mutex_lock+0x52a/0xd70 [ 895.253652][ T30] ? register_nexthop_notifier+0x84/0x290 [ 895.261980][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 895.270695][ T30] ? __asan_memset+0x23/0x50 [ 895.275331][ T30] register_nexthop_notifier+0x84/0x290 [ 895.283444][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 895.292976][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 895.301716][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 895.311478][ T30] ? __asan_memset+0x23/0x50 [ 895.319055][ T30] ops_init+0x31e/0x590 [ 895.324259][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 895.333375][ T30] setup_net+0x287/0x9e0 [ 895.340150][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 895.349511][ T30] ? __pfx_setup_net+0x10/0x10 [ 895.354327][ T30] copy_net_ns+0x33f/0x570 [ 895.363386][ T30] create_new_namespaces+0x425/0x7b0 [ 895.372448][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 895.380679][ T30] ksys_unshare+0x57d/0xa70 [ 895.385226][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 895.393945][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 895.402857][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 895.413143][ T30] __ia32_sys_unshare+0x37/0x40 [ 895.420504][ T30] __do_fast_syscall_32+0xb4/0x110 [ 895.430553][ T30] ? exc_page_fault+0x590/0x8c0 [ 895.438364][ T30] do_fast_syscall_32+0x34/0x80 [ 895.443560][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 895.453628][ T30] RIP: 0023:0xf747d579 [ 895.460192][ T30] RSP: 002b:00000000f75cff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 895.472208][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 895.482756][ T30] RDX: 00000000f746bff4 RSI: 00000000f734224b RDI: 0000000030000000 [ 895.494380][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 895.510643][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 895.518915][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 895.541886][ T30] [ 895.544947][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 895.554513][ T30] INFO: task syz-executor:17624 blocked for more than 148 seconds. [ 895.568434][ T30] Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 895.578587][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 895.590825][ T30] task:syz-executor state:D stack:26816 pid:17624 tgid:17624 ppid:1 flags:0x20004004 [ 895.603505][ T30] Call Trace: [ 895.610645][ T30] [ 895.613609][ T30] __schedule+0x1895/0x4b30 [ 895.620873][ T30] ? __pfx___schedule+0x10/0x10 [ 895.630354][ T30] ? __pfx_lock_release+0x10/0x10 [ 895.638765][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 895.644275][ T30] ? schedule+0x90/0x320 [ 895.655141][ T30] schedule+0x14b/0x320 [ 895.661820][ T30] schedule_preempt_disabled+0x13/0x30 [ 895.670870][ T30] __mutex_lock+0x6a7/0xd70 [ 895.677861][ T30] ? __mutex_lock+0x52a/0xd70 [ 895.682575][ T30] ? register_nexthop_notifier+0x84/0x290 [ 895.692103][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 895.699765][ T30] ? __asan_memset+0x23/0x50 [ 895.704405][ T30] register_nexthop_notifier+0x84/0x290 [ 895.713767][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 895.722115][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 895.732924][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 895.741609][ T30] ? __asan_memset+0x23/0x50 [ 895.748557][ T30] ops_init+0x31e/0x590 [ 895.752759][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 895.762468][ T30] setup_net+0x287/0x9e0 [ 895.768130][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 895.773715][ T30] ? __pfx_setup_net+0x10/0x10 [ 895.785524][ T30] copy_net_ns+0x33f/0x570 [ 895.789987][ T30] create_new_namespaces+0x425/0x7b0 [ 895.795311][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 895.808018][ T30] ksys_unshare+0x57d/0xa70 [ 895.812565][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 895.821350][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 895.830270][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 895.841522][ T30] __ia32_sys_unshare+0x37/0x40 [ 895.851976][ T30] __do_fast_syscall_32+0xb4/0x110 [ 895.860905][ T30] ? exc_page_fault+0x590/0x8c0 [ 895.868713][ T30] do_fast_syscall_32+0x34/0x80 [ 895.873601][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 895.883673][ T30] RIP: 0023:0xf7fc2579 [ 895.890292][ T30] RSP: 002b:00000000f75aff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 895.902316][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 895.913027][ T30] RDX: 00000000f744bff4 RSI: 00000000f732224b RDI: 0000000030000000 [ 895.924682][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 895.944866][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 895.961159][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 895.969505][ T30] [ 895.972554][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 895.988128][ T30] INFO: task syz-executor:17630 blocked for more than 149 seconds. [ 895.999678][ T30] Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 896.012962][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 896.025258][ T30] task:syz-executor state:D stack:24720 pid:17630 tgid:17630 ppid:1 flags:0x20004004 [ 896.042393][ T30] Call Trace: [ 896.045970][ T30] [ 896.048937][ T30] __schedule+0x1895/0x4b30 [ 896.053503][ T30] ? __pfx___schedule+0x10/0x10 [ 896.064633][ T30] ? __pfx_lock_release+0x10/0x10 [ 896.073054][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 896.084458][ T30] ? schedule+0x90/0x320 [ 896.089522][ T30] schedule+0x14b/0x320 [ 896.093727][ T30] schedule_preempt_disabled+0x13/0x30 [ 896.105157][ T30] __mutex_lock+0x6a7/0xd70 [ 896.110028][ T30] ? __mutex_lock+0x52a/0xd70 [ 896.114742][ T30] ? register_nexthop_notifier+0x84/0x290 [ 896.125481][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 896.130556][ T30] ? __asan_memset+0x23/0x50 [ 896.135183][ T30] register_nexthop_notifier+0x84/0x290 [ 896.148049][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 896.153908][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 896.164171][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 896.172933][ T30] ? __asan_memset+0x23/0x50 [ 896.181202][ T30] ops_init+0x31e/0x590 [ 896.185405][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 896.193467][ T30] setup_net+0x287/0x9e0 [ 896.201919][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 896.210109][ T30] ? __pfx_setup_net+0x10/0x10 [ 896.214925][ T30] copy_net_ns+0x33f/0x570 [ 896.223110][ T30] create_new_namespaces+0x425/0x7b0 [ 896.234433][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 896.244793][ T30] ksys_unshare+0x57d/0xa70 [ 896.251840][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 896.260603][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 896.269598][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 896.279956][ T30] __ia32_sys_unshare+0x37/0x40 [ 896.284846][ T30] __do_fast_syscall_32+0xb4/0x110 [ 896.292602][ T30] ? exc_page_fault+0x590/0x8c0 [ 896.301109][ T30] do_fast_syscall_32+0x34/0x80 [ 896.308912][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 896.315279][ T30] RIP: 0023:0xf7fb5579 [ 896.323091][ T30] RSP: 002b:00000000f759ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 896.334209][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 896.345746][ T30] RDX: 00000000f743bff4 RSI: 00000000f731224b RDI: 0000000030000000 [ 896.353751][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 896.369970][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 896.382687][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 896.392116][ T30] [ 896.395161][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 896.410307][ T30] [ 896.410307][ T30] Showing all locks held in the system: [ 896.418900][ T30] 3 locks held by kworker/0:1/9: [ 896.423866][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 896.442279][ T30] #1: ffffc900000e7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 896.454833][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 896.471027][ T30] 1 lock held by khungtaskd/30: [ 896.476254][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 896.498458][ T30] 3 locks held by kworker/u8:2/35: [ 896.503615][ T30] #0: ffff888145ac5148 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 896.524168][ T30] #1: ffffc90000ab7d00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 896.544643][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbf/0x610 [ 896.562289][ T30] 2 locks held by getty/4987: [ 896.575361][ T30] #0: ffff88802e4e90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 896.585280][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 896.601621][ T30] 3 locks held by kworker/0:10/5284: [ 896.607257][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 896.624069][ T30] #1: ffffc90004107d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 896.635384][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 896.661916][ T30] 5 locks held by kworker/1:7/10375: [ 896.667498][ T30] 3 locks held by kworker/u8:8/10969: [ 896.672895][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 896.690781][ T30] #1: ffffc90004b2fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 896.702082][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 896.717119][ T30] 3 locks held by kworker/u8:9/10971: [ 896.722519][ T30] #0: ffff88802dc51148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 896.738004][ T30] #1: ffffc90004b4fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 896.755511][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 896.765076][ T30] 2 locks held by syz.2.2713/17581: [ 896.779796][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 896.799103][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 896.815217][ T30] 1 lock held by syz.0.2722/17587: [ 896.821881][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: raw_bind+0x99/0x770 [ 896.835104][ T30] 1 lock held by syz.0.2722/17588: [ 896.841638][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: raw_setsockopt+0xe6d/0x1a80 [ 896.856460][ T30] 1 lock held by syz.3.2723/17596: [ 896.861598][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 896.876571][ T30] 2 locks held by syz.1.2725/17603: [ 896.881797][ T30] #0: ffffffff8fd37b30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 896.899004][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 896.910842][ T30] 2 locks held by syz.4.2727/17608: [ 896.919613][ T30] #0: ffffffff8fd37b30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 896.930427][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 896.948755][ T30] 2 locks held by syz.4.2727/17610: [ 896.953981][ T30] #0: ffffffff8fd37b30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 896.964978][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 896.984645][ T30] 2 locks held by syz-executor/17614: [ 896.990752][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 897.006013][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 897.020914][ T30] 2 locks held by syz-executor/17619: [ 897.027699][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 897.041958][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 897.056870][ T30] 2 locks held by syz-executor/17624: [ 897.063310][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 897.078937][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 897.095389][ T30] 2 locks held by syz-executor/17630: [ 897.104735][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 897.120131][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 897.130524][ T30] 2 locks held by syz-executor/17632: [ 897.141737][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 897.151539][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 897.165524][ T30] 2 locks held by syz-executor/17637: [ 897.170923][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 897.185993][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 897.200721][ T30] 2 locks held by syz-executor/17640: [ 897.208576][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 897.227430][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 897.242195][ T30] 2 locks held by syz-executor/17643: [ 897.248998][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 897.263198][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 897.280096][ T30] 2 locks held by syz-executor/17650: [ 897.286904][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 897.301249][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 897.312766][ T30] 2 locks held by syz-executor/17651: [ 897.323203][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 897.334172][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 897.349010][ T30] 2 locks held by syz-executor/17662: [ 897.354408][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 897.374469][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 897.384855][ T30] 2 locks held by syz-executor/17666: [ 897.396225][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 897.410336][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 897.421823][ T30] 2 locks held by syz-executor/17669: [ 897.432298][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 897.443356][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 897.459597][ T30] 2 locks held by syz-executor/17674: [ 897.464993][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 897.481476][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 897.492230][ T30] 2 locks held by syz-executor/17677: [ 897.503539][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 897.521077][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 897.532805][ T30] [ 897.535157][ T30] ============================================= [ 897.535157][ T30] [ 897.550021][ T30] NMI backtrace for cpu 0 [ 897.554396][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 897.564918][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 897.574992][ T30] Call Trace: [ 897.578292][ T30] [ 897.581240][ T30] dump_stack_lvl+0x241/0x360 [ 897.585949][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 897.591166][ T30] ? __pfx__printk+0x10/0x10 [ 897.595792][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 897.600757][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 897.606236][ T30] ? _printk+0xd5/0x120 [ 897.610419][ T30] ? __pfx__printk+0x10/0x10 [ 897.615029][ T30] ? __wake_up_klogd+0xcc/0x110 [ 897.619902][ T30] ? __pfx__printk+0x10/0x10 [ 897.624518][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 897.629569][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 897.635572][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 897.641578][ T30] watchdog+0xff4/0x1040 [ 897.645843][ T30] ? watchdog+0x1ea/0x1040 [ 897.650296][ T30] ? __pfx_watchdog+0x10/0x10 [ 897.654995][ T30] kthread+0x2f0/0x390 [ 897.659082][ T30] ? __pfx_watchdog+0x10/0x10 [ 897.663779][ T30] ? __pfx_kthread+0x10/0x10 [ 897.668389][ T30] ret_from_fork+0x4b/0x80 [ 897.672825][ T30] ? __pfx_kthread+0x10/0x10 [ 897.677432][ T30] ret_from_fork_asm+0x1a/0x30 [ 897.682230][ T30] [ 897.686021][ T30] Sending NMI from CPU 0 to CPUs 1: [ 897.691281][ C1] NMI backtrace for cpu 1 [ 897.691294][ C1] CPU: 1 UID: 0 PID: 10375 Comm: kworker/1:7 Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 897.691315][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 897.691326][ C1] Workqueue: events nsim_dev_trap_report_work [ 897.691348][ C1] RIP: 0010:fib6_node_lookup_1+0x2a2/0x8b0 [ 897.691371][ C1] Code: c1 0f 8c 43 fe ff ff 48 89 ef e8 79 15 92 f7 e9 36 fe ff ff 89 d9 80 e1 07 38 c1 7c 89 48 89 df e8 f3 15 92 f7 e9 7c ff ff ff <4d> 85 ff 0f 84 9f 05 00 00 49 8d 45 10 48 89 44 24 18 4c 89 6c 24 [ 897.691385][ C1] RSP: 0018:ffffc90000a17438 EFLAGS: 00000246 [ 897.691399][ C1] RAX: ffffffff8a6c81bd RBX: 0000000000000001 RCX: ffff88801cf03c00 [ 897.691412][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000 [ 897.691423][ C1] RBP: 0000000000000000 R08: ffffffff8a6c81b4 R09: 0000000000000000 [ 897.691434][ C1] R10: ffffc90000a174e0 R11: fffff52000142ea2 R12: ffffc90000a174e8 [ 897.691447][ C1] R13: ffffc90000a174e0 R14: dffffc0000000000 R15: ffff8880479d4280 [ 897.691460][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 897.691474][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 897.691486][ C1] CR2: 0000000020065000 CR3: 0000000064320000 CR4: 00000000003526f0 [ 897.691501][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 897.691511][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 897.691523][ C1] Call Trace: [ 897.691529][ C1] [ 897.691536][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 897.691555][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 897.691577][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 897.691594][ C1] ? nmi_handle+0x2a/0x5a0 [ 897.691617][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 897.691636][ C1] ? nmi_handle+0x14f/0x5a0 [ 897.691651][ C1] ? nmi_handle+0x2a/0x5a0 [ 897.691668][ C1] ? fib6_node_lookup_1+0x2a2/0x8b0 [ 897.691686][ C1] ? default_do_nmi+0x63/0x160 [ 897.691704][ C1] ? exc_nmi+0x123/0x1f0 [ 897.691721][ C1] ? end_repeat_nmi+0xf/0x53 [ 897.691739][ C1] ? fib6_node_lookup_1+0x164/0x8b0 [ 897.691756][ C1] ? fib6_node_lookup_1+0x16d/0x8b0 [ 897.691775][ C1] ? fib6_node_lookup_1+0x2a2/0x8b0 [ 897.691794][ C1] ? fib6_node_lookup_1+0x2a2/0x8b0 [ 897.691813][ C1] ? fib6_node_lookup_1+0x2a2/0x8b0 [ 897.691832][ C1] [ 897.691838][ C1] [ 897.691848][ C1] fib6_node_lookup+0x14a/0x250 [ 897.691868][ C1] ? __pfx_fib6_node_lookup+0x10/0x10 [ 897.691894][ C1] fib6_table_lookup+0xc6/0xbb0 [ 897.691917][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 897.691938][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 897.691962][ C1] ip6_pol_route+0x273/0x15d0 [ 897.691981][ C1] ? ip6_pol_route+0x198/0x15d0 [ 897.692000][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 897.692031][ C1] ? br_nf_dev_queue_xmit+0x4f8/0x22e0 [ 897.692058][ C1] fib6_rule_lookup+0x58c/0x790 [ 897.692076][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 897.692091][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 897.692109][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 897.692130][ C1] ? __pfx_validate_chain+0x10/0x10 [ 897.692148][ C1] ? __pfx_lock_release+0x10/0x10 [ 897.692170][ C1] ip6_route_input+0x859/0xd90 [ 897.692187][ C1] ? mark_lock+0x9a/0x360 [ 897.692206][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 897.692235][ C1] ? ip6_rcv_finish_core+0x20f/0x410 [ 897.692253][ C1] ip6_rcv_finish+0x144/0x180 [ 897.692268][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 897.692283][ C1] ip_sabotage_in+0x203/0x290 [ 897.692301][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 897.692316][ C1] nf_hook_slow+0xc3/0x220 [ 897.692335][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 897.692349][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 897.692363][ C1] NF_HOOK+0x29e/0x450 [ 897.692378][ C1] ? skb_orphan+0xae/0xd0 [ 897.692394][ C1] ? NF_HOOK+0x9a/0x450 [ 897.692409][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 897.692425][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 897.692443][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 897.692458][ C1] __netif_receive_skb+0x1ea/0x650 [ 897.692478][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 897.692498][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 897.692521][ C1] ? netif_receive_skb+0x131/0x890 [ 897.692539][ C1] ? netif_receive_skb+0x131/0x890 [ 897.692556][ C1] netif_receive_skb+0x1e8/0x890 [ 897.692573][ C1] ? __pfx_lock_release+0x10/0x10 [ 897.692593][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 897.692614][ C1] ? br_netif_receive_skb+0x130/0x1a0 [ 897.692633][ C1] NF_HOOK+0x9e/0x400 [ 897.692648][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 897.692664][ C1] ? NF_HOOK+0xfc/0x400 [ 897.692679][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 897.692696][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 897.692715][ C1] ? br_pass_frame_up+0x297/0x430 [ 897.692734][ C1] br_handle_frame_finish+0x18ed/0x1fe0 [ 897.692758][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 897.692773][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 897.692792][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 897.692811][ C1] ? ip6t_do_table+0x205/0x18a0 [ 897.692829][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 897.692851][ C1] ? ip6t_do_table+0x205/0x18a0 [ 897.692870][ C1] ? nf_hook_slow+0x175/0x220 [ 897.692888][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 897.692906][ C1] br_nf_hook_thresh+0x472/0x590 [ 897.692925][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 897.692942][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 897.692962][ C1] ? skb_push+0x97/0x100 [ 897.692980][ C1] br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0 [ 897.692997][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 897.693025][ C1] br_nf_pre_routing_ipv6+0x379/0x770 [ 897.693042][ C1] ? br_nf_pre_routing_ipv6+0x41e/0x770 [ 897.693059][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 897.693078][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 897.693095][ C1] ? br_nf_pre_routing+0x70e/0x1470 [ 897.693110][ C1] ? ip6_mc_input+0xa1f/0xc30 [ 897.693127][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 897.693144][ C1] br_handle_frame+0x9fd/0x1530 [ 897.693164][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 897.693180][ C1] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 897.693200][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 897.693216][ C1] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 897.693233][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 897.693257][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 897.693274][ C1] __netif_receive_skb_core+0x13e8/0x4570 [ 897.693298][ C1] ? ip6_mc_input+0xa1f/0xc30 [ 897.693315][ C1] ? ip6_mc_input+0xa1f/0xc30 [ 897.693333][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 897.693353][ C1] ? mark_lock+0x9a/0x360 [ 897.693381][ C1] __netif_receive_skb+0x12f/0x650 [ 897.693400][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 897.693420][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 897.693437][ C1] ? __pfx_lock_release+0x10/0x10 [ 897.693464][ C1] process_backlog+0x662/0x15b0 [ 897.693484][ C1] ? process_backlog+0x33b/0x15b0 [ 897.693506][ C1] ? __pfx_process_backlog+0x10/0x10 [ 897.693524][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 897.693546][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 897.693567][ C1] __napi_poll+0xcb/0x490 [ 897.693586][ C1] net_rx_action+0x89b/0x1240 [ 897.693614][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 897.693632][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 897.693668][ C1] handle_softirqs+0x2c5/0x980 [ 897.693688][ C1] ? do_softirq+0x11b/0x1e0 [ 897.693707][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 897.693730][ C1] do_softirq+0x11b/0x1e0 [ 897.693747][ C1] [ 897.693753][ C1] [ 897.693760][ C1] ? __pfx_do_softirq+0x10/0x10 [ 897.693777][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 897.693799][ C1] ? rcu_is_watching+0x15/0xb0 [ 897.693816][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 897.693835][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 897.693852][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 897.693871][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 897.693890][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 897.693909][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 897.693934][ C1] ? process_scheduled_works+0x976/0x1850 [ 897.693953][ C1] process_scheduled_works+0xa63/0x1850 [ 897.693984][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 897.694008][ C1] ? assign_work+0x364/0x3d0 [ 897.694033][ C1] worker_thread+0x870/0xd30 [ 897.694055][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 897.694077][ C1] ? __kthread_parkme+0x169/0x1d0 [ 897.694098][ C1] ? __pfx_worker_thread+0x10/0x10 [ 897.694116][ C1] kthread+0x2f0/0x390 [ 897.694131][ C1] ? __pfx_worker_thread+0x10/0x10 [ 897.694149][ C1] ? __pfx_kthread+0x10/0x10 [ 897.694164][ C1] ret_from_fork+0x4b/0x80 [ 897.694183][ C1] ? __pfx_kthread+0x10/0x10 [ 897.694198][ C1] ret_from_fork_asm+0x1a/0x30 [ 897.694223][ C1] [ 898.597088][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 898.603981][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 898.614498][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 898.624570][ T30] Call Trace: [ 898.627862][ T30] [ 898.630807][ T30] dump_stack_lvl+0x241/0x360 [ 898.635510][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 898.640727][ T30] ? __pfx__printk+0x10/0x10 [ 898.645343][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 898.651361][ T30] ? vscnprintf+0x5d/0x90 [ 898.655717][ T30] panic+0x349/0x880 [ 898.659637][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 898.665818][ T30] ? __pfx_panic+0x10/0x10 [ 898.670255][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 898.675656][ T30] ? __irq_work_queue_local+0x137/0x410 [ 898.681233][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 898.686625][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 898.692797][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 898.698980][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 898.705155][ T30] watchdog+0x1033/0x1040 [ 898.709508][ T30] ? watchdog+0x1ea/0x1040 [ 898.713958][ T30] ? __pfx_watchdog+0x10/0x10 [ 898.718655][ T30] kthread+0x2f0/0x390 [ 898.722743][ T30] ? __pfx_watchdog+0x10/0x10 [ 898.727443][ T30] ? __pfx_kthread+0x10/0x10 [ 898.732053][ T30] ret_from_fork+0x4b/0x80 [ 898.736497][ T30] ? __pfx_kthread+0x10/0x10 [ 898.741106][ T30] ret_from_fork_asm+0x1a/0x30 [ 898.745908][ T30] [ 898.749211][ T30] Kernel Offset: disabled [ 898.753536][ T30] Rebooting in 86400 seconds..