last executing test programs: 5.994722532s ago: executing program 0 (id=629): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 5.923827331s ago: executing program 1 (id=633): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000003c0)='M', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)='p', 0x29fcb, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240), 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7a, 0xdd, 0x15, 0x20, 0x545, 0x8080, 0x301, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0xc3, 0x85}}]}}]}}, 0x0) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x4048044, 0x0, 0x0) 4.976348555s ago: executing program 2 (id=636): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0xd, 0x0, 0x27f}) 4.975970255s ago: executing program 0 (id=637): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x24008880, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0xa0000010}) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x81, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xfffffffb}, 0x1c) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="940000000206010800000000000000000a0000000500040000000000050005000300000004000780050005000a0000000900020073797a320000000011000300686173683a69702c6d61726b000000000500010007000000050004000200000024000780080700400000000705001400060000000800064000000005080300686173683a6e657400000000"], 0x94}}, 0x0) writev(r0, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c40)=ANY=[@ANYBLOB="1201000000000010f304550700000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x3, &(0x7f0000000140)=[{0x81, 0xfb, 0x3}, {0x0, 0x8, 0x0, 0x492}, {0x0, 0xf8, 0x5, 0x4}]}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000780)={0x2c, &(0x7f0000000540)={0x20, 0x22, 0xa, {0xa, 0x31, "8315e7c536d2723e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000680), 0x5c26, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) write(r3, &(0x7f0000000240)="44e81c08d418b06e24f929a4d657f25591915967da8214a1d955c6417ef71a2026979afb02ab6c428f2d0b56b64ecc64d64c3363c4c2f6dc340cabed369a4c33dcebdf86513d8389126fef0e50f23c868bae19f571e653459c4aa2a608ae4fd71de932ed2c8e6479d6c5baf01ed6877383119d6b67b3624f04112e40a630d3f36d1dd64d1e2e296d195c61f64cff73d4dcf268785f54b80e014b3a182a5610a6a7bf240b919b0ac5b904ed70f59b7b30e3e55dbfc00b8ba58c521f21c855630fe4decf90dfc8336037f2cfb4792857d831009604179371b566d81e2c77dac6f31d2715ec4bb5fed5829b76bf89702ca5f8563dd5", 0xf4) 4.947108474s ago: executing program 3 (id=638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_open_procfs(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) munmap(&(0x7f000099b000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7ee}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x3, 0xffffffffffffffff, 0x80800000, 0x8001}, 0x81}}]}, {}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x2) 4.739264413s ago: executing program 4 (id=639): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x20000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.738172423s ago: executing program 2 (id=649): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1a103e43) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 4.677026442s ago: executing program 3 (id=640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x44, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) ioctl$TCXONC(r3, 0x4b3a, 0x2) 4.627101732s ago: executing program 2 (id=641): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 4.626094202s ago: executing program 3 (id=642): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 3.836796277s ago: executing program 2 (id=643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000080)=""/82, 0x52}], 0x1, 0x0, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) 3.817065007s ago: executing program 4 (id=644): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x2, @long={0x3, 0xffff, {0x100}}}, 0x14) 3.744024006s ago: executing program 3 (id=645): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) userfaultfd(0x80001) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='mountinfo\x00') ppoll(&(0x7f0000000200)=[{r4, 0xc020}], 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.736351396s ago: executing program 4 (id=646): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000c7910a800000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x6) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 3.647380435s ago: executing program 4 (id=647): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fstatfs(r0, &(0x7f0000000380)=""/157) 2.756081629s ago: executing program 1 (id=648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_emit_ethernet(0xa4, &(0x7f00000002c0)={@empty, @link_local, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x1, 0x2, 0x96, 0x65, 0x0, 0x6, 0x2, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x17, 0x29, [@local, @local, @rand_addr=0x64010100, @multicast2, @remote]}, @rr={0x7, 0x7, 0x99, [@rand_addr=0x64010101]}, @end]}}, "948f5c8c3f55b26378149c322976f18ba588dcbe437abab2e0d99b82bd9166316f67b8ef5c451f3af6c04482293bccd0b4b345877be7aed8c6f58db79fee38dfb8a5e005d87074bc3566c01b9d878dc1dce8b02cd27ae49e8a9857c00166aa4a0a5a"}}}}, 0x0) socket$inet6(0xa, 0x3, 0x7) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00') preadv(r4, 0x0, 0x0, 0x1239, 0x4b4a) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="ec8799852b90091c", 0x8}], 0x1, 0x0, 0x0, 0xc011}], 0x1, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000001400)=""/18, 0x12) 2.731656609s ago: executing program 2 (id=650): socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.731354069s ago: executing program 4 (id=651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) flistxattr(r2, &(0x7f00000024c0)=""/65, 0x41) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x40045108, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000300)='\\./+\x00', 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000040)) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, &(0x7f0000000000)={0x1, 0x1, 0x1b, 0x0, 0x2, 0x0}) ioctl$TCFLSH(r5, 0x40384708, 0x20000000) tgkill(r4, r4, 0x21) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000100)='wlan1\x00') r6 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) 1.51884412s ago: executing program 2 (id=652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_open_procfs(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) munmap(&(0x7f000099b000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7ee}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x3, 0xffffffffffffffff, 0x80800000, 0x8001}, 0x81}}]}, {}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x2) 1.47207545s ago: executing program 3 (id=653): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x44, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) ioctl$TCXONC(r3, 0x4b3a, 0x2) 1.47186222s ago: executing program 0 (id=654): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0), 0x0) 1.31202456s ago: executing program 0 (id=655): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 1.068169658s ago: executing program 0 (id=656): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x20000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.068000178s ago: executing program 1 (id=657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000015c0)={0x14, r1, 0x303, 0xfffff7fb, 0x25dfdbfb, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000a4) 1.067713108s ago: executing program 3 (id=658): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) connect$bt_sco(r3, &(0x7f0000000040), 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 1.067469628s ago: executing program 4 (id=659): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0xfff, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9eb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r1, 0x5501) 906.364707ms ago: executing program 1 (id=660): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x2, @short={0x2, 0xffff, 0xaaa3}}, 0x14) 906.184987ms ago: executing program 1 (id=661): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x70) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='mpol=interleave=static,m']) 899.139846ms ago: executing program 1 (id=662): socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 0s ago: executing program 0 (id=663): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'vlan1\x00', {0x2}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts. [ 43.483220][ T4014] cgroup: Unknown subsys name 'net' [ 43.728647][ T4014] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 44.054009][ T4014] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 45.576905][ T4025] chnl_net:caif_netlink_parms(): no params data found [ 45.646262][ T4026] chnl_net:caif_netlink_parms(): no params data found [ 45.675616][ T4032] chnl_net:caif_netlink_parms(): no params data found [ 45.716752][ T4025] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.718822][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.721438][ T4025] device bridge_slave_0 entered promiscuous mode [ 45.727444][ T4031] chnl_net:caif_netlink_parms(): no params data found [ 45.730987][ T4025] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.733152][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.735615][ T4025] device bridge_slave_1 entered promiscuous mode [ 45.779427][ T4026] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.781327][ T4026] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.784444][ T4026] device bridge_slave_0 entered promiscuous mode [ 45.806661][ T4032] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.808473][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.810972][ T4032] device bridge_slave_0 entered promiscuous mode [ 45.819102][ T4026] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.820887][ T4026] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.823864][ T4026] device bridge_slave_1 entered promiscuous mode [ 45.835199][ T4025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.837723][ T4035] chnl_net:caif_netlink_parms(): no params data found [ 45.845444][ T4032] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.847093][ T4032] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.849688][ T4032] device bridge_slave_1 entered promiscuous mode [ 45.865171][ T4026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.869477][ T4026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.873486][ T4025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.911549][ T4032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.935445][ T4032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.951545][ T4026] team0: Port device team_slave_0 added [ 45.954840][ T4026] team0: Port device team_slave_1 added [ 45.966474][ T4025] team0: Port device team_slave_0 added [ 45.975650][ T4032] team0: Port device team_slave_0 added [ 45.978658][ T4032] team0: Port device team_slave_1 added [ 45.980391][ T4031] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.982254][ T4031] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.985054][ T4031] device bridge_slave_0 entered promiscuous mode [ 46.000368][ T4025] team0: Port device team_slave_1 added [ 46.002951][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.004673][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.011158][ T4026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.024424][ T4031] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.026261][ T4031] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.028961][ T4031] device bridge_slave_1 entered promiscuous mode [ 46.031848][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.034358][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.040832][ T4026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.087096][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.088851][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.095866][ T4032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.106727][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.108479][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.121562][ T4025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.125403][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.127318][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.130780][ T4035] device bridge_slave_0 entered promiscuous mode [ 46.134130][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.136010][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.143254][ T4032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.148700][ T4031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.161934][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.164228][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.170835][ T4025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.174615][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.176432][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.178895][ T4035] device bridge_slave_1 entered promiscuous mode [ 46.185745][ T4031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.254845][ T4026] device hsr_slave_0 entered promiscuous mode [ 46.302957][ T4026] device hsr_slave_1 entered promiscuous mode [ 46.362977][ T4035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.376080][ T4035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.414885][ T4031] team0: Port device team_slave_0 added [ 46.474754][ T4025] device hsr_slave_0 entered promiscuous mode [ 46.512820][ T4025] device hsr_slave_1 entered promiscuous mode [ 46.552736][ T4025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.554659][ T4025] Cannot create hsr debugfs directory [ 46.563553][ T4031] team0: Port device team_slave_1 added [ 46.614678][ T4032] device hsr_slave_0 entered promiscuous mode [ 46.652858][ T4032] device hsr_slave_1 entered promiscuous mode [ 46.692711][ T4032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.694620][ T4032] Cannot create hsr debugfs directory [ 46.697766][ T4035] team0: Port device team_slave_0 added [ 46.745369][ T4035] team0: Port device team_slave_1 added [ 46.803435][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.805327][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.812019][ T4031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.816452][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.818204][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.825053][ T4031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.859887][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.861770][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.868973][ T4035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.889511][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.891301][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.897933][ T4035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.994487][ T4031] device hsr_slave_0 entered promiscuous mode [ 47.033333][ T4031] device hsr_slave_1 entered promiscuous mode [ 47.072587][ T4031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.074446][ T4031] Cannot create hsr debugfs directory [ 47.134787][ T4035] device hsr_slave_0 entered promiscuous mode [ 47.172863][ T4035] device hsr_slave_1 entered promiscuous mode [ 47.222649][ T4035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.224603][ T4035] Cannot create hsr debugfs directory [ 47.351590][ T4026] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.373086][ T25] Bluetooth: hci4: command 0x0409 tx timeout [ 47.374997][ T25] Bluetooth: hci3: command 0x0409 tx timeout [ 47.376608][ T25] Bluetooth: hci2: command 0x0409 tx timeout [ 47.378186][ T25] Bluetooth: hci1: command 0x0409 tx timeout [ 47.379766][ T25] Bluetooth: hci0: command 0x0409 tx timeout [ 47.399372][ T4026] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.434998][ T4026] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.486386][ T4026] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.550173][ T4025] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.598335][ T4025] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.655429][ T4025] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.704547][ T4025] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.781614][ T4032] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.820284][ T4032] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.864727][ T4032] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.922734][ T4032] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.004708][ T4035] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 48.080755][ T4035] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 48.130641][ T4035] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 48.173225][ T4035] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 48.236774][ T4031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.278691][ T4026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.283072][ T4031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.337311][ T4025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.339456][ T4031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.385662][ T4031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.427465][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.430869][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.433227][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.436175][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.453544][ T4025] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.466580][ T4026] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.481127][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.485546][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.488464][ T1689] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.490273][ T1689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.505575][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.508119][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.510719][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.514185][ T1689] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.515909][ T1689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.518102][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.520633][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.525567][ T1689] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.527328][ T1689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.530311][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.547459][ T4032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.558021][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.561073][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.564957][ T1689] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.566672][ T1689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.578727][ T4032] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.584766][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.587564][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.589902][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.606248][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.609057][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.611838][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.615415][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.618063][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.620446][ T1689] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.622269][ T1689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.627201][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.629948][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.634199][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.647316][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.651773][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.657568][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.660760][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.666548][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.670944][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.703767][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.708089][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.718118][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.724649][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.741833][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.746548][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.750194][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.753879][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.764699][ T4035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.785835][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.788462][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.791033][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.794488][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.797085][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.800043][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.814063][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.816878][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.820011][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.823739][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.826518][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.829047][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.831489][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.837718][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.841201][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.844703][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.865331][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.867883][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.870551][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.874229][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.884743][ T4035] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.889204][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.909276][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.912018][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.933682][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.936293][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.938830][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.940707][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.954069][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.972261][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.978684][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.981050][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.008718][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.011418][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.014512][ T1689] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.016235][ T1689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.018528][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.021207][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.029474][ T1689] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.031253][ T1689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.035503][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.039819][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.041809][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.058727][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.061522][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.068580][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.073548][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.089380][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.091219][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.102101][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.111393][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.116593][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.128911][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.131425][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.138374][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.140897][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.144363][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.146788][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.157327][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.159873][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.176644][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.178737][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.180743][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.184819][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.187415][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.195884][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.199723][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.204813][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.210490][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.214172][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.219256][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.227376][ T4032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.231969][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.237199][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.269162][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.271679][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.274802][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.277397][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.286305][ T4026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.292513][ T4025] device veth0_vlan entered promiscuous mode [ 49.296735][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.299097][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.301468][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.312084][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.339551][ T4025] device veth1_vlan entered promiscuous mode [ 49.346722][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.349105][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.351756][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.357457][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.403598][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.406171][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.408714][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.411776][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.418647][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.440714][ T4035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.453102][ T4073] Bluetooth: hci0: command 0x041b tx timeout [ 49.454781][ T4073] Bluetooth: hci1: command 0x041b tx timeout [ 49.456444][ T4073] Bluetooth: hci2: command 0x041b tx timeout [ 49.458118][ T4073] Bluetooth: hci3: command 0x041b tx timeout [ 49.462225][ T4073] Bluetooth: hci4: command 0x041b tx timeout [ 49.469612][ T4032] device veth0_vlan entered promiscuous mode [ 49.473373][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.475970][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.478429][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.480876][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.484940][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.487391][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.493809][ T4025] device veth0_macvtap entered promiscuous mode [ 49.504255][ T4025] device veth1_macvtap entered promiscuous mode [ 49.507921][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.510392][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.513304][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.515666][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.517999][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.520262][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.526456][ T4026] device veth0_vlan entered promiscuous mode [ 49.552691][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.554738][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.557912][ T4026] device veth1_vlan entered promiscuous mode [ 49.565949][ T4032] device veth1_vlan entered promiscuous mode [ 49.571854][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.577483][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.580170][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.588205][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.590825][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.596563][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.618522][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.622324][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.625248][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.627676][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.630244][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.649809][ T4025] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.661744][ T4025] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.665717][ T4025] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.668060][ T4025] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.684372][ T4026] device veth0_macvtap entered promiscuous mode [ 49.688525][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.691075][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.694708][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.723246][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.726010][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.728556][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.731051][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.735960][ T4026] device veth1_macvtap entered promiscuous mode [ 49.750223][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.752985][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.755446][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.758384][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.760785][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.766730][ T4031] device veth0_vlan entered promiscuous mode [ 49.773502][ T4032] device veth0_macvtap entered promiscuous mode [ 49.785127][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.787698][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.790273][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.818667][ T4032] device veth1_macvtap entered promiscuous mode [ 49.834298][ T4031] device veth1_vlan entered promiscuous mode [ 49.855814][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.858573][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.862282][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.866405][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.869051][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.871701][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.875656][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.878358][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.880720][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.889456][ T4035] device veth0_vlan entered promiscuous mode [ 49.907671][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.916070][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.921991][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.938414][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.941952][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.951083][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.956847][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.987659][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.991717][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.001584][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.009290][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.018765][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.022063][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.026412][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.030222][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.039987][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.053256][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.063489][ T4031] device veth0_macvtap entered promiscuous mode [ 50.069695][ T4026] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.077212][ T4026] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.081972][ T4026] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.087179][ T4026] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.097002][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.101589][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.107744][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.121279][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.128471][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.135242][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.137816][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.140700][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.148929][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.151635][ T4035] device veth1_vlan entered promiscuous mode [ 50.156141][ T4031] device veth1_macvtap entered promiscuous mode [ 50.160414][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.163628][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.166031][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.168580][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.174025][ T4032] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.176196][ T4032] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.178346][ T4032] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.180430][ T4032] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.235304][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.238073][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.240769][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.245749][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.248131][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.250928][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.264459][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.281901][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.285855][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.289594][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.324099][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.326858][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.360443][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.370510][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.375597][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.378371][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.381028][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.384433][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.388888][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.403971][ T4035] device veth0_macvtap entered promiscuous mode [ 50.406444][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.408720][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.411350][ T4035] device veth1_macvtap entered promiscuous mode [ 50.417412][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.419908][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.424333][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.430203][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.433473][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.450267][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.454790][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.457247][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.459757][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.462239][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.466030][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.468552][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.471136][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.475094][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.492897][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.495494][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.510595][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.515035][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.518999][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.521728][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.524971][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.527671][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.530228][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.534168][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.538041][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.549746][ T4035] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.551935][ T4035] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.554829][ T4035] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.557113][ T4035] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.570258][ T4031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.574292][ T4031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.577326][ T4031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.579669][ T4031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.599224][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.601597][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.736630][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.739440][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.742048][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.562647][ T4074] Bluetooth: hci4: command 0x040f tx timeout [ 51.564358][ T4074] Bluetooth: hci3: command 0x040f tx timeout [ 51.566355][ T4074] Bluetooth: hci2: command 0x040f tx timeout [ 51.568522][ T4074] Bluetooth: hci1: command 0x040f tx timeout [ 51.570210][ T4074] Bluetooth: hci0: command 0x040f tx timeout [ 51.690496][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.694060][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.700830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.707096][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.709132][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.717039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.631782][ T346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.634430][ T346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.639028][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.740866][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.743168][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.747306][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.749149][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.783948][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.789927][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.811009][ T4135] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1'. [ 52.841731][ T346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.850974][ T346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.899508][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.129541][ T4148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11'. [ 53.134695][ T4148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11'. [ 53.785506][ T4078] Bluetooth: hci0: command 0x0419 tx timeout [ 53.787198][ T4078] Bluetooth: hci1: command 0x0419 tx timeout [ 53.810849][ T4078] Bluetooth: hci2: command 0x0419 tx timeout [ 53.818808][ T4078] Bluetooth: hci3: command 0x0419 tx timeout [ 53.844160][ T4078] Bluetooth: hci4: command 0x0419 tx timeout [ 53.923353][ T4151] input: syz1 as /devices/virtual/input/input2 [ 55.580243][ T4174] netlink: 'syz.3.16': attribute type 4 has an invalid length. [ 57.338195][ T4203] overlayfs: invalid redirect ((null)) [ 57.421538][ T4212] udc-core: couldn't find an available UDC or it's busy [ 57.423510][ T4212] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 57.534943][ T4213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.26'. [ 57.539901][ T4213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.26'. [ 58.177421][ T4214] udc-core: couldn't find an available UDC or it's busy [ 58.179295][ T4214] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 58.439912][ T4212] udc-core: couldn't find an available UDC or it's busy [ 58.441734][ T4212] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.253886][ T4231] netlink: 'syz.4.34': attribute type 11 has an invalid length. [ 60.532422][ C0] sched: RT throttling activated [ 61.311146][ T4274] netlink: 28 bytes leftover after parsing attributes in process `syz.4.44'. [ 61.314526][ T4274] netlink: 28 bytes leftover after parsing attributes in process `syz.4.44'. [ 65.216868][ T4318] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.58'. [ 65.244296][ T4309] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.58'. [ 65.255853][ T4317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.59'. [ 65.474014][ T4337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.501857][ T4343] udc-core: couldn't find an available UDC or it's busy [ 65.509272][ T4343] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 65.732631][ T4077] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.992652][ T4077] usb 1-1: Using ep0 maxpacket: 8 [ 66.112583][ T4077] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.115204][ T4077] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 66.117424][ T4077] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.128965][ T4077] usb 1-1: config 0 descriptor?? [ 66.167508][ T4077] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 66.405669][ T26] audit: type=1326 audit(66.370:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4359 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817c7aa8 code=0x7ffc0000 [ 66.411585][ T26] audit: type=1326 audit(66.380:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4359 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=28 compat=0 ip=0xffff817c7aa8 code=0x7ffc0000 [ 66.432267][ T26] audit: type=1326 audit(66.380:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4359 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817c7aa8 code=0x7ffc0000 [ 67.307515][ T4373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.69'. [ 67.310965][ T4373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.69'. [ 68.301326][ T26] audit: type=1326 audit(68.270:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba5acaa8 code=0x7ffc0000 [ 68.308101][ T26] audit: type=1326 audit(68.280:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffba5acaa8 code=0x7ffc0000 [ 68.327323][ T26] audit: type=1326 audit(68.280:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba5acaa8 code=0x7ffc0000 [ 68.342832][ T26] audit: type=1326 audit(68.280:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=26 compat=0 ip=0xffffba5acaa8 code=0x7ffc0000 [ 68.355223][ T26] audit: type=1326 audit(68.280:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba5acaa8 code=0x7ffc0000 [ 68.375100][ T26] audit: type=1326 audit(68.280:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=27 compat=0 ip=0xffffba5acaa8 code=0x7ffc0000 [ 68.392049][ T26] audit: type=1326 audit(68.280:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba5acaa8 code=0x7ffc0000 [ 68.467257][ T4362] capability: warning: `syz.3.71' uses deprecated v2 capabilities in a way that may be insecure [ 68.548122][ T4077] gspca_vc032x: reg_w err -71 [ 68.549350][ T4077] vc032x: probe of 1-1:0.0 failed with error -71 [ 68.555252][ T4077] usb 1-1: USB disconnect, device number 2 [ 69.440297][ T4410] netlink: 'syz.1.83': attribute type 10 has an invalid length. [ 69.442238][ T4410] netlink: 55 bytes leftover after parsing attributes in process `syz.1.83'. [ 69.519952][ T4411] udc-core: couldn't find an available UDC or it's busy [ 69.521691][ T4411] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 69.616678][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.618440][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.071544][ T4434] netlink: 'syz.0.95': attribute type 10 has an invalid length. [ 70.079839][ T4434] netlink: 55 bytes leftover after parsing attributes in process `syz.0.95'. [ 70.937028][ T4074] Bluetooth: hci2: command 0x0401 tx timeout [ 71.505134][ T4455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.88'. [ 71.508493][ T4455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.88'. [ 72.282314][ T4462] udc-core: couldn't find an available UDC or it's busy [ 72.421190][ T4462] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 72.851190][ T4470] snd_aloop snd_aloop.0: control 4:4:65536:syz0:6 is already present [ 75.000453][ T7] cfg80211: failed to load regulatory.db [ 75.037396][ T4488] netlink: 'syz.4.103': attribute type 10 has an invalid length. [ 75.046866][ T4488] netlink: 55 bytes leftover after parsing attributes in process `syz.4.103'. [ 75.202347][ T4500] udc-core: couldn't find an available UDC or it's busy [ 75.225143][ T4500] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 76.188379][ T4512] udc-core: couldn't find an available UDC or it's busy [ 76.190198][ T4512] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 76.198167][ T4500] udc-core: couldn't find an available UDC or it's busy [ 76.200636][ T4500] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 76.206381][ T4500] udc-core: couldn't find an available UDC or it's busy [ 76.246444][ T4500] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 76.687561][ T4521] snd_aloop snd_aloop.0: control 4:4:65536:syz0:6 is already present [ 77.659796][ T4511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.107'. [ 77.662144][ T4511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.107'. [ 79.489265][ T4549] netlink: 56 bytes leftover after parsing attributes in process `syz.3.114'. [ 79.507171][ T4549] tipc: Enabling of bearer <^dp:s> rejected, media not registered [ 79.518913][ T4552] udc-core: couldn't find an available UDC or it's busy [ 79.520611][ T4552] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 79.749489][ T26] audit: type=1326 audit(79.700:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4554 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0361aa8 code=0x7ffc0000 [ 79.756963][ T26] audit: type=1326 audit(79.700:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4554 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0361aa8 code=0x7ffc0000 [ 79.763276][ T26] audit: type=1326 audit(79.730:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4554 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=187 compat=0 ip=0xffffa0361aa8 code=0x7ffc0000 [ 79.768840][ T26] audit: type=1326 audit(79.730:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4554 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0361aa8 code=0x7ffc0000 [ 79.775728][ T26] audit: type=1326 audit(79.730:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4554 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=204 compat=0 ip=0xffffa0361aa8 code=0x7ffc0000 [ 79.781403][ T26] audit: type=1326 audit(79.730:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4554 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0361aa8 code=0x7ffc0000 [ 79.787647][ T26] audit: type=1326 audit(79.730:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4554 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa0361aa8 code=0x7ffc0000 [ 79.804215][ T26] audit: type=1326 audit(79.730:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4554 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0361aa8 code=0x7ffc0000 [ 81.504802][ T4576] snd_aloop snd_aloop.0: control 4:4:65536:syz0:6 is already present [ 81.733381][ T4584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.124'. [ 81.736656][ T4584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.124'. [ 82.054238][ T4586] udc-core: couldn't find an available UDC or it's busy [ 82.056004][ T4586] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 82.459319][ T4078] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 83.052540][ T4594] snd_aloop snd_aloop.0: control 4:4:65536:syz0:6 is already present [ 84.200613][ T4598] netlink: 'syz.3.127': attribute type 10 has an invalid length. [ 84.386329][ T4598] netlink: 55 bytes leftover after parsing attributes in process `syz.3.127'. [ 84.683327][ T4603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 85.609354][ T4625] snd_aloop snd_aloop.0: control 4:4:65536:syz0:6 is already present [ 86.748250][ T4636] netlink: 28 bytes leftover after parsing attributes in process `syz.4.141'. [ 86.750721][ T4636] netlink: 28 bytes leftover after parsing attributes in process `syz.4.141'. [ 87.908820][ T4638] snd_aloop snd_aloop.0: control 4:4:65536:syz0:6 is already present [ 88.219698][ T4641] udc-core: couldn't find an available UDC or it's busy [ 88.227036][ T4641] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 88.641778][ T4641] udc-core: couldn't find an available UDC or it's busy [ 88.647484][ T4641] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 88.651266][ T4641] udc-core: couldn't find an available UDC or it's busy [ 88.657282][ T4641] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 88.660352][ T4641] udc-core: couldn't find an available UDC or it's busy [ 88.662149][ T4641] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 89.196705][ T4659] Zero length message leads to an empty skb [ 90.136499][ T4016] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.162716][ T4681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.160'. [ 90.165102][ T4681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.160'. [ 91.432729][ T4016] usb 1-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 91.435259][ T4016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.437491][ T4016] usb 1-1: Product: syz [ 91.438550][ T4016] usb 1-1: Manufacturer: syz [ 91.439877][ T4016] usb 1-1: SerialNumber: syz [ 91.474938][ T4706] udc-core: couldn't find an available UDC or it's busy [ 91.479696][ T4706] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 91.508839][ T4016] usb 1-1: config 0 descriptor?? [ 91.562661][ T26] audit: type=1326 audit(91.530:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4703 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0361aa8 code=0x7ffc0000 [ 91.568035][ T26] audit: type=1326 audit(91.530:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4703 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffa0361aa8 code=0x7ffc0000 [ 91.602673][ T26] audit: type=1326 audit(91.530:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4703 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0361aa8 code=0x7ffc0000 [ 91.608303][ T26] audit: type=1326 audit(91.530:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4703 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0361aa8 code=0x7ffc0000 [ 91.615451][ T26] audit: type=1326 audit(91.560:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4703 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffa0360170 code=0x7ffc0000 [ 91.628069][ T26] audit: type=1326 audit(91.560:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4703 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0361aa8 code=0x7ffc0000 [ 91.644925][ T4711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.172'. [ 91.647208][ T4711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.172'. [ 92.361857][ T4544] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.365338][ T4713] udc-core: couldn't find an available UDC or it's busy [ 92.367056][ T4713] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 92.422544][ T4016] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 92.425904][ T4016] peak_usb 1-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 92.438462][ T4706] udc-core: couldn't find an available UDC or it's busy [ 92.440213][ T4706] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 92.456663][ T4706] udc-core: couldn't find an available UDC or it's busy [ 92.458447][ T4706] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 92.545166][ T4016] peak_usb: probe of 1-1:0.0 failed with error -71 [ 92.548730][ T4016] usb 1-1: USB disconnect, device number 4 [ 92.672548][ T4721] capability: warning: `syz.0.176' uses 32-bit capabilities (legacy support in use) [ 93.858449][ T26] audit: type=1326 audit(93.830:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4734 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817c7aa8 code=0x7ffc0000 [ 93.883586][ T26] audit: type=1326 audit(93.860:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4734 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=187 compat=0 ip=0xffff817c7aa8 code=0x7ffc0000 [ 93.891765][ T26] audit: type=1326 audit(93.860:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4734 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817c7aa8 code=0x7ffc0000 [ 93.923208][ T26] audit: type=1326 audit(93.860:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4734 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817c7aa8 code=0x7ffc0000 [ 93.975285][ T4742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.185'. [ 93.977500][ T4742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.185'. [ 94.291797][ T4755] udc-core: couldn't find an available UDC or it's busy [ 94.433864][ T4076] Bluetooth: hci0: command 0x080f tx timeout [ 95.251199][ T4755] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 95.610381][ T4755] udc-core: couldn't find an available UDC or it's busy [ 95.612317][ T4755] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 96.765758][ T4784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.198'. [ 96.768948][ T4784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.198'. [ 97.899807][ T4806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.215'. [ 97.902366][ T4806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.215'. [ 103.403856][ T4847] netlink: 16 bytes leftover after parsing attributes in process `syz.0.221'. [ 103.507198][ T4856] process 'syz.4.218' launched '/dev/fd/5' with NULL argv: empty string added [ 106.888128][ T4877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'. [ 106.890643][ T4877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'. [ 107.748080][ T4885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'. [ 109.743132][ T4036] Bluetooth: hci2: Received unexpected HCI Event 00000000 [ 113.637754][ T4961] netlink: 28 bytes leftover after parsing attributes in process `syz.3.246'. [ 113.640095][ T4961] netlink: 28 bytes leftover after parsing attributes in process `syz.3.246'. [ 116.483469][ T4981] binder: 4976:4981 got transaction to invalid handle, 1 [ 116.495952][ T4981] binder: 4976:4981 transaction failed 29201/-22, size 0-0 line 2917 [ 116.498951][ T4981] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.060522][ T4998] udc-core: couldn't find an available UDC or it's busy [ 118.077651][ T4998] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 119.254819][ T5008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.263'. [ 119.258321][ T5008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.263'. [ 120.903201][ T5028] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 120.905528][ T5028] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 120.908647][ T5028] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 120.910741][ T5028] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 122.295867][ T5056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.277'. [ 122.298194][ T5056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.277'. [ 124.686094][ T5072] udc-core: couldn't find an available UDC or it's busy [ 124.692769][ T5072] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 125.782945][ T5075] netlink: 'syz.3.285': attribute type 21 has an invalid length. [ 125.791467][ T5075] netlink: 156 bytes leftover after parsing attributes in process `syz.3.285'. [ 126.321090][ T5097] udc-core: couldn't find an available UDC or it's busy [ 126.322922][ T5097] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 128.309413][ T5107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.293'. [ 128.311892][ T5107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.293'. [ 128.748538][ T5116] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input4 [ 128.947353][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 128.947367][ T26] audit: type=1326 audit(128.920:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.1.305" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba5acaa8 code=0x0 [ 130.716560][ T5148] udc-core: couldn't find an available UDC or it's busy [ 130.718568][ T5148] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 131.017657][ T5157] xt_NFQUEUE: number of total queues is 0 [ 131.055094][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.056859][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.254862][ T5160] netlink: 28 bytes leftover after parsing attributes in process `syz.4.315'. [ 131.257220][ T5160] netlink: 28 bytes leftover after parsing attributes in process `syz.4.315'. [ 131.990621][ T5164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 132.504919][ T5182] udc-core: couldn't find an available UDC or it's busy [ 132.506925][ T5182] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 133.582227][ T5194] overlayfs: invalid redirect ((null)) [ 135.851448][ T5222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.331'. [ 135.854749][ T5222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.331'. [ 136.563942][ T547] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 136.622750][ T4173] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 137.008400][ T4173] usb 1-1: Using ep0 maxpacket: 32 [ 137.292220][ T5237] udc-core: couldn't find an available UDC or it's busy [ 137.292960][ T4173] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 137.296671][ T4173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.297613][ T5237] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 137.298827][ T4173] usb 1-1: Product: syz [ 137.302068][ T4173] usb 1-1: Manufacturer: syz [ 137.315099][ T4173] usb 1-1: SerialNumber: syz [ 137.473459][ T4173] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 138.268141][ T5239] overlayfs: invalid redirect ((null)) [ 138.333364][ T4173] gspca_stk1135: reg_w 0x2 err -110 [ 138.335916][ T4173] gspca_stk1135: serial bus timeout: status=0x00 [ 138.337700][ T4173] gspca_stk1135: Sensor write failed [ 138.340214][ T4173] gspca_stk1135: serial bus timeout: status=0x00 [ 138.345061][ T4173] gspca_stk1135: Sensor write failed [ 138.348613][ T4173] gspca_stk1135: serial bus timeout: status=0x00 [ 138.355549][ T4173] gspca_stk1135: Sensor read failed [ 138.361166][ T4173] gspca_stk1135: serial bus timeout: status=0x00 [ 138.367609][ T4173] gspca_stk1135: Sensor read failed [ 138.450964][ T4173] gspca_stk1135: Detected sensor type unknown (0x0) [ 138.467254][ T4173] gspca_stk1135: serial bus timeout: status=0x00 [ 138.471280][ T4173] gspca_stk1135: Sensor read failed [ 138.476651][ T4173] gspca_stk1135: serial bus timeout: status=0x00 [ 138.479753][ T4173] gspca_stk1135: Sensor read failed [ 138.481050][ T4173] gspca_stk1135: serial bus timeout: status=0x00 [ 138.484007][ T4173] gspca_stk1135: Sensor write failed [ 138.485543][ T4173] gspca_stk1135: serial bus timeout: status=0x00 [ 138.487701][ T4173] gspca_stk1135: Sensor write failed [ 138.489536][ T4173] stk1135: probe of 1-1:64.0 failed with error -110 [ 139.617179][ T21] usb 1-1: USB disconnect, device number 5 [ 141.359799][ T5271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.349'. [ 141.363011][ T5271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.349'. [ 142.275089][ T4036] Bluetooth: hci2: link tx timeout [ 142.277907][ T4036] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.909680][ T5314] overlayfs: invalid redirect ((null)) [ 144.038983][ T5323] device geneve2 entered promiscuous mode [ 144.341607][ T1535] Bluetooth: hci2: command 0x0406 tx timeout [ 145.213839][ T5345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.367'. [ 145.216240][ T5345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.367'. [ 146.508581][ T1535] Bluetooth: hci4: command 0x0405 tx timeout [ 147.382011][ T5371] overlayfs: invalid redirect ((null)) [ 148.141748][ T5384] udc-core: couldn't find an available UDC or it's busy [ 148.154079][ T5384] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 148.829768][ T5399] netlink: 28 bytes leftover after parsing attributes in process `syz.4.384'. [ 148.832186][ T5399] netlink: 28 bytes leftover after parsing attributes in process `syz.4.384'. [ 148.844058][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 149.568189][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 149.692760][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.695573][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.697876][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 149.714686][ T13] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 149.732975][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.760994][ T13] usb 1-1: config 0 descriptor?? [ 150.258880][ T13] HID 045e:07da: Invalid code 65791 type 1 [ 150.270735][ T13] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input5 [ 150.294065][ T13] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 150.476795][ T13] usb 1-1: USB disconnect, device number 6 [ 152.007650][ T5449] overlayfs: invalid redirect ((null)) [ 153.143816][ T5462] netlink: 176 bytes leftover after parsing attributes in process `syz.1.397'. [ 153.146541][ T5462] device ip6gretap0 entered promiscuous mode [ 153.178027][ T5462] netlink: 176 bytes leftover after parsing attributes in process `syz.1.397'. [ 153.244270][ T5466] dlm: no local IP address has been set [ 153.283213][ T5466] dlm: cannot start dlm midcomms -107 [ 154.765041][ T5481] udc-core: couldn't find an available UDC or it's busy [ 154.777420][ T5481] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 155.024714][ T5487] smc: net device bond0 applied user defined pnetid SYZ0 [ 155.461280][ T5506] fuse: Invalid rootmode [ 155.961185][ T5443] ODEBUG: Out of memory. ODEBUG disabled [ 156.291772][ T5530] dccp_close: ABORT with 32 bytes unread [ 158.456282][ T5545] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 158.458374][ T5545] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 158.483700][ T5545] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 158.488695][ T5545] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 159.451869][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 159.593385][ T5554] udc-core: couldn't find an available UDC or it's busy [ 159.600271][ T5554] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 159.666787][ T5558] udc-core: couldn't find an available UDC or it's busy [ 159.668508][ T5558] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 159.862506][ T5346] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 160.117542][ T5346] usb 1-1: Using ep0 maxpacket: 8 [ 160.357485][ T5573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.428'. [ 161.120456][ T5443] Set syz1 is full, maxelem 65536 reached [ 161.245383][ T5346] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 161.248278][ T5346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.250785][ T5346] usb 1-1: Product: syz [ 161.256095][ T5346] usb 1-1: Manufacturer: syz [ 161.257614][ T5346] usb 1-1: SerialNumber: syz [ 161.546746][ T5346] usb 1-1: config 0 descriptor?? [ 162.102960][ T5346] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 162.956500][ T5594] infiniband syz1: set active [ 162.956553][ T5594] infiniband syz1: added bond_slave_1 [ 162.984501][ T5594] RDS/IB: syz1: added [ 162.986112][ T5594] smc: adding ib device syz1 with port count 1 [ 162.988297][ T5594] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 163.233644][ T5598] udc-core: couldn't find an available UDC or it's busy [ 163.241707][ T5598] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 163.256921][ T5600] udc-core: couldn't find an available UDC or it's busy [ 163.259610][ T5600] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 163.832748][ T5606] netlink: 512 bytes leftover after parsing attributes in process `syz.2.442'. [ 165.635189][ T5615] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 165.674076][ T5615] cramfs: wrong magic [ 166.873280][ T5346] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 166.881563][ T5346] usb 1-1: USB disconnect, device number 7 [ 167.034827][ T26] audit: type=1326 audit(167.010:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5629 comm="syz.3.451" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0361aa8 code=0x0 [ 167.339955][ T5644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 168.105173][ T5642] netlink: 512 bytes leftover after parsing attributes in process `syz.3.455'. [ 168.350094][ T5653] netlink: 28 bytes leftover after parsing attributes in process `syz.1.448'. [ 168.352617][ T5653] netlink: 28 bytes leftover after parsing attributes in process `syz.1.448'. [ 169.039884][ T5661] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 169.057852][ T5661] cramfs: wrong magic [ 169.221297][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 169.247658][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 169.252090][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 169.257634][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 169.413862][ T5672] udc-core: couldn't find an available UDC or it's busy [ 169.415670][ T5672] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 170.391601][ T5685] netlink: 'syz.0.469': attribute type 10 has an invalid length. [ 170.413872][ T5685] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.416531][ T5685] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.482234][ T5685] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.482394][ T5685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.482601][ T5685] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.482641][ T5685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.544393][ T5685] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 171.516007][ T5701] netlink: 512 bytes leftover after parsing attributes in process `syz.1.472'. [ 172.150863][ T5722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.476'. [ 172.155955][ T5722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.476'. [ 173.195318][ T5737] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 173.206589][ T5737] cramfs: wrong magic [ 173.758734][ T5740] syz.4.480 uses obsolete (PF_INET,SOCK_PACKET) [ 174.689484][ T5756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'. [ 174.734774][ T5756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.483'. [ 175.133776][ T5772] netlink: 'syz.2.490': attribute type 21 has an invalid length. [ 175.136050][ T5772] netlink: 156 bytes leftover after parsing attributes in process `syz.2.490'. [ 175.873639][ T5770] netlink: 512 bytes leftover after parsing attributes in process `syz.0.489'. [ 175.931873][ T5775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.491'. [ 175.934506][ T5775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.491'. [ 177.973359][ T5798] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 177.988292][ T5798] cramfs: wrong magic [ 178.409922][ T5826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.504'. [ 178.412380][ T5826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.504'. [ 179.340000][ T5833] netlink: 512 bytes leftover after parsing attributes in process `syz.4.507'. [ 180.214515][ T5842] netlink: 32 bytes leftover after parsing attributes in process `syz.3.511'. [ 183.315415][ T5890] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 183.653478][ T5893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.521'. [ 183.655869][ T5893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.521'. [ 183.733812][ T5896] netlink: 512 bytes leftover after parsing attributes in process `syz.1.524'. [ 183.822949][ T5890] cramfs: wrong magic [ 184.180174][ T5911] netlink: 284 bytes leftover after parsing attributes in process `syz.4.529'. [ 187.235920][ T5990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.542'. [ 187.238230][ T5990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.542'. [ 189.882202][ T6033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.565'. [ 189.885058][ T6033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.565'. [ 190.937244][ T6046] udc-core: couldn't find an available UDC or it's busy [ 190.939022][ T6046] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 191.083109][ T4036] Bluetooth: hci0: unexpected event for opcode 0x2042 [ 191.088859][ T6056] udc-core: couldn't find an available UDC or it's busy [ 191.090622][ T6056] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 191.144398][ T6061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.578'. [ 192.600500][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.602238][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.665701][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.581'. [ 193.055584][ T6078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.580'. [ 193.058013][ T6078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.580'. [ 193.648367][ T6088] netlink: 48 bytes leftover after parsing attributes in process `syz.2.584'. [ 195.566297][ T6121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.595'. [ 195.568607][ T6121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.595'. [ 195.656205][ T25] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 195.662755][ T25] Bluetooth: hci0: Injecting HCI hardware error event [ 195.908899][ T4036] Bluetooth: hci0: hardware error 0x00 [ 198.543383][ T6159] udc-core: couldn't find an available UDC or it's busy [ 198.545166][ T6159] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 199.166162][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 199.302189][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.4.615'. [ 199.367308][ T6185] netlink: 'syz.4.615': attribute type 7 has an invalid length. [ 199.372746][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.615'. [ 201.063781][ T6185] device ip6gretap0 entered promiscuous mode [ 201.155100][ T6185] device syz_tun entered promiscuous mode [ 201.207911][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 201.283167][ T25] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 201.286513][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 201.289553][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.491908][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.593948][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.064047][ T25] usb 1-1: config 0 descriptor?? [ 202.082550][ T25] usb 1-1: can't set config #0, error -71 [ 202.092873][ T25] usb 1-1: USB disconnect, device number 8 [ 202.259334][ T6207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.618'. [ 202.262012][ T6207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.618'. [ 204.340506][ T6248] udc-core: couldn't find an available UDC or it's busy [ 204.342327][ T6248] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 204.639961][ T6256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.638'. [ 204.642579][ T6256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.638'. [ 205.582647][ T1535] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 205.771656][ T26] audit: type=1326 audit(205.740:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9c79aa8 code=0x7ffc0000 [ 205.778290][ T26] audit: type=1326 audit(205.750:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=44 compat=0 ip=0xffffb9c79aa8 code=0x7ffc0000 [ 205.798627][ T26] audit: type=1326 audit(205.750:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9c79aa8 code=0x7ffc0000 [ 206.582512][ T1535] usb 1-1: Using ep0 maxpacket: 16 [ 207.942531][ T1535] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 207.944373][ T1535] usb 1-1: can't read configurations, error -71 [ 208.220024][ T6300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.652'. [ 208.222377][ T6300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.652'. [ 208.310617][ T6312] input: syz1 as /devices/virtual/input/input6 [ 208.450010][ T6320] tmpfs: Unknown parameter 'm' [ 209.552043][ T4173] [ 209.552667][ T4173] ====================================================== [ 209.554418][ T4173] WARNING: possible circular locking dependency detected [ 209.556277][ T4173] 5.15.174-syzkaller #0 Not tainted [ 209.557621][ T4173] ------------------------------------------------------ [ 209.559353][ T4173] kworker/1:7/4173 is trying to acquire lock: [ 209.560923][ T4173] ffff0000ca418c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 209.563893][ T4173] [ 209.563893][ T4173] but task is already holding lock: [ 209.565830][ T4173] ffff800016f36ba8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x58/0x158 [ 209.568160][ T4173] [ 209.568160][ T4173] which lock already depends on the new lock. [ 209.568160][ T4173] [ 209.570696][ T4173] [ 209.570696][ T4173] the existing dependency chain (in reverse order) is: [ 209.573051][ T4173] [ 209.573051][ T4173] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 209.575166][ T4173] __mutex_lock_common+0x194/0x2154 [ 209.576702][ T4173] mutex_lock_nested+0xa4/0xf8 [ 209.578103][ T4173] rfkill_register+0x44/0x7a4 [ 209.579546][ T4173] hci_register_dev+0x3e0/0x880 [ 209.580924][ T4173] vhci_create_device+0x2c4/0x568 [ 209.582383][ T4173] vhci_write+0x318/0x3b8 [ 209.583651][ T4173] vfs_write+0x884/0xb44 [ 209.584846][ T4173] ksys_write+0x15c/0x26c [ 209.586080][ T4173] __arm64_sys_write+0x7c/0x90 [ 209.587506][ T4173] invoke_syscall+0x98/0x2b8 [ 209.588839][ T4173] el0_svc_common+0x138/0x258 [ 209.590244][ T4173] do_el0_svc+0x58/0x14c [ 209.591531][ T4173] el0_svc+0x7c/0x1f0 [ 209.592664][ T4173] el0t_64_sync_handler+0x84/0xe4 [ 209.594065][ T4173] el0t_64_sync+0x1a0/0x1a4 [ 209.595369][ T4173] [ 209.595369][ T4173] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 209.597494][ T4173] __mutex_lock_common+0x194/0x2154 [ 209.598906][ T4173] mutex_lock_nested+0xa4/0xf8 [ 209.600287][ T4173] vhci_send_frame+0x8c/0x10c [ 209.601719][ T4173] hci_send_frame+0x194/0x2f0 [ 209.603032][ T4173] hci_tx_work+0x9ac/0x16cc [ 209.604383][ T4173] process_one_work+0x790/0x11b8 [ 209.605759][ T4173] worker_thread+0x910/0x1034 [ 209.607138][ T4173] kthread+0x37c/0x45c [ 209.608335][ T4173] ret_from_fork+0x10/0x20 [ 209.609682][ T4173] [ 209.609682][ T4173] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 209.612063][ T4173] __flush_work+0xf8/0x1c0 [ 209.613356][ T4173] flush_work+0x24/0x38 [ 209.614603][ T4173] hci_dev_do_close+0x16c/0x1060 [ 209.616113][ T4173] hci_error_reset+0xec/0x2b8 [ 209.617451][ T4173] process_one_work+0x790/0x11b8 [ 209.618866][ T4173] worker_thread+0x910/0x1034 [ 209.620188][ T4173] kthread+0x37c/0x45c [ 209.621418][ T4173] ret_from_fork+0x10/0x20 [ 209.622774][ T4173] [ 209.622774][ T4173] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 209.624773][ T4173] __mutex_lock_common+0x194/0x2154 [ 209.626282][ T4173] mutex_lock_nested+0xa4/0xf8 [ 209.627606][ T4173] bg_scan_update+0x9c/0x470 [ 209.628870][ T4173] process_one_work+0x790/0x11b8 [ 209.630313][ T4173] worker_thread+0x910/0x1034 [ 209.631700][ T4173] kthread+0x37c/0x45c [ 209.632816][ T4173] ret_from_fork+0x10/0x20 [ 209.634166][ T4173] [ 209.634166][ T4173] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 209.636888][ T4173] __lock_acquire+0x32d4/0x7638 [ 209.638400][ T4173] lock_acquire+0x240/0x77c [ 209.639723][ T4173] __flush_work+0xf8/0x1c0 [ 209.641007][ T4173] __cancel_work_timer+0x3ec/0x548 [ 209.642472][ T4173] cancel_work_sync+0x24/0x38 [ 209.643854][ T4173] hci_request_cancel_all+0xcc/0x2d0 [ 209.645439][ T4173] hci_dev_do_close+0x54/0x1060 [ 209.646800][ T4173] hci_rfkill_set_block+0xdc/0x1d0 [ 209.648351][ T4173] rfkill_set_block+0x18c/0x37c [ 209.649732][ T4173] rfkill_epo+0x8c/0x158 [ 209.650965][ T4173] rfkill_op_handler+0x170/0x288 [ 209.652391][ T4173] process_one_work+0x790/0x11b8 [ 209.653912][ T4173] worker_thread+0x910/0x1034 [ 209.655218][ T4173] kthread+0x37c/0x45c [ 209.656420][ T4173] ret_from_fork+0x10/0x20 [ 209.657671][ T4173] [ 209.657671][ T4173] other info that might help us debug this: [ 209.657671][ T4173] [ 209.660308][ T4173] Chain exists of: [ 209.660308][ T4173] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 209.660308][ T4173] [ 209.664436][ T4173] Possible unsafe locking scenario: [ 209.664436][ T4173] [ 209.666405][ T4173] CPU0 CPU1 [ 209.667775][ T4173] ---- ---- [ 209.669122][ T4173] lock(rfkill_global_mutex); [ 209.670350][ T4173] lock(&data->open_mutex); [ 209.672194][ T4173] lock(rfkill_global_mutex); [ 209.674174][ T4173] lock((work_completion)(&hdev->bg_scan_update)); [ 209.675916][ T4173] [ 209.675916][ T4173] *** DEADLOCK *** [ 209.675916][ T4173] [ 209.678007][ T4173] 3 locks held by kworker/1:7/4173: [ 209.679376][ T4173] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 209.682053][ T4173] #1: ffff800020017c00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 209.684689][ T4173] #2: ffff800016f36ba8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x58/0x158 [ 209.687248][ T4173] [ 209.687248][ T4173] stack backtrace: [ 209.688745][ T4173] CPU: 1 PID: 4173 Comm: kworker/1:7 Not tainted 5.15.174-syzkaller #0 [ 209.690854][ T4173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 209.693859][ T4173] Workqueue: events rfkill_op_handler [ 209.695398][ T4173] Call trace: [ 209.696279][ T4173] dump_backtrace+0x0/0x530 [ 209.697457][ T4173] show_stack+0x2c/0x3c [ 209.698584][ T4173] dump_stack_lvl+0x108/0x170 [ 209.699989][ T4173] dump_stack+0x1c/0x58 [ 209.701246][ T4173] print_circular_bug+0x150/0x1b8 [ 209.702555][ T4173] check_noncircular+0x2cc/0x378 [ 209.703880][ T4173] __lock_acquire+0x32d4/0x7638 [ 209.705220][ T4173] lock_acquire+0x240/0x77c [ 209.706357][ T4173] __flush_work+0xf8/0x1c0 [ 209.707484][ T4173] __cancel_work_timer+0x3ec/0x548 [ 209.708812][ T4173] cancel_work_sync+0x24/0x38 [ 209.710101][ T4173] hci_request_cancel_all+0xcc/0x2d0 [ 209.711505][ T4173] hci_dev_do_close+0x54/0x1060 [ 209.712753][ T4173] hci_rfkill_set_block+0xdc/0x1d0 [ 209.714053][ T4173] rfkill_set_block+0x18c/0x37c [ 209.715291][ T4173] rfkill_epo+0x8c/0x158 [ 209.716340][ T4173] rfkill_op_handler+0x170/0x288 [ 209.717675][ T4173] process_one_work+0x790/0x11b8 [ 209.718949][ T4173] worker_thread+0x910/0x1034 [ 209.718963][ T4173] kthread+0x37c/0x45c [ 209.718971][ T4173] ret_from_fork+0x10/0x20