last executing test programs: 16.242986103s ago: executing program 5 (id=178): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) 15.240327512s ago: executing program 5 (id=180): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000980)=ANY=[], 0x4) 14.588306697s ago: executing program 5 (id=181): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000054634b00c6054790fe6059c1415d68cba10701000004000904"], 0x0) write$char_usb(r0, &(0x7f0000000200)="0709fe9a939c", 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setresuid(0x0, 0x0, 0xee00) sched_setaffinity(0x0, 0x2b, &(0x7f0000000040)=0x200000000005) syz_emit_vhci(&(0x7f00000003c0)=ANY=[], 0x13) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x5c9100, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)={0xa0000001}) epoll_pwait2(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) syz_clone3(&(0x7f0000000280)={0x20000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000100), {0x2c}, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/130, &(0x7f0000000380)=[0x0], 0x1}, 0x58) move_pages(r6, 0x7, &(0x7f0000000340)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d04001200eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016001e000a0000000000e000e018d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 7.466279963s ago: executing program 4 (id=207): openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e23, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e23, @local}], 0x10) 6.238946191s ago: executing program 4 (id=210): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000009c03000000000000ffffffff18110000ad6606e25b1dadd24f012f18ca3a759483193e39ae56ca6293ad13929c5b4f0ed5951a7983d2baba07798cd50b85303d30081c883107", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000008b627db0600000085100000ffffffffbf91000000000000b7020000000000008500000084000000b70000000000000095000000000000"], &(0x7f0000000540)='syzkaller\x00', 0x3a8, 0x59, &(0x7f0000000580)=""/89, 0x40f00, 0x8, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x5, 0x0, 0xfffffff8, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000800)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001100010400"/20, @ANYRES32=r3, @ANYBLOB="000000000000000008001f000000008000001f000700000000002b80000003000800000000000100", @ANYRES32=r5, @ANYBLOB="0000030005000000000003000c00000000000100", @ANYBLOB="0000100009000000"], 0xfefc}, 0x1, 0x8}, 0x0) 4.678380762s ago: executing program 5 (id=216): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)}, {&(0x7f0000000f00)="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", 0x10b}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="610cb4f6db2105b873df3f7652cc642b85afb69fc18178429903bb6e1ecd18186c48864c", 0x24}, {&(0x7f0000000180)="6fe279d51047ff146af40b78b8d7ae53db8648c2090d72bcfeaf6fabbbfbe8dbc8b8f4cb22ac43d5a0fa87533bb375454751b8dd8aae4808a37a7649b32b", 0x3e}, {&(0x7f0000000a40)="6d5edb4b883e266ba8c38aa9d13a78431c9d2cb6d8f4e1e80bb8a936aa105f46c914c46487522bc58054c4b0a523eeda0c764957c56b1cb266f5f6fea2733bb34bda2f89e92b2a98d2edbcffad9c5ccde0d723423cf07e4ffdbd56", 0x5b}, {&(0x7f00000002c0)="07030357fa3f85cd282cb9ab7e0a6d90d11f30e1bc20889d43e59a72354107b7849bc3c72e1485cca17aa5f4264f117b820688c6e25503bb54b2f6557d8b906aa997860941de528c25ca5ec78456babac034dc8cd2c4a4f078a8224b7ea2897a7f", 0x61}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258c2ea547d47f2d89ad6e36e737691a1c6bdd164b2a85cbaaf648c910559f53581c60bd6c80f90c75f664e5b285c738881560f8ae89a4943141ac45fb6995cece6a2e0e62bd79213527a11c34a", 0xac}, {&(0x7f0000000840)="a1c3704ecc4399d294", 0x9}], 0x3}}], 0x4, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) 4.52085643s ago: executing program 0 (id=219): socket$kcm(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c9000a0006"], 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c900"/21], 0x15) 4.519941261s ago: executing program 5 (id=220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) close_range(r0, r1, 0x2) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="7f96be", 0x3}], 0x1}, 0x8010) r4 = getpid() syz_pidfd_open(r4, 0x0) inotify_init1(0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x5, 0x0, 0x4}, 0x0, 0x0) 4.320563221s ago: executing program 0 (id=223): openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e23, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e23, @local}], 0x10) 4.067128797s ago: executing program 0 (id=224): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r1 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x3, 0x0, 0x0, 0x10}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 3.875102085s ago: executing program 0 (id=225): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x3, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32, @ANYBLOB="24002d80080002000300000005000100000000000500040000000000080003"], 0x40}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f7000280050001000000000030"], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x28}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000004"], 0x24d8}], 0x1}, 0x0) 3.699477084s ago: executing program 4 (id=228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x0) 3.601692185s ago: executing program 5 (id=229): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x36) 3.455773474s ago: executing program 4 (id=231): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "546792"}}}, 0xd) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') read$FUSE(r3, &(0x7f000000a300)={0x2020}, 0x204c) read$FUSE(r3, &(0x7f0000000880)={0x2020}, 0x5df) preadv2(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/185, 0xb9}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000012400)={0x2020}, 0x2020) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x3, 0xa}, {0x1ff, 0x9, 0x6ffd, 0x9, 0x8}}}}, 0x17) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000400)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9a8a5b3317d93f48"}}, 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="01000000100100"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000"], 0x48}, 0x2}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, &(0x7f0000006680)) io_setup(0x8, &(0x7f0000000000)=0x0) r5 = eventfd2(0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) io_submit(r4, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) io_cancel(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xa8, &(0x7f00000014c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x72, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1f, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x2, "0000000500e1d539786d9f1d27b6"}]}}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) epoll_create1(0x0) 3.450669672s ago: executing program 0 (id=232): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004010) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4000000}) 3.243176539s ago: executing program 2 (id=233): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef304ed0ffedd061941d9d022b25a4b9632856295fee3a314f6c196d953bcaf1aff06d181d51662fdaa52e46d7905c0b4", 0x10b}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="610cb4f6db2105b873df3f7652cc642b85afb69fc18178429903bb6e1ecd18186c48864c", 0x24}, {&(0x7f0000000180)="6fe279d51047ff146af40b78b8d7ae53db8648c2090d72bcfeaf6fabbbfbe8dbc8b8f4cb22ac43d5a0fa87533bb375454751b8dd8aae4808a37a7649b32b", 0x3e}, {&(0x7f0000000a40)="6d5edb4b883e266ba8c38aa9d13a78431c9d2cb6d8f4e1e80bb8a936aa105f46c914c46487522bc58054c4b0a523eeda0c764957c56b1cb266f5f6fea2733bb34bda2f89e92b2a98d2edbcffad9c5ccde0d723423cf07e4ffdbd56", 0x5b}, {&(0x7f00000002c0)="07030357fa3f85cd282cb9ab7e0a6d90d11f30e1bc20889d43e59a72354107b7849bc3c72e1485cca17aa5f4264f117b820688c6e25503bb54b2f6557d8b906aa997860941de528c25ca5ec78456babac034dc8cd2c4a4f078a8224b7ea2897a7f", 0x61}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258c2ea547d47f2d89ad6e36e737691a1c6bdd164b2a85cbaaf648c910559f53581c60bd6c80f90c75f664e5b285c738881560f8ae89a4943141ac45fb6995cece6a2e0e62bd79213527a11c34a", 0xac}, {&(0x7f0000000840)="a1c3704ecc4399d294", 0x9}], 0x3}}], 0x4, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) 3.132693111s ago: executing program 2 (id=235): socket$kcm(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c9000a0006"], 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c900"/21], 0x15) 3.004346924s ago: executing program 1 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x6, 0x1500, &(0x7f0000003f40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 2.699129061s ago: executing program 2 (id=237): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r1 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x3, 0x0, 0x0, 0x10}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 1.923958742s ago: executing program 1 (id=238): setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'vlan0\x00'}}, 0x1e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmmsg$sock(r1, &(0x7f0000001dc0), 0x213, 0x0) 1.724418958s ago: executing program 3 (id=239): r0 = timerfd_create(0x0, 0x0) r1 = syz_io_uring_setup(0x58f2, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000001240)=""/4102, 0x1006}) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) io_uring_enter(r1, 0x1f82, 0x0, 0x0, 0x0, 0x0) 1.724165501s ago: executing program 0 (id=240): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60) r1 = socket$inet(0x2, 0x3, 0x4) openat(0xffffffffffffff9c, 0x0, 0x40142, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x23, 0x0, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102393, 0x18ff9}], 0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ac14142b0c0001800800014080ffffff0500140020000000050005000200000005"], 0x6c}}, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) 1.655095381s ago: executing program 2 (id=241): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="7f96be", 0x3}], 0x1}, 0x8010) r2 = getpid() syz_pidfd_open(r2, 0x0) inotify_init1(0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x5, 0x0, 0x4}, 0x0, 0x0) 1.360671776s ago: executing program 1 (id=242): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800040000000000080012000300000008001100ff07000008001000000002"], 0x54}}, 0x0) 1.176634267s ago: executing program 3 (id=243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x0) 1.176083664s ago: executing program 4 (id=244): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x43}, 0x1}]}, &(0x7f0000000240)=0x10) 1.128520702s ago: executing program 1 (id=245): socket$nl_route(0x10, 0x3, 0x0) r0 = fanotify_init(0x200, 0x0) r1 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r5 = dup(r4) fanotify_mark(r0, 0x1, 0x8001022, r5, 0x0) ftruncate(r4, 0xdcb) 946.910321ms ago: executing program 1 (id=246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000) close(r3) 933.151449ms ago: executing program 3 (id=247): r0 = socket(0x2, 0x3, 0xfc) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xb00) 757.214381ms ago: executing program 1 (id=248): socket$nl_route(0x10, 0x3, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f0000000140)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xe, 0xffff}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0xc7, "fe249f3d9521cc0405a2429221c012c5"}}}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) sendto$inet(r2, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)}, {&(0x7f0000000f00)="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", 0x10b}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="610cb4f6db2105b873df3f7652cc642b85afb69fc18178429903bb6e1ecd18186c48864c", 0x24}, {&(0x7f0000000180)="6fe279d51047ff146af40b78b8d7ae53db8648c2090d72bcfeaf6fabbbfbe8dbc8b8f4cb22ac43d5a0fa87533bb375454751b8dd8aae4808a37a7649b32b", 0x3e}, {&(0x7f0000000a40)="6d5edb4b883e266ba8c38aa9d13a78431c9d2cb6d8f4e1e80bb8a936aa105f46c914c46487522bc58054c4b0a523eeda0c764957c56b1cb266f5f6fea2733bb34bda2f89e92b2a98d2edbcffad9c5ccde0d723423cf07e4ffdbd56", 0x5b}, {&(0x7f00000002c0)="07030357fa3f85cd282cb9ab7e0a6d90d11f30e1bc20889d43e59a72354107b7849bc3c72e1485cca17aa5f4264f117b820688c6e25503bb54b2f6557d8b906aa997860941de528c25ca5ec78456babac034dc8cd2c4a4f078a8224b7ea2897a7f", 0x61}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258c2ea547d47f2d89ad6e36e737691a1c6bdd164b2a85cbaaf648c910559f53581c60bd6c80f90c75f664e5b285c738881560f8ae89a4943141ac45fb6995cece6a2e0e62bd79213527a11c34a", 0xac}, {&(0x7f0000000840)="a1c3704ecc4399d294", 0x9}], 0x3}}], 0x4, 0x0) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x0, &(0x7f0000006680)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r3, r3, 0x0, 0x400000000003f) r4 = dup(r3) fallocate(r4, 0x0, 0x0, 0x400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 600.438147ms ago: executing program 3 (id=249): socket$kcm(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c9000a0006"], 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c900"/21], 0x15) 535.171579ms ago: executing program 3 (id=250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@nop]}}}}}}}, 0x0) 376.112957ms ago: executing program 2 (id=251): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0400040000000000000000b7080000000000007baaf8ff00000000b5080000000000197b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000c00000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 143.71549ms ago: executing program 3 (id=252): openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/key-users\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r1, 0x2, {0x0, 0x0, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001880)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4008802) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 52.687613ms ago: executing program 2 (id=253): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="08000a000000000008000200e000000208000400ac1414aa080001007f00000108000400ac14"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 4 (id=254): syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000000380)) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x41) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x40, 0x5, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}}, 0x801) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xf, 0x0) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) r6 = socket$rxrpc(0x21, 0x2, 0xa) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) socket$nl_netfilter(0x10, 0x3, 0xc) listen(r6, 0x0) recvmmsg(r6, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.25' (ED25519) to the list of known hosts. [ 58.772319][ T5212] cgroup: Unknown subsys name 'net' [ 58.884788][ T5212] cgroup: Unknown subsys name 'cpuset' [ 58.893230][ T5212] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.308562][ T5212] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.777027][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.788008][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.806603][ T5242] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.814618][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.822391][ T5242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.830615][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.831025][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.845714][ T5241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.853520][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.861066][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.869457][ T5242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.877036][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.890683][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.893509][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.906301][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.906579][ T5241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.913979][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.928515][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.931085][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.935858][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.950630][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.951324][ T5242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.959092][ T4615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.966510][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.980817][ T5246] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.981636][ T5242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.002026][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.011067][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 63.021831][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.031340][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.038505][ T5245] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 63.046037][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.057949][ T5245] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 63.071944][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 63.089739][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 63.097810][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 63.467128][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 63.620328][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 63.639428][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 63.732540][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 63.785272][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.792578][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.799959][ T5223] bridge_slave_0: entered allmulticast mode [ 63.807006][ T5223] bridge_slave_0: entered promiscuous mode [ 63.815241][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.822445][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.829680][ T5223] bridge_slave_1: entered allmulticast mode [ 63.836650][ T5223] bridge_slave_1: entered promiscuous mode [ 63.943957][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.951405][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.958758][ T5236] bridge_slave_0: entered allmulticast mode [ 63.966291][ T5236] bridge_slave_0: entered promiscuous mode [ 64.015927][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.023520][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.030820][ T5236] bridge_slave_1: entered allmulticast mode [ 64.037766][ T5236] bridge_slave_1: entered promiscuous mode [ 64.047609][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.057060][ T5247] chnl_net:caif_netlink_parms(): no params data found [ 64.085910][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.093269][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.100619][ T5225] bridge_slave_0: entered allmulticast mode [ 64.107541][ T5225] bridge_slave_0: entered promiscuous mode [ 64.115236][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.123372][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.130931][ T5224] bridge_slave_0: entered allmulticast mode [ 64.137831][ T5224] bridge_slave_0: entered promiscuous mode [ 64.156968][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.185385][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 64.195567][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.203217][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.210411][ T5225] bridge_slave_1: entered allmulticast mode [ 64.217822][ T5225] bridge_slave_1: entered promiscuous mode [ 64.236292][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.243791][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.252097][ T5224] bridge_slave_1: entered allmulticast mode [ 64.259094][ T5224] bridge_slave_1: entered promiscuous mode [ 64.287882][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.312310][ T5223] team0: Port device team_slave_0 added [ 64.358837][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.371427][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.397150][ T5223] team0: Port device team_slave_1 added [ 64.434336][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.447955][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.459143][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.541275][ T5236] team0: Port device team_slave_0 added [ 64.548115][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.555428][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.582267][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.619287][ T5225] team0: Port device team_slave_0 added [ 64.629284][ T5225] team0: Port device team_slave_1 added [ 64.648527][ T5236] team0: Port device team_slave_1 added [ 64.655168][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.662252][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.688372][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.714250][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.721471][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.728671][ T5247] bridge_slave_0: entered allmulticast mode [ 64.735677][ T5247] bridge_slave_0: entered promiscuous mode [ 64.759639][ T5224] team0: Port device team_slave_0 added [ 64.767972][ T5224] team0: Port device team_slave_1 added [ 64.794388][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.801792][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.828564][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.840075][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.850769][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.857934][ T5247] bridge_slave_1: entered allmulticast mode [ 64.865353][ T5247] bridge_slave_1: entered promiscuous mode [ 64.920311][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.927430][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.953698][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.965487][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.972747][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.999374][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.021219][ T5242] Bluetooth: hci0: command tx timeout [ 65.027058][ T5235] Bluetooth: hci2: command tx timeout [ 65.043472][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.050426][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.077353][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.090307][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.097530][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.124364][ T5235] Bluetooth: hci4: command tx timeout [ 65.130106][ T5235] Bluetooth: hci1: command tx timeout [ 65.130297][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.135819][ T5242] Bluetooth: hci3: command tx timeout [ 65.170411][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.177587][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.204243][ T5242] Bluetooth: hci5: command tx timeout [ 65.208628][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.236401][ T5247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.249112][ T5247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.258665][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.266216][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.273586][ T5227] bridge_slave_0: entered allmulticast mode [ 65.280395][ T5227] bridge_slave_0: entered promiscuous mode [ 65.306098][ T5223] hsr_slave_0: entered promiscuous mode [ 65.317449][ T5223] hsr_slave_1: entered promiscuous mode [ 65.377660][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.385676][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.393151][ T5227] bridge_slave_1: entered allmulticast mode [ 65.399942][ T5227] bridge_slave_1: entered promiscuous mode [ 65.419604][ T5225] hsr_slave_0: entered promiscuous mode [ 65.427052][ T5225] hsr_slave_1: entered promiscuous mode [ 65.433808][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.441747][ T5225] Cannot create hsr debugfs directory [ 65.451027][ T5224] hsr_slave_0: entered promiscuous mode [ 65.457342][ T5224] hsr_slave_1: entered promiscuous mode [ 65.464023][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.471722][ T5224] Cannot create hsr debugfs directory [ 65.480495][ T5236] hsr_slave_0: entered promiscuous mode [ 65.487182][ T5236] hsr_slave_1: entered promiscuous mode [ 65.493447][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.501204][ T5236] Cannot create hsr debugfs directory [ 65.509359][ T5247] team0: Port device team_slave_0 added [ 65.566933][ T5247] team0: Port device team_slave_1 added [ 65.584683][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.641011][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.696290][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.704067][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.730386][ T5247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.744024][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.751203][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.777445][ T5247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.879054][ T5227] team0: Port device team_slave_0 added [ 65.928357][ T5227] team0: Port device team_slave_1 added [ 65.967754][ T5247] hsr_slave_0: entered promiscuous mode [ 65.974710][ T5247] hsr_slave_1: entered promiscuous mode [ 65.981190][ T5247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.988780][ T5247] Cannot create hsr debugfs directory [ 66.074412][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.081869][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.108354][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.149522][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.157089][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.183486][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.268884][ T5227] hsr_slave_0: entered promiscuous mode [ 66.275614][ T5227] hsr_slave_1: entered promiscuous mode [ 66.283106][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.290817][ T5227] Cannot create hsr debugfs directory [ 66.340435][ T5225] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.363845][ T5225] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.397380][ T5225] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.424393][ T5225] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.495053][ T5224] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.526835][ T5224] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.561542][ T5224] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.572564][ T5224] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.630212][ T5236] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.656874][ T5236] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.693116][ T5236] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.715740][ T5223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.725488][ T5236] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.745049][ T5223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.755416][ T5223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.796254][ T5223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.824896][ T5247] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.838060][ T5247] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.848692][ T5247] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.882962][ T5247] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.948515][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.000012][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.025906][ T5227] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.036369][ T5227] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.046855][ T5227] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.079164][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.094971][ T5227] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.102753][ T5235] Bluetooth: hci0: command tx timeout [ 67.108279][ T5242] Bluetooth: hci2: command tx timeout [ 67.159217][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.166503][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.181851][ T5242] Bluetooth: hci3: command tx timeout [ 67.187290][ T5242] Bluetooth: hci1: command tx timeout [ 67.195193][ T5235] Bluetooth: hci4: command tx timeout [ 67.218399][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.227327][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.244352][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.251529][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.260784][ T5242] Bluetooth: hci5: command tx timeout [ 67.282714][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.318256][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.325416][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.335240][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.342507][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.398275][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.408910][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.416089][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.439970][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.447092][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.498823][ T5247] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.515344][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.586382][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.593566][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.644950][ T5236] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.690198][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.697559][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.719182][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.762560][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.845708][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.852937][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.898372][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.911702][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.918835][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.943913][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.982757][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.989890][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.011970][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.019087][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.192658][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.251511][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.345150][ T5247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.357275][ T5225] veth0_vlan: entered promiscuous mode [ 68.439151][ T5224] veth0_vlan: entered promiscuous mode [ 68.474173][ T5225] veth1_vlan: entered promiscuous mode [ 68.529668][ T5224] veth1_vlan: entered promiscuous mode [ 68.677343][ T5225] veth0_macvtap: entered promiscuous mode [ 68.716238][ T5225] veth1_macvtap: entered promiscuous mode [ 68.738109][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.798056][ T5224] veth0_macvtap: entered promiscuous mode [ 68.813295][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.878263][ T5224] veth1_macvtap: entered promiscuous mode [ 68.898737][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.915679][ T5236] veth0_vlan: entered promiscuous mode [ 68.952153][ T5236] veth1_vlan: entered promiscuous mode [ 68.959484][ T5225] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.970341][ T5225] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.979790][ T5225] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.989007][ T5225] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.008068][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.037613][ T5227] veth0_vlan: entered promiscuous mode [ 69.054923][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.066105][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.077574][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.117413][ T5236] veth0_macvtap: entered promiscuous mode [ 69.145493][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.156995][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.169846][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.180143][ T5227] veth1_vlan: entered promiscuous mode [ 69.186078][ T5242] Bluetooth: hci2: command tx timeout [ 69.192220][ T5235] Bluetooth: hci0: command tx timeout [ 69.219333][ T5236] veth1_macvtap: entered promiscuous mode [ 69.240835][ T5247] veth0_vlan: entered promiscuous mode [ 69.256629][ T5223] veth0_vlan: entered promiscuous mode [ 69.263677][ T5242] Bluetooth: hci1: command tx timeout [ 69.263738][ T5235] Bluetooth: hci4: command tx timeout [ 69.274569][ T5242] Bluetooth: hci3: command tx timeout [ 69.288914][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.299641][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.309733][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.322227][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.333737][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.343845][ T5224] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.350654][ T5235] Bluetooth: hci5: command tx timeout [ 69.353468][ T5224] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.366961][ T5224] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.375785][ T5224] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.405762][ T5223] veth1_vlan: entered promiscuous mode [ 69.419417][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.433535][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.445405][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.456325][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.467787][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.491993][ T5227] veth0_macvtap: entered promiscuous mode [ 69.499801][ T5236] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.509977][ T5236] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.518901][ T5236] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.528343][ T5236] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.547233][ T5247] veth1_vlan: entered promiscuous mode [ 69.567991][ T5227] veth1_macvtap: entered promiscuous mode [ 69.647464][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.669388][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.687658][ T5247] veth0_macvtap: entered promiscuous mode [ 69.702309][ T5247] veth1_macvtap: entered promiscuous mode [ 69.726166][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.737205][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.750198][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.762225][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.772158][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.782723][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.794928][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.837999][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.848807][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.859468][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.870387][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.882185][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.892822][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.904710][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.913510][ T5223] veth0_macvtap: entered promiscuous mode [ 69.938030][ T5227] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.948983][ T5227] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.958336][ T5227] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.968328][ T5227] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.986819][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.990364][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.000750][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.015953][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.026817][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.038307][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.048488][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.059568][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.069858][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.080724][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.092727][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.106632][ T5223] veth1_macvtap: entered promiscuous mode [ 70.132917][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.144803][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.155187][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.165833][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.175952][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.186472][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.196369][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.207672][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.219283][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.259412][ T5247] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.268416][ T5247] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.277644][ T5247] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.286488][ T5247] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.319489][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.330127][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.340490][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.354650][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.365257][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.375814][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.386851][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.397384][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.407274][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.417815][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.429390][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.438820][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.454179][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.540270][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.541875][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.552901][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.569464][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.580346][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.582157][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.599312][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.610142][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.622834][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.633462][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.644968][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.655443][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.667192][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.697562][ T5223] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.710575][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.718397][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.720688][ T5223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.738338][ T5223] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.747521][ T5223] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.807107][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.815399][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.869038][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.886868][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.939487][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.954965][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.993740][ T5332] dccp_invalid_packet: P.Data Offset(101) too large [ 71.068710][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.100357][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.260870][ T5235] Bluetooth: hci2: command tx timeout [ 71.266678][ T5242] Bluetooth: hci0: command tx timeout [ 71.278593][ T3050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.299617][ T3050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.331349][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.339176][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.341010][ T5242] Bluetooth: hci4: command tx timeout [ 71.352160][ T5235] Bluetooth: hci3: command tx timeout [ 71.357580][ T5235] Bluetooth: hci1: command tx timeout [ 71.399599][ T5339] netlink: 'syz.5.6': attribute type 7 has an invalid length. [ 71.421084][ T5242] Bluetooth: hci5: command tx timeout [ 71.450725][ T5339] netlink: 'syz.5.6': attribute type 5 has an invalid length. [ 71.468520][ T5339] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6'. [ 71.629359][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.648026][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.680465][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.691744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 71.703536][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.235949][ T5355] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.591541][ T5285] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.717696][ T5368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 72.783955][ T5285] usb 4-1: Using ep0 maxpacket: 16 [ 72.807027][ T5285] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.833487][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 72.879268][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 72.934857][ T5285] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 72.995131][ T5285] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.029367][ T5290] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 73.053850][ T5285] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 73.076391][ T5285] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 73.290211][ T5285] usb 4-1: Manufacturer: syz [ 73.404553][ T5375] loop0: detected capacity change from 0 to 256 [ 73.727183][ T5375] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 74.118061][ T5285] usb 4-1: config 0 descriptor?? [ 74.144353][ T5290] usb 6-1: config 0 has an invalid interface number: 81 but max is 2 [ 74.155092][ T5290] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.170978][ T5290] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 74.179919][ T5290] usb 6-1: config 0 has no interface number 0 [ 74.230869][ T5290] usb 6-1: config 0 interface 81 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.257520][ T5290] usb 6-1: config 0 interface 81 has no altsetting 0 [ 74.264999][ T5290] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=21.7a [ 74.283231][ T5290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.326345][ T5290] usb 6-1: config 0 descriptor?? [ 74.722103][ T5392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 74.731560][ T5285] rc_core: IR keymap rc-hauppauge not found [ 74.737635][ T5285] Registered IR keymap rc-empty [ 74.743139][ T5285] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 74.845082][ T5285] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 74.853774][ T5290] usb 6-1: string descriptor 0 read error: -71 [ 74.866277][ T5290] cdc_ether 6-1:0.81: skipping garbage [ 74.875282][ T5290] cdc_ether 6-1:0.81: skipping garbage [ 74.883640][ T5290] usb 6-1: bad CDC descriptors [ 74.889543][ T5290] usb 6-1: unsupported MDLM descriptors [ 74.899523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #49!!! [ 74.910939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 74.919172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 74.935980][ T5395] netlink: 'syz.1.26': attribute type 10 has an invalid length. [ 74.937592][ T5285] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 74.978746][ T5285] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 75.009864][ T5290] usb 6-1: USB disconnect, device number 2 [ 75.027033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.046162][ T5285] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 75.056413][ T5395] team0: Port device netdevsim0 added [ 75.071810][ T5285] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 75.091092][ T5285] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 75.107986][ T51] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.117821][ T5285] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 75.151203][ T5285] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 75.182401][ T5285] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 75.230773][ T5228] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.239752][ T5285] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 75.262034][ T5285] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 75.271903][ T51] usb 1-1: Using ep0 maxpacket: 16 [ 75.281079][ T5285] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 75.300930][ T51] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 75.310989][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.319162][ T5285] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 75.327146][ T51] usb 1-1: Product: syz [ 75.334816][ T51] usb 1-1: Manufacturer: syz [ 75.339807][ T51] usb 1-1: SerialNumber: syz [ 75.348890][ T5285] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 75.360398][ T5285] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 75.370281][ T51] usb 1-1: config 0 descriptor?? [ 75.390910][ T5228] usb 5-1: Using ep0 maxpacket: 32 [ 75.402645][ T5228] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 75.418798][ T5228] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 75.430943][ T5285] usb 4-1: USB disconnect, device number 2 [ 75.461418][ T5228] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 75.489306][ T5228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 75.513523][ T5409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 75.533810][ T5228] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 75.549253][ T5228] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 75.564605][ T5228] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 75.573863][ T5228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.672632][ T5228] usb 5-1: config 0 descriptor?? [ 75.734491][ T51] usb 1-1: Not enough endpoints found in device, aborting! [ 75.896299][ T5228] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 75.953718][ T5228] usb 5-1: USB disconnect, device number 2 [ 75.994126][ T5228] usblp0: removed [ 76.498894][ T5435] netlink: 28 bytes leftover after parsing attributes in process `syz.5.40'. [ 76.511400][ T5228] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 76.557317][ T5435] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 76.692889][ T5228] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 76.717343][ T5228] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 76.749083][ T5228] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 76.776138][ T5228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 76.793795][ T5228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 76.809068][ T5228] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 76.836568][ T5228] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 76.853269][ T5228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.914099][ T5228] usb 5-1: config 0 descriptor?? [ 76.950500][ T5393] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 77.252303][ T5228] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 77.464319][ T5228] usb 5-1: USB disconnect, device number 3 [ 77.509893][ T5228] usblp0: removed [ 77.616006][ T5287] usb 1-1: USB disconnect, device number 2 [ 77.700784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.075991][ T5242] Bluetooth: Frame is too long (len 16, expected len 4) [ 78.341028][ T5478] tipc: Started in network mode [ 78.370056][ T5478] tipc: Node identity :, cluster identity 4711 [ 78.400803][ T5478] tipc: Enabling of bearer rejected, failed to enable media [ 78.558725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.568114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.630595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 78.961391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.766630][ T5513] IPVS: length: 4096 != 8 [ 79.919785][ T5515] syzkaller0: entered promiscuous mode [ 79.930826][ T5515] syzkaller0: entered allmulticast mode [ 80.310714][ T29] audit: type=1326 audit(1726834482.170:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eff97def9 code=0x7ffc0000 [ 80.380305][ T29] audit: type=1326 audit(1726834482.240:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eff97def9 code=0x7ffc0000 [ 80.548371][ T29] audit: type=1326 audit(1726834482.240:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f3eff97def9 code=0x7ffc0000 [ 80.720402][ T29] audit: type=1326 audit(1726834482.240:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eff97def9 code=0x7ffc0000 [ 80.830016][ T29] audit: type=1326 audit(1726834482.240:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eff97def9 code=0x7ffc0000 [ 81.133471][ T937] cfg80211: failed to load regulatory.db [ 82.238107][ T5589] netlink: 16 bytes leftover after parsing attributes in process `syz.5.86'. [ 83.915077][ T5627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.100'. [ 85.347748][ T5652] dccp_invalid_packet: P.Data Offset(101) too large [ 87.892663][ T5657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.930636][ T5658] netlink: 83 bytes leftover after parsing attributes in process `syz.0.113'. [ 88.275152][ T5677] netlink: 'syz.2.120': attribute type 10 has an invalid length. [ 88.744671][ T5685] loop1: detected capacity change from 0 to 256 [ 88.783814][ T5685] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 89.072685][ T5677] team0: Port device netdevsim0 added [ 89.234302][ T5689] dccp_invalid_packet: P.Data Offset(101) too large [ 89.626437][ T5699] netlink: 40 bytes leftover after parsing attributes in process `syz.1.127'. [ 89.983802][ T5708] syzkaller0: entered promiscuous mode [ 89.989514][ T5708] syzkaller0: entered allmulticast mode [ 89.998436][ T5707] netlink: 55 bytes leftover after parsing attributes in process `syz.1.133'. [ 91.289301][ T5731] netlink: 40 bytes leftover after parsing attributes in process `syz.1.142'. [ 91.688552][ T5737] loop2: detected capacity change from 0 to 256 [ 93.166999][ T5737] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 93.412737][ T51] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.560668][ T51] usb 2-1: device descriptor read/64, error -71 [ 93.832099][ T51] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.960926][ T51] usb 2-1: device descriptor read/64, error -71 [ 94.072754][ T51] usb usb2-port1: attempt power cycle [ 94.421779][ T51] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.458674][ T51] usb 2-1: device descriptor read/8, error -71 [ 94.750725][ T51] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.771371][ T51] usb 2-1: device descriptor read/8, error -71 [ 94.892748][ T51] usb usb2-port1: unable to enumerate USB device [ 95.026995][ T5749] netlink: 55 bytes leftover after parsing attributes in process `syz.2.148'. [ 96.896569][ T5789] netlink: 68 bytes leftover after parsing attributes in process `syz.5.162'. [ 96.995293][ T5791] loop1: detected capacity change from 0 to 256 [ 97.537601][ T5791] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 97.632228][ T8] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 97.892412][ T8] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 97.900087][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 97.938895][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 98.001507][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 98.033157][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 98.041295][ T5805] netlink: 55 bytes leftover after parsing attributes in process `syz.3.168'. [ 98.052141][ T8] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 98.053653][ T5809] netlink: 'syz.1.166': attribute type 1 has an invalid length. [ 98.059842][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 98.085653][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 98.099624][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 98.100705][ T5809] netlink: 9296 bytes leftover after parsing attributes in process `syz.1.166'. [ 98.118679][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 98.140468][ T8] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 98.149130][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 98.159573][ T5809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 98.175904][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 98.220611][ T934] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.231955][ T5808] syzkaller0: entered promiscuous mode [ 98.248432][ T5808] syzkaller0: entered allmulticast mode [ 98.252924][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 98.284593][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 98.347016][ T8] usb 1-1: string descriptor 0 read error: -22 [ 98.357676][ T8] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 98.376748][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.400692][ T934] usb 3-1: Using ep0 maxpacket: 16 [ 98.409413][ T934] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 98.428367][ T8] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 98.436207][ T934] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 98.456601][ T934] usb 3-1: Product: syz [ 98.470335][ T934] usb 3-1: Manufacturer: syz [ 98.479705][ T934] usb 3-1: SerialNumber: syz [ 98.553472][ T934] usb 3-1: config 0 descriptor?? [ 98.594998][ T5242] Bluetooth: Frame is too long (len 16, expected len 4) [ 99.665392][ T5287] usb 3-1: USB disconnect, device number 2 [ 100.670836][ T5285] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.915122][ T8] usb 1-1: USB disconnect, device number 3 [ 100.960759][ T5285] usb 3-1: Using ep0 maxpacket: 16 [ 100.974076][ T5285] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 101.017307][ T5285] usb 3-1: config 0 has no interface number 0 [ 101.031932][ T5285] usb 3-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 101.292418][ T5285] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 101.450446][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 101.536112][ T5285] usb 3-1: Product: syz [ 101.540405][ T5285] usb 3-1: SerialNumber: syz [ 101.667428][ T5285] usb 3-1: config 0 descriptor?? [ 101.721493][ T5285] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 101.954089][ T5829] mmap: syz.2.174 (5829) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.013325][ T5285] usb 3-1: USB disconnect, device number 3 [ 102.420733][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.601891][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 102.616458][ T8] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 102.632104][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.683665][ T8] usb 1-1: config 0 descriptor?? [ 102.858876][ T8] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 103.029888][ T5850] loop2: detected capacity change from 0 to 256 [ 103.170417][ T35] usb 1-1: Failed to submit usb control message: -71 [ 103.179489][ T51] usb 1-1: USB disconnect, device number 4 [ 103.187890][ T35] usb 1-1: unable to send the bmi data to the device: -71 [ 103.251124][ T5850] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 103.373056][ T35] usb 1-1: unable to get target info from device [ 103.510955][ T35] usb 1-1: could not get target info (-71) [ 103.541396][ T35] usb 1-1: could not probe fw (-71) [ 103.775256][ T5856] netlink: 68 bytes leftover after parsing attributes in process `syz.2.182'. [ 103.824929][ T5242] Bluetooth: hci0: command tx timeout [ 103.955337][ T5285] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 104.238838][ T5285] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.270723][ T5285] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 104.279674][ T5285] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 104.309574][ T5285] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 104.318855][ T5285] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.352083][ T5860] netlink: 'syz.0.184': attribute type 1 has an invalid length. [ 104.361931][ T5860] netlink: 9296 bytes leftover after parsing attributes in process `syz.0.184'. [ 104.393823][ T5860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 104.470891][ T5854] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 104.498620][ T5285] hub 6-1:1.0: bad descriptor, ignoring hub [ 104.510675][ T5285] hub 6-1:1.0: probe with driver hub failed with error -5 [ 104.518536][ T5285] cdc_wdm 6-1:1.0: skipping garbage [ 104.537148][ T5285] cdc_wdm 6-1:1.0: skipping garbage [ 104.546776][ T5285] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 104.553134][ T5285] cdc_wdm 6-1:1.0: Unknown control protocol [ 104.763190][ T5865] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.601417][ T5874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.631833][ T5242] Bluetooth: Unexpected start frame (len 16) [ 105.632846][ T5873] veth1_macvtap: left promiscuous mode [ 105.638099][ T5242] Bluetooth: Frame is too long (len 16, expected len 4) [ 105.652483][ T5874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.737220][ T5865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'. [ 105.773898][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 105.780650][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 105.786908][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 105.793556][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 105.799839][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 105.806445][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 105.812703][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 105.819311][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 105.825823][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 105.832431][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 105.839476][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 105.846086][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 105.852348][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 105.858952][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 105.865213][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 105.871841][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 105.878098][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 105.884702][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 105.890953][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 105.897558][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 106.155253][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 106.200807][ T937] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 106.442045][ T937] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 106.557248][ T937] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 106.764658][ T937] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 106.844414][ T937] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 106.890559][ T937] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 106.891793][ T937] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 106.891854][ T937] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 106.891884][ T937] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 106.891915][ T937] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 106.891952][ T937] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 106.892838][ T937] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 106.892880][ T937] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 106.892910][ T937] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 106.892940][ T937] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 106.892975][ T937] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 106.895495][ T937] usb 3-1: string descriptor 0 read error: -22 [ 106.895597][ T937] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 106.895628][ T937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.909972][ T937] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 107.071836][ T5871] netlink: 'syz.5.181': attribute type 30 has an invalid length. [ 107.229302][ T5895] syzkaller0: entered promiscuous mode [ 107.229333][ T5895] syzkaller0: entered allmulticast mode [ 108.523111][ T5907] netlink: 'syz.3.199': attribute type 1 has an invalid length. [ 108.544546][ T5907] netlink: 9296 bytes leftover after parsing attributes in process `syz.3.199'. [ 108.621679][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.199'. [ 109.001787][ T5285] usb 3-1: USB disconnect, device number 4 [ 109.330709][ T5287] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.503889][ T5287] usb 4-1: config 0 has an invalid interface number: 81 but max is 2 [ 110.512180][ T5287] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.522412][ T5287] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 110.537987][ T5287] usb 4-1: config 0 has no interface number 0 [ 110.545202][ T5287] usb 4-1: config 0 interface 81 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.569089][ T5287] usb 4-1: config 0 interface 81 has no altsetting 0 [ 110.584215][ T5287] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=21.7a [ 110.593838][ T5242] Bluetooth: Unexpected start frame (len 16) [ 110.600962][ T5242] Bluetooth: Frame is too long (len 16, expected len 4) [ 110.616108][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.673243][ T5287] usb 4-1: config 0 descriptor?? [ 111.782013][ T5287] usb 4-1: string descriptor 0 read error: -71 [ 111.801851][ T5287] cdc_ether 4-1:0.81: skipping garbage [ 111.807389][ T5287] cdc_ether 4-1:0.81: skipping garbage [ 111.837443][ T5287] usb 4-1: bad CDC descriptors [ 111.864322][ T5287] usb 4-1: unsupported MDLM descriptors [ 111.904325][ T5287] usb 4-1: USB disconnect, device number 3 [ 112.517347][ T5945] netlink: 'syz.3.212': attribute type 1 has an invalid length. [ 112.530608][ T5945] netlink: 9296 bytes leftover after parsing attributes in process `syz.3.212'. [ 112.546739][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 112.994797][ T5285] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 113.316357][ T5285] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 113.323983][ T5285] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 113.334262][ T5285] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 113.344265][ T5285] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 113.355605][ T5285] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 113.379052][ T5285] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 113.386865][ T5285] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 113.407677][ T5285] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 113.432061][ T5285] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 113.443644][ T5285] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 113.461743][ T5285] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 113.471799][ T5285] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 113.487823][ T5285] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 113.499203][ T5285] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 113.511119][ T5285] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 113.560045][ T8] usb 6-1: USB disconnect, device number 3 [ 113.597503][ T5954] IPVS: length: 4096 != 8 [ 113.801866][ T5285] usb 4-1: string descriptor 0 read error: -22 [ 113.808204][ T5235] Bluetooth: Unexpected start frame (len 16) [ 113.816549][ T5235] Bluetooth: Frame is too long (len 16, expected len 4) [ 113.824475][ T5285] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 113.833471][ T29] audit: type=1326 audit(1726834515.650:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a737def9 code=0x7ffc0000 [ 113.833910][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.855785][ T29] audit: type=1326 audit(1726834515.650:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a737def9 code=0x7ffc0000 [ 113.855839][ T29] audit: type=1326 audit(1726834515.660:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fe6a737def9 code=0x7ffc0000 [ 113.855882][ T29] audit: type=1326 audit(1726834515.660:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a737def9 code=0x7ffc0000 [ 113.855923][ T29] audit: type=1326 audit(1726834515.660:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a737def9 code=0x7ffc0000 [ 114.022066][ T5285] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 114.188992][ T5938] team0 (unregistering): Port device team_slave_0 removed [ 114.222498][ T5938] team0 (unregistering): Port device team_slave_1 removed [ 114.278112][ T5966] bond0: option all_slaves_active: invalid value (7) [ 114.553035][ T5973] netlink: 'syz.0.225': attribute type 1 has an invalid length. [ 114.576825][ T5973] netlink: 9296 bytes leftover after parsing attributes in process `syz.0.225'. [ 114.600699][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'. [ 114.850672][ T29] audit: type=1326 audit(1726834516.680:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.0.232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3eff97def9 code=0x0 [ 114.928423][ T5990] IPVS: length: 4096 != 8 [ 114.972433][ T5978] syzkaller0: entered promiscuous mode [ 114.977960][ T5978] syzkaller0: entered allmulticast mode [ 115.172432][ T5242] Bluetooth: Unexpected start frame (len 16) [ 115.179600][ T5242] Bluetooth: Frame is too long (len 16, expected len 4) [ 115.578542][ T5999] loop1: detected capacity change from 0 to 256 [ 115.722388][ T5999] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 116.332125][ T5287] usb 4-1: USB disconnect, device number 4 [ 116.925420][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 116.940682][ T5242] Bluetooth: hci4: command tx timeout [ 117.178405][ T6020] netlink: 60 bytes leftover after parsing attributes in process `syz.4.244'. [ 117.521643][ T6027] IPVS: length: 4096 != 8 [ 117.601446][ T5242] Bluetooth: Unexpected start frame (len 16) [ 117.607630][ T5242] Bluetooth: Frame is too long (len 16, expected len 4) [ 133.550516][ C1] sched: DL replenish lagged too much [ 133.605570][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.820654][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.981208][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 136.993417][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.012108][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.090833][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.098746][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 137.106639][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 137.291278][ T5235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 137.319217][ T5235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 137.330945][ T5235] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 137.339518][ T5235] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 137.348056][ T5235] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 137.355912][ T5235] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 137.441234][ T5242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.458959][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.468898][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.481968][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.489801][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 137.499731][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.678417][ T5235] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 137.689068][ T5235] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 137.697074][ T5235] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 137.705474][ T5235] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 137.713945][ T5235] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 137.721585][ T5235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 137.898418][ T5242] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 137.908057][ T5242] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 137.916666][ T5242] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 137.927716][ T5242] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 137.935579][ T5242] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 137.943901][ T5242] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 138.061780][ T5242] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 138.071466][ T5242] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 138.079119][ T5242] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 138.087749][ T5242] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 138.095675][ T5242] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 138.105290][ T5242] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 139.184286][ T5242] Bluetooth: hci2: command tx timeout [ 139.438606][ T5242] Bluetooth: hci6: command tx timeout [ 139.587358][ T5242] Bluetooth: hci1: command tx timeout [ 139.824198][ T5242] Bluetooth: hci7: command tx timeout [ 139.985884][ T5242] Bluetooth: hci8: command tx timeout [ 140.159949][ T5242] Bluetooth: hci9: command tx timeout [ 141.279630][ T5242] Bluetooth: hci2: command tx timeout [ 141.500780][ T5242] Bluetooth: hci6: command tx timeout [ 141.661285][ T5242] Bluetooth: hci1: command tx timeout [ 141.901144][ T5242] Bluetooth: hci7: command tx timeout [ 142.060668][ T5242] Bluetooth: hci8: command tx timeout [ 142.220718][ T5242] Bluetooth: hci9: command tx timeout [ 143.340836][ T5242] Bluetooth: hci2: command tx timeout [ 143.580695][ T5242] Bluetooth: hci6: command tx timeout [ 143.740975][ T5242] Bluetooth: hci1: command tx timeout [ 143.980920][ T5242] Bluetooth: hci7: command tx timeout [ 144.140716][ T5242] Bluetooth: hci8: command tx timeout [ 144.300760][ T5242] Bluetooth: hci9: command tx timeout [ 145.421518][ T5242] Bluetooth: hci2: command tx timeout [ 145.660632][ T5242] Bluetooth: hci6: command tx timeout [ 145.820840][ T5242] Bluetooth: hci1: command tx timeout [ 146.060947][ T5242] Bluetooth: hci7: command tx timeout [ 146.220807][ T5242] Bluetooth: hci8: command tx timeout [ 146.380862][ T5242] Bluetooth: hci9: command tx timeout [ 185.590264][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 185.596577][ T5246] Bluetooth: hci4: command 0x0406 tx timeout [ 185.602677][ T5234] Bluetooth: hci0: command 0x0406 tx timeout [ 189.899002][ T77] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.761030][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.767533][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.392270][ T5242] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 197.410756][ T5242] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 197.422428][ T5242] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 197.460028][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 197.490527][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 197.499840][ T5235] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 197.508669][ T5246] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 197.521170][ T5234] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 197.544558][ T5234] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 197.552098][ T5246] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 197.571127][ T5234] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 197.578954][ T5246] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 197.587112][ T5234] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 197.597796][ T5246] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 197.619219][ T5246] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 197.627433][ T5246] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 197.647576][ T5242] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 197.661759][ T5242] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 197.822007][ T54] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 197.831798][ T54] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 197.839655][ T54] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 197.849853][ T54] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 197.860283][ T54] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 197.872610][ T54] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 197.941271][ T54] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 197.951043][ T54] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 197.958906][ T54] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 197.967726][ T54] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 197.979668][ T54] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 197.992306][ T54] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 198.078888][ T5242] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 198.088078][ T5242] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 198.104628][ T5242] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 198.113410][ T5242] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 198.124669][ T5242] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 198.132198][ T5242] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 199.597267][ T54] Bluetooth: hci5: command tx timeout [ 199.740846][ T5242] Bluetooth: hci10: command tx timeout [ 199.748906][ T54] Bluetooth: hci11: command tx timeout [ 199.900795][ T54] Bluetooth: hci12: command tx timeout [ 200.060842][ T54] Bluetooth: hci13: command tx timeout [ 200.220763][ T54] Bluetooth: hci14: command tx timeout [ 201.660621][ T54] Bluetooth: hci5: command tx timeout [ 201.820663][ T5242] Bluetooth: hci10: command tx timeout [ 201.827938][ T54] Bluetooth: hci11: command tx timeout [ 201.983222][ T54] Bluetooth: hci12: command tx timeout [ 202.140818][ T54] Bluetooth: hci13: command tx timeout [ 202.300857][ T54] Bluetooth: hci14: command tx timeout [ 203.741313][ T54] Bluetooth: hci5: command tx timeout [ 203.900647][ T54] Bluetooth: hci11: command tx timeout [ 203.906214][ T54] Bluetooth: hci10: command tx timeout [ 204.060658][ T54] Bluetooth: hci12: command tx timeout [ 204.221071][ T54] Bluetooth: hci13: command tx timeout [ 204.380939][ T54] Bluetooth: hci14: command tx timeout [ 205.820797][ T54] Bluetooth: hci5: command tx timeout [ 205.980687][ T5242] Bluetooth: hci11: command tx timeout [ 205.986283][ T54] Bluetooth: hci10: command tx timeout [ 206.140685][ T54] Bluetooth: hci12: command tx timeout [ 206.310909][ T54] Bluetooth: hci13: command tx timeout [ 206.460848][ T54] Bluetooth: hci14: command tx timeout [ 255.185733][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.192792][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.654355][ T5242] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 259.692718][ T5242] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 259.701671][ T5242] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 259.710003][ T5242] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 259.717789][ T5242] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 259.730865][ T5242] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 259.958865][ T54] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 259.968595][ T54] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 259.976894][ T54] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 259.988388][ T54] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 260.028795][ T54] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 260.036392][ T54] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 260.167793][ T5242] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 260.177627][ T5242] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 260.186456][ T5242] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 260.194830][ T5242] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 260.203201][ T5242] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 260.213374][ T5242] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 260.280723][ T54] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 260.299339][ T54] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 260.433075][ T5229] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 260.448221][ T5229] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 260.459275][ T5229] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 260.467556][ T4615] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 260.475215][ T5229] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 260.484960][ T5229] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 260.492199][ T4615] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 260.502063][ T5229] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 260.512168][ T5229] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 260.533324][ T5229] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 260.588050][ T5229] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 260.607048][ T5229] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 260.615086][ T5229] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 260.624544][ T5229] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 260.634341][ T5229] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3 [ 260.642969][ T5229] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 261.823075][ T5229] Bluetooth: hci15: command tx timeout [ 262.140636][ T5229] Bluetooth: hci16: command tx timeout [ 262.300744][ T5229] Bluetooth: hci17: command tx timeout [ 262.462098][ T5246] Bluetooth: hci6: command 0x0406 tx timeout [ 262.468174][ T5246] Bluetooth: hci1: command 0x0406 tx timeout [ 262.474608][ T5234] Bluetooth: hci7: command 0x0406 tx timeout [ 262.480682][ T5245] Bluetooth: hci2: command 0x0406 tx timeout [ 262.486722][ T5245] Bluetooth: hci8: command 0x0406 tx timeout [ 262.492906][ T5229] Bluetooth: hci9: command 0x0406 tx timeout [ 262.620920][ T5244] Bluetooth: hci18: command tx timeout [ 262.627337][ T5244] Bluetooth: hci19: command tx timeout [ 262.700842][ T5244] Bluetooth: hci20: command tx timeout [ 263.507114][ T30] INFO: task syz.0.240:6009 blocked for more than 143 seconds. [ 263.517164][ T30] Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 263.550534][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 263.559443][ T30] task:syz.0.240 state:D stack:27360 pid:6009 tgid:6007 ppid:5223 flags:0x00000004 [ 263.617732][ T30] Call Trace: [ 263.710236][ T30] [ 263.737890][ T30] __schedule+0x1893/0x4b50 [ 263.775600][ T30] ? __pfx___schedule+0x10/0x10 [ 263.790943][ T30] ? __pfx_lock_release+0x10/0x10 [ 263.799098][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 263.809377][ T30] ? schedule+0x90/0x320 [ 263.817672][ T30] schedule+0x14b/0x320 [ 263.840548][ T30] schedule_preempt_disabled+0x13/0x30 [ 263.846081][ T30] __mutex_lock+0x6a7/0xd70 [ 263.856924][ T30] ? __mutex_lock+0x52a/0xd70 [ 263.861920][ T30] ? do_ip_setsockopt+0x127d/0x3cd0 [ 263.867433][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 263.879619][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.887458][ T30] do_ip_setsockopt+0x127d/0x3cd0 [ 263.900263][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.906078][ T5244] Bluetooth: hci15: command tx timeout [ 263.919864][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 263.926094][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.938711][ T30] ? aa_sk_perm+0x96d/0xab0 [ 263.944723][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.950420][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 263.962562][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 263.967640][ T30] ip_setsockopt+0x63/0x100 [ 263.979277][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 263.985504][ T30] do_sock_setsockopt+0x3b1/0x720 [ 263.997576][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 264.006240][ T30] ? __fget_files+0x29/0x470 [ 264.014852][ T30] ? __fget_files+0x3f3/0x470 [ 264.019625][ T30] ? __fget_files+0x29/0x470 [ 264.029281][ T30] __sys_setsockopt+0x1a8/0x250 [ 264.038530][ T30] __x64_sys_setsockopt+0xb5/0xd0 [ 264.048278][ T30] do_syscall_64+0xf3/0x230 [ 264.056504][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.066025][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.075687][ T30] RIP: 0033:0x7f3eff97def9 [ 264.080137][ T30] RSP: 002b:00007f3eff3ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 264.092367][ T30] RAX: ffffffffffffffda RBX: 00007f3effb35f80 RCX: 00007f3eff97def9 [ 264.108169][ T30] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000005 [ 264.118836][ T30] RBP: 00007f3eff9f0b76 R08: 0000000000000010 R09: 0000000000000000 [ 264.133215][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.147416][ T30] R13: 0000000000000000 R14: 00007f3effb35f80 R15: 00007ffd913397e8 [ 264.159418][ T30] [ 264.167454][ T30] INFO: task syz.2.253:6038 blocked for more than 144 seconds. [ 264.177615][ T30] Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 264.190301][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 264.202024][ T30] task:syz.2.253 state:D stack:27136 pid:6038 tgid:6037 ppid:5227 flags:0x00000004 [ 264.219882][ T30] Call Trace: [ 264.226248][ T5244] Bluetooth: hci16: command tx timeout [ 264.242267][ T30] [ 264.245244][ T30] __schedule+0x1893/0x4b50 [ 264.249817][ T30] ? __pfx___schedule+0x10/0x10 [ 264.260503][ T30] ? __pfx_lock_release+0x10/0x10 [ 264.265603][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 264.279616][ T30] ? schedule+0x90/0x320 [ 264.284180][ T30] schedule+0x14b/0x320 [ 264.288396][ T30] schedule_preempt_disabled+0x13/0x30 [ 264.300782][ T30] __mutex_lock+0x6a7/0xd70 [ 264.306346][ T30] ? __mutex_lock+0x52a/0xd70 [ 264.319412][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 264.325998][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 264.339299][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 264.345857][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 264.357071][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 264.364493][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.370180][ T30] ? ref_tracker_free+0x643/0x7e0 [ 264.380858][ T30] netlink_rcv_skb+0x1e5/0x430 [ 264.385674][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 264.391539][ T5244] Bluetooth: hci17: command tx timeout [ 264.405506][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 264.413142][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 264.418395][ T30] netlink_unicast+0x7f8/0x990 [ 264.426470][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 264.437288][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.446889][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.457428][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.467638][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.479027][ T30] ? __check_object_size+0x49c/0x900 [ 264.487274][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 264.496831][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.506471][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.517765][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 264.525328][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.536727][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.544634][ T30] __sock_sendmsg+0x223/0x270 [ 264.549362][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 264.560676][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.566019][ T30] __sys_sendmsg+0x2aa/0x390 [ 264.576859][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 264.582873][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 264.589266][ T30] ? do_syscall_64+0x100/0x230 [ 264.600488][ T30] ? do_syscall_64+0xb6/0x230 [ 264.605239][ T30] do_syscall_64+0xf3/0x230 [ 264.609794][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.624789][ T30] RIP: 0033:0x7fdd2ad7def9 [ 264.629254][ T30] RSP: 002b:00007fdd2bc4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.644463][ T30] RAX: ffffffffffffffda RBX: 00007fdd2af35f80 RCX: 00007fdd2ad7def9 [ 264.656373][ T30] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 264.670494][ T30] RBP: 00007fdd2adf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 264.678555][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.694234][ T30] R13: 0000000000000000 R14: 00007fdd2af35f80 R15: 00007ffe85f816c8 [ 264.702765][ T54] Bluetooth: hci18: command tx timeout [ 264.708411][ T5244] Bluetooth: hci19: command tx timeout [ 264.723962][ T30] [ 264.727104][ T30] INFO: task syz.2.253:6041 blocked for more than 144 seconds. [ 264.740521][ T30] Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 264.758197][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 264.767393][ T30] task:syz.2.253 state:D stack:27136 pid:6041 tgid:6037 ppid:5227 flags:0x00000004 [ 264.784641][ T30] Call Trace: [ 264.787948][ T30] [ 264.791523][ T5244] Bluetooth: hci20: command tx timeout [ 264.808084][ T30] __schedule+0x1893/0x4b50 [ 264.813016][ T30] ? __pfx___schedule+0x10/0x10 [ 264.818726][ T30] ? __pfx_lock_release+0x10/0x10 [ 264.830945][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 264.836488][ T30] ? schedule+0x90/0x320 [ 264.850059][ T30] schedule+0x14b/0x320 [ 264.854569][ T30] schedule_preempt_disabled+0x13/0x30 [ 264.860078][ T30] __mutex_lock+0x6a7/0xd70 [ 264.880940][ T30] ? __mutex_lock+0x52a/0xd70 [ 264.885698][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 264.898055][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 264.905399][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 264.917928][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 264.924209][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 264.929736][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.940890][ T30] ? ref_tracker_free+0x643/0x7e0 [ 264.948764][ T30] netlink_rcv_skb+0x1e5/0x430 [ 264.958653][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 264.968022][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 264.978326][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 264.986121][ T30] netlink_unicast+0x7f8/0x990 [ 264.995894][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 265.003738][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.009424][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.020011][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.038090][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.044069][ T30] ? __check_object_size+0x49c/0x900 [ 265.049407][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 265.060866][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.066216][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.078651][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 265.085268][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.098464][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.104138][ T30] __sock_sendmsg+0x223/0x270 [ 265.108878][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 265.120517][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.127771][ T30] __sys_sendmsg+0x2aa/0x390 [ 265.138761][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 265.148556][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 265.160542][ T30] ? do_syscall_64+0x100/0x230 [ 265.165369][ T30] ? do_syscall_64+0xb6/0x230 [ 265.170096][ T30] do_syscall_64+0xf3/0x230 [ 265.181206][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.187151][ T30] RIP: 0033:0x7fdd2ad7def9 [ 265.199400][ T30] RSP: 002b:00007fdd2bc2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.209558][ T30] RAX: ffffffffffffffda RBX: 00007fdd2af36058 RCX: 00007fdd2ad7def9 [ 265.224002][ T30] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 265.236886][ T30] RBP: 00007fdd2adf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 265.251282][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.259391][ T30] R13: 0000000000000000 R14: 00007fdd2af36058 R15: 00007ffe85f816c8 [ 265.280701][ T30] [ 265.284015][ T30] INFO: task syz.4.254:6043 blocked for more than 145 seconds. [ 265.298359][ T30] Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 265.307838][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 265.320544][ T30] task:syz.4.254 state:D stack:26496 pid:6043 tgid:6039 ppid:5236 flags:0x00000004 [ 265.338675][ T30] Call Trace: [ 265.350348][ T30] [ 265.353788][ T30] __schedule+0x1893/0x4b50 [ 265.358477][ T30] ? __pfx___schedule+0x10/0x10 [ 265.375321][ T30] ? __pfx_lock_release+0x10/0x10 [ 265.380423][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 265.390379][ T30] ? schedule+0x90/0x320 [ 265.394973][ T30] schedule+0x14b/0x320 [ 265.399181][ T30] schedule_preempt_disabled+0x13/0x30 [ 265.412071][ T30] __mutex_lock+0x6a7/0xd70 [ 265.416636][ T30] ? __mutex_lock+0x52a/0xd70 [ 265.431170][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 265.436345][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 265.448812][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 265.454094][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 265.460278][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 265.470850][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.476533][ T30] ? ref_tracker_free+0x643/0x7e0 [ 265.489022][ T30] netlink_rcv_skb+0x1e5/0x430 [ 265.494423][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 265.500211][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.510505][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.515759][ T30] netlink_unicast+0x7f8/0x990 [ 265.526985][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 265.533224][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.538921][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.554592][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.560284][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.599661][ T30] ? __check_object_size+0x49c/0x900 [ 265.614487][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 265.619320][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.629548][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.638553][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 265.648364][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.656677][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.675249][ T30] __sock_sendmsg+0x223/0x270 [ 265.680068][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 265.689769][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.697750][ T30] __sys_sendmmsg+0x3ac/0x730 [ 265.707278][ T30] ? __pfx___sys_sendmmsg+0x10/0x10 [ 265.715641][ T30] ? wake_up_q+0xdc/0x120 [ 265.720021][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.731869][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.738344][ T30] ? futex_wait+0x285/0x360 [ 265.750832][ T30] ? __pfx_futex_wait+0x10/0x10 [ 265.755744][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.769828][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.777789][ T30] ? do_futex+0x33b/0x560 [ 265.789326][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 265.795815][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 265.809168][ T30] ? do_syscall_64+0x100/0x230 [ 265.814296][ T30] __x64_sys_sendmmsg+0xa0/0xb0 [ 265.819186][ T30] do_syscall_64+0xf3/0x230 [ 265.830489][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.836431][ T30] RIP: 0033:0x7f296ad7def9 [ 265.850541][ T30] RSP: 002b:00007f296bad3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 265.859003][ T30] RAX: ffffffffffffffda RBX: 00007f296af36058 RCX: 00007f296ad7def9 [ 265.875318][ T30] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000007 [ 265.888282][ T30] RBP: 00007f296adf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 265.901215][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.909230][ T30] R13: 0000000000000000 R14: 00007f296af36058 R15: 00007ffc0e516c68 [ 265.938429][ T30] [ 265.941631][ T30] [ 265.941631][ T30] Showing all locks held in the system: [ 265.958982][ T30] 3 locks held by kworker/u8:0/11: [ 265.965338][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 265.987019][ T30] #1: ffffc90000107d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 265.998425][ T5244] Bluetooth: hci15: command tx timeout [ 266.012522][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 266.026561][ T30] 1 lock held by khungtaskd/30: [ 266.034052][ T30] #0: ffffffff8e9389e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 266.050085][ T30] 3 locks held by kworker/1:1/51: [ 266.057687][ T30] 3 locks held by kworker/u8:5/71: [ 266.069783][ T30] #0: ffff88814b3fa148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 266.088551][ T30] #1: ffffc900015d7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 266.109574][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 266.121111][ T30] 6 locks held by kworker/u8:6/77: [ 266.126259][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 266.140541][ T30] #1: ffffc900020dfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 266.158480][ T30] #2: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 266.168320][ T30] #3: ffff88805e5390e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 266.188713][ T30] #4: ffff88805e53a250 (&devlink->lock_key#5){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 266.200013][ T30] #5: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 266.216221][ T30] 8 locks held by kworker/1:2/937: [ 266.221954][ T30] 2 locks held by getty/4979: [ 266.226738][ T30] #0: ffff88814b5530a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 266.245646][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 266.258193][ T30] 1 lock held by syz-executor/5224: [ 266.270709][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 266.279776][ T30] 1 lock held by syz-executor/5225: [ 266.292549][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 266.301978][ T5244] Bluetooth: hci16: command tx timeout [ 266.313851][ T30] 3 locks held by kworker/1:6/5289: [ 266.319097][ T30] #0: ffff88801ac79948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 266.339583][ T30] #1: ffffc900048dfd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 266.359780][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 266.369941][ T30] 1 lock held by syz.0.240/6009: [ 266.384253][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: do_ip_setsockopt+0x127d/0x3cd0 [ 266.399999][ T30] 1 lock held by syz.2.253/6038: [ 266.410125][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 266.423565][ T30] 1 lock held by syz.2.253/6041: [ 266.428531][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 266.442066][ T30] 1 lock held by syz.4.254/6043: [ 266.447035][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 266.462403][ T30] 1 lock held by syz-executor/6055: [ 266.467631][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 266.480509][ T5244] Bluetooth: hci17: command tx timeout [ 266.490392][ T30] 1 lock held by syz-executor/6057: [ 266.500159][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 266.513617][ T30] 1 lock held by syz-executor/6059: [ 266.518928][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 266.534167][ T30] 1 lock held by syz-executor/6062: [ 266.539392][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 266.557220][ T30] 1 lock held by syz-executor/6064: [ 266.563177][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 266.581642][ T30] 1 lock held by syz-executor/6066: [ 266.586870][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 266.604165][ T30] 1 lock held by syz-executor/6078: [ 266.609386][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 266.622774][ T30] 1 lock held by syz-executor/6079: [ 266.628001][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 266.642448][ T30] 1 lock held by syz-executor/6080: [ 266.647671][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 266.665232][ T30] 1 lock held by syz-executor/6087: [ 266.671981][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 266.688562][ T30] 1 lock held by syz-executor/6090: [ 266.697184][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 266.713960][ T30] 1 lock held by syz-executor/6092: [ 266.719185][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 266.733221][ T30] 1 lock held by syz-executor/6106: [ 266.738450][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 266.753569][ T30] 1 lock held by syz-executor/6110: [ 266.758805][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 266.775381][ T30] 1 lock held by syz-executor/6112: [ 266.780955][ T5244] Bluetooth: hci19: command tx timeout [ 266.786472][ T5244] Bluetooth: hci18: command tx timeout [ 266.801062][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 266.818576][ T30] 1 lock held by syz-executor/6114: [ 266.824081][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 266.840481][ T30] 1 lock held by syz-executor/6116: [ 266.845710][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 266.866072][ T30] 1 lock held by syz-executor/6118: [ 266.871678][ T5244] Bluetooth: hci20: command tx timeout [ 266.884400][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 266.897698][ T30] [ 266.900043][ T30] ============================================= [ 266.900043][ T30] [ 266.912924][ T30] NMI backtrace for cpu 0 [ 266.917292][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 266.927468][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 266.937543][ T30] Call Trace: [ 266.940840][ T30] [ 266.943785][ T30] dump_stack_lvl+0x241/0x360 [ 266.948508][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.953755][ T30] ? __pfx__printk+0x10/0x10 [ 266.958400][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 266.963378][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 266.968873][ T30] ? _printk+0xd5/0x120 [ 266.973164][ T30] ? __pfx__printk+0x10/0x10 [ 266.977793][ T30] ? __wake_up_klogd+0xcc/0x110 [ 266.982677][ T30] ? __pfx__printk+0x10/0x10 [ 266.987392][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.993066][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 266.998186][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 267.004218][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 267.010238][ T30] watchdog+0xff4/0x1040 [ 267.014527][ T30] ? watchdog+0x1ea/0x1040 [ 267.018984][ T30] ? __pfx_watchdog+0x10/0x10 [ 267.023692][ T30] kthread+0x2f2/0x390 [ 267.027803][ T30] ? __pfx_watchdog+0x10/0x10 [ 267.032548][ T30] ? __pfx_kthread+0x10/0x10 [ 267.037174][ T30] ret_from_fork+0x4d/0x80 [ 267.041644][ T30] ? __pfx_kthread+0x10/0x10 [ 267.046262][ T30] ret_from_fork_asm+0x1a/0x30 [ 267.051508][ T30] [ 267.055285][ T30] Sending NMI from CPU 0 to CPUs 1: [ 267.060776][ C1] NMI backtrace for cpu 1 [ 267.060791][ C1] CPU: 1 UID: 0 PID: 937 Comm: kworker/1:2 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 267.060818][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 267.060833][ C1] Workqueue: events nsim_dev_trap_report_work [ 267.060862][ C1] RIP: 0010:unwind_next_frame+0x6d5/0x22d0 [ 267.060904][ C1] Code: 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 49 8d 1c 46 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 4c 39 f8 4c 0f 46 f1 48 [ 267.060924][ C1] RSP: 0018:ffffc90000a188b0 EFLAGS: 00000217 [ 267.060944][ C1] RAX: 0000000000000000 RBX: ffffffff902d5ba4 RCX: dffffc0000000000 [ 267.060961][ C1] RDX: 00000000000b0001 RSI: ffffffff90a2c6a6 RDI: 0000000000000001 [ 267.060978][ C1] RBP: ffffffff902d5ba4 R08: 0000000000000007 R09: ffffc90000a18a70 [ 267.060995][ C1] R10: dffffc0000000000 R11: ffffffff81807a70 R12: ffffffff902d5ba4 [ 267.061013][ C1] R13: ffffffff902d5ba4 R14: ffffffff902d5ba4 R15: ffffffff81576b0a [ 267.061034][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 267.061054][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.061071][ C1] CR2: 00007fb785445866 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 267.061090][ C1] Call Trace: [ 267.061098][ C1] [ 267.061107][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 267.061135][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 267.061174][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 267.061200][ C1] ? nmi_handle+0x2a/0x5a0 [ 267.061233][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 267.061266][ C1] ? nmi_handle+0x151/0x5a0 [ 267.061290][ C1] ? nmi_handle+0x2a/0x5a0 [ 267.061314][ C1] ? unwind_next_frame+0x6d5/0x22d0 [ 267.061352][ C1] ? default_do_nmi+0x63/0x160 [ 267.061380][ C1] ? exc_nmi+0x123/0x1f0 [ 267.061406][ C1] ? end_repeat_nmi+0xf/0x53 [ 267.061442][ C1] ? do_softirq+0x11a/0x1e0 [ 267.061476][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 267.061514][ C1] ? unwind_next_frame+0x6d5/0x22d0 [ 267.061552][ C1] ? unwind_next_frame+0x6d5/0x22d0 [ 267.061592][ C1] ? unwind_next_frame+0x6d5/0x22d0 [ 267.061630][ C1] [ 267.061638][ C1] [ 267.061652][ C1] ? do_softirq+0x11b/0x1e0 [ 267.061685][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 267.061714][ C1] arch_stack_walk+0x11c/0x150 [ 267.061743][ C1] ? do_softirq+0x11b/0x1e0 [ 267.061777][ C1] stack_trace_save+0x118/0x1d0 [ 267.061806][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 267.061841][ C1] ref_tracker_free+0x105/0x7e0 [ 267.061874][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 267.061903][ C1] ? dst_destroy+0x171/0x460 [ 267.061939][ C1] ? rcu_core+0xaac/0x17a0 [ 267.061961][ C1] ? handle_softirqs+0x2c7/0x980 [ 267.061992][ C1] ? do_softirq+0x11b/0x1e0 [ 267.062028][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.062066][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 267.062100][ C1] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 267.062138][ C1] dst_destroy+0x171/0x460 [ 267.062175][ C1] ? rcu_core+0xa37/0x17a0 [ 267.062196][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 267.062233][ C1] rcu_core+0xaac/0x17a0 [ 267.062263][ C1] ? __pfx_rcu_core+0x10/0x10 [ 267.062287][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.062325][ C1] ? sched_clock+0x4a/0x70 [ 267.062365][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 267.062408][ C1] handle_softirqs+0x2c7/0x980 [ 267.062444][ C1] ? do_softirq+0x11b/0x1e0 [ 267.062478][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 267.062551][ C1] ? rcu_is_watching+0x15/0xb0 [ 267.062588][ C1] do_softirq+0x11b/0x1e0 [ 267.062619][ C1] [ 267.062627][ C1] [ 267.062635][ C1] ? __pfx_do_softirq+0x10/0x10 [ 267.062667][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 267.062703][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.062743][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.062780][ C1] ? rcu_is_watching+0x15/0xb0 [ 267.062807][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 267.062840][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 267.062864][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 267.062897][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 267.062939][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.062977][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 267.063004][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 267.063036][ C1] ? process_scheduled_works+0x976/0x1850 [ 267.063071][ C1] process_scheduled_works+0xa65/0x1850 [ 267.063122][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 267.063161][ C1] ? assign_work+0x364/0x3d0 [ 267.063196][ C1] worker_thread+0x870/0xd30 [ 267.063233][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.063273][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.063311][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 267.063348][ C1] ? __kthread_parkme+0x169/0x1d0 [ 267.063386][ C1] ? __pfx_worker_thread+0x10/0x10 [ 267.063421][ C1] kthread+0x2f2/0x390 [ 267.063443][ C1] ? __pfx_worker_thread+0x10/0x10 [ 267.063477][ C1] ? __pfx_kthread+0x10/0x10 [ 267.063505][ C1] ret_from_fork+0x4d/0x80 [ 267.063540][ C1] ? __pfx_kthread+0x10/0x10 [ 267.063562][ C1] ret_from_fork_asm+0x1a/0x30 [ 267.063610][ C1] [ 267.651870][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 267.658765][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 267.668936][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 267.679095][ T30] Call Trace: [ 267.682386][ T30] [ 267.685331][ T30] dump_stack_lvl+0x241/0x360 [ 267.690054][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.695295][ T30] ? __pfx__printk+0x10/0x10 [ 267.699916][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 267.706031][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.711711][ T30] ? vscnprintf+0x5d/0x90 [ 267.716070][ T30] panic+0x349/0x880 [ 267.719999][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.725692][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 267.731895][ T30] ? __pfx_panic+0x10/0x10 [ 267.736350][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 267.741928][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.747601][ T30] ? __irq_work_queue_local+0x137/0x410 [ 267.753180][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.758853][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 267.764263][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 267.770445][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 267.776632][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.782317][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 267.788503][ T30] watchdog+0x1033/0x1040 [ 267.792864][ T30] ? watchdog+0x1ea/0x1040 [ 267.797322][ T30] ? __pfx_watchdog+0x10/0x10 [ 267.802053][ T30] kthread+0x2f2/0x390 [ 267.806145][ T30] ? __pfx_watchdog+0x10/0x10 [ 267.810856][ T30] ? __pfx_kthread+0x10/0x10 [ 267.815472][ T30] ret_from_fork+0x4d/0x80 [ 267.819995][ T30] ? __pfx_kthread+0x10/0x10 [ 267.824608][ T30] ret_from_fork_asm+0x1a/0x30 [ 267.829424][ T30] [ 267.832668][ T30] Kernel Offset: disabled [ 267.836987][ T30] Rebooting in 86400 seconds..