last executing test programs: 46.549194639s ago: executing program 3 (id=168): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = memfd_secret(0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x2284, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x3c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x7, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000100)='mmap_lock_acquire_returned\x00', r9}, 0x10) signalfd(0xffffffffffffffff, &(0x7f00000008c0), 0x8) r10 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x11900}, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r11, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r13, &(0x7f0000000140), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r12, 0x0) io_uring_enter(r10, 0x2def, 0x0, 0x0, 0x0, 0x0) 44.142234748s ago: executing program 3 (id=177): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 43.826434785s ago: executing program 2 (id=178): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000880)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 43.227650892s ago: executing program 2 (id=182): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f0000000340)}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0906, 0x2, '\x00', @p_u32=&(0x7f00000000c0)}}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000040)) fanotify_init(0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xde, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xf, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x26}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r6, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r7}, 0x20) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 43.040937176s ago: executing program 3 (id=183): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setsig(0x4203, r3, 0xb, &(0x7f0000000140)={0x33, 0xfff, 0x800}) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000280)='wlan1\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ecab5329269972f145883fef0be71d70c188594bf89a5adaef0704ad67faf87fb50d21384b2ab982aaa9178abb878db234fcee71f2a3eb772da0da2e0fcab20a94463c2dd91b3ccf1241a07660aeb4655bf29d65fb3f3c548573d096c0d15ee237570afa9fe4d0b2be5cd2ea7d3675e2e2cc0b27db4f43ac1348b2d57cec24d85817a66e968973bfb3e700c39380946e85a44c1b58a6d3df9af4f07e152ff5f6", 0xa0) setsockopt$inet_mreqsrc(r4, 0x0, 0x0, &(0x7f0000000240)={@private=0xa010100, @broadcast, @multicast1}, 0xc) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x18, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0x9}, {}, {}, {0x15}}, @ldst={0x1, 0x0, 0x3}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0xe0000000}, 0x20040088) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 42.408088096s ago: executing program 3 (id=186): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xdddd1000}, {0x6000}, {0xf000}, {0x0, 0x0, 0x8}, {}, {0x2000}, {0x0, 0x0, 0xb, 0x0, 0x0, 0x5}, {}, {}, 0xddfdffdb, 0x0, 0x0, 0x100130, 0x0, 0x8500}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000340)={0x80a0000, 0x110000}) 41.950731437s ago: executing program 3 (id=191): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 41.426902273s ago: executing program 3 (id=196): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f0000000340)}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0906, 0x2, '\x00', @p_u32=&(0x7f00000000c0)}}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000080)={r7}) 39.640526077s ago: executing program 2 (id=208): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x1ff) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 39.193625396s ago: executing program 2 (id=209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="d5"}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}]}, 0x2c}}, 0x0) 37.818260108s ago: executing program 2 (id=214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) accept(r1, &(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000440)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000200001400000000000000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0xe0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001980)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000019c0)=[0x0, 0x0], &(0x7f0000001a00)=[0x0], 0x0, 0xe2, &(0x7f0000001a40)=[{}], 0x8, 0x10, &(0x7f0000001a80), 0x0, 0x0, 0x95, 0x8, 0x8, &(0x7f0000001b00)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, 0x0) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f00000001c0)) mknod$loop(0x0, 0x100000000000600d, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)) 36.329967708s ago: executing program 2 (id=218): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f0000000340)}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0906, 0x2, '\x00', @p_u32=&(0x7f00000000c0)}}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000040)) fanotify_init(0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xde, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xf, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x26}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r6, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r7}, 0x20) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 22.305159294s ago: executing program 0 (id=279): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = memfd_secret(0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x2284, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x3c, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x7, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000100)='mmap_lock_acquire_returned\x00', r8}, 0x10) signalfd(0xffffffffffffffff, &(0x7f00000008c0), 0x8) r9 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x11900}, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r12, &(0x7f0000000140), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r11, 0x0) io_uring_enter(r9, 0x2def, 0x0, 0x0, 0x0, 0x0) 21.154677665s ago: executing program 0 (id=282): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/3601], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, r1, 0x2f, 0x2000, 0x4, @value}, 0x20) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[], 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=@setlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x48}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)) r6 = syz_open_pts(r5, 0x82101) r7 = dup3(r6, r5, 0x0) writev(r7, &(0x7f0000001680)=[{&(0x7f0000001280)='7N', 0xfdef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x2, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfd3, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query, @generic={0x2, 0x9, 0xd, 0x9, 0xffffffe1}, @exit]}, 0x0, 0x2, 0x19, &(0x7f0000000c40)=""/25, 0x41000, 0x11, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d00)={0x0, 0x8, 0x8, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x2, 0x3, 0x9, 0x17f9e34a43d4fa3f}, {0x4, 0x2, 0x3}, {0x5, 0x5, 0xa, 0x6}, {0x4, 0x5, 0x0, 0x2}, {0x0, 0x4, 0xe, 0x5}, {0x5, 0x0, 0x10}, {0x3, 0x3, 0x4, 0xa}], 0x10, 0xd8, @void, @value}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000004c0)={@local}, &(0x7f0000000500)=0x14) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r10}]}}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001480)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001580)={'sit0\x00', &(0x7f00000014c0)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x4, 0x5, {{0x22, 0x4, 0x3, 0x3, 0x88, 0x67, 0x0, 0x5, 0x4, 0x0, @private=0xa010101, @empty, {[@timestamp={0x44, 0x10, 0x12, 0x0, 0x5, [0x4, 0xc08, 0x3]}, @noop, @timestamp={0x44, 0x18, 0x0, 0x0, 0x6, [0xd05c, 0x3, 0xd1c0, 0x0, 0xfffffffe]}, @timestamp_addr={0x44, 0x1c, 0xa3, 0x1, 0x4, [{@loopback, 0xc163}, {@multicast1, 0x3}, {@multicast1, 0x1}]}, @generic={0xd0, 0xa, "94a0fc475ccdd3e4"}, @timestamp_prespec={0x44, 0xc, 0x39, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x9}]}, @generic={0x86, 0x8, "c3c8b6127cf6"}, @rr={0x7, 0xf, 0xd5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001640)={'ip6gre0\x00', &(0x7f00000015c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0xd, 0x9, 0x2, @empty, @mcast2, 0x1, 0x7800, 0xc, 0x3}}) 21.046878114s ago: executing program 1 (id=283): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x9}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xbc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40811}, 0x88c0) 20.402740479s ago: executing program 1 (id=285): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, "d1a2d6e7"}, &(0x7f0000000180)=0x2c) 19.48530002s ago: executing program 0 (id=289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)={0x8c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3, {0x0, 0xfd}}, @void, @val={0x2a, 0x1}, @void, @void, @void, @val={0x71, 0x7}, @val={0x76, 0x6}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 19.390267422s ago: executing program 1 (id=290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0000000000000000001200000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100000c0081"], 0x34}}, 0x0) 19.249500711s ago: executing program 0 (id=292): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setsig(0x4203, r3, 0xb, &(0x7f0000000140)={0x33, 0xfff, 0x800}) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000280)='wlan1\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ecab5329269972f145883fef0be71d70c188594bf89a5adaef0704ad67faf87fb50d21384b2ab982aaa9178abb878db234fcee71f2a3eb772da0da2e0fcab20a94463c2dd91b3ccf1241a07660aeb4655bf29d65fb3f3c548573d096c0d15ee237570afa9fe4d0b2be5cd2ea7d3675e2e2cc0b27db4f43ac1348b2d57cec24d85817a66e968973bfb3e700c39380946e85a44c1b58a6d3df9af4f07e", 0x9c) setsockopt$inet_mreqsrc(r4, 0x0, 0x0, &(0x7f0000000240)={@private=0xa010100, @broadcast, @multicast1}, 0xc) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0x9}, {}, {}, {0x15}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0xe0000000}, 0x20040088) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffe0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 19.169400243s ago: executing program 1 (id=293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x1400, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x3c, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}}, 0x0) 18.514393265s ago: executing program 0 (id=295): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}]}}}}}}}, 0x0) 16.792890352s ago: executing program 4 (id=297): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_128={{0x304, 0x39}, "2f9ba2ce41a730cb", "37a06f8ef45af1f5dd02000a4638ea00", "5d6937cd", "000000005a20ed4d"}, 0x28) 16.703961505s ago: executing program 4 (id=298): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x1f}}}, 0x0) 14.939856978s ago: executing program 4 (id=299): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000040)) 14.337809427s ago: executing program 1 (id=300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58502"]) 14.336872561s ago: executing program 0 (id=301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000cc0)={0x184, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @random="8e742f592bf6"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0xeb, 0x3a, 0xb0}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x9, 0x11, 0x5}}}}, @NL80211_ATTR_BEACON_TAIL={0x10e, 0xf, [@perr={0x84, 0x108, {0x1, 0x10, [{{}, @broadcast, 0x7c, @void, 0x7e}, {{}, @device_a, 0x90, @void, 0x25}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x22}, {{0x0, 0x1}, @device_b, 0x5, @value, 0x30}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x1d}, {{}, @device_a, 0x6, @void, 0x3e}, {{}, @broadcast, 0x38000000, @void, 0x1d}, {{0x0, 0x1}, @broadcast, 0x7, @value, 0x3c}, {{}, @device_a, 0x0, @void, 0x26}, {{0x0, 0x1}, @device_b, 0x8ec, @value, 0xb}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x40}, {{0x0, 0x1}, @device_a, 0x400, @value=@device_b, 0x1e}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x33}, {{}, @device_a, 0xdfb421f, @void, 0x3c}, {{0x0, 0x1}, @device_a, 0x8000, @value=@device_b, 0xa}, {{}, @device_a, 0x7e, @void, 0x32}]}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x184}}, 0xc094) 13.452604673s ago: executing program 4 (id=302): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_io_uring_setup(0x29eb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2001, 0x2f4}, &(0x7f00000011c0), &(0x7f0000001180)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{0x0}], 0x1) 12.487917623s ago: executing program 1 (id=303): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000006800010000000000000000000a00000000000000060007000400000008000500", @ANYRES32=r2, @ANYBLOB="14000880"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 8.266849644s ago: executing program 4 (id=304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c0900001000b00000"], 0x54}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 0s ago: executing program 4 (id=307): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x32658aeb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts. [ 51.008225][ T5204] cgroup: Unknown subsys name 'net' [ 51.150084][ T5204] cgroup: Unknown subsys name 'cpuset' [ 51.158221][ T5204] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.448970][ T5204] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.654599][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.664034][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.672608][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.680438][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.688008][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.696279][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.704667][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.712410][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.721082][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.721362][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.744927][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.747654][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.760999][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.761015][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.772350][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.776509][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.782643][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.797119][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.804644][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.812586][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.820154][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.828622][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.828814][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.835770][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.849855][ T5233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.853178][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.858929][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.872822][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.882352][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.898896][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.095592][ T5214] chnl_net:caif_netlink_parms(): no params data found [ 56.215191][ T5214] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.223683][ T5214] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.231689][ T5214] bridge_slave_0: entered allmulticast mode [ 56.238662][ T5214] bridge_slave_0: entered promiscuous mode [ 56.249213][ T5214] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.256304][ T5214] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.263736][ T5214] bridge_slave_1: entered allmulticast mode [ 56.271016][ T5214] bridge_slave_1: entered promiscuous mode [ 56.325908][ T5215] chnl_net:caif_netlink_parms(): no params data found [ 56.352125][ T5214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.364866][ T5214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.412459][ T5214] team0: Port device team_slave_0 added [ 56.440189][ T5214] team0: Port device team_slave_1 added [ 56.455353][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 56.532204][ T5215] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.539475][ T5215] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.546642][ T5215] bridge_slave_0: entered allmulticast mode [ 56.553665][ T5215] bridge_slave_0: entered promiscuous mode [ 56.570783][ T5214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.578044][ T5214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.604082][ T5214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.625795][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.633091][ T5215] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.640419][ T5215] bridge_slave_1: entered allmulticast mode [ 56.646952][ T5215] bridge_slave_1: entered promiscuous mode [ 56.656752][ T5214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.663823][ T5214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.689805][ T5214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.749711][ T5216] chnl_net:caif_netlink_parms(): no params data found [ 56.771090][ T5215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.798250][ T5214] hsr_slave_0: entered promiscuous mode [ 56.804396][ T5214] hsr_slave_1: entered promiscuous mode [ 56.816956][ T5220] chnl_net:caif_netlink_parms(): no params data found [ 56.827073][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.834692][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.841945][ T5229] bridge_slave_0: entered allmulticast mode [ 56.848985][ T5229] bridge_slave_0: entered promiscuous mode [ 56.857824][ T5215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.879794][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.886982][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.894599][ T5229] bridge_slave_1: entered allmulticast mode [ 56.901176][ T5229] bridge_slave_1: entered promiscuous mode [ 56.963744][ T5215] team0: Port device team_slave_0 added [ 56.988535][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.000427][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.014663][ T5215] team0: Port device team_slave_1 added [ 57.031017][ T5216] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.038298][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.045433][ T5216] bridge_slave_0: entered allmulticast mode [ 57.052417][ T5216] bridge_slave_0: entered promiscuous mode [ 57.060246][ T5216] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.067393][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.074595][ T5216] bridge_slave_1: entered allmulticast mode [ 57.081729][ T5216] bridge_slave_1: entered promiscuous mode [ 57.139340][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.146315][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.173457][ T5215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.203446][ T5216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.216286][ T5229] team0: Port device team_slave_0 added [ 57.225605][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.232806][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.259248][ T5215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.286588][ T5216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.297145][ T5229] team0: Port device team_slave_1 added [ 57.329479][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.336619][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.343913][ T5220] bridge_slave_0: entered allmulticast mode [ 57.350657][ T5220] bridge_slave_0: entered promiscuous mode [ 57.358332][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.365466][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.373081][ T5220] bridge_slave_1: entered allmulticast mode [ 57.380017][ T5220] bridge_slave_1: entered promiscuous mode [ 57.433566][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.441272][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.468000][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.484321][ T5215] hsr_slave_0: entered promiscuous mode [ 57.491100][ T5215] hsr_slave_1: entered promiscuous mode [ 57.497163][ T5215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.505056][ T5215] Cannot create hsr debugfs directory [ 57.513031][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.524851][ T5216] team0: Port device team_slave_0 added [ 57.531549][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.538672][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.565950][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.595669][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.614585][ T5216] team0: Port device team_slave_1 added [ 57.673090][ T5229] hsr_slave_0: entered promiscuous mode [ 57.679476][ T5229] hsr_slave_1: entered promiscuous mode [ 57.685443][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.693397][ T5229] Cannot create hsr debugfs directory [ 57.715058][ T5220] team0: Port device team_slave_0 added [ 57.724149][ T5220] team0: Port device team_slave_1 added [ 57.745915][ T5216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.753178][ T5216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.779856][ T5216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.798387][ T5224] Bluetooth: hci0: command tx timeout [ 57.811712][ T5216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.819000][ T5216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.846228][ T5216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.877532][ T5224] Bluetooth: hci1: command tx timeout [ 57.893813][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.902730][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.929436][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.943770][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.951363][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.977661][ T5224] Bluetooth: hci3: command tx timeout [ 57.977756][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.993763][ T5224] Bluetooth: hci4: command tx timeout [ 57.993988][ T5224] Bluetooth: hci2: command tx timeout [ 58.074603][ T5214] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.087162][ T5216] hsr_slave_0: entered promiscuous mode [ 58.093656][ T5216] hsr_slave_1: entered promiscuous mode [ 58.100130][ T5216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.108406][ T5216] Cannot create hsr debugfs directory [ 58.119180][ T5220] hsr_slave_0: entered promiscuous mode [ 58.126192][ T5220] hsr_slave_1: entered promiscuous mode [ 58.132429][ T5220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.140319][ T5220] Cannot create hsr debugfs directory [ 58.149994][ T5214] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.188233][ T5214] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.203546][ T5214] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.393908][ T5215] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.423890][ T5215] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.445057][ T5215] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.466863][ T5229] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.476927][ T5215] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.492882][ T5229] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.503259][ T5229] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.515103][ T5229] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.582710][ T5216] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.596149][ T5216] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.611759][ T5216] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.621684][ T5216] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.694404][ T5220] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.708210][ T5220] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.729725][ T5220] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.740611][ T5220] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.770209][ T5214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.834444][ T5214] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.850284][ T5215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.889111][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.896290][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.924942][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.932107][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.958293][ T5215] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.976090][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.983291][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.996477][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.003698][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.021830][ T5216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.031046][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.055026][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.089086][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.096280][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.123786][ T5214] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.134748][ T5214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.164029][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.171197][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.191915][ T5216] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.223007][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.230157][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.275429][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.282590][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.335055][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.355152][ T5229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.374117][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.415608][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.422804][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.436968][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.444136][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.523565][ T5214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.703393][ T5215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.735799][ T5214] veth0_vlan: entered promiscuous mode [ 59.785334][ T5214] veth1_vlan: entered promiscuous mode [ 59.826842][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.853306][ T5216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.878249][ T5224] Bluetooth: hci0: command tx timeout [ 59.942880][ T5214] veth0_macvtap: entered promiscuous mode [ 59.957654][ T5224] Bluetooth: hci1: command tx timeout [ 59.975972][ T5214] veth1_macvtap: entered promiscuous mode [ 60.031986][ T5216] veth0_vlan: entered promiscuous mode [ 60.037764][ T5224] Bluetooth: hci2: command tx timeout [ 60.037773][ T53] Bluetooth: hci3: command tx timeout [ 60.048807][ T5224] Bluetooth: hci4: command tx timeout [ 60.063907][ T5214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.077129][ T5229] veth0_vlan: entered promiscuous mode [ 60.099703][ T5216] veth1_vlan: entered promiscuous mode [ 60.114618][ T5214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.125345][ T5214] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.138305][ T5214] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.147015][ T5214] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.157007][ T5214] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.180999][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.198302][ T5229] veth1_vlan: entered promiscuous mode [ 60.238750][ T5215] veth0_vlan: entered promiscuous mode [ 60.245183][ T5229] veth0_macvtap: entered promiscuous mode [ 60.265985][ T5229] veth1_macvtap: entered promiscuous mode [ 60.295133][ T5216] veth0_macvtap: entered promiscuous mode [ 60.314092][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.325425][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.336807][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.346001][ T5215] veth1_vlan: entered promiscuous mode [ 60.357967][ T5216] veth1_macvtap: entered promiscuous mode [ 60.372849][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.383545][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.395455][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.411690][ T5229] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.420593][ T5229] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.429768][ T5229] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.438737][ T5229] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.499289][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.512005][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.522663][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.534755][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.546764][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.560222][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.569329][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.605384][ T5215] veth0_macvtap: entered promiscuous mode [ 60.632668][ T5215] veth1_macvtap: entered promiscuous mode [ 60.643339][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.659109][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.670400][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.681710][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.692548][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.704531][ T5220] veth0_vlan: entered promiscuous mode [ 60.713161][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.719083][ T5220] veth1_vlan: entered promiscuous mode [ 60.726465][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.742361][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.753656][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.764109][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.774662][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.784622][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.799188][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.810187][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.822337][ T5216] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.831389][ T5216] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.840746][ T5216] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.849782][ T5216] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.880705][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.891574][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.901536][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.912034][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.922624][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.934686][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.946034][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.969909][ T5214] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.996029][ T5215] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.033054][ T5215] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.050921][ T5215] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.064279][ T5215] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.090171][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.106471][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.119491][ T5220] veth0_macvtap: entered promiscuous mode [ 61.176150][ T5220] veth1_macvtap: entered promiscuous mode [ 61.192400][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.227911][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.305651][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.335146][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.345822][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.361996][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.372737][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.389192][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.406625][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.418035][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.430156][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.458582][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.466422][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.476111][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.492035][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.516504][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.534163][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.545494][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.556431][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.566657][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.578435][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.588332][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.599388][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.610810][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.657013][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.665215][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.686862][ T5220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.732780][ T5220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.748049][ T5220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.756863][ T5220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.806731][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.815867][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.958263][ T53] Bluetooth: hci0: command tx timeout [ 61.969585][ T3242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.989349][ T5300] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.037988][ T53] Bluetooth: hci1: command tx timeout [ 62.050135][ T3242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.117718][ T53] Bluetooth: hci3: command tx timeout [ 62.123409][ T53] Bluetooth: hci4: command tx timeout [ 62.132321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 62.146248][ T53] Bluetooth: hci2: command tx timeout [ 62.271954][ T5300] usb 4-1: Using ep0 maxpacket: 8 [ 62.944615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 62.977882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 63.033358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 63.046973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 63.066772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 63.087278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 63.149183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 63.167507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 63.180347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 63.309328][ T3242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.318494][ T3242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.332858][ T5300] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 63.347264][ T5300] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 63.370217][ T5300] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 63.380369][ T5300] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.393836][ T5300] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 63.403443][ T5300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.714739][ T5300] usb 4-1: GET_CAPABILITIES returned 0 [ 63.721335][ T5300] usbtmc 4-1:16.0: can't read capabilities [ 63.948932][ T5336] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.050928][ T5224] Bluetooth: hci0: command tx timeout [ 65.006157][ T5224] Bluetooth: hci1: command tx timeout [ 65.006216][ T53] Bluetooth: hci2: command tx timeout [ 65.017352][ T5224] Bluetooth: hci4: command tx timeout [ 65.019152][ T5221] Bluetooth: hci3: command tx timeout [ 65.048037][ T5336] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 65.059020][ T5336] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 65.078081][ T5336] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.191359][ T5336] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 65.259189][ T5336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.296380][ T5270] usb 4-1: USB disconnect, device number 2 [ 65.333026][ T5336] usb 5-1: Product: syz [ 65.345176][ T5336] usb 5-1: Manufacturer: syz [ 65.349985][ T5336] usb 5-1: SerialNumber: syz [ 65.598524][ T5336] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 65.729365][ T57] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.807445][ T5270] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.835932][ T9] usb 5-1: USB disconnect, device number 2 [ 65.859929][ T9] usblp0: removed [ 65.941266][ T57] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 65.954193][ T57] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 65.968774][ T5270] usb 2-1: Using ep0 maxpacket: 8 [ 66.061397][ T57] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 66.075390][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.131194][ T5359] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 66.179359][ T5270] usb 2-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 66.290726][ T57] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 66.297116][ T5270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.424143][ T5270] usb 2-1: Product: syz [ 66.528116][ T5270] usb 2-1: Manufacturer: syz [ 66.562599][ T5270] usb 2-1: SerialNumber: syz [ 66.583735][ T5270] usb 2-1: config 0 descriptor?? [ 66.689309][ T5377] warning: `syz.0.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 66.772490][ T57] usb 3-1: USB disconnect, device number 2 [ 67.213427][ T5270] kaweth 2-1:0.0: Firmware present in device. [ 67.436080][ T5270] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 67.551449][ T5270] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 67.604269][ T5270] usb 2-1: USB disconnect, device number 2 [ 67.844873][ T5393] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.300779][ T5408] netlink: 'syz.2.35': attribute type 3 has an invalid length. [ 71.138205][ T57] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 71.644742][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.652119][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.098396][ T57] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 72.114814][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.148326][ T57] usb 3-1: config 0 descriptor?? [ 72.219325][ T57] cp210x 3-1:0.0: cp210x converter detected [ 72.295671][ T5221] Bluetooth: hci4: command 0x0405 tx timeout [ 72.412309][ T5439] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.653406][ T57] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 72.668477][ T57] usb 3-1: cp210x converter now attached to ttyUSB0 [ 73.081121][ T25] usb 3-1: USB disconnect, device number 3 [ 73.384654][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 73.400739][ T25] cp210x 3-1:0.0: device disconnected [ 74.397451][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 74.556997][ T5467] veth0_to_team: entered promiscuous mode [ 74.569384][ T5467] veth0_to_team: entered allmulticast mode [ 74.620668][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 74.645744][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.667645][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.685745][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 74.760532][ T9] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 74.879445][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 74.882792][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.900602][ T9] usb 4-1: config 0 descriptor?? [ 75.913624][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 75.940553][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.955550][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.965767][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.979111][ T25] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 75.988434][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.009517][ T25] usb 2-1: config 0 descriptor?? [ 76.290454][ T5488] netlink: 'syz.0.63': attribute type 16 has an invalid length. [ 76.299256][ T9] nintendo 0003:057E:2009.0001: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.3-1/input0 [ 76.315330][ T5488] netlink: 48 bytes leftover after parsing attributes in process `syz.0.63'. [ 76.326738][ T5488] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.368314][ T9] nintendo 0003:057E:2009.0001: Failed to get joycon info; ret=-38 [ 76.376456][ T9] nintendo 0003:057E:2009.0001: Failed to retrieve controller info; ret=-38 [ 76.406194][ T9] nintendo 0003:057E:2009.0001: Failed to initialize controller; ret=-38 [ 76.472668][ T9] nintendo 0003:057E:2009.0001: probe - fail = -38 [ 76.479766][ T9] nintendo 0003:057E:2009.0001: probe with driver nintendo failed with error -38 [ 76.490041][ T25] cmedia_hs100b 0003:0D8C:0014.0002: unknown main item tag 0x0 [ 76.510073][ T25] cmedia_hs100b 0003:0D8C:0014.0002: unknown main item tag 0x0 [ 76.510284][ T9] usb 4-1: USB disconnect, device number 3 [ 76.524969][ T25] cmedia_hs100b 0003:0D8C:0014.0002: unknown main item tag 0x0 [ 76.541029][ T25] cmedia_hs100b 0003:0D8C:0014.0002: unknown main item tag 0x0 [ 76.605806][ T25] cmedia_hs100b 0003:0D8C:0014.0002: unknown main item tag 0x0 [ 76.630963][ T25] cmedia_hs100b 0003:0D8C:0014.0002: hidraw0: USB HID v0.00 Device [HID 0d8c:0014] on usb-dummy_hcd.1-1/input0 [ 76.695204][ T25] usb 2-1: USB disconnect, device number 3 [ 76.780544][ T8] cfg80211: failed to load regulatory.db [ 78.797159][ T5520] netlink: 'syz.4.75': attribute type 12 has an invalid length. [ 83.228070][ T5582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'. [ 84.199724][ T5595] input: syz1 as /devices/virtual/input/input5 [ 84.866923][ T5595] use of bytesused == 0 is deprecated and will be removed in the future, [ 84.885286][ T5595] use the actual size instead. [ 87.056847][ T5620] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.221859][ T5629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.105'. [ 87.537365][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.732590][ T8] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice=cc.97 [ 87.765527][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.787639][ T8] usb 1-1: config 0 descriptor?? [ 88.532080][ T5268] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.540235][ T8] sisusb 1-1:0.0: Invalid USB2VGA device [ 88.546563][ T8] sisusb 1-1:0.0: probe with driver sisusb failed with error -22 [ 88.776456][ T5268] usb 3-1: Using ep0 maxpacket: 8 [ 88.804169][ T5268] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.814325][ T5268] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.824211][ T5268] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.834395][ T5268] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.847492][ T5268] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.857122][ T5268] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.097953][ T5268] usb 3-1: GET_CAPABILITIES returned 0 [ 89.103502][ T5268] usbtmc 3-1:16.0: can't read capabilities [ 90.320319][ T5268] usb 3-1: USB disconnect, device number 4 [ 91.130386][ T8] usb 1-1: USB disconnect, device number 2 [ 92.413837][ T5688] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 92.556512][ T5688] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 97.278237][ T5724] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 98.720240][ T5760] netlink: 68 bytes leftover after parsing attributes in process `syz.4.150'. [ 100.756765][ T57] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.099313][ T57] usb 1-1: Using ep0 maxpacket: 8 [ 101.108088][ T57] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.153633][ T57] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.167800][ T57] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.216964][ T57] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.294041][ T57] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.314370][ T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.637588][ T57] usb 1-1: GET_CAPABILITIES returned 0 [ 101.643130][ T57] usbtmc 1-1:16.0: can't read capabilities [ 102.769315][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.960082][ T57] usb 1-1: USB disconnect, device number 3 [ 103.807867][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 103.818824][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 103.830811][ T8] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 103.841196][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.849610][ T8] usb 2-1: Product: syz [ 103.853806][ T8] usb 2-1: Manufacturer: syz [ 103.873558][ T8] usb 2-1: SerialNumber: syz [ 103.898896][ T8] usb 2-1: config 0 descriptor?? [ 103.907048][ T5814] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 103.919213][ T8] hub 2-1:0.0: bad descriptor, ignoring hub [ 103.925186][ T8] hub 2-1:0.0: probe with driver hub failed with error -5 [ 104.056800][ T8] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 104.574111][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 104.583479][ T5270] usb 2-1: USB disconnect, device number 4 [ 104.638644][ T5843] netlink: 2 bytes leftover after parsing attributes in process `syz.3.177'. [ 104.794360][ T5853] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.555861][ T5868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'. [ 106.047603][ T5878] capability: warning: `syz.4.190' uses deprecated v2 capabilities in a way that may be insecure [ 106.103004][ T5882] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 106.162121][ T5882] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 107.144427][ T5910] Zero length message leads to an empty skb [ 107.822930][ T5924] input: syz1 as /devices/virtual/input/input8 [ 111.047268][ T5336] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.677484][ T5336] usb 2-1: Using ep0 maxpacket: 16 [ 111.682298][ T5964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.217'. [ 111.703908][ T5336] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.715752][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.733483][ T5336] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.734127][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.770725][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.770990][ T5336] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 111.791763][ T5336] usb 2-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 111.801783][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.805326][ T5336] usb 2-1: config 0 interface 0 has no altsetting 0 [ 111.821676][ T5336] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 111.830797][ T5336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.835669][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.860427][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.861204][ T5336] usb 2-1: config 0 descriptor?? [ 111.880940][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.900983][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.966862][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.991189][ T5964] batadv_slave_0: entered promiscuous mode [ 112.312623][ T5336] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5010.0003/input/input9 [ 112.355110][ T5979] vlan2: entered promiscuous mode [ 112.385493][ T5979] bond0: entered promiscuous mode [ 112.397418][ T5979] bond_slave_0: entered promiscuous mode [ 112.404533][ T5979] bond_slave_1: entered promiscuous mode [ 112.416907][ T5979] bond0: left promiscuous mode [ 112.421903][ T5979] bond_slave_0: left promiscuous mode [ 112.439794][ T5979] bond_slave_1: left promiscuous mode [ 112.485179][ T5336] kye 0003:0458:5010.0003: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 112.643812][ T5336] usb 2-1: USB disconnect, device number 5 [ 114.384693][ T6016] vivid-000: disconnect [ 114.398921][ T6015] vivid-000: reconnect [ 114.588205][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 115.276155][ T6043] gtp0: entered promiscuous mode [ 115.282938][ T6043] gtp0: entered allmulticast mode [ 117.418586][ T5221] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 118.877338][ T5221] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 118.885421][ T5221] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 118.896125][ T5221] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 118.903837][ T5221] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 118.911263][ T5221] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.455305][ T6065] chnl_net:caif_netlink_parms(): no params data found [ 120.660442][ T6102] input: syz1 as /devices/virtual/input/input10 [ 120.910464][ T6065] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.944707][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.989297][ T6065] bridge_slave_0: entered allmulticast mode [ 120.995820][ T6065] bridge_slave_0: entered promiscuous mode [ 121.062409][ T6065] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.069815][ T6065] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.077435][ T6065] bridge_slave_1: entered allmulticast mode [ 121.083149][ T5233] Bluetooth: hci5: command tx timeout [ 121.084363][ T6065] bridge_slave_1: entered promiscuous mode [ 121.252453][ T6065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.294946][ T6065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.402341][ T6065] team0: Port device team_slave_0 added [ 121.421614][ T6065] team0: Port device team_slave_1 added [ 121.612312][ T6065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.763227][ T6065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.789151][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.828509][ T6065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.032739][ T6065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.099148][ T6065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.125382][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.291463][ T6065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.214342][ T5233] Bluetooth: hci5: command tx timeout [ 123.234720][ T5221] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.251687][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.263459][ T5221] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.310334][ T5221] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.321713][ T5221] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 123.329375][ T5221] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.387479][ T6125] syz.4.270 uses obsolete (PF_INET,SOCK_PACKET) [ 123.507113][ T6065] hsr_slave_0: entered promiscuous mode [ 123.516923][ T6065] hsr_slave_1: entered promiscuous mode [ 123.550988][ T6065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.615772][ T6065] Cannot create hsr debugfs directory [ 123.720443][ T29] audit: type=1326 audit(1728084083.101:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6130 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593d77dff9 code=0x7ffc0000 [ 123.746219][ T29] audit: type=1326 audit(1728084083.101:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6130 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593d77dff9 code=0x7ffc0000 [ 123.779535][ T29] audit: type=1326 audit(1728084083.101:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6130 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f593d77dff9 code=0x7ffc0000 [ 123.804743][ T29] audit: type=1326 audit(1728084083.101:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6130 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593d77dff9 code=0x7ffc0000 [ 123.839350][ T29] audit: type=1326 audit(1728084083.101:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6130 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f593d77dff9 code=0x7ffc0000 [ 123.864580][ T29] audit: type=1326 audit(1728084083.101:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6130 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593d77dff9 code=0x7ffc0000 [ 123.893831][ T29] audit: type=1326 audit(1728084083.101:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6130 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f593d77dff9 code=0x7ffc0000 [ 123.919244][ T29] audit: type=1326 audit(1728084083.101:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6130 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593d77dff9 code=0x7ffc0000 [ 123.945286][ T29] audit: type=1326 audit(1728084083.101:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6130 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593d77dff9 code=0x7ffc0000 [ 123.970702][ T29] audit: type=1326 audit(1728084083.101:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6130 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f593d77dff9 code=0x7ffc0000 [ 124.132491][ T6137] Illegal XDP return value 4294967274 on prog (id 59) dev N/A, expect packet loss! [ 125.258852][ T5233] Bluetooth: hci5: command tx timeout [ 125.605035][ T6149] netlink: 'syz.1.278': attribute type 2 has an invalid length. [ 125.641729][ T5233] Bluetooth: hci4: command tx timeout [ 125.824370][ T6065] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.327396][ T5233] Bluetooth: hci5: command tx timeout [ 127.408556][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.464070][ T6065] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.581561][ T6121] chnl_net:caif_netlink_parms(): no params data found [ 127.720869][ T5233] Bluetooth: hci4: command tx timeout [ 127.753137][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.880250][ T6065] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.910465][ T6121] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.927565][ T6121] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.944911][ T6121] bridge_slave_0: entered allmulticast mode [ 127.956114][ T6121] bridge_slave_0: entered promiscuous mode [ 127.980419][ T6121] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.997748][ T6121] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.010348][ T6121] bridge_slave_1: entered allmulticast mode [ 128.025374][ T6121] bridge_slave_1: entered promiscuous mode [ 128.092051][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.161913][ T6065] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.246691][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.271058][ T6121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.298945][ T6121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.447618][ T6121] team0: Port device team_slave_0 added [ 128.482532][ T6121] team0: Port device team_slave_1 added [ 128.633914][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 128.667934][ T6121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.675585][ T6121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.703667][ T6121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.716274][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 128.727094][ T6121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.742358][ T6121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.772835][ T6121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.371681][ T6065] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 129.399466][ T6065] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 129.420680][ T6206] tipc: Started in network mode [ 129.428389][ T6206] tipc: Node identity 7f000001, cluster identity 4711 [ 129.436726][ T6206] tipc: Enabled bearer , priority 10 [ 129.484033][ T12] bridge_slave_1: left allmulticast mode [ 129.492213][ T12] bridge_slave_1: left promiscuous mode [ 129.499714][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.512762][ T12] bridge_slave_0: left allmulticast mode [ 129.519615][ T12] bridge_slave_0: left promiscuous mode [ 129.525287][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.538212][ T12] bridge_slave_1: left allmulticast mode [ 129.544132][ T12] bridge_slave_1: left promiscuous mode [ 129.551378][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.562088][ T12] bridge_slave_0: left allmulticast mode [ 129.568180][ T12] bridge_slave_0: left promiscuous mode [ 129.574805][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.828008][ T5233] Bluetooth: hci4: command tx timeout [ 131.617389][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 131.777304][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 131.794714][ T8] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.814950][ T8] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.836733][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 131.853156][ T8] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 131.863819][ T8] usb 5-1: Product: syz [ 131.875609][ T8] usb 5-1: Manufacturer: syz [ 131.880404][ T5233] Bluetooth: hci4: command tx timeout [ 131.905592][ T8] hub 5-1:4.0: USB hub found [ 132.122464][ T8] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 132.552913][ T8] usb 5-1: USB disconnect, device number 3 [ 132.741953][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.760901][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.780159][ T12] bond0 (unregistering): Released all slaves [ 133.107290][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.113627][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.157633][ T57] tipc: Node number set to 2130706433 [ 133.213789][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.268270][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.343304][ T12] bond0 (unregistering): Released all slaves [ 133.392905][ T6065] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 133.423417][ T6065] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 133.540709][ T6121] hsr_slave_0: entered promiscuous mode [ 133.585269][ T6121] hsr_slave_1: entered promiscuous mode [ 133.726697][ T6121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.768608][ T6121] Cannot create hsr debugfs directory [ 144.390048][ T5221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.400211][ T5221] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.409221][ T5221] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 144.417341][ T5221] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 144.425352][ T5221] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 144.434171][ T5221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.389753][ T5221] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.406653][ T5221] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.415011][ T5221] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.426400][ T5221] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.434697][ T5221] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.445420][ T5221] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.517843][ T5233] Bluetooth: hci2: command tx timeout [ 148.180315][ T6242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.303'. [ 148.527369][ T5233] Bluetooth: hci6: command tx timeout [ 148.598128][ T5233] Bluetooth: hci2: command tx timeout [ 150.599226][ T5233] Bluetooth: hci6: command tx timeout [ 150.677697][ T5233] Bluetooth: hci2: command tx timeout [ 152.317181][ C1] sched: DL replenish lagged too much [ 152.677623][ T5233] Bluetooth: hci6: command tx timeout [ 152.757504][ T5233] Bluetooth: hci2: command tx timeout [ 154.757452][ T5233] Bluetooth: hci6: command tx timeout [ 158.932410][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.941821][ T5221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.951923][ T5221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.960006][ T5221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.969366][ T5221] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 158.982702][ T5221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.077711][ T5233] Bluetooth: hci0: command tx timeout [ 163.157682][ T5233] Bluetooth: hci0: command tx timeout [ 165.237428][ T5233] Bluetooth: hci0: command tx timeout [ 167.317549][ T5233] Bluetooth: hci0: command tx timeout [ 178.486693][ T5221] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.496296][ T5221] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.504399][ T5221] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.512401][ T5221] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.523134][ T5221] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 178.530622][ T5221] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.602747][ T5233] Bluetooth: hci3: command tx timeout [ 181.243408][ T5233] Bluetooth: hci1: command 0x0406 tx timeout [ 182.408743][ T5233] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 182.418284][ T5233] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 182.426217][ T5233] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 182.447790][ T5233] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 182.456410][ T5233] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 182.464364][ T5233] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 182.677398][ T5233] Bluetooth: hci3: command tx timeout [ 184.517431][ T5233] Bluetooth: hci7: command tx timeout [ 184.757367][ T5233] Bluetooth: hci3: command tx timeout [ 186.597349][ T5233] Bluetooth: hci7: command tx timeout [ 186.837520][ T5233] Bluetooth: hci3: command tx timeout [ 188.677460][ T5233] Bluetooth: hci7: command tx timeout [ 190.757375][ T5233] Bluetooth: hci7: command tx timeout [ 194.525184][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.531889][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.027848][ T5221] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 206.036718][ T5221] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 206.045058][ T5221] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 206.057586][ T5221] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 206.067629][ T5221] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 206.076256][ T5221] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 206.909397][ T5233] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 206.928967][ T5233] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 206.937308][ T5233] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 206.948530][ T5233] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 206.957828][ T5233] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 206.965121][ T5233] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 208.117477][ T5233] Bluetooth: hci8: command tx timeout [ 208.997539][ T5233] Bluetooth: hci9: command tx timeout [ 210.197445][ T5233] Bluetooth: hci8: command tx timeout [ 211.077560][ T5233] Bluetooth: hci9: command tx timeout [ 212.285118][ T5233] Bluetooth: hci8: command tx timeout [ 213.157499][ T5233] Bluetooth: hci9: command tx timeout [ 214.357661][ T5233] Bluetooth: hci8: command tx timeout [ 215.237252][ T5233] Bluetooth: hci9: command tx timeout [ 219.666692][ T5221] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 219.678334][ T5221] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 219.686476][ T5221] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 219.695429][ T5221] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 219.703220][ T5221] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 219.712873][ T5221] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 221.805226][ T5221] Bluetooth: hci10: command tx timeout [ 223.877489][ T5221] Bluetooth: hci10: command tx timeout [ 225.958149][ T5221] Bluetooth: hci10: command tx timeout [ 228.037255][ T5221] Bluetooth: hci10: command tx timeout [ 238.949706][ T5233] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 238.958654][ T5233] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 238.966852][ T5233] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 238.988663][ T5233] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 238.996424][ T5233] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 239.004233][ T5233] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 241.077362][ T5233] Bluetooth: hci11: command tx timeout [ 242.691514][ T5233] Bluetooth: hci5: command 0x0406 tx timeout [ 243.073721][ T5233] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 243.083912][ T5233] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 243.092626][ T5233] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 243.108128][ T5233] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 243.115921][ T5233] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 243.123800][ T5233] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 243.157594][ T5233] Bluetooth: hci11: command tx timeout [ 245.157671][ T5233] Bluetooth: hci12: command tx timeout [ 245.237392][ T5233] Bluetooth: hci11: command tx timeout [ 247.237450][ T5233] Bluetooth: hci12: command tx timeout [ 247.317488][ T5233] Bluetooth: hci11: command tx timeout [ 247.803053][ T5233] Bluetooth: hci4: command 0x0406 tx timeout [ 249.317770][ T5221] Bluetooth: hci12: command tx timeout [ 251.397470][ T5221] Bluetooth: hci12: command tx timeout [ 255.961190][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.967610][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.527799][ T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 266.538944][ T53] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 266.546907][ T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 266.554948][ T53] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 266.562773][ T53] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 266.570223][ T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 267.006417][ T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 267.015637][ T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 267.023964][ T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 267.038722][ T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 267.046803][ T53] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 267.054760][ T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 268.287219][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 268.597518][ T5233] Bluetooth: hci13: command tx timeout [ 269.079540][ T5233] Bluetooth: hci14: command tx timeout [ 270.677483][ T5233] Bluetooth: hci13: command tx timeout [ 271.157419][ T5233] Bluetooth: hci14: command tx timeout [ 272.757228][ T5233] Bluetooth: hci13: command tx timeout [ 273.237390][ T5221] Bluetooth: hci14: command tx timeout [ 273.402882][ T5233] Bluetooth: hci6: command 0x0406 tx timeout [ 274.845129][ T53] Bluetooth: hci13: command tx timeout [ 275.317241][ T53] Bluetooth: hci14: command tx timeout [ 280.277626][ T5233] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 280.290222][ T5233] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 280.299406][ T5233] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 280.307544][ T5233] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 280.315255][ T5233] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 280.322787][ T5233] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 282.357475][ T5233] Bluetooth: hci15: command tx timeout [ 283.646839][ T5233] Bluetooth: hci0: command 0x0406 tx timeout [ 284.437417][ T53] Bluetooth: hci15: command tx timeout [ 286.517469][ T53] Bluetooth: hci15: command tx timeout [ 288.597782][ T53] Bluetooth: hci15: command tx timeout [ 296.284567][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 296.295007][ T30] Not tainted 6.12.0-rc1-syzkaller-00165-g360c1f1f24c6 #0 [ 296.327158][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.367249][ T30] task:kworker/u8:1 state:D stack:21904 pid:12 tgid:12 ppid:2 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 296.477135][ T30] Workqueue: netns cleanup_net [ 296.482007][ T30] Call Trace: [ 296.485307][ T30] [ 296.562260][ T30] __schedule+0x1843/0x4ae0 [ 296.566861][ T30] ? __pfx___schedule+0x10/0x10 [ 296.621722][ T30] ? __pfx_lock_release+0x10/0x10 [ 296.626835][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 296.692718][ T30] ? kthread_data+0x52/0xd0 [ 296.714926][ T30] ? schedule+0x90/0x320 [ 296.732277][ T30] ? wq_worker_sleeping+0x66/0x240 [ 296.773509][ T30] ? schedule+0x90/0x320 [ 296.785445][ T30] schedule+0x14b/0x320 [ 296.817261][ T30] schedule_preempt_disabled+0x13/0x30 [ 296.822963][ T30] __mutex_lock+0x6a7/0xd70 [ 296.861182][ T30] ? __mutex_lock+0x52a/0xd70 [ 296.865927][ T30] ? wiphy_unregister+0x236/0xb00 [ 296.925291][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 296.955423][ T30] ? __up_read+0x2c2/0x6b0 [ 296.966748][ T30] ? __pfx___up_read+0x10/0x10 [ 296.997553][ T30] wiphy_unregister+0x236/0xb00 [ 297.002473][ T30] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 297.031652][ T30] ? __pfx_wiphy_unregister+0x10/0x10 [ 297.067349][ T30] ? ieee80211_unregister_hw+0x144/0x2c0 [ 297.073063][ T30] ? ieee80211_unregister_hw+0x144/0x2c0 [ 297.101205][ T30] ieee80211_unregister_hw+0x1e2/0x2c0 [ 297.106825][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 297.146970][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 297.171350][ T30] hwsim_exit_net+0x5c1/0x670 [ 297.176108][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 297.217181][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 297.223071][ T30] cleanup_net+0x802/0xcc0 [ 297.265366][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 297.278670][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 297.284108][ T30] ? process_scheduled_works+0x976/0x1850 [ 297.297731][ T30] process_scheduled_works+0xa63/0x1850 [ 297.303377][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 297.317455][ T30] ? assign_work+0x364/0x3d0 [ 297.322111][ T30] worker_thread+0x870/0xd30 [ 297.326745][ T30] ? __kthread_parkme+0x169/0x1d0 [ 297.342345][ T30] ? __pfx_worker_thread+0x10/0x10 [ 297.353523][ T30] kthread+0x2f0/0x390 [ 297.361666][ T30] ? __pfx_worker_thread+0x10/0x10 [ 297.366826][ T30] ? __pfx_kthread+0x10/0x10 [ 297.376391][ T30] ret_from_fork+0x4b/0x80 [ 297.384574][ T30] ? __pfx_kthread+0x10/0x10 [ 297.394077][ T30] ret_from_fork_asm+0x1a/0x30 [ 297.403765][ T30] [ 297.444838][ T30] INFO: task kworker/u8:2:35 blocked for more than 144 seconds. [ 297.474229][ T30] Not tainted 6.12.0-rc1-syzkaller-00165-g360c1f1f24c6 #0 [ 297.496389][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 297.511239][ T30] task:kworker/u8:2 state:D stack:19112 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 297.525298][ T30] Workqueue: events_unbound linkwatch_event [ 297.535928][ T30] Call Trace: [ 297.543430][ T30] [ 297.546403][ T30] __schedule+0x1843/0x4ae0 [ 297.557457][ T30] ? __pfx___schedule+0x10/0x10 [ 297.562529][ T30] ? __pfx_lock_release+0x10/0x10 [ 297.586248][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 297.593213][ T30] ? kthread_data+0x52/0xd0 [ 297.606184][ T30] ? schedule+0x90/0x320 [ 297.610848][ T30] ? wq_worker_sleeping+0x66/0x240 [ 297.615998][ T30] ? schedule+0x90/0x320 [ 297.627126][ T30] schedule+0x14b/0x320 [ 297.631331][ T30] schedule_preempt_disabled+0x13/0x30 [ 297.636811][ T30] __mutex_lock+0x6a7/0xd70 [ 297.652180][ T30] ? __mutex_lock+0x52a/0xd70 [ 297.656904][ T30] ? linkwatch_event+0xe/0x60 [ 297.665270][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 297.675973][ T30] ? process_scheduled_works+0x976/0x1850 [ 297.684707][ T30] linkwatch_event+0xe/0x60 [ 297.696744][ T30] process_scheduled_works+0xa63/0x1850 [ 297.705008][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 297.717284][ T30] ? assign_work+0x364/0x3d0 [ 297.721925][ T30] worker_thread+0x870/0xd30 [ 297.726549][ T30] ? __kthread_parkme+0x169/0x1d0 [ 297.741529][ T30] ? __pfx_worker_thread+0x10/0x10 [ 297.746694][ T30] kthread+0x2f0/0x390 [ 297.757163][ T30] ? __pfx_worker_thread+0x10/0x10 [ 297.762331][ T30] ? __pfx_kthread+0x10/0x10 [ 297.775172][ T30] ret_from_fork+0x4b/0x80 [ 297.781824][ T30] ? __pfx_kthread+0x10/0x10 [ 297.786451][ T30] ret_from_fork_asm+0x1a/0x30 [ 297.797191][ T30] [ 297.837373][ T30] INFO: task kworker/u8:5:148 blocked for more than 144 seconds. [ 297.845150][ T30] Not tainted 6.12.0-rc1-syzkaller-00165-g360c1f1f24c6 #0 [ 297.916611][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 297.934874][ T30] task:kworker/u8:5 state:D stack:20560 pid:148 tgid:148 ppid:2 flags:0x00004000 [ 297.947902][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 297.954736][ T30] Call Trace: [ 297.965222][ T30] [ 297.969620][ T30] __schedule+0x1843/0x4ae0 [ 297.974457][ T30] ? __pfx___schedule+0x10/0x10 [ 297.987680][ T30] ? __pfx_lock_release+0x10/0x10 [ 297.992764][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 298.006614][ T30] ? kthread_data+0x52/0xd0 [ 298.011262][ T30] ? schedule+0x90/0x320 [ 298.015535][ T30] ? wq_worker_sleeping+0x66/0x240 [ 298.029551][ T30] ? schedule+0x90/0x320 [ 298.033850][ T30] schedule+0x14b/0x320 [ 298.048998][ T30] schedule_preempt_disabled+0x13/0x30 [ 298.054513][ T30] __mutex_lock+0x6a7/0xd70 [ 298.067474][ T30] ? mark_lock+0x9a/0x360 [ 298.072430][ T30] ? __mutex_lock+0x52a/0xd70 [ 298.085563][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 298.092143][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 298.104295][ T30] addrconf_dad_work+0xd0/0x16f0 [ 298.111058][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 298.116559][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 298.132704][ T30] ? process_scheduled_works+0x976/0x1850 [ 298.141463][ T30] process_scheduled_works+0xa63/0x1850 [ 298.153998][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 298.162044][ T30] ? assign_work+0x364/0x3d0 [ 298.166681][ T30] worker_thread+0x870/0xd30 [ 298.177222][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 298.186232][ T30] ? __kthread_parkme+0x169/0x1d0 [ 298.198140][ T30] ? __pfx_worker_thread+0x10/0x10 [ 298.203313][ T30] kthread+0x2f0/0x390 [ 298.214832][ T30] ? __pfx_worker_thread+0x10/0x10 [ 298.220471][ T30] ? __pfx_kthread+0x10/0x10 [ 298.225105][ T30] ret_from_fork+0x4b/0x80 [ 298.237197][ T30] ? __pfx_kthread+0x10/0x10 [ 298.241845][ T30] ret_from_fork_asm+0x1a/0x30 [ 298.246649][ T30] [ 298.265638][ T30] INFO: task syz.1.303:6243 blocked for more than 145 seconds. [ 298.335155][ T30] Not tainted 6.12.0-rc1-syzkaller-00165-g360c1f1f24c6 #0 [ 298.386472][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.437138][ T30] task:syz.1.303 state:D stack:24024 pid:6243 tgid:6241 ppid:5214 flags:0x00004002 [ 298.494741][ T30] Call Trace: [ 298.507127][ T30] [ 298.510112][ T30] __schedule+0x1843/0x4ae0 [ 298.514661][ T30] ? __pfx___schedule+0x10/0x10 [ 298.567238][ T30] ? __pfx_lock_release+0x10/0x10 [ 298.572339][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 298.667169][ T30] ? schedule+0x90/0x320 [ 298.691916][ T30] schedule+0x14b/0x320 [ 298.696153][ T30] schedule_preempt_disabled+0x13/0x30 [ 298.757139][ T30] __mutex_lock+0x6a7/0xd70 [ 298.761712][ T30] ? __mutex_lock+0x52a/0xd70 [ 298.766416][ T30] ? tun_chr_close+0x3b/0x1b0 [ 298.834497][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 298.855424][ T30] ? __pfx_call_rcu+0x10/0x10 [ 298.864883][ T30] tun_chr_close+0x3b/0x1b0 [ 298.877218][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 298.882390][ T30] __fput+0x23f/0x880 [ 298.886493][ T30] task_work_run+0x24f/0x310 [ 298.900129][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 298.905498][ T30] ? __pfx_task_work_run+0x10/0x10 [ 298.920601][ T30] ? do_exit+0xa2a/0x28e0 [ 298.924984][ T30] ? kmem_cache_free+0x1a2/0x420 [ 298.936013][ T30] ? do_exit+0xa2a/0x28e0 [ 298.944042][ T30] do_exit+0xa2f/0x28e0 [ 298.954092][ T30] ? __pfx_do_exit+0x10/0x10 [ 298.961347][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 298.966767][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 298.979847][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 298.986432][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 299.004898][ T30] do_group_exit+0x207/0x2c0 [ 299.012253][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 299.023717][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 299.033640][ T30] get_signal+0x16a3/0x1740 [ 299.044048][ T30] ? __pfx_get_signal+0x10/0x10 [ 299.051620][ T30] arch_do_signal_or_restart+0x96/0x860 [ 299.062988][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 299.071793][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 299.087272][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 299.093055][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 299.107517][ T30] do_syscall_64+0x100/0x230 [ 299.112168][ T30] ? clear_bhb_loop+0x35/0x90 [ 299.116882][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.133296][ T30] RIP: 0033:0x7f88a417dff9 [ 299.139708][ T30] RSP: 002b:00007f88a4f32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.152986][ T30] RAX: 0000000000000024 RBX: 00007f88a4336058 RCX: 00007f88a417dff9 [ 299.168800][ T30] RDX: 0000000000000000 RSI: 0000000020004380 RDI: 0000000000000003 [ 299.181839][ T30] RBP: 00007f88a41f0296 R08: 0000000000000000 R09: 0000000000000000 [ 299.194787][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.206767][ T30] R13: 0000000000000001 R14: 00007f88a4336058 R15: 00007ffd3e41aca8 [ 299.220835][ T30] [ 299.246276][ T30] [ 299.246276][ T30] Showing all locks held in the system: [ 299.263051][ T30] 3 locks held by kworker/0:0/8: [ 299.270983][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 299.302757][ T30] #1: ffffc900000d7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 299.317290][ T30] #2: ffffffff8fcbf548 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 299.326943][ T30] 4 locks held by kworker/u8:1/12: [ 299.339831][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 299.362642][ T30] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 299.377698][ T30] #2: ffffffff8fcb2a50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 299.394959][ T30] #3: ffffffff8fcbf548 (rtnl_mutex){+.+.}-{3:3}, at: wiphy_unregister+0x236/0xb00 [ 299.408848][ T30] 1 lock held by khungtaskd/30: [ 299.413746][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 299.432008][ T30] 3 locks held by kworker/u8:2/35: [ 299.439745][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 299.457120][ T30] #1: ffffc90000ab7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 299.475452][ T30] #2: ffffffff8fcbf548 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 299.485642][ T30] 3 locks held by kworker/u8:5/148: [ 299.498487][ T30] #0: ffff88814bd0c148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 299.517621][ T30] #1: ffffc90002e17d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 299.538643][ T30] #2: ffffffff8fcbf548 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 299.555664][ T30] 6 locks held by kworker/1:2/938: [ 299.561248][ T30] 2 locks held by getty/4968: [ 299.565950][ T30] #0: ffff888032e8a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 299.586314][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 299.598270][ T30] 3 locks held by syz-executor/6065: [ 299.603593][ T30] #0: ffff888027878d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 299.622152][ T30] #1: ffff888027878078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 299.636471][ T30] #2: ffffffff8fe2bde8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 299.662966][ T30] 7 locks held by syz-executor/6121: [ 299.670930][ T30] #0: ffff88802ea3e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 299.687199][ T30] #1: ffff888032bf4088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 299.700534][ T30] #2: ffff8880280e75a8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 299.716422][ T30] #3: ffffffff8f55d648 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 299.732994][ T30] #4: ffff88805e1b60e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 299.748656][ T30] #5: ffff88805e1b7250 (&devlink->lock_key#4){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 299.766493][ T30] #6: ffffffff8fcbf548 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 299.779515][ T30] 1 lock held by syz.0.301/6234: [ 299.784498][ T30] #0: ffffffff8fcbf548 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 299.803728][ T30] 1 lock held by syz.1.303/6243: [ 299.811436][ T30] #0: ffffffff8fcbf548 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 299.828261][ T30] 4 locks held by syz-executor/6249: [ 299.833584][ T30] #0: ffff888079de4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 299.851929][ T30] #1: ffff888079de4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 299.869744][ T30] #2: ffffffff8fe2bde8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 299.884963][ T30] #3: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 299.900430][ T30] 3 locks held by syz-executor/6252: [ 299.905770][ T30] #0: ffff888032a50d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 299.926101][ T30] #1: ffff888032a50078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 299.936766][ T30] #2: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 299.956008][ T30] 2 locks held by syz.4.307/6256: [ 299.964363][ T30] #0: ffffffff8fcb2a50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 299.977141][ T30] #1: ffffffff8fcbf548 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 299.986710][ T30] 1 lock held by syz-executor/6260: [ 300.001075][ T30] #0: ffffffff8fcbf548 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.016625][ T30] 1 lock held by syz-executor/6265: [ 300.025972][ T30] #0: ffffffff8fcbf548 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.040627][ T30] 1 lock held by syz-executor/6270: [ 300.045865][ T30] #0: ffffffff8fcbf548 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.065698][ T30] 1 lock held by syz-executor/6273: [ 300.071574][ T30] #0: ffffffff8fcbf548 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.087594][ T30] 1 lock held by syz-executor/6279: [ 300.092836][ T30] #0: ffffffff8fcbf548 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.112771][ T30] 1 lock held by syz-executor/6282: [ 300.127297][ T30] #0: ffffffff8fcbf548 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.136796][ T30] 1 lock held by syz-executor/6287: [ 300.149806][ T30] #0: ffffffff8fcbf548 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.166004][ T30] 1 lock held by syz-executor/6293: [ 300.175296][ T30] #0: ffffffff8fcbf548 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.189805][ T30] 1 lock held by syz-executor/6298: [ 300.195045][ T30] #0: ffffffff8fcbf548 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.215336][ T30] 1 lock held by syz-executor/6304: [ 300.225181][ T30] #0: ffffffff8fcbf548 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.242932][ T30] 1 lock held by syz-executor/6308: [ 300.252687][ T30] #0: ffffffff8fcbf548 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.285042][ T30] [ 300.307194][ T30] ============================================= [ 300.307194][ T30] [ 300.325012][ T30] NMI backtrace for cpu 0 [ 300.329401][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00165-g360c1f1f24c6 #0 [ 300.340109][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 300.350244][ T30] Call Trace: [ 300.353538][ T30] [ 300.356490][ T30] dump_stack_lvl+0x241/0x360 [ 300.361201][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.366427][ T30] ? __pfx__printk+0x10/0x10 [ 300.371058][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 300.376025][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 300.381593][ T30] ? _printk+0xd5/0x120 [ 300.385775][ T30] ? __pfx__printk+0x10/0x10 [ 300.390394][ T30] ? __wake_up_klogd+0xcc/0x110 [ 300.395265][ T30] ? __pfx__printk+0x10/0x10 [ 300.399888][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 300.404934][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 300.410950][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 300.416953][ T30] watchdog+0xff4/0x1040 [ 300.421219][ T30] ? watchdog+0x1ea/0x1040 [ 300.425668][ T30] ? __pfx_watchdog+0x10/0x10 [ 300.430370][ T30] kthread+0x2f0/0x390 [ 300.434456][ T30] ? __pfx_watchdog+0x10/0x10 [ 300.439152][ T30] ? __pfx_kthread+0x10/0x10 [ 300.443760][ T30] ret_from_fork+0x4b/0x80 [ 300.448198][ T30] ? __pfx_kthread+0x10/0x10 [ 300.452809][ T30] ret_from_fork_asm+0x1a/0x30 [ 300.457604][ T30] [ 300.461437][ T30] Sending NMI from CPU 0 to CPUs 1: [ 300.466681][ C1] NMI backtrace for cpu 1 [ 300.466694][ C1] CPU: 1 UID: 0 PID: 938 Comm: kworker/1:2 Not tainted 6.12.0-rc1-syzkaller-00165-g360c1f1f24c6 #0 [ 300.466712][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 300.466722][ C1] Workqueue: events nsim_dev_trap_report_work [ 300.466746][ C1] RIP: 0010:unwind_next_frame+0x1b4/0x22d0 [ 300.466763][ C1] Code: f8 82 49 91 48 c7 c1 fc 82 75 91 48 29 c1 48 c1 e9 02 31 d2 80 3d 63 27 ef 0c 00 0f 45 d1 8d 42 ff 44 39 f0 0f 86 55 18 00 00 <44> 89 f0 48 8d 1c 85 f8 82 49 91 48 89 d8 48 c1 e8 03 42 0f b6 04 [ 300.466781][ C1] RSP: 0018:ffffc90000a185f0 EFLAGS: 00000216 [ 300.466794][ C1] RAX: 00000000000b0000 RBX: ffffc90000a18708 RCX: 00000000000b0001 [ 300.466805][ C1] RDX: 00000000000b0001 RSI: ffffffff81fb2e49 RDI: 0000000000000001 [ 300.466815][ C1] RBP: ffffc90000a186f5 R08: 0000000000000002 R09: ffffc90000a187b0 [ 300.466826][ C1] R10: ffffc90000a18710 R11: ffffffff81809020 R12: dffffc0000000000 [ 300.466838][ C1] R13: ffffc90000a186c0 R14: 000000000000fb2e R15: ffffffff81fb2e48 [ 300.466849][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 300.466862][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.466873][ C1] CR2: 00007ffe42f10f00 CR3: 000000000e734000 CR4: 00000000003526f0 [ 300.466887][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 300.466896][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 300.466906][ C1] Call Trace: [ 300.466911][ C1] [ 300.466919][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 300.466936][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 300.466958][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 300.466974][ C1] ? nmi_handle+0x2a/0x5a0 [ 300.466996][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 300.467014][ C1] ? nmi_handle+0x14f/0x5a0 [ 300.467029][ C1] ? nmi_handle+0x2a/0x5a0 [ 300.467044][ C1] ? unwind_next_frame+0x1b4/0x22d0 [ 300.467057][ C1] ? default_do_nmi+0x63/0x160 [ 300.467078][ C1] ? exc_nmi+0x123/0x1f0 [ 300.467093][ C1] ? end_repeat_nmi+0xf/0x53 [ 300.467112][ C1] ? __kasan_slab_free+0x58/0x70 [ 300.467130][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 300.467147][ C1] ? __kasan_slab_free+0x59/0x70 [ 300.467165][ C1] ? unwind_next_frame+0x1b4/0x22d0 [ 300.467179][ C1] ? unwind_next_frame+0x1b4/0x22d0 [ 300.467195][ C1] ? unwind_next_frame+0x1b4/0x22d0 [ 300.467207][ C1] [ 300.467212][ C1] [ 300.467221][ C1] ? __kasan_slab_free+0x59/0x70 [ 300.467240][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 300.467258][ C1] arch_stack_walk+0x11c/0x150 [ 300.467278][ C1] ? __kasan_slab_free+0x59/0x70 [ 300.467299][ C1] stack_trace_save+0x118/0x1d0 [ 300.467318][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 300.467336][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 300.467358][ C1] kasan_save_track+0x3f/0x80 [ 300.467374][ C1] ? kasan_save_track+0x3f/0x80 [ 300.467390][ C1] ? kasan_save_free_info+0x40/0x50 [ 300.467406][ C1] ? __kasan_slab_free+0x59/0x70 [ 300.467444][ C1] kasan_save_free_info+0x40/0x50 [ 300.467460][ C1] __kasan_slab_free+0x59/0x70 [ 300.467483][ C1] ? ref_tracker_free+0x4ef/0x7e0 [ 300.467497][ C1] kfree+0x1a0/0x440 [ 300.467511][ C1] ? ref_tracker_free+0x4ef/0x7e0 [ 300.467527][ C1] ref_tracker_free+0x4ef/0x7e0 [ 300.467542][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 300.467556][ C1] ? dst_destroy+0x171/0x460 [ 300.467571][ C1] ? rcu_core+0xaaa/0x17a0 [ 300.467585][ C1] ? handle_softirqs+0x2c5/0x980 [ 300.467601][ C1] ? do_softirq+0x11b/0x1e0 [ 300.467617][ C1] ? __local_bh_enable_ip+0x1bb/0x200 [ 300.467633][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 300.467649][ C1] ? process_scheduled_works+0xa63/0x1850 [ 300.467666][ C1] ? worker_thread+0x870/0xd30 [ 300.467683][ C1] ? kthread+0x2f0/0x390 [ 300.467696][ C1] ? ret_from_fork+0x4b/0x80 [ 300.467714][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 300.467735][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 300.467754][ C1] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 300.467775][ C1] dst_destroy+0x171/0x460 [ 300.467789][ C1] ? rcu_core+0xa37/0x17a0 [ 300.467803][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 300.467818][ C1] rcu_core+0xaaa/0x17a0 [ 300.467838][ C1] ? __pfx_rcu_core+0x10/0x10 [ 300.467868][ C1] handle_softirqs+0x2c5/0x980 [ 300.467887][ C1] ? do_softirq+0x11b/0x1e0 [ 300.467906][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 300.467924][ C1] ? rcu_is_watching+0x15/0xb0 [ 300.467941][ C1] do_softirq+0x11b/0x1e0 [ 300.467957][ C1] [ 300.467962][ C1] [ 300.467968][ C1] ? __pfx_do_softirq+0x10/0x10 [ 300.467985][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 300.468006][ C1] ? rcu_is_watching+0x15/0xb0 [ 300.468022][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 300.468039][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 300.468055][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 300.468073][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 300.468090][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 300.468109][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 300.468132][ C1] ? process_scheduled_works+0x976/0x1850 [ 300.468150][ C1] process_scheduled_works+0xa63/0x1850 [ 300.468180][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 300.468202][ C1] ? assign_work+0x364/0x3d0 [ 300.468221][ C1] worker_thread+0x870/0xd30 [ 300.468243][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 300.468263][ C1] ? __kthread_parkme+0x169/0x1d0 [ 300.468283][ C1] ? __pfx_worker_thread+0x10/0x10 [ 300.468300][ C1] kthread+0x2f0/0x390 [ 300.468313][ C1] ? __pfx_worker_thread+0x10/0x10 [ 300.468331][ C1] ? __pfx_kthread+0x10/0x10 [ 300.468345][ C1] ret_from_fork+0x4b/0x80 [ 300.468362][ C1] ? __pfx_kthread+0x10/0x10 [ 300.468376][ C1] ret_from_fork_asm+0x1a/0x30 [ 300.468400][ C1] [ 301.074906][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 301.081812][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00165-g360c1f1f24c6 #0 [ 301.092339][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 301.102417][ T30] Call Trace: [ 301.105710][ T30] [ 301.108655][ T30] dump_stack_lvl+0x241/0x360 [ 301.113355][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.118576][ T30] ? __pfx__printk+0x10/0x10 [ 301.123197][ T30] ? vscnprintf+0x5d/0x90 [ 301.127545][ T30] panic+0x349/0x880 [ 301.131459][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 301.137632][ T30] ? __pfx_panic+0x10/0x10 [ 301.142066][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 301.147458][ T30] ? __irq_work_queue_local+0x137/0x410 [ 301.153037][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 301.158453][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 301.164626][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 301.170800][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 301.177002][ T30] watchdog+0x1033/0x1040 [ 301.181362][ T30] ? watchdog+0x1ea/0x1040 [ 301.185804][ T30] ? __pfx_watchdog+0x10/0x10 [ 301.190500][ T30] kthread+0x2f0/0x390 [ 301.194583][ T30] ? __pfx_watchdog+0x10/0x10 [ 301.199277][ T30] ? __pfx_kthread+0x10/0x10 [ 301.203883][ T30] ret_from_fork+0x4b/0x80 [ 301.208317][ T30] ? __pfx_kthread+0x10/0x10 [ 301.212919][ T30] ret_from_fork_asm+0x1a/0x30 [ 301.217713][ T30] [ 301.220982][ T30] Kernel Offset: disabled [ 301.225304][ T30] Rebooting in 86400 seconds..