last executing test programs: 1m20.625519484s ago: executing program 4 (id=142): r0 = io_uring_setup(0xfc2, &(0x7f0000000180)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_GET_NESTED_STATE(r3, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x4, 0x4, 0x4, 0x1, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$KVM_GET_MSRS(r3, 0x8004ae98, &(0x7f0000000240)) close_range(r0, 0xffffffffffffffff, 0x0) 1m20.140007285s ago: executing program 4 (id=144): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x2, 0x1, 0x100, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m20.002663542s ago: executing program 4 (id=145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000040)={0x6, 0xcf30}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, 0x0) 1m19.746134855s ago: executing program 4 (id=150): ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000000c0)={{@hyper}, @any, 0x0, 0x0, 0x3}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper}) 1m5.258428384s ago: executing program 4 (id=150): ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000000c0)={{@hyper}, @any, 0x0, 0x0, 0x3}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper}) 56.618412019s ago: executing program 2 (id=243): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) dup2(r1, r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r2, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) 56.342766016s ago: executing program 2 (id=244): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xed, 0x3e, 0xc9, 0x8, 0xccd, 0xb3, 0x2dee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0x87, 0x1d}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 52.908279606s ago: executing program 2 (id=255): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r1}, 0x20) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000080), &(0x7f0000001840)=@udp6=r2}, 0x20) 52.499108185s ago: executing program 2 (id=258): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0xffffffcf, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) 49.210541305s ago: executing program 4 (id=150): ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000000c0)={{@hyper}, @any, 0x0, 0x0, 0x3}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper}) 48.21728992s ago: executing program 2 (id=264): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount(&(0x7f00000001c0)=@filename='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x224d080, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r1}, './file0\x00'}) 48.050709499s ago: executing program 2 (id=265): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000014c0)={r1, r3, 0x0, 0x0, @val=@netkit={@void, @value}}, 0x40) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) 37.50533438s ago: executing program 3 (id=253): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xac}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000002c0)=[{0x0, 0x3, 0x0, 0x9}, {0x0, 0x4, 0x0, 0x4}, {0x0, 0x2, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x5}, {0x0, 0x4, 0x0, 0xc}], 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0xb000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) 37.200228318s ago: executing program 3 (id=290): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x2) listen(r0, 0x80) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) listen(r2, 0x3a5) 37.069445367s ago: executing program 3 (id=291): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000a80)="3dfeb167f3ccc51b8ec0ba896a6d39292279e90f7abfdaee0f52b8a3554c9122ce1f6ed327282ad8c2d74bb1a770183e755b9f37cc301f5392a0e4831635410fe4b2a8e6bdb04d5d", 0x1f00, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 36.4909347s ago: executing program 3 (id=294): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r4], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000000000000008001e0001"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=r4, @ANYBLOB="92"], 0x20}}, 0x0) 35.962697342s ago: executing program 0 (id=296): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = creat(&(0x7f0000000b00)='./file0\x00', 0x0) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000c00)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000040)={0x0, 0xae, 0x3ff, 0x30315559, 0x0, [r5], [], [], [0x8000000000000000]}) 35.745377079s ago: executing program 0 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendfile(r2, r1, 0x0, 0xffefffff) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 35.73453934s ago: executing program 3 (id=298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r3, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r4, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x1c, r5, 0x3, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 35.247619873s ago: executing program 3 (id=301): socket(0x2b, 0x2, 0xfa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001340)=""/102378, 0x7706c522012798af) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$llc(r1, 0x0, 0x0) 33.35541611s ago: executing program 0 (id=302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0x280}], 0x1) 26.320096252s ago: executing program 0 (id=306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, r3, 0x3, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x1, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x6, 0x2], 0x0, 0x84202}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)={0x4, 0x0, [{0x7f, 0x1, 0x1, 0x0, @msi={0x0, 0x0, 0xb, 0x9}}, {0xfffff8c9, 0x3, 0x0, 0x0, @adapter={0x10, 0x1, 0xbe8a, 0x1, 0x1}}, {0x0, 0x1, 0x0, 0x0, @irqchip={0xfffffffd, 0x1}}, {0x0, 0x2, 0x1, 0x0, @irqchip={0x7, 0x3}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 24.38297247s ago: executing program 0 (id=308): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a01020000000000000000010000010900010073797a30000000000900030073797a3200000000080007006e6174005c000000060a0104000000000000000001"], 0xd8}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000540)="0fa20367553f46836b4876760fc71a66ba4100edb9800000c00f320f4285a15a00000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3e}], 0x1, 0x20, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES64=r0]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20.277476374s ago: executing program 0 (id=312): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES32=r3], 0x20}}, 0x0) 17.846738598s ago: executing program 1 (id=313): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x6905, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000240)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x2) 15.77358138s ago: executing program 1 (id=314): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}}], 0x1, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x1) 14.979961365s ago: executing program 1 (id=315): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000006840)=[{{0x0, 0xf5, &(0x7f0000003080)=[{&(0x7f0000000440)="5ff17db605ade75363a0530733408850aaf311cbe0", 0x7ffff000}, {&(0x7f0000000600)="8882d1dc72424e1fd8dd4b9a691db9a3f2d539b0ed59d1d1b67695f356653c71087b5fe7c96758a0f47f379517352fe067a0c327617260dcd520", 0x3a}, {&(0x7f0000002c40)='E', 0x1}], 0x3}}], 0x1, 0x0) 8.194618031s ago: executing program 1 (id=317): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x8, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xdd0}}]}, 0x40}}, 0x0) 1.078060805s ago: executing program 1 (id=318): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001140)={@flat, @flat, @flat=@handle}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=319): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): ed BSSID 50:50:50:50:50:50 [ 85.551936][ T5472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.575960][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.584467][ T5472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.594959][ T5472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.606274][ T5472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.616498][ T5472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.627423][ T5472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.639260][ T5472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.679871][ T5472] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.688603][ T5472] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.700905][ T5472] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.712605][ T5472] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.889121][ T5515] veth0_vlan: entered promiscuous mode [ 85.905120][ T4616] Bluetooth: hci5: command tx timeout [ 85.970053][ T5515] veth1_vlan: entered promiscuous mode [ 86.007037][ T5586] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.034350][ T5586] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.043930][ T5586] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.119101][ T5586] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.206224][ T5515] veth0_macvtap: entered promiscuous mode [ 86.215552][ T5515] veth1_macvtap: entered promiscuous mode [ 86.255510][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.264267][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.290492][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.298399][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.325021][ T5515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.338278][ T5515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.362157][ T5515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.384158][ T5515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.396801][ T5515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.420325][ T5515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.446825][ T5515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.464928][ T5515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.477753][ T5515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.487707][ T5515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.498262][ T5515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.508207][ T5515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.518974][ T5515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.528908][ T5515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.539683][ T5515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.549666][ T5515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.560212][ T5515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.571635][ T5515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.602824][ T5515] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.612120][ T5515] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.621167][ T5515] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.640238][ T5515] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.898181][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.963846][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.971730][ T3040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.009628][ T3040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.087221][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.094411][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.116942][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.124146][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.170026][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.181883][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.226503][ T5586] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.273116][ T5586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.450107][ T29] audit: type=1326 audit(1729316740.864:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5750 comm="syz.2.80" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5b4f7dff9 code=0x0 [ 87.756760][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.861857][ T5586] veth0_vlan: entered promiscuous mode [ 87.895890][ T5586] veth1_vlan: entered promiscuous mode [ 87.949122][ T4616] Bluetooth: hci5: command tx timeout [ 87.970812][ T5586] veth0_macvtap: entered promiscuous mode [ 88.006713][ T5586] veth1_macvtap: entered promiscuous mode [ 88.026511][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.039235][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.049251][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.060492][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.079847][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.090499][ T5307] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 88.099530][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.110798][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.122053][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.132014][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.142558][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.153910][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.183352][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.195700][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.206908][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.226087][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.237300][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.258104][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.260459][ T5307] usb 2-1: too many endpoints for config 1 interface 0 altsetting 253: 132, using maximum allowed: 30 [ 88.270411][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.294514][ T5307] usb 2-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 88.302117][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.322069][ T5784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.89'. [ 88.325043][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.333025][ T5307] usb 2-1: config 1 interface 0 has no altsetting 0 [ 88.352522][ T5307] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 88.352870][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.362993][ T5307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.399336][ T5307] usb 2-1: Product: syz [ 88.407611][ T5307] usb 2-1: Manufacturer: syz [ 88.414274][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.414633][ T5307] usb 2-1: SerialNumber: syz [ 89.092390][ T5307] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 89.427375][ T5586] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.437434][ T5586] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.447396][ T5586] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.456195][ T5586] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.575731][ T5799] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 89.633146][ T5801] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 89.703434][ T3040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.736848][ T3040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.837173][ T5807] process 'syz.2.98' launched './file0' with NULL argv: empty string added [ 89.917502][ T5804] syzkaller0: entered promiscuous mode [ 89.924506][ T5804] syzkaller0: entered allmulticast mode [ 89.964252][ T3119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.994011][ T3119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.818731][ T5306] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 90.855845][ T5307] usb 2-1: USB disconnect, device number 7 [ 91.015824][ T5306] usb 4-1: too many endpoints for config 1 interface 0 altsetting 253: 132, using maximum allowed: 30 [ 91.026935][ T5306] usb 4-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 91.041327][ T5306] usb 4-1: config 1 interface 0 has no altsetting 0 [ 91.053124][ T5306] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 91.064978][ T5306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.074358][ T5306] usb 4-1: Product: syz [ 91.078554][ T5306] usb 4-1: Manufacturer: syz [ 91.084660][ T5306] usb 4-1: SerialNumber: syz [ 92.412605][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.838701][ T5224] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.847089][ T5224] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.856887][ T5224] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.866878][ T5224] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.879743][ T5224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.888302][ T5224] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.895826][ T5224] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.897666][ T5230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.913212][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.927900][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.947405][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.956702][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.003162][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.069719][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.164320][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.209618][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 93.356196][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.363525][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.371667][ T5838] bridge_slave_0: entered allmulticast mode [ 93.380372][ T5838] bridge_slave_0: entered promiscuous mode [ 93.391658][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.400352][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.407598][ T5838] bridge_slave_1: entered allmulticast mode [ 93.415281][ T5838] bridge_slave_1: entered promiscuous mode [ 93.543527][ T5845] input: syz0 as /devices/virtual/input/input5 [ 93.597890][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.610149][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.619686][ T35] bridge_slave_1: left allmulticast mode [ 93.625476][ T35] bridge_slave_1: left promiscuous mode [ 93.648495][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.667407][ T35] bridge_slave_0: left allmulticast mode [ 93.679083][ T35] bridge_slave_0: left promiscuous mode [ 93.684821][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.192587][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.205033][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.221592][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.234416][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.242709][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.257299][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.311211][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.322198][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.335110][ T35] bond0 (unregistering): Released all slaves [ 94.355045][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 94.453434][ T5838] team0: Port device team_slave_0 added [ 94.536099][ T5838] team0: Port device team_slave_1 added [ 94.659468][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.676464][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.703126][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.716491][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.728857][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.771758][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.821518][ T35] hsr_slave_0: left promiscuous mode [ 94.839974][ T35] hsr_slave_1: left promiscuous mode [ 94.848606][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.862410][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.872269][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.880207][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.896171][ T35] veth1_macvtap: left promiscuous mode [ 94.901957][ T35] veth0_macvtap: left promiscuous mode [ 94.907562][ T35] veth1_vlan: left promiscuous mode [ 94.913090][ T35] veth0_vlan: left promiscuous mode [ 94.992146][ T5239] Bluetooth: hci5: command tx timeout [ 94.992818][ T4616] Bluetooth: hci0: command tx timeout [ 95.284233][ T35] team0 (unregistering): Port device team_slave_1 removed [ 95.326330][ T35] team0 (unregistering): Port device team_slave_0 removed [ 95.695766][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.703257][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.711556][ T5837] bridge_slave_0: entered allmulticast mode [ 95.718169][ T5837] bridge_slave_0: entered promiscuous mode [ 95.775151][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.783271][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.793211][ T5837] bridge_slave_1: entered allmulticast mode [ 95.800274][ T5837] bridge_slave_1: entered promiscuous mode [ 95.843153][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.863867][ T5838] hsr_slave_0: entered promiscuous mode [ 95.870482][ T5838] hsr_slave_1: entered promiscuous mode [ 95.876552][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.885157][ T5838] Cannot create hsr debugfs directory [ 95.898271][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.970274][ T5837] team0: Port device team_slave_0 added [ 95.983348][ T5837] team0: Port device team_slave_1 added [ 96.081641][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.088836][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.116807][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.161368][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.168356][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.195038][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.218129][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 96.332746][ T5838] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.348831][ T4616] Bluetooth: hci4: command tx timeout [ 96.372281][ T5837] hsr_slave_0: entered promiscuous mode [ 96.378893][ T5837] hsr_slave_1: entered promiscuous mode [ 96.388698][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.396351][ T5837] Cannot create hsr debugfs directory [ 96.482390][ T5838] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.560552][ T5838] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.667599][ T5838] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.718075][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.734921][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.742289][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.749803][ T5857] bridge_slave_0: entered allmulticast mode [ 96.756910][ T5857] bridge_slave_0: entered promiscuous mode [ 96.767745][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.775652][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.785107][ T5857] bridge_slave_1: entered allmulticast mode [ 96.792438][ T5857] bridge_slave_1: entered promiscuous mode [ 96.856175][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.895801][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.910897][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.953210][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.017776][ T5857] team0: Port device team_slave_0 added [ 97.058123][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.070015][ T4616] Bluetooth: hci0: command tx timeout [ 97.070093][ T5239] Bluetooth: hci5: command tx timeout [ 97.105807][ T5857] team0: Port device team_slave_1 added [ 97.152207][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.213239][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.224109][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.235355][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.265846][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.278885][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.319729][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.326861][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.368297][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.390202][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.572826][ T5857] hsr_slave_0: entered promiscuous mode [ 97.580274][ T5857] hsr_slave_1: entered promiscuous mode [ 97.587977][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.596846][ T5857] Cannot create hsr debugfs directory [ 97.619418][ T35] bridge_slave_1: left allmulticast mode [ 97.625091][ T35] bridge_slave_1: left promiscuous mode [ 97.634028][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.644016][ T35] bridge_slave_0: left allmulticast mode [ 97.650148][ T35] bridge_slave_0: left promiscuous mode [ 97.656705][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.666725][ T35] bridge_slave_1: left allmulticast mode [ 97.672971][ T35] bridge_slave_1: left promiscuous mode [ 97.679167][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.688137][ T35] bridge_slave_0: left allmulticast mode [ 97.694208][ T35] bridge_slave_0: left promiscuous mode [ 97.700744][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.014476][ T4616] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 98.024571][ T4616] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 98.037547][ T4616] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 98.047498][ T4616] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 98.056446][ T4616] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 98.066774][ T4616] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 98.360531][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.372812][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.383451][ T35] bond0 (unregistering): Released all slaves [ 98.438979][ T5239] Bluetooth: hci4: command tx timeout [ 98.483491][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.494406][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.504983][ T35] bond0 (unregistering): Released all slaves [ 98.805301][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.817145][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.865577][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.878266][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.967613][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.035621][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.099442][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.106538][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.135936][ T35] hsr_slave_0: left promiscuous mode [ 99.143085][ T35] hsr_slave_1: left promiscuous mode [ 99.150001][ T5239] Bluetooth: hci0: command tx timeout [ 99.151347][ T4616] Bluetooth: hci5: command tx timeout [ 99.163868][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.172928][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.180857][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.188271][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.198540][ T35] hsr_slave_0: left promiscuous mode [ 99.204390][ T35] hsr_slave_1: left promiscuous mode [ 99.210454][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.217881][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.226026][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.233643][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.263971][ T35] veth1_macvtap: left promiscuous mode [ 99.269897][ T35] veth0_macvtap: left promiscuous mode [ 99.275776][ T35] veth1_vlan: left promiscuous mode [ 99.281256][ T35] veth0_vlan: left promiscuous mode [ 99.287347][ T35] veth1_macvtap: left promiscuous mode [ 99.293076][ T35] veth0_macvtap: left promiscuous mode [ 99.298677][ T35] veth1_vlan: left promiscuous mode [ 99.304057][ T35] veth0_vlan: left promiscuous mode [ 99.736352][ T35] team0 (unregistering): Port device team_slave_1 removed [ 99.775119][ T35] team0 (unregistering): Port device team_slave_0 removed [ 100.113372][ T4616] Bluetooth: hci6: command tx timeout [ 100.474476][ T35] team0 (unregistering): Port device team_slave_1 removed [ 100.513618][ T4616] Bluetooth: hci4: command tx timeout [ 100.522456][ T35] team0 (unregistering): Port device team_slave_0 removed [ 100.623145][ T5239] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 100.637296][ T5239] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 100.650150][ T5239] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 100.666463][ T5239] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 100.690882][ T5239] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 100.707368][ T5239] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 100.973871][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.981022][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.997424][ T5911] chnl_net:caif_netlink_parms(): no params data found [ 101.229114][ T4616] Bluetooth: hci0: command tx timeout [ 101.229224][ T5239] Bluetooth: hci5: command tx timeout [ 101.391827][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.402895][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.418880][ T5911] bridge_slave_0: entered allmulticast mode [ 101.426596][ T5911] bridge_slave_0: entered promiscuous mode [ 101.443021][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.457076][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.466894][ T5911] bridge_slave_1: entered allmulticast mode [ 101.475523][ T5911] bridge_slave_1: entered promiscuous mode [ 101.511990][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.607064][ T5911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.646730][ T5857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.665223][ T5911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.696159][ T5857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.781013][ T5857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.808327][ T5857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.836832][ T5911] team0: Port device team_slave_0 added [ 101.881872][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.910568][ T5911] team0: Port device team_slave_1 added [ 102.014113][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.021300][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.052227][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.065896][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.100437][ T5911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.126028][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.134408][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.166107][ T5911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.184180][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.191351][ T1050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.198884][ T5239] Bluetooth: hci6: command tx timeout [ 102.268387][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.307734][ T5918] chnl_net:caif_netlink_parms(): no params data found [ 102.444438][ T5911] hsr_slave_0: entered promiscuous mode [ 102.456261][ T5911] hsr_slave_1: entered promiscuous mode [ 102.562640][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.570222][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.577423][ T5918] bridge_slave_0: entered allmulticast mode [ 102.585859][ T5918] bridge_slave_0: entered promiscuous mode [ 102.595562][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.599038][ T5239] Bluetooth: hci4: command tx timeout [ 102.603301][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.615552][ T5918] bridge_slave_1: entered allmulticast mode [ 102.623505][ T5918] bridge_slave_1: entered promiscuous mode [ 102.683052][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.716962][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.749702][ T5239] Bluetooth: hci7: command tx timeout [ 102.777006][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.874126][ T5918] team0: Port device team_slave_0 added [ 102.883100][ T5918] team0: Port device team_slave_1 added [ 102.895889][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.935875][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.943212][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.970345][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.983603][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.991061][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.017673][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.041913][ T5838] veth0_vlan: entered promiscuous mode [ 103.083657][ T5911] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.103249][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.110391][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.124230][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.131397][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.162018][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.200141][ T5911] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.241343][ T5838] veth1_vlan: entered promiscuous mode [ 103.296840][ T5911] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.324932][ T5918] hsr_slave_0: entered promiscuous mode [ 103.346079][ T5918] hsr_slave_1: entered promiscuous mode [ 103.353600][ T5918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.362437][ T5918] Cannot create hsr debugfs directory [ 103.414404][ T5911] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.485674][ T5838] veth0_macvtap: entered promiscuous mode [ 103.509027][ T5838] veth1_macvtap: entered promiscuous mode [ 103.653416][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.678770][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.699653][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.712817][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.739200][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.759004][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.771133][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.785401][ T5837] veth0_vlan: entered promiscuous mode [ 103.837696][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.865155][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.888107][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.908498][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.927960][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.947929][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.976010][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.989958][ T5837] veth1_vlan: entered promiscuous mode [ 104.027493][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.040304][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.049733][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.058460][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.131065][ T5911] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.176776][ T5918] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.199969][ T5911] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.209084][ T5911] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.229517][ T5837] veth0_macvtap: entered promiscuous mode [ 104.256639][ T5918] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.269019][ T5239] Bluetooth: hci6: command tx timeout [ 104.280893][ T5911] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.301818][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.321960][ T5837] veth1_macvtap: entered promiscuous mode [ 104.349778][ T5918] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.401622][ T3040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.422825][ T3040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.436073][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.446975][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.457168][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.468524][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.478896][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.489552][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.500656][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.511979][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.523036][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.543358][ T5918] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.592753][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.605165][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.615855][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.629482][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.640669][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.651489][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.661778][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.672766][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.684685][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.714197][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.715079][ T3040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.739122][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.742139][ T3040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.747848][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.766227][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.829681][ T5239] Bluetooth: hci7: command tx timeout [ 105.033591][ T5918] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.060838][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.088921][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.096887][ T5918] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.130123][ T5857] veth0_vlan: entered promiscuous mode [ 105.136239][ T5918] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.182037][ T5918] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.228000][ T5857] veth1_vlan: entered promiscuous mode [ 105.237612][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.265100][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.306876][ T5911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.382765][ T5911] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.406824][ T5857] veth0_macvtap: entered promiscuous mode [ 105.445308][ T5857] veth1_macvtap: entered promiscuous mode [ 105.686896][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.694130][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.020402][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.028345][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.064954][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.086263][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.097017][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.128908][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.156762][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.168500][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.191883][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.215737][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.227841][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.239645][ T29] audit: type=1326 audit(1729316759.644:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6021 comm="syz.0.118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3dde57dff9 code=0x0 [ 106.241152][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.274010][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.307664][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.319492][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.338388][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.357628][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.359033][ T5239] Bluetooth: hci6: command tx timeout [ 106.368036][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.391227][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.405588][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.424091][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.434818][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.448576][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.461198][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.518235][ T5857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.527341][ T5857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.536162][ T5857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.546653][ T5857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.600281][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.762642][ T5918] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.785347][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.808434][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.822272][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.829438][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.907881][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.915076][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.928011][ T5239] Bluetooth: hci7: command tx timeout [ 106.963421][ T5918] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.973922][ T5918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.061136][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.087025][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.122153][ T5911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.292492][ T5911] veth0_vlan: entered promiscuous mode [ 107.336584][ T5911] veth1_vlan: entered promiscuous mode [ 107.341539][ T6044] capability: warning: `syz.2.124' uses deprecated v2 capabilities in a way that may be insecure [ 107.466586][ T5911] veth0_macvtap: entered promiscuous mode [ 107.476476][ T5911] veth1_macvtap: entered promiscuous mode [ 107.493726][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.504466][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.514582][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.525339][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.535414][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.546033][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.556513][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.567145][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.577789][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.588978][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.599139][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.609812][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.622379][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.677332][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.688266][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.698269][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.709702][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.719767][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.730300][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.740403][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.750915][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.760848][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.771892][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.782301][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.793146][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.804604][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.815673][ T5911] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.824515][ T5911] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.833514][ T5911] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.842314][ T5911] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.884819][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.982821][ T3119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.998203][ T3119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.086331][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.105430][ T5918] veth0_vlan: entered promiscuous mode [ 108.119190][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.137968][ T5918] veth1_vlan: entered promiscuous mode [ 108.243008][ T5918] veth0_macvtap: entered promiscuous mode [ 108.288269][ T5918] veth1_macvtap: entered promiscuous mode [ 108.382347][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.410917][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.436992][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.470561][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.494746][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.508057][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.519212][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.531527][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.562199][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.602489][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.634774][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.742938][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.785936][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.831185][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.990046][ T5239] Bluetooth: hci7: command tx timeout [ 109.109929][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.230399][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.249701][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.265184][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.279793][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.296011][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.308348][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.334718][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.356774][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.369856][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.387972][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.420380][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.438280][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.453461][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.463941][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.476636][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.505230][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 109.523626][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 109.542721][ T5918] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.556090][ T5918] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.565133][ T5918] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.585836][ T5918] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.862010][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.877241][ T3119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.923993][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.925390][ T6095] kvm: pic: non byte read [ 109.941170][ T3119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.065179][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.138'. [ 111.323932][ T1090] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.439185][ T1090] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.577263][ T1090] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.639481][ T4616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.656707][ T4616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.677491][ T4616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.689297][ T4616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.704799][ T4616] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 111.712964][ T4616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.715095][ T1090] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.952400][ T6134] chnl_net:caif_netlink_parms(): no params data found [ 111.977651][ T1090] bridge_slave_1: left allmulticast mode [ 111.994319][ T1090] bridge_slave_1: left promiscuous mode [ 112.004033][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.023597][ T1090] bridge_slave_0: left allmulticast mode [ 112.038752][ T1090] bridge_slave_0: left promiscuous mode [ 112.048190][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.252543][ T6152] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.271625][ T6152] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.618818][ T5273] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.831468][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.860305][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.878739][ T5273] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 112.887828][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.908306][ T5273] usb 3-1: config 0 descriptor?? [ 113.034471][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.046919][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.060044][ T1090] bond0 (unregistering): Released all slaves [ 113.348864][ T6155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.365343][ T5275] IPVS: starting estimator thread 0... [ 113.370008][ T6171] syzkaller0: entered promiscuous mode [ 113.377292][ T6155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.385315][ T6171] syzkaller0: entered allmulticast mode [ 113.397529][ T5273] hid (null): bogus close delimiter [ 113.422494][ T6179] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 113.460452][ T6134] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.473242][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.489073][ T6134] bridge_slave_0: entered allmulticast mode [ 113.496786][ T6134] bridge_slave_0: entered promiscuous mode [ 113.498865][ T6180] IPVS: using max 19 ests per chain, 45600 per kthread [ 113.611218][ T5273] usb 3-1: language id specifier not provided by device, defaulting to English [ 113.791855][ T5239] Bluetooth: hci4: command tx timeout [ 114.072897][ T5273] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0002/input/input6 [ 114.186559][ T5273] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0002/input/input7 [ 114.282645][ T5273] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0002/input/input8 [ 114.338345][ T5273] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0002/input/input9 [ 114.405722][ T5273] uclogic 0003:256C:006D.0002: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 114.478432][ T5273] usb 3-1: USB disconnect, device number 5 [ 115.869182][ T5239] Bluetooth: hci4: command tx timeout [ 115.927188][ T6206] evm: overlay not supported [ 116.285717][ T6134] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.297188][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.307553][ T6134] bridge_slave_1: entered allmulticast mode [ 116.341479][ T6134] bridge_slave_1: entered promiscuous mode [ 116.442514][ T6198] pim6reg1: entered allmulticast mode [ 116.489489][ T6202] pim6reg1: entered promiscuous mode [ 116.563363][ T1090] hsr_slave_0: left promiscuous mode [ 116.574705][ T1090] hsr_slave_1: left promiscuous mode [ 116.583889][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.597588][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.633876][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.642441][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.714645][ T1090] veth1_macvtap: left promiscuous mode [ 116.746450][ T1090] veth0_macvtap: left promiscuous mode [ 116.795783][ T1090] veth1_vlan: left promiscuous mode [ 116.833424][ T1090] veth0_vlan: left promiscuous mode [ 117.456520][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 117.841232][ T1090] team0 (unregistering): Port device team_slave_1 removed [ 117.901020][ T1090] team0 (unregistering): Port device team_slave_0 removed [ 117.951777][ T5239] Bluetooth: hci4: command tx timeout [ 118.462201][ T6134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.560843][ T6134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.820339][ T6134] team0: Port device team_slave_0 added [ 118.828535][ T6134] team0: Port device team_slave_1 added [ 119.016627][ T6134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.076067][ T6134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.176973][ T6134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.243358][ T6134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.301210][ T6134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.371757][ T6134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.636033][ T6254] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.176'. [ 119.645947][ T6254] netlink: 183228 bytes leftover after parsing attributes in process `syz.1.176'. [ 119.745274][ T6134] hsr_slave_0: entered promiscuous mode [ 119.784653][ T6134] hsr_slave_1: entered promiscuous mode [ 119.797915][ T6134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.813123][ T6134] Cannot create hsr debugfs directory [ 120.029695][ T5239] Bluetooth: hci4: command tx timeout [ 120.312446][ T6269] binder: BINDER_SET_CONTEXT_MGR already set [ 120.318976][ T6269] binder: 6268:6269 ioctl 4018620d 20000040 returned -16 [ 121.642357][ T6134] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 121.669885][ T6134] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 121.680657][ T6134] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 121.699047][ T6134] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.857382][ T6308] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.873816][ T29] audit: type=1800 audit(1729316775.284:5): pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.189" name="/" dev="fuse" ino=1 res=0 errno=0 [ 121.907928][ T6134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.943666][ T6134] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.965343][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.972548][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.041933][ T3119] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.049164][ T3119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.411888][ T6134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.113507][ T6134] veth0_vlan: entered promiscuous mode [ 123.167434][ T6134] veth1_vlan: entered promiscuous mode [ 123.174334][ T5239] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 123.185394][ T5239] CPU: 0 UID: 0 PID: 5239 Comm: kworker/u9:8 Not tainted 6.12.0-rc3-syzkaller-00389-g3d5ad2d4eca3 #0 [ 123.196255][ T5239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.206585][ T5239] Workqueue: hci5 hci_rx_work [ 123.211292][ T5239] Call Trace: [ 123.214560][ T5239] [ 123.217501][ T5239] dump_stack_lvl+0x241/0x360 [ 123.222176][ T5239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.227375][ T5239] ? __pfx__printk+0x10/0x10 [ 123.231957][ T5239] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 123.237272][ T5239] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 123.242828][ T5239] sysfs_create_dir_ns+0x2ce/0x3a0 [ 123.247937][ T5239] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 123.253567][ T5239] kobject_add_internal+0x435/0x8d0 [ 123.258783][ T5239] kobject_add+0x152/0x220 [ 123.263197][ T5239] ? do_raw_spin_unlock+0x13c/0x8b0 [ 123.268404][ T5239] ? device_add+0x3e7/0xbf0 [ 123.272913][ T5239] ? __pfx_kobject_add+0x10/0x10 [ 123.277840][ T5239] ? _raw_spin_unlock+0x28/0x50 [ 123.282687][ T5239] ? get_device_parent+0x165/0x410 [ 123.287791][ T5239] device_add+0x4e5/0xbf0 [ 123.292117][ T5239] hci_conn_add_sysfs+0xe8/0x200 [ 123.297048][ T5239] le_conn_complete_evt+0xc9f/0x12e0 [ 123.302335][ T5239] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 123.308045][ T5239] ? __mutex_unlock_slowpath+0x21d/0x750 [ 123.313694][ T5239] ? __copy_skb_header+0x437/0x5b0 [ 123.318855][ T5239] ? skb_pull_data+0x112/0x230 [ 123.323655][ T5239] hci_le_conn_complete_evt+0x18c/0x420 [ 123.329222][ T5239] hci_event_packet+0xa55/0x1540 [ 123.334178][ T5239] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 123.339479][ T5239] ? __pfx_hci_event_packet+0x10/0x10 [ 123.344862][ T5239] ? set_offload_codec_func+0x1e0/0x5a0 [ 123.350413][ T5239] ? kcov_remote_start+0x97/0x7d0 [ 123.355442][ T5239] hci_rx_work+0x3fe/0xd80 [ 123.359859][ T5239] ? process_scheduled_works+0x976/0x1850 [ 123.365578][ T5239] process_scheduled_works+0xa63/0x1850 [ 123.371152][ T5239] ? __pfx_process_scheduled_works+0x10/0x10 [ 123.377142][ T5239] ? assign_work+0x364/0x3d0 [ 123.381748][ T5239] worker_thread+0x870/0xd30 [ 123.386344][ T5239] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 123.392249][ T5239] ? __kthread_parkme+0x169/0x1d0 [ 123.397282][ T5239] ? __pfx_worker_thread+0x10/0x10 [ 123.402409][ T5239] kthread+0x2f0/0x390 [ 123.406478][ T5239] ? __pfx_worker_thread+0x10/0x10 [ 123.411596][ T5239] ? __pfx_kthread+0x10/0x10 [ 123.416185][ T5239] ret_from_fork+0x4b/0x80 [ 123.420604][ T5239] ? __pfx_kthread+0x10/0x10 [ 123.425187][ T5239] ret_from_fork_asm+0x1a/0x30 [ 123.429962][ T5239] [ 123.436771][ T5239] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 123.451863][ T5239] Bluetooth: hci5: failed to register connection device [ 123.483457][ T6134] veth0_macvtap: entered promiscuous mode [ 123.494294][ T6134] veth1_macvtap: entered promiscuous mode [ 123.512597][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.524326][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.564475][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.626098][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.675174][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.698744][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.709855][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.730303][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.748709][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.768962][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.798828][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.810695][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.828965][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.859835][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.909447][ T6134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.959605][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.006688][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.059208][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.082082][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.110496][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.182472][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.218552][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.263386][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.292800][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.345793][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.345930][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.345989][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.346079][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.346133][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.354937][ T6134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.401395][ T6134] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.401434][ T6134] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.401460][ T6134] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.401486][ T6134] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.837476][ T6379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.201'. [ 124.858891][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.867763][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.975985][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.013895][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.202'. [ 125.023547][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.067308][ T6389] netlink: 'syz.3.202': attribute type 12 has an invalid length. [ 125.148317][ T6389] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.157686][ T6389] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.166541][ T6389] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.175353][ T6389] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.194401][ T6389] vxlan0: entered promiscuous mode [ 125.218821][ T6394] netlink: 32 bytes leftover after parsing attributes in process `syz.0.205'. [ 126.023338][ T3040] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.160069][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 126.175767][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 126.192606][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 126.239288][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 126.260589][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 126.269501][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 126.334160][ T3040] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.426995][ T6424] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 126.635701][ T3040] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.926508][ T6437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.948991][ T6437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.963845][ T3040] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.973232][ T6438] netlink: 'syz.2.213': attribute type 1 has an invalid length. [ 127.217811][ T6416] chnl_net:caif_netlink_parms(): no params data found [ 127.325830][ T3040] bridge_slave_1: left allmulticast mode [ 127.343618][ T3040] bridge_slave_1: left promiscuous mode [ 127.364058][ T3040] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.404937][ T3040] bridge_slave_0: left allmulticast mode [ 127.416898][ T3040] bridge_slave_0: left promiscuous mode [ 127.440236][ T3040] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.211470][ T3040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.226899][ T3040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.240182][ T3040] bond0 (unregistering): Released all slaves [ 128.359279][ T5239] Bluetooth: hci4: command tx timeout [ 128.571350][ T6472] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 128.580124][ T6416] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.618898][ T6416] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.626183][ T6416] bridge_slave_0: entered allmulticast mode [ 128.658909][ T6416] bridge_slave_0: entered promiscuous mode [ 128.682258][ T29] audit: type=1804 audit(1729316782.094:6): pid=6472 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.223" name="/newroot/38/bus/file0" dev="overlay" ino=17875 res=1 errno=0 [ 128.889025][ T6416] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.896187][ T6416] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.929018][ T6416] bridge_slave_1: entered allmulticast mode [ 128.943931][ T6416] bridge_slave_1: entered promiscuous mode [ 129.173785][ T6416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.207744][ T6416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.300297][ T3040] hsr_slave_0: left promiscuous mode [ 129.312501][ T3040] hsr_slave_1: left promiscuous mode [ 129.329300][ T3040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.347123][ T3040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.370307][ T3040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.399255][ T3040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.439974][ T3040] veth1_macvtap: left promiscuous mode [ 129.445560][ T3040] veth0_macvtap: left promiscuous mode [ 129.462943][ T3040] veth1_vlan: left promiscuous mode [ 129.468246][ T3040] veth0_vlan: left promiscuous mode [ 129.628826][ T5239] Bluetooth: hci5: command 0x0406 tx timeout [ 130.286210][ T3040] team0 (unregistering): Port device team_slave_1 removed [ 130.435763][ T3040] team0 (unregistering): Port device team_slave_0 removed [ 130.438736][ T5239] Bluetooth: hci4: command tx timeout [ 131.773560][ T6416] team0: Port device team_slave_0 added [ 131.785594][ T6416] team0: Port device team_slave_1 added [ 131.883001][ T6416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.896535][ T6416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.971737][ T6416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.011432][ T6416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.028191][ T6416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.058247][ T6416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.172033][ T6416] hsr_slave_0: entered promiscuous mode [ 132.202594][ T6416] hsr_slave_1: entered promiscuous mode [ 132.219390][ T6416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.227968][ T6416] Cannot create hsr debugfs directory [ 132.368923][ T6531] kvm: vcpu 0: requested 16 ns lapic timer period limited to 200000 ns [ 132.508926][ T5239] Bluetooth: hci4: command tx timeout [ 132.928886][ T5277] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.936470][ T6416] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 132.951700][ T6416] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 132.973093][ T6416] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 132.997888][ T6416] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 133.075763][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.108791][ T5277] usb 3-1: Using ep0 maxpacket: 16 [ 133.120445][ T5277] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.148164][ T5277] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 133.185629][ T5277] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 133.201424][ T6416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.218570][ T5277] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 133.275080][ T5277] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.277667][ T6416] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.304891][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 133.331135][ T5277] usb 3-1: SerialNumber: syz [ 133.343056][ T3040] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.350246][ T3040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.383733][ T6542] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 133.393734][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 133.401943][ T6542] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 133.463395][ T3040] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.470607][ T3040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.673956][ T5277] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 133.727076][ T5277] usb 3-1: USB disconnect, device number 6 [ 134.136146][ T6416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.551851][ T6568] syz.1.241 (6568): drop_caches: 2 [ 134.598932][ T5239] Bluetooth: hci4: command tx timeout [ 134.845498][ T6416] veth0_vlan: entered promiscuous mode [ 134.885192][ T6416] veth1_vlan: entered promiscuous mode [ 134.951988][ T6416] veth0_macvtap: entered promiscuous mode [ 134.979894][ T6416] veth1_macvtap: entered promiscuous mode [ 135.027402][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.076973][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.116478][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.157858][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.197620][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.219746][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.230269][ T6031] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 135.298808][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.328699][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.359980][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.398213][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.408439][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.422835][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.432833][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.443487][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.457623][ T6416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.470343][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.481055][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.491063][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.501830][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.511787][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.525849][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.535945][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.546559][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.556664][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.567367][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.577513][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.588181][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.598319][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.609029][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.624394][ T6416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.719576][ T6031] usb 3-1: Using ep0 maxpacket: 8 [ 135.996488][ T6031] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 136.008166][ T6416] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.020828][ T6416] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.025178][ T6031] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.057893][ T6416] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.059605][ T6031] usb 3-1: Product: syz [ 136.070957][ T6031] usb 3-1: Manufacturer: syz [ 136.076327][ T6416] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.078708][ T6031] usb 3-1: SerialNumber: syz [ 136.107195][ T6031] usb 3-1: config 0 descriptor?? [ 136.172508][ T6621] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.208202][ T6621] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 136.335566][ T6031] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 136.373225][ T6621] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.398854][ T6621] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 136.411275][ T6621] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.431291][ T6621] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 136.615097][ T6621] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 136.629347][ T6621] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 136.668025][ T5239] Bluetooth: hci0: Opcode 0x2046 failed: -22 [ 136.687242][ T6621] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 136.697917][ T6621] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 136.733559][ T6621] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 136.759832][ T6621] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 136.788220][ T6621] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 136.799410][ T6621] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 136.961072][ T6031] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 137.016442][ T6031] usb 3-1: USB disconnect, device number 7 [ 137.123174][ T6621] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 137.138781][ T6621] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 137.277483][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.311938][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.417153][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.449376][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.668977][ T5239] Bluetooth: hci0: command tx timeout [ 138.957816][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.814801][ T4616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 141.840067][ T4616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.855026][ T4616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.878876][ T4616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.914604][ T4616] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 141.929281][ T4616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.981227][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.121060][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.312452][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.673428][ T6678] chnl_net:caif_netlink_parms(): no params data found [ 142.790054][ T5239] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 142.801128][ T5239] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 142.811104][ T5239] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 142.821992][ T35] bridge_slave_1: left allmulticast mode [ 142.827858][ T35] bridge_slave_1: left promiscuous mode [ 142.844192][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.866958][ T35] bridge_slave_0: left allmulticast mode [ 142.873553][ T35] bridge_slave_0: left promiscuous mode [ 142.879429][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.907854][ T5239] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 142.932853][ T5239] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 142.940684][ T5239] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 143.557778][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.573977][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.589812][ T35] bond0 (unregistering): Released all slaves [ 143.732468][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.740315][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.752732][ T6678] bridge_slave_0: entered allmulticast mode [ 143.767700][ T6678] bridge_slave_0: entered promiscuous mode [ 143.793625][ T6678] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.823454][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.848979][ T6678] bridge_slave_1: entered allmulticast mode [ 143.875866][ T6678] bridge_slave_1: entered promiscuous mode [ 144.029713][ T4616] Bluetooth: hci4: command tx timeout [ 144.105686][ T6678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.221137][ T6678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.321872][ T35] hsr_slave_0: left promiscuous mode [ 144.338437][ T35] hsr_slave_1: left promiscuous mode [ 144.358158][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.366905][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.379616][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.387407][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.436022][ T35] veth1_macvtap: left promiscuous mode [ 144.441856][ T35] veth0_macvtap: left promiscuous mode [ 144.447642][ T35] veth1_vlan: left promiscuous mode [ 144.453306][ T35] veth0_vlan: left promiscuous mode [ 144.992024][ T4616] Bluetooth: hci7: command tx timeout [ 145.408420][ T35] team0 (unregistering): Port device team_slave_1 removed [ 145.476963][ T35] team0 (unregistering): Port device team_slave_0 removed [ 146.097370][ T6678] team0: Port device team_slave_0 added [ 146.109165][ T4616] Bluetooth: hci4: command tx timeout [ 146.119138][ T6678] team0: Port device team_slave_1 added [ 146.232163][ T6678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.248904][ T6678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.275409][ T6678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.288097][ T6678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.295150][ T6678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.329065][ T6678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.529104][ T6678] hsr_slave_0: entered promiscuous mode [ 146.537539][ T6678] hsr_slave_1: entered promiscuous mode [ 146.552585][ T6678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.570768][ T6678] Cannot create hsr debugfs directory [ 146.672084][ T6712] chnl_net:caif_netlink_parms(): no params data found [ 146.695708][ T6781] fuse: root generation should be zero [ 147.147867][ T4616] Bluetooth: hci7: command tx timeout [ 147.477730][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.491446][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.523974][ T6712] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.534027][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.541890][ T6712] bridge_slave_0: entered allmulticast mode [ 147.549878][ T6712] bridge_slave_0: entered promiscuous mode [ 147.565885][ T6712] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.578579][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.586496][ T6712] bridge_slave_1: entered allmulticast mode [ 147.594813][ T6712] bridge_slave_1: entered promiscuous mode [ 147.650412][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.688847][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.787455][ T6712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.874589][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.895140][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.928261][ T6712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.985653][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.008736][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.067897][ T6712] team0: Port device team_slave_0 added [ 148.077869][ T6712] team0: Port device team_slave_1 added [ 148.123382][ T6712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.138674][ T6712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.175957][ T6712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.190782][ T4616] Bluetooth: hci4: command tx timeout [ 148.202086][ T6712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.216860][ T6712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.242870][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.249415][ T6712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.317565][ T6712] hsr_slave_0: entered promiscuous mode [ 148.324894][ T6712] hsr_slave_1: entered promiscuous mode [ 148.336799][ T6712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.344824][ T6712] Cannot create hsr debugfs directory [ 148.586004][ T35] bridge_slave_1: left allmulticast mode [ 148.597364][ T35] bridge_slave_1: left promiscuous mode [ 148.615113][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.626368][ T35] bridge_slave_0: left allmulticast mode [ 148.638960][ T35] bridge_slave_0: left promiscuous mode [ 148.652500][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.206274][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.218215][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.229732][ T35] bond0 (unregistering): Released all slaves [ 149.231110][ T4616] Bluetooth: hci7: command tx timeout [ 149.637487][ T6846] kvm: emulating exchange as write [ 149.747080][ T35] hsr_slave_0: left promiscuous mode [ 149.811616][ T35] hsr_slave_1: left promiscuous mode [ 149.817942][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.849261][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.889313][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.896812][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.949226][ T35] veth1_macvtap: left promiscuous mode [ 149.960773][ T35] veth0_macvtap: left promiscuous mode [ 149.966509][ T35] veth1_vlan: left promiscuous mode [ 149.972864][ T35] veth0_vlan: left promiscuous mode [ 150.277183][ T4616] Bluetooth: hci4: command tx timeout [ 150.588199][ T35] team0 (unregistering): Port device team_slave_1 removed [ 150.636023][ T35] team0 (unregistering): Port device team_slave_0 removed [ 151.131299][ T6678] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 151.166503][ T6678] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 151.176631][ T6678] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 151.205368][ T6678] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 151.309896][ T4616] Bluetooth: hci7: command tx timeout [ 151.532533][ T35] IPVS: stop unused estimator thread 0... [ 151.649342][ T6678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.688354][ T6678] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.742934][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.750185][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.765026][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.772204][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.832279][ T6712] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 151.847503][ T6712] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 151.865157][ T6712] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 151.875817][ T6712] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 151.992667][ T6712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.031857][ T6712] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.053436][ T3119] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.060633][ T3119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.098339][ T3119] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.105579][ T3119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.163755][ T6678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.254238][ T6678] veth0_vlan: entered promiscuous mode [ 152.284626][ T6678] veth1_vlan: entered promiscuous mode [ 152.357607][ T6678] veth0_macvtap: entered promiscuous mode [ 152.375831][ T6678] veth1_macvtap: entered promiscuous mode [ 152.406440][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.417303][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.440707][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.454540][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.473985][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.484926][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.502194][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.516491][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.526808][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.537912][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.548239][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.559301][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.580114][ T6678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.609472][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.635851][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.655263][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.678758][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.690220][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.702534][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.713849][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.724709][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.735046][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.745895][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.756837][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.767932][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.781231][ T6678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.802020][ T6712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.834565][ T6678] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.858839][ T6678] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.867600][ T6678] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.880055][ T6678] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.102397][ T3119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.134311][ T3119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.212949][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.248733][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.359961][ T6712] veth0_vlan: entered promiscuous mode [ 153.405577][ T6712] veth1_vlan: entered promiscuous mode [ 153.610014][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.640463][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.659059][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.729343][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.747194][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.759470][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.952082][ T1090] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.003395][ T6712] veth0_macvtap: entered promiscuous mode [ 154.021799][ T6712] veth1_macvtap: entered promiscuous mode [ 154.154158][ T1090] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.472893][ T1090] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.623842][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.659239][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.680670][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.711670][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.738866][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.778797][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.806659][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.834477][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.858779][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.878824][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.898692][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.917900][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.933309][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.958128][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.972661][ T6712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.053211][ T1090] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.103736][ T6977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.152284][ T6978] wg2: entered promiscuous mode [ 155.157729][ T6978] wg2: entered allmulticast mode [ 155.182913][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.198780][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.209613][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.238819][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.261348][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.272450][ T6992] netlink: 156 bytes leftover after parsing attributes in process `syz.3.298'. [ 155.302137][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.322750][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.352470][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.381419][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.493838][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.557994][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.573575][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.583611][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.594205][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.605703][ T6712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.646850][ T6712] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.658486][ T6712] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.678862][ T6712] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.687621][ T6712] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.871402][ T4616] Bluetooth: hci5: command tx timeout [ 157.364424][ T1090] bridge_slave_1: left allmulticast mode [ 157.370806][ T1090] bridge_slave_1: left promiscuous mode [ 157.378452][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.553478][ T1090] bridge_slave_0: left allmulticast mode [ 157.581480][ T1090] bridge_slave_0: left promiscuous mode [ 157.605411][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.950101][ T4616] Bluetooth: hci5: command tx timeout [ 160.077154][ T4616] Bluetooth: hci5: command tx timeout [ 161.905205][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.047012][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.150145][ T1090] bond0 (unregistering): Released all slaves [ 162.189283][ T4616] Bluetooth: hci5: command tx timeout [ 162.591971][ T7019] tipc: Enabling of bearer rejected, failed to enable media [ 164.932163][ T6930] chnl_net:caif_netlink_parms(): no params data found [ 164.932275][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.033211][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.232056][ T1090] hsr_slave_0: left promiscuous mode [ 165.351436][ T1090] hsr_slave_1: left promiscuous mode [ 165.381975][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.405757][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.571569][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.610496][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.552426][ T1090] veth1_macvtap: left promiscuous mode [ 166.563913][ T1090] veth0_macvtap: left promiscuous mode [ 166.571110][ T1090] veth1_vlan: left promiscuous mode [ 166.585570][ T1090] veth0_vlan: left promiscuous mode [ 173.574134][ T5239] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 173.591212][ T5239] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 173.611106][ T5239] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 173.635954][ T5239] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 173.646257][ T5239] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 173.648306][ T5239] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 174.739801][ T7065] 9pnet_fd: Insufficient options for proto=fd [ 175.709339][ T4616] Bluetooth: hci8: command tx timeout [ 176.747649][ T1090] team0 (unregistering): Port device team_slave_1 removed [ 177.863578][ T4616] Bluetooth: hci8: command tx timeout [ 178.603716][ T1090] team0 (unregistering): Port device team_slave_0 removed [ 179.949243][ T4616] Bluetooth: hci8: command tx timeout [ 182.028826][ T4616] Bluetooth: hci8: command tx timeout [ 185.092499][ T5239] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 185.107142][ T5239] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 185.136346][ T5239] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 185.184652][ T5239] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 185.231546][ T5239] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 185.319560][ T5239] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 187.468989][ T4616] Bluetooth: hci9: command tx timeout [ 188.559603][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 189.549009][ T4616] Bluetooth: hci9: command tx timeout [ 190.598454][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.726734][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.628798][ T4616] Bluetooth: hci9: command tx timeout [ 193.808832][ T4616] Bluetooth: hci9: command tx timeout [ 194.953935][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.505321][ T6930] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.526507][ T6930] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.761259][ T6930] bridge_slave_0: entered allmulticast mode [ 195.788792][ T6930] bridge_slave_0: entered promiscuous mode [ 195.847561][ T6930] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.350486][ T6930] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.360057][ T6930] bridge_slave_1: entered allmulticast mode [ 196.423256][ T6930] bridge_slave_1: entered promiscuous mode [ 217.818119][ T6930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.998712][ T6930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.372783][ T4616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.383046][ T4616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.406607][ T4616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.441218][ T4616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.455875][ T4616] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 230.463822][ T4616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.559691][ T4616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.588165][ T4616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 230.596815][ T4616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.607753][ T3119] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.625487][ T4616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 230.636376][ T4616] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 230.658017][ T4616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.709886][ T3119] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.814227][ T3119] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.858244][ T7063] chnl_net:caif_netlink_parms(): no params data found [ 230.922744][ T3119] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.259599][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 231.261570][ T7076] chnl_net:caif_netlink_parms(): no params data found [ 231.270326][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 231.282245][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 231.290176][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 231.297800][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 231.305350][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 231.397222][ T4616] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 231.407915][ T4616] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 231.417313][ T4616] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 231.425495][ T4616] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 231.446043][ T4616] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 231.453421][ T4616] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 231.603477][ T7105] chnl_net:caif_netlink_parms(): no params data found [ 231.702294][ T7076] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.709782][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.717201][ T7076] bridge_slave_0: entered allmulticast mode [ 231.725202][ T7076] bridge_slave_0: entered promiscuous mode [ 231.737677][ T7076] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.745196][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.752648][ T7076] bridge_slave_1: entered allmulticast mode [ 231.759814][ T7076] bridge_slave_1: entered promiscuous mode [ 231.766453][ T3119] bridge_slave_1: left allmulticast mode [ 231.774617][ T3119] bridge_slave_1: left promiscuous mode [ 231.780719][ T3119] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.789356][ T3119] bridge_slave_0: left allmulticast mode [ 231.795017][ T3119] bridge_slave_0: left promiscuous mode [ 231.801437][ T3119] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.194137][ T3119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.206223][ T3119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.218002][ T3119] bond0 (unregistering): Released all slaves [ 232.271370][ T7076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.283720][ T7103] chnl_net:caif_netlink_parms(): no params data found [ 232.356027][ T7076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.480532][ T7076] team0: Port device team_slave_0 added [ 232.506086][ T7105] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.513743][ T7105] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.518940][ T5239] Bluetooth: hci0: command tx timeout [ 232.521219][ T7105] bridge_slave_0: entered allmulticast mode [ 232.539907][ T7105] bridge_slave_0: entered promiscuous mode [ 232.580101][ T7076] team0: Port device team_slave_1 added [ 232.607936][ T7105] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.625206][ T7105] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.634845][ T7105] bridge_slave_1: entered allmulticast mode [ 232.645960][ T7105] bridge_slave_1: entered promiscuous mode [ 232.673159][ T7103] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.681205][ T7103] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.688588][ T7103] bridge_slave_0: entered allmulticast mode [ 232.695430][ T7103] bridge_slave_0: entered promiscuous mode [ 232.703788][ T7103] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.711207][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.718423][ T7103] bridge_slave_1: entered allmulticast mode [ 232.725800][ T7103] bridge_slave_1: entered promiscuous mode [ 232.748826][ T5239] Bluetooth: hci4: command tx timeout [ 232.764448][ T7076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.772629][ T7076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.799191][ T7076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.822973][ T3119] hsr_slave_0: left promiscuous mode [ 232.831237][ T3119] hsr_slave_1: left promiscuous mode [ 232.837143][ T3119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.844730][ T3119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.852754][ T3119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.860859][ T3119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.882365][ T3119] veth1_macvtap: left promiscuous mode [ 232.887919][ T3119] veth0_macvtap: left promiscuous mode [ 232.893665][ T3119] veth1_vlan: left promiscuous mode [ 232.899090][ T3119] veth0_vlan: left promiscuous mode [ 233.392805][ T5239] Bluetooth: hci5: command tx timeout [ 233.427005][ T3119] team0 (unregistering): Port device team_slave_1 removed [ 233.477720][ T3119] team0 (unregistering): Port device team_slave_0 removed [ 233.549028][ T5239] Bluetooth: hci6: command tx timeout [ 234.023326][ T7105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.044007][ T7076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.051255][ T7076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.078014][ T7076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.100786][ T7103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.151851][ T7105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.205045][ T7103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.267099][ T7076] hsr_slave_0: entered promiscuous mode [ 234.275273][ T7076] hsr_slave_1: entered promiscuous mode [ 234.282437][ T7076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.290266][ T7076] Cannot create hsr debugfs directory [ 234.347854][ T7105] team0: Port device team_slave_0 added [ 234.357756][ T7105] team0: Port device team_slave_1 added [ 234.485123][ T7103] team0: Port device team_slave_0 added [ 234.494655][ T7105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.501912][ T7105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.528315][ T7105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.541025][ T7105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.548124][ T7105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.574166][ T7105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.588795][ T4616] Bluetooth: hci0: command tx timeout [ 234.610947][ T7103] team0: Port device team_slave_1 added [ 234.657624][ T7117] chnl_net:caif_netlink_parms(): no params data found [ 234.698905][ T7112] chnl_net:caif_netlink_parms(): no params data found [ 234.709864][ T7103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.716837][ T7103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.743162][ T7103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.776239][ T7105] hsr_slave_0: entered promiscuous mode [ 234.783004][ T7105] hsr_slave_1: entered promiscuous mode [ 234.790276][ T7105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.797865][ T7105] Cannot create hsr debugfs directory [ 234.816166][ T7103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.824631][ T7103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.828921][ T4616] Bluetooth: hci4: command tx timeout [ 234.857004][ T7103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.016200][ T7103] hsr_slave_0: entered promiscuous mode [ 235.022829][ T7103] hsr_slave_1: entered promiscuous mode [ 235.029163][ T7103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.036760][ T7103] Cannot create hsr debugfs directory [ 235.050699][ T7117] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.059043][ T7117] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.066346][ T7117] bridge_slave_0: entered allmulticast mode [ 235.073913][ T7117] bridge_slave_0: entered promiscuous mode [ 235.082418][ T7117] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.089777][ T7117] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.097074][ T7117] bridge_slave_1: entered allmulticast mode [ 235.104454][ T7117] bridge_slave_1: entered promiscuous mode [ 235.216851][ T7112] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.224500][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.231968][ T7112] bridge_slave_0: entered allmulticast mode [ 235.238699][ T7112] bridge_slave_0: entered promiscuous mode [ 235.282490][ T7076] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.316181][ T7117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.329067][ T7117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.338279][ T7112] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.353010][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.361253][ T7112] bridge_slave_1: entered allmulticast mode [ 235.367968][ T7112] bridge_slave_1: entered promiscuous mode [ 235.422632][ T7076] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.474392][ T4616] Bluetooth: hci5: command tx timeout [ 235.520761][ T7112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.558507][ T3119] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.590966][ T7076] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.614679][ T7117] team0: Port device team_slave_0 added [ 235.625338][ T7112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.634606][ T4616] Bluetooth: hci6: command tx timeout [ 235.658434][ T7117] team0: Port device team_slave_1 added [ 235.686858][ T3119] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.758378][ T7076] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.777822][ T7112] team0: Port device team_slave_0 added [ 235.812786][ T3119] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.828236][ T7112] team0: Port device team_slave_1 added [ 235.845689][ T7117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.853790][ T7117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.883283][ T7117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.922262][ T3119] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.936073][ T7117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.943602][ T7117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.970879][ T7117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.983791][ T7112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.998893][ T7112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.025082][ T7112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.047260][ T7112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.055821][ T7112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.082609][ T7112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.140230][ T7103] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.209828][ T7112] hsr_slave_0: entered promiscuous mode [ 236.216302][ T7112] hsr_slave_1: entered promiscuous mode [ 236.223158][ T7112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.231521][ T7112] Cannot create hsr debugfs directory [ 236.266694][ T7103] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.286527][ T7117] hsr_slave_0: entered promiscuous mode [ 236.293881][ T7117] hsr_slave_1: entered promiscuous mode [ 236.300378][ T7117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.307978][ T7117] Cannot create hsr debugfs directory [ 236.389007][ T7103] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.485970][ T7103] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.582823][ T3119] bridge_slave_1: left allmulticast mode [ 236.588492][ T3119] bridge_slave_1: left promiscuous mode [ 236.595005][ T3119] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.616555][ T3119] bridge_slave_0: left allmulticast mode [ 236.622547][ T3119] bridge_slave_0: left promiscuous mode [ 236.628204][ T3119] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.638545][ T3119] bridge_slave_1: left allmulticast mode [ 236.644922][ T3119] bridge_slave_1: left promiscuous mode [ 236.651654][ T3119] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.660869][ T3119] bridge_slave_0: left allmulticast mode [ 236.666555][ T3119] bridge_slave_0: left promiscuous mode [ 236.672937][ T3119] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.681738][ T4616] Bluetooth: hci0: command tx timeout [ 236.689924][ T3119] bridge_slave_1: left allmulticast mode [ 236.696271][ T3119] bridge_slave_1: left promiscuous mode [ 236.702521][ T3119] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.711969][ T3119] bridge_slave_0: left allmulticast mode [ 236.717740][ T3119] bridge_slave_0: left promiscuous mode [ 236.724557][ T3119] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.919664][ T4616] Bluetooth: hci4: command tx timeout [ 237.454271][ T3119] bond0 (unregistering): Released all slaves [ 237.466233][ T3119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.479487][ T3119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.497797][ T3119] bond0 (unregistering): Released all slaves [ 237.551310][ T4616] Bluetooth: hci5: command tx timeout [ 237.656715][ T3119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.668765][ T3119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.681173][ T3119] bond0 (unregistering): Released all slaves [ 237.716071][ T4616] Bluetooth: hci6: command tx timeout [ 237.841946][ T3119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.853941][ T3119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.864706][ T3119] bond0 (unregistering): Released all slaves [ 238.032165][ T30] INFO: task kworker/0:6:5306 blocked for more than 144 seconds. [ 238.041237][ T30] Not tainted 6.12.0-rc3-syzkaller-00389-g3d5ad2d4eca3 #0 [ 238.053410][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 238.062176][ T30] task:kworker/0:6 state:D stack:23552 pid:5306 tgid:5306 ppid:2 flags:0x00004000 [ 238.072672][ T30] Workqueue: usb_hub_wq hub_event [ 238.077794][ T30] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 238.081175][ T30] [ 238.084137][ T30] __schedule+0x1843/0x4ae0 [ 238.089355][ T30] ? __pfx___schedule+0x10/0x10 [ 238.094258][ T30] ? __pfx_lock_release+0x10/0x10 [ 238.099432][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 238.105528][ T30] ? kthread_data+0x52/0xd0 [ 238.118702][ T30] ? schedule+0x90/0x320 [ 238.124047][ T30] ? wq_worker_sleeping+0x66/0x240 [ 238.168738][ T30] ? schedule+0x90/0x320 [ 238.173072][ T30] schedule+0x14b/0x320 [ 238.178505][ T30] schedule_preempt_disabled+0x13/0x30 [ 238.184172][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 238.190333][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 238.196482][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 238.202906][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 238.208083][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 238.215054][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 238.220437][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 238.225699][ T30] down_write+0x1d7/0x220 [ 238.230383][ T30] ? __pfx_down_write+0x10/0x10 [ 238.235258][ T30] ? kfree+0x1a0/0x440 [ 238.239463][ T30] ? usb_control_msg+0x35a/0x4c0 [ 238.244961][ T30] usb_register_dev+0x13a/0x5a0 [ 238.250264][ T30] ? __pfx_usb_register_dev+0x10/0x10 [ 238.255687][ T30] ? usblp_cache_device_id_string+0x1c9/0x4b0 [ 238.261835][ T30] usblp_probe+0x1166/0x17f0 [ 238.266530][ T30] ? __pfx_usblp_probe+0x10/0x10 [ 238.272710][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 238.278882][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 238.285276][ T30] ? pm_runtime_enable+0x1c2/0x2d0 [ 238.290827][ T30] usb_probe_interface+0x645/0xbb0 [ 238.296069][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 238.301827][ T30] really_probe+0x2b8/0xad0 [ 238.306357][ T30] __driver_probe_device+0x1a2/0x390 [ 238.311896][ T30] driver_probe_device+0x50/0x430 [ 238.316979][ T30] __device_attach_driver+0x2d6/0x530 [ 238.322475][ T30] bus_for_each_drv+0x24e/0x2e0 [ 238.327476][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 238.333853][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 238.339352][ T30] __device_attach+0x333/0x520 [ 238.344137][ T30] ? __pfx_lock_release+0x10/0x10 [ 238.349469][ T30] ? __pfx___device_attach+0x10/0x10 [ 238.354813][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 238.360157][ T30] bus_probe_device+0x189/0x260 [ 238.365043][ T30] device_add+0x856/0xbf0 [ 238.369552][ T30] usb_set_configuration+0x1976/0x1fb0 [ 238.375068][ T30] usb_generic_driver_probe+0x88/0x140 [ 238.380683][ T30] usb_probe_device+0x1b8/0x380 [ 238.385577][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 238.391164][ T30] really_probe+0x2b8/0xad0 [ 238.395698][ T30] __driver_probe_device+0x1a2/0x390 [ 238.401134][ T30] driver_probe_device+0x50/0x430 [ 238.406182][ T30] __device_attach_driver+0x2d6/0x530 [ 238.411657][ T30] bus_for_each_drv+0x24e/0x2e0 [ 238.416604][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 238.422607][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 238.428088][ T30] __device_attach+0x333/0x520 [ 238.433525][ T30] ? __pfx___device_attach+0x10/0x10 [ 238.438937][ T30] bus_probe_device+0x189/0x260 [ 238.443921][ T30] device_add+0x856/0xbf0 [ 238.448810][ T30] usb_new_device+0x104a/0x19a0 [ 238.453714][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 238.459075][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 238.464400][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 238.469701][ T30] hub_event+0x2d6d/0x5150 [ 238.474202][ T30] ? __pfx_hub_event+0x10/0x10 [ 238.479088][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 238.484140][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 238.490216][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 238.496618][ T30] ? process_scheduled_works+0x976/0x1850 [ 238.502580][ T30] process_scheduled_works+0xa63/0x1850 [ 238.508213][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 238.514356][ T30] ? assign_work+0x364/0x3d0 [ 238.519191][ T30] worker_thread+0x870/0xd30 [ 238.523839][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 238.529888][ T30] ? __kthread_parkme+0x169/0x1d0 [ 238.535161][ T30] ? __pfx_worker_thread+0x10/0x10 [ 238.540374][ T30] kthread+0x2f0/0x390 [ 238.544446][ T30] ? __pfx_worker_thread+0x10/0x10 [ 238.549720][ T30] ? __pfx_kthread+0x10/0x10 [ 238.554337][ T30] ret_from_fork+0x4b/0x80 [ 238.558971][ T30] ? __pfx_kthread+0x10/0x10 [ 238.563699][ T30] ret_from_fork_asm+0x1a/0x30 [ 238.568510][ T30] [ 238.571609][ T30] INFO: task kworker/1:6:5307 blocked for more than 145 seconds. [ 238.579556][ T30] Not tainted 6.12.0-rc3-syzkaller-00389-g3d5ad2d4eca3 #0 [ 238.587204][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 238.596032][ T30] task:kworker/1:6 state:D stack:21392 pid:5307 tgid:5307 ppid:2 flags:0x00004000 [ 238.606304][ T30] Workqueue: usb_hub_wq hub_event [ 238.611885][ T30] Call Trace: [ 238.615193][ T30] [ 238.618147][ T30] __schedule+0x1843/0x4ae0 [ 238.622784][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 238.627840][ T30] ? schedule+0x90/0x320 [ 238.632163][ T30] ? __pfx___schedule+0x10/0x10 [ 238.637012][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 238.643248][ T30] ? __pfx_lock_release+0x10/0x10 [ 238.648960][ T30] ? kick_pool+0x1bd/0x620 [ 238.653422][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 238.658740][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 238.663965][ T30] ? schedule+0x90/0x320 [ 238.668225][ T30] schedule+0x14b/0x320 [ 238.672609][ T30] schedule_preempt_disabled+0x13/0x30 [ 238.678088][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 238.683956][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 238.689997][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 238.696224][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 238.701421][ T30] ? kobject_put+0x272/0x480 [ 238.706062][ T30] down_write+0x1d7/0x220 [ 238.710497][ T30] ? __pfx_down_write+0x10/0x10 [ 238.715382][ T30] ? usb_hcd_flush_endpoint+0x3d1/0x3f0 [ 238.721229][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 238.727156][ T30] usb_deregister_dev+0x88/0x210 [ 238.732157][ T30] usblp_disconnect+0x54/0x2d0 [ 238.736925][ T30] usb_unbind_interface+0x25e/0x940 [ 238.742463][ T30] ? kernfs_put+0x315/0x370 [ 238.747001][ T30] ? sysfs_remove_group+0x242/0x2c0 [ 238.752416][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 238.758160][ T30] device_release_driver_internal+0x503/0x7c0 [ 238.764345][ T4616] Bluetooth: hci0: command tx timeout [ 238.764619][ T30] bus_remove_device+0x34f/0x420 [ 238.775301][ T30] device_del+0x57a/0x9b0 [ 238.779982][ T30] ? kobject_put+0x272/0x480 [ 238.784630][ T30] ? __pfx_device_del+0x10/0x10 [ 238.789696][ T30] ? kobject_put+0x44d/0x480 [ 238.794325][ T30] usb_disable_device+0x3bf/0x850 [ 238.799466][ T30] usb_disconnect+0x340/0x950 [ 238.804177][ T30] hub_event+0x1ebc/0x5150 [ 238.808843][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 238.814569][ T30] ? __pfx_hub_event+0x10/0x10 [ 238.819419][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 238.824475][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 238.830535][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 238.837262][ T30] ? process_scheduled_works+0x976/0x1850 [ 238.843125][ T30] process_scheduled_works+0xa63/0x1850 [ 238.848785][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 238.854812][ T30] ? assign_work+0x364/0x3d0 [ 238.859584][ T30] worker_thread+0x870/0xd30 [ 238.864224][ T30] ? __kthread_parkme+0x169/0x1d0 [ 238.869376][ T30] ? __pfx_worker_thread+0x10/0x10 [ 238.874529][ T30] kthread+0x2f0/0x390 [ 238.878895][ T30] ? __pfx_worker_thread+0x10/0x10 [ 238.884029][ T30] ? __pfx_kthread+0x10/0x10 [ 238.888894][ T30] ret_from_fork+0x4b/0x80 [ 238.893337][ T30] ? __pfx_kthread+0x10/0x10 [ 238.897920][ T30] ret_from_fork_asm+0x1a/0x30 [ 238.903620][ T30] [ 238.906698][ T30] INFO: task syz.1.86:5795 blocked for more than 145 seconds. [ 238.914433][ T30] Not tainted 6.12.0-rc3-syzkaller-00389-g3d5ad2d4eca3 #0 [ 238.922164][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 238.930893][ T30] task:syz.1.86 state:D stack:27360 pid:5795 tgid:5774 ppid:5515 flags:0x00000004 [ 238.941280][ T30] Call Trace: [ 238.944559][ T30] [ 238.947588][ T30] __schedule+0x1843/0x4ae0 [ 238.952218][ T30] ? __pfx___schedule+0x10/0x10 [ 238.957100][ T30] ? __pfx_lock_release+0x10/0x10 [ 238.962270][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 238.967753][ T30] ? schedule+0x90/0x320 [ 238.972095][ T30] schedule+0x14b/0x320 [ 238.976254][ T30] schedule_preempt_disabled+0x13/0x30 [ 238.981820][ T30] __mutex_lock+0x6a7/0xd70 [ 238.986357][ T30] ? __mutex_lock+0x52a/0xd70 [ 238.991153][ T30] ? chaoskey_open+0xb1/0x1b0 [ 238.995879][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 239.001012][ T4616] Bluetooth: hci4: command tx timeout [ 239.006452][ T30] ? usb_find_interface+0xf7/0x160 [ 239.011654][ T30] ? __pfx_usb_find_interface+0x10/0x10 [ 239.017228][ T30] ? kobject_get_unless_zero+0x22d/0x330 [ 239.022935][ T30] chaoskey_open+0xb1/0x1b0 [ 239.027591][ T30] ? __pfx_chaoskey_open+0x10/0x10 [ 239.032837][ T30] usb_open+0x14b/0x1d0 [ 239.037018][ T30] chrdev_open+0x521/0x600 [ 239.041566][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 239.046536][ T30] ? security_file_open+0x513/0x990 [ 239.052003][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 239.056949][ T30] do_dentry_open+0x978/0x1460 [ 239.061839][ T30] vfs_open+0x3e/0x330 [ 239.065986][ T30] path_openat+0x2c84/0x3590 [ 239.071068][ T30] ? __pfx_path_openat+0x10/0x10 [ 239.076065][ T30] do_filp_open+0x235/0x490 [ 239.080869][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 239.086089][ T30] ? _raw_spin_unlock+0x28/0x50 [ 239.091081][ T30] ? alloc_fd+0x5a1/0x640 [ 239.095415][ T30] do_sys_openat2+0x13e/0x1d0 [ 239.100306][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 239.105543][ T30] __x64_sys_openat+0x247/0x2a0 [ 239.110466][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 239.115884][ T30] ? do_syscall_64+0x100/0x230 [ 239.120788][ T30] ? do_syscall_64+0xb6/0x230 [ 239.125476][ T30] do_syscall_64+0xf3/0x230 [ 239.130085][ T30] ? clear_bhb_loop+0x35/0x90 [ 239.134787][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.140788][ T30] RIP: 0033:0x7f1659b7c990 [ 239.145286][ T30] RSP: 002b:00007f165a9d5b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 239.154038][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1659b7c990 [ 239.162268][ T30] RDX: 0000000000000002 RSI: 00007f165a9d5c10 RDI: 00000000ffffff9c [ 239.170386][ T30] RBP: 00007f165a9d5c10 R08: 0000000000000000 R09: 00007f165a9d5987 [ 239.178379][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 239.186427][ T30] R13: 0000000000000000 R14: 00007f1659d36058 R15: 00007ffc584d9558 [ 239.194600][ T30] [ 239.198095][ T30] INFO: task syz.3.101:5830 blocked for more than 145 seconds. [ 239.205761][ T30] Not tainted 6.12.0-rc3-syzkaller-00389-g3d5ad2d4eca3 #0 [ 239.215368][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 239.224117][ T30] task:syz.3.101 state:D stack:27360 pid:5830 tgid:5816 ppid:5472 flags:0x00000004 [ 239.234638][ T30] Call Trace: [ 239.237917][ T30] [ 239.240960][ T30] __schedule+0x1843/0x4ae0 [ 239.245515][ T30] ? __pfx___schedule+0x10/0x10 [ 239.250485][ T30] ? __pfx_lock_release+0x10/0x10 [ 239.255632][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 239.261671][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 239.268001][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 239.273358][ T30] ? schedule+0x90/0x320 [ 239.277652][ T30] schedule+0x14b/0x320 [ 239.282004][ T30] ? down_read+0x6a5/0xa40 [ 239.286454][ T30] schedule_preempt_disabled+0x13/0x30 [ 239.292132][ T30] down_read+0x705/0xa40 [ 239.296414][ T30] ? __pfx_down_read+0x10/0x10 [ 239.301303][ T30] ? __pfx_lock_release+0x10/0x10 [ 239.306374][ T30] usb_open+0x30/0x1d0 [ 239.311416][ T30] chrdev_open+0x521/0x600 [ 239.315965][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 239.321391][ T30] ? security_file_open+0x513/0x990 [ 239.326634][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 239.331851][ T30] do_dentry_open+0x978/0x1460 [ 239.336711][ T30] vfs_open+0x3e/0x330 [ 239.341005][ T30] path_openat+0x2c84/0x3590 [ 239.346086][ T30] ? __pfx_path_openat+0x10/0x10 [ 239.351211][ T30] do_filp_open+0x235/0x490 [ 239.355853][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 239.361118][ T30] ? _raw_spin_unlock+0x28/0x50 [ 239.366016][ T30] ? alloc_fd+0x5a1/0x640 [ 239.370747][ T30] do_sys_openat2+0x13e/0x1d0 [ 239.375466][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 239.380836][ T30] __x64_sys_openat+0x247/0x2a0 [ 239.385803][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 239.391338][ T30] ? do_syscall_64+0x100/0x230 [ 239.396135][ T30] ? do_syscall_64+0xb6/0x230 [ 239.400932][ T30] do_syscall_64+0xf3/0x230 [ 239.405476][ T30] ? clear_bhb_loop+0x35/0x90 [ 239.410275][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.416214][ T30] RIP: 0033:0x7fa3a1f7c990 [ 239.420751][ T30] RSP: 002b:00007fa3a2d1cb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 239.429696][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa3a1f7c990 [ 239.437726][ T30] RDX: 0000000000000002 RSI: 00007fa3a2d1cc10 RDI: 00000000ffffff9c [ 239.445955][ T30] RBP: 00007fa3a2d1cc10 R08: 0000000000000000 R09: 00007fa3a2d1c987 [ 239.454007][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 239.462329][ T30] R13: 0000000000000000 R14: 00007fa3a2136058 R15: 00007fffa7232768 [ 239.470864][ T30] [ 239.474109][ T30] [ 239.474109][ T30] Showing all locks held in the system: [ 239.482406][ T30] 1 lock held by khungtaskd/30: [ 239.487302][ T30] #0: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 239.499250][ T30] 4 locks held by kworker/u8:11/3119: [ 239.504890][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 239.516067][ T30] #1: ffffc9000aa47d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 239.526836][ T30] #2: ffffffff8fcb3dd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 239.536324][ T30] #3: ffffffff8fcc08c8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 239.546221][ T30] 2 locks held by getty/4980: [ 239.551072][ T30] #0: ffff88814c8880a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 239.561118][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 239.571339][ T30] 4 locks held by udevd/5221: [ 239.576006][ T30] #0: ffff8880317d80a0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 [ 239.584953][ T30] #1: ffff88807b98e088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 239.594511][ T30] #2: ffff88807c1eab48 (kn->active#20){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 239.604204][ T30] #3: ffff88805eb7f190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 [ 239.613728][ T30] 6 locks held by kworker/0:6/5306: [ 239.619039][ T30] #0: ffff88801e28b948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 239.630582][ T30] #1: ffffc900040e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 239.642584][ T4616] Bluetooth: hci5: command tx timeout [ 239.648035][ T30] #2: ffff888144754190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 239.657068][ T30] #3: ffff88805eb7f190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 239.666497][ T30] #4: ffff88805d899160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 239.675892][ T30] #5: ffffffff8f59a410 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x13a/0x5a0 [ 239.685643][ T30] 6 locks held by kworker/1:6/5307: [ 239.690930][ T30] #0: ffff88801e28b948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 239.702452][ T30] #1: ffffc90004137d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 239.714502][ T30] #2: ffff8880284dc190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 239.723606][ T30] #3: ffff888032468190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 239.732983][ T30] #4: ffff888032c2e160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 239.743697][ T30] #5: ffffffff8f59a410 (minor_rwsem#2){++++}-{3:3}, at: usb_deregister_dev+0x88/0x210 [ 239.753452][ T30] 1 lock held by syz.0.32/5428: [ 239.758319][ T30] #0: ffff888030af4878 (&dev->lock#2){+.+.}-{3:3}, at: chaoskey_read+0x127/0x590 [ 239.767893][ T30] 2 locks held by syz.1.86/5795: [ 239.772930][ T30] #0: ffffffff8f59a410 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 239.781909][ T30] #1: ffff888030af4878 (&dev->lock#2){+.+.}-{3:3}, at: chaoskey_open+0xb1/0x1b0 [ 239.791271][ T30] 1 lock held by syz.3.101/5830: [ 239.796220][ T30] #0: ffffffff8f59a410 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 239.805155][ T4616] Bluetooth: hci6: command tx timeout [ 239.811120][ T30] 4 locks held by syz-executor/7076: [ 239.816507][ T30] #0: ffff8880336a2420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 239.825497][ T30] #1: ffff888032204088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 239.835399][ T30] #2: ffff888143fb6008 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 239.845516][ T30] #3: ffffffff8f55e8c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 239.856022][ T30] 4 locks held by syz-executor/7103: [ 239.861829][ T30] #0: ffff8880336a2420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 239.871017][ T30] #1: ffff888061802888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 239.880995][ T30] #2: ffff888143fb6008 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 239.891123][ T30] #3: ffffffff8f55e8c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 239.901649][ T30] 8 locks held by syz-executor/7105: [ 239.906953][ T30] #0: ffff8880336a2420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 239.916003][ T30] #1: ffff88807c742888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 239.925866][ T30] #2: ffff888143fb60f8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 239.936141][ T30] #3: ffffffff8f55e8c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 239.946706][ T30] #4: ffff8880604d90e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 239.957384][ T30] #5: ffff8880604db250 (&devlink->lock_key#10){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 239.967600][ T30] #6: ffffffff8fcc08c8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 239.977007][ T30] #7: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 239.987992][ T30] 4 locks held by syz-executor/7112: [ 239.993368][ T30] #0: ffff8880336a2420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 240.002404][ T30] #1: ffff88805fe00c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 240.012298][ T30] #2: ffff888143fb60f8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 240.022451][ T30] #3: ffffffff8f55e8c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 240.032874][ T30] 4 locks held by syz-executor/7117: [ 240.038179][ T30] #0: ffff8880336a2420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 240.047223][ T30] #1: ffff88805fe00888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 240.057245][ T30] #2: ffff888143fb60f8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 240.067407][ T30] #3: ffffffff8f55e8c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 240.078140][ T30] [ 240.080610][ T30] ============================================= [ 240.080610][ T30] [ 240.092362][ T30] NMI backtrace for cpu 0 [ 240.096792][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00389-g3d5ad2d4eca3 #0 [ 240.107334][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 240.117389][ T30] Call Trace: [ 240.120664][ T30] [ 240.123587][ T30] dump_stack_lvl+0x241/0x360 [ 240.128261][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.133650][ T30] ? __pfx__printk+0x10/0x10 [ 240.138267][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 240.143220][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 240.148781][ T30] ? _printk+0xd5/0x120 [ 240.152968][ T30] ? __pfx__printk+0x10/0x10 [ 240.158067][ T30] ? __wake_up_klogd+0xcc/0x110 [ 240.162973][ T30] ? __pfx__printk+0x10/0x10 [ 240.167575][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 240.172600][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 240.178595][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 240.184604][ T30] watchdog+0xff4/0x1040 [ 240.188875][ T30] ? watchdog+0x1ea/0x1040 [ 240.193306][ T30] ? __pfx_watchdog+0x10/0x10 [ 240.197980][ T30] kthread+0x2f0/0x390 [ 240.202047][ T30] ? __pfx_watchdog+0x10/0x10 [ 240.206723][ T30] ? __pfx_kthread+0x10/0x10 [ 240.211322][ T30] ret_from_fork+0x4b/0x80 [ 240.215732][ T30] ? __pfx_kthread+0x10/0x10 [ 240.220675][ T30] ret_from_fork_asm+0x1a/0x30 [ 240.225446][ T30] [ 240.229353][ T30] Sending NMI from CPU 0 to CPUs 1: [ 240.234715][ C1] NMI backtrace for cpu 1 [ 240.234731][ C1] CPU: 1 UID: 0 PID: 17 Comm: rcu_preempt Not tainted 6.12.0-rc3-syzkaller-00389-g3d5ad2d4eca3 #0 [ 240.234750][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 240.234760][ C1] RIP: 0010:check_preemption_disabled+0x5c/0x120 [ 240.234785][ C1] Code: 25 28 00 00 00 48 3b 44 24 08 0f 85 ce 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5e 41 5f c3 cc cc cc cc 48 c7 04 24 00 00 00 00 <9c> 8f 04 24 f7 04 24 00 02 00 00 74 c5 49 89 f6 49 89 ff 65 4c 8b [ 240.234804][ C1] RSP: 0018:ffffc900001679c8 EFLAGS: 00000046 [ 240.234820][ C1] RAX: 0000000080000000 RBX: 0000000000000001 RCX: ffffffff9a39a903 [ 240.234832][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0ad7a0 RDI: ffffffff8c602de0 [ 240.234844][ C1] RBP: ffffc90000167aa8 R08: ffffffff901bd1ef R09: 1ffffffff2037a3d [ 240.234856][ C1] R10: dffffc0000000000 R11: fffffbfff2037a3e R12: 1ffff9200002cf5c [ 240.234868][ C1] R13: ffffffff8181a18f R14: ffffffffffffffff R15: 1ffff9200002cf44 [ 240.234880][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 240.234894][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.234905][ C1] CR2: 00007f0ca5467d60 CR3: 000000000e734000 CR4: 00000000003526f0 [ 240.234920][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 240.234929][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 240.234940][ C1] Call Trace: [ 240.234946][ C1] [ 240.234953][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 240.234978][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 240.235000][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 240.235019][ C1] ? nmi_handle+0x2a/0x5a0 [ 240.235041][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 240.235061][ C1] ? nmi_handle+0x14f/0x5a0 [ 240.235076][ C1] ? nmi_handle+0x2a/0x5a0 [ 240.235092][ C1] ? check_preemption_disabled+0x5c/0x120 [ 240.235109][ C1] ? default_do_nmi+0x63/0x160 [ 240.235128][ C1] ? exc_nmi+0x123/0x1f0 [ 240.235145][ C1] ? end_repeat_nmi+0xf/0x53 [ 240.235161][ C1] ? __timer_delete_sync+0x12f/0x310 [ 240.235183][ C1] ? check_preemption_disabled+0x5c/0x120 [ 240.235201][ C1] ? check_preemption_disabled+0x5c/0x120 [ 240.235219][ C1] ? check_preemption_disabled+0x5c/0x120 [ 240.235236][ C1] [ 240.235241][ C1] [ 240.235248][ C1] lockdep_hardirqs_on_prepare+0x1f9/0x780 [ 240.235270][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 240.235292][ C1] ? rcu_is_watching+0x15/0xb0 [ 240.235307][ C1] ? __timer_delete_sync+0x12f/0x310 [ 240.235325][ C1] trace_hardirqs_on+0x28/0x40 [ 240.235343][ C1] __timer_delete_sync+0x15c/0x310 [ 240.235363][ C1] ? __pfx___timer_delete_sync+0x10/0x10 [ 240.235381][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 240.235403][ C1] ? schedule+0x90/0x320 [ 240.235421][ C1] ? schedule+0x90/0x320 [ 240.235438][ C1] ? schedule+0x155/0x320 [ 240.235457][ C1] schedule_timeout+0x1c8/0x310 [ 240.235476][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 240.235494][ C1] ? __pfx_process_timeout+0x10/0x10 [ 240.235515][ C1] ? prepare_to_swait_event+0x330/0x350 [ 240.235538][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 240.235553][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 240.235573][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 240.235589][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 240.235604][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 240.235626][ C1] ? finish_swait+0xd4/0x1e0 [ 240.235647][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 240.235663][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 240.235677][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 240.235699][ C1] ? __kthread_parkme+0x169/0x1d0 [ 240.235721][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 240.235735][ C1] kthread+0x2f0/0x390 [ 240.235750][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 240.235763][ C1] ? __pfx_kthread+0x10/0x10 [ 240.235778][ C1] ret_from_fork+0x4b/0x80 [ 240.235797][ C1] ? __pfx_kthread+0x10/0x10 [ 240.235812][ C1] ret_from_fork_asm+0x1a/0x30 [ 240.235838][ C1] [ 240.645399][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 240.652564][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00389-g3d5ad2d4eca3 #0 [ 240.663089][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 240.673255][ T30] Call Trace: [ 240.676567][ T30] [ 240.679521][ T30] dump_stack_lvl+0x241/0x360 [ 240.684246][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.689483][ T30] ? __pfx__printk+0x10/0x10 [ 240.694100][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 240.700135][ T30] ? vscnprintf+0x5d/0x90 [ 240.704539][ T30] panic+0x349/0x880 [ 240.708464][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 240.714657][ T30] ? __pfx_panic+0x10/0x10 [ 240.719101][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 240.724493][ T30] ? __irq_work_queue_local+0x137/0x410 [ 240.730065][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 240.735540][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 240.741699][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 240.747974][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 240.754258][ T30] watchdog+0x1033/0x1040 [ 240.758680][ T30] ? watchdog+0x1ea/0x1040 [ 240.763130][ T30] ? __pfx_watchdog+0x10/0x10 [ 240.767819][ T30] kthread+0x2f0/0x390 [ 240.771892][ T30] ? __pfx_watchdog+0x10/0x10 [ 240.776586][ T30] ? __pfx_kthread+0x10/0x10 [ 240.781186][ T30] ret_from_fork+0x4b/0x80 [ 240.785632][ T30] ? __pfx_kthread+0x10/0x10 [ 240.790244][ T30] ret_from_fork_asm+0x1a/0x30 [ 240.795036][ T30] [ 240.798442][ T30] Kernel Offset: disabled [ 240.802759][ T30] Rebooting in 86400 seconds..