last executing test programs: 9.685346657s ago: executing program 4 (id=1931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000980)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) 9.390439043s ago: executing program 3 (id=1933): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000480)={0x18, 0x0, {0x4, @broadcast, 'lo\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1}]}}]}, 0x3c}}, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 8.61445211s ago: executing program 4 (id=1935): kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f00000004c0)="294d77b321e4", 0x6}], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6a00330050000000ffffffffffff080211000000505050505050"], 0x88}}, 0x0) 7.963017884s ago: executing program 2 (id=1839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 7.541408978s ago: executing program 1 (id=1869): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x40000, 0x1, 0x0, 0x592c, 0x1, 0xfffffffc, 0x0, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r3 = msgget$private(0x0, 0x28) msgrcv(r3, 0x0, 0x0, 0x3, 0x3000) msgctl$IPC_RMID(r3, 0x0) msgctl$MSG_STAT_ANY(r3, 0xd, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000080)={0x0, 0x846}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x200000100000011, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000240)) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x4014, 0x0, 0x0) shutdown(r8, 0x1) splice(r8, 0x0, r7, 0x0, 0x406f413, 0x0) 6.813663769s ago: executing program 3 (id=1937): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x1000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.812986972s ago: executing program 2 (id=1839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 6.301470389s ago: executing program 4 (id=1939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000b40)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x0, 0x1}}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) r4 = syz_io_uring_setup(0x4ea1, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5de, &(0x7f0000000200), &(0x7f0000000940)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r4, 0x1d2d, 0x0, 0x0, 0x0, 0x0) write$char_usb(r3, &(0x7f0000000140), 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r6 = epoll_create1(0x0) r7 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000004c0)={0x80000007}) epoll_pwait(r6, &(0x7f0000000340)=[{}], 0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x5c1341, 0x0) 6.30075213s ago: executing program 3 (id=1940): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_macvtap\x00', 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000010000100000000000000000400000000", @ANYRES32=r3, @ANYRES64=r0], 0x28}}, 0x0) 6.10534984s ago: executing program 1 (id=1869): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x40000, 0x1, 0x0, 0x592c, 0x1, 0xfffffffc, 0x0, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r3 = msgget$private(0x0, 0x28) msgrcv(r3, 0x0, 0x0, 0x3, 0x3000) msgctl$IPC_RMID(r3, 0x0) msgctl$MSG_STAT_ANY(r3, 0xd, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000080)={0x0, 0x846}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x200000100000011, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000240)) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x4014, 0x0, 0x0) shutdown(r8, 0x1) splice(r8, 0x0, r7, 0x0, 0x406f413, 0x0) 5.236708566s ago: executing program 2 (id=1839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 4.714816431s ago: executing program 4 (id=1942): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x83, &(0x7f0000000200)={r3}, 0x8) 4.714282128s ago: executing program 0 (id=1943): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) r1 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10300}, &(0x7f0000000140), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) 4.713252545s ago: executing program 1 (id=1869): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x40000, 0x1, 0x0, 0x592c, 0x1, 0xfffffffc, 0x0, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r3 = msgget$private(0x0, 0x28) msgrcv(r3, 0x0, 0x0, 0x3, 0x3000) msgctl$IPC_RMID(r3, 0x0) msgctl$MSG_STAT_ANY(r3, 0xd, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000080)={0x0, 0x846}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x200000100000011, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000240)) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x4014, 0x0, 0x0) shutdown(r8, 0x1) splice(r8, 0x0, r7, 0x0, 0x406f413, 0x0) 3.904736659s ago: executing program 0 (id=1944): r0 = io_uring_setup(0x70f8, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x20000001) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) 3.904622672s ago: executing program 2 (id=1839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 3.188051533s ago: executing program 3 (id=1945): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000980)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) 3.18774395s ago: executing program 1 (id=1869): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x40000, 0x1, 0x0, 0x592c, 0x1, 0xfffffffc, 0x0, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r3 = msgget$private(0x0, 0x28) msgrcv(r3, 0x0, 0x0, 0x3, 0x3000) msgctl$IPC_RMID(r3, 0x0) msgctl$MSG_STAT_ANY(r3, 0xd, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000080)={0x0, 0x846}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x200000100000011, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000240)) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x4014, 0x0, 0x0) shutdown(r8, 0x1) splice(r8, 0x0, r7, 0x0, 0x406f413, 0x0) 2.189298707s ago: executing program 4 (id=1946): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xe8) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f00000101c0)={0x2, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) r4 = syz_io_uring_setup(0xe2c, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) gettid() ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000497000/0x4000)=nil, 0x7fffdfb68000}, 0x1}) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@bridge_getlink={0x28, 0x12, 0x4f38b0d43a3ffbab, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xa1}]}, 0x28}}, 0x0) 2.188872223s ago: executing program 0 (id=1947): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000480)={0x18, 0x0, {0x4, @broadcast, 'lo\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1}]}}]}, 0x3c}}, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.180968146s ago: executing program 2 (id=1839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 1.583124546s ago: executing program 3 (id=1948): socket$key(0xf, 0x3, 0x2) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0xa, 0x2}}}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "f896e404"}, @local=@item_012={0x1, 0x2, 0x2, 'e'}, @main=@item_012={0x2, 0x0, 0x9, "f792"}, @main=@item_4={0x3, 0x0, 0x0, "9ef12d19"}]}}, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff}) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x41010, 0x0, 0xa7}}, 0x50) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x40000) 1.581841804s ago: executing program 0 (id=1949): kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f00000004c0)="294d77b321e4", 0x6}], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6a00330050000000ffffffffffff080211000000505050505050"], 0x88}}, 0x0) 1.581535544s ago: executing program 1 (id=1869): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x40000, 0x1, 0x0, 0x592c, 0x1, 0xfffffffc, 0x0, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r3 = msgget$private(0x0, 0x28) msgrcv(r3, 0x0, 0x0, 0x3, 0x3000) msgctl$IPC_RMID(r3, 0x0) msgctl$MSG_STAT_ANY(r3, 0xd, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000080)={0x0, 0x846}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x200000100000011, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000240)) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x4014, 0x0, 0x0) shutdown(r8, 0x1) splice(r8, 0x0, r7, 0x0, 0x406f413, 0x0) 894.160649ms ago: executing program 4 (id=1950): socket$inet(0x2, 0x801, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001100) 893.44555ms ago: executing program 0 (id=1951): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x50, 0x12, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [], [0x0, 0x0, 0x1000000]}}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0) 893.32822ms ago: executing program 2 (id=1839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 42.608763ms ago: executing program 3 (id=1952): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4622, 0x1000000080000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000580)}, 0x0) 289.566µs ago: executing program 0 (id=1953): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x3c}, 0x1, 0x2}, 0x4000) 0s ago: executing program 1 (id=1869): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x40000, 0x1, 0x0, 0x592c, 0x1, 0xfffffffc, 0x0, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r3 = msgget$private(0x0, 0x28) msgrcv(r3, 0x0, 0x0, 0x3, 0x3000) msgctl$IPC_RMID(r3, 0x0) msgctl$MSG_STAT_ANY(r3, 0xd, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000080)={0x0, 0x846}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x200000100000011, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000240)) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x4014, 0x0, 0x0) shutdown(r8, 0x1) splice(r8, 0x0, r7, 0x0, 0x406f413, 0x0) kernel console output (not intermixed with test programs): etooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1914.323864][T14331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1914.331249][T14331] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1914.332599][ T9042] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1914.359211][T14331] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1914.360829][ T9042] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1914.367972][T14331] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1914.484422][T14332] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1914.530872][T14332] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1914.543815][T14332] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1914.544091][T14329] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1914.567000][T14332] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1914.890690][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.921006][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.096085][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 1916.439169][T14003] Bluetooth: hci0: command tx timeout [ 1916.462484][T14000] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1916.480111][T14000] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1916.492489][T14003] Bluetooth: hci3: command tx timeout [ 1916.532440][T14000] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1916.603391][T14000] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1916.652822][T14000] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1916.762562][T14000] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1917.032697][T14000] Bluetooth: hci7: command tx timeout [ 1917.112488][T14000] Bluetooth: hci6: command tx timeout [ 1917.457548][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 1918.482520][T14000] Bluetooth: hci0: command tx timeout [ 1918.572371][T14000] Bluetooth: hci3: command tx timeout [ 1919.036818][T14000] Bluetooth: hci4: command tx timeout [ 1919.117734][T14000] Bluetooth: hci7: command tx timeout [ 1919.201189][T14000] Bluetooth: hci6: command tx timeout [ 1920.553627][T14000] Bluetooth: hci0: command tx timeout [ 1920.643239][T14000] Bluetooth: hci3: command tx timeout [ 1921.122837][T14000] Bluetooth: hci4: command tx timeout [ 1921.196131][T14000] Bluetooth: hci7: command tx timeout [ 1921.282491][T14000] Bluetooth: hci6: command tx timeout [ 1922.632590][T14000] Bluetooth: hci0: command tx timeout [ 1922.712598][T14000] Bluetooth: hci3: command tx timeout [ 1923.192746][T14000] Bluetooth: hci4: command tx timeout [ 1923.272581][T14000] Bluetooth: hci7: command tx timeout [ 1923.352485][T14000] Bluetooth: hci6: command tx timeout [ 1925.272790][T14000] Bluetooth: hci4: command tx timeout [ 1939.460081][ T1122] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1941.708646][ T1122] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1942.651238][ T1122] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1943.273446][ T1122] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1944.311649][T14322] chnl_net:caif_netlink_parms(): no params data found [ 1944.465560][T14336] chnl_net:caif_netlink_parms(): no params data found [ 1944.690203][T14323] chnl_net:caif_netlink_parms(): no params data found [ 1944.853701][T14327] chnl_net:caif_netlink_parms(): no params data found [ 1946.985990][T14326] chnl_net:caif_netlink_parms(): no params data found [ 1950.837898][T14322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1950.943856][T14322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1950.955309][T14322] bridge_slave_0: entered allmulticast mode [ 1951.137821][T14322] bridge_slave_0: entered promiscuous mode [ 1951.528829][T14336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1951.554066][T14336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1951.773720][T14336] bridge_slave_0: entered allmulticast mode [ 1951.851758][T14336] bridge_slave_0: entered promiscuous mode [ 1952.302318][T14323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1952.350840][T14323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1952.456554][T14323] bridge_slave_0: entered allmulticast mode [ 1952.476268][T14323] bridge_slave_0: entered promiscuous mode [ 1952.503619][T14323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1952.511669][T14323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1952.520670][T14323] bridge_slave_1: entered allmulticast mode [ 1952.540416][T14323] bridge_slave_1: entered promiscuous mode [ 1952.563654][T14322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1952.609849][T14322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1952.764387][T14322] bridge_slave_1: entered allmulticast mode [ 1952.786107][T14322] bridge_slave_1: entered promiscuous mode [ 1953.321427][T14336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1953.363286][T14336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1953.372059][T14336] bridge_slave_1: entered allmulticast mode [ 1953.393633][T14336] bridge_slave_1: entered promiscuous mode [ 1954.011158][ T1122] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1954.864032][T14327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1954.906408][T14327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1954.964579][T14327] bridge_slave_0: entered allmulticast mode [ 1954.986883][T14327] bridge_slave_0: entered promiscuous mode [ 1955.453304][ T1122] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1956.074143][T14322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1956.114617][T14327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1956.127943][T14327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1956.137466][T14327] bridge_slave_1: entered allmulticast mode [ 1956.155792][T14327] bridge_slave_1: entered promiscuous mode [ 1956.405787][T14336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1956.861536][ T1122] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1957.545304][T14323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1957.646512][T14322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1958.271242][T14336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1958.413800][ T1122] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1958.738462][T14323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1959.539653][T14327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1960.022530][T14326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1960.029720][T14326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1960.172177][T14326] bridge_slave_0: entered allmulticast mode [ 1960.198720][T14326] bridge_slave_0: entered promiscuous mode [ 1960.211438][T14326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1960.222092][T14326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1960.229550][T14326] bridge_slave_1: entered allmulticast mode [ 1960.238720][T14326] bridge_slave_1: entered promiscuous mode [ 1960.344527][T14322] team0: Port device team_slave_0 added [ 1960.365337][T14327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1960.556673][T14336] team0: Port device team_slave_0 added [ 1960.807309][T14329] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1960.818163][T14329] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1960.852573][T14329] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1960.885632][T14329] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1960.904884][T14322] team0: Port device team_slave_1 added [ 1960.911365][T14329] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1960.919055][T14329] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1961.087132][T14336] team0: Port device team_slave_1 added [ 1961.573583][T14000] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1961.593246][T14000] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1961.615523][T14000] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1961.638128][T14000] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1961.648085][T14000] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1961.658298][T14332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1961.725305][T14336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1961.733364][T14329] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1961.745030][T14329] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1961.754319][T14336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1961.782620][T14329] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1961.800200][T14329] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1961.810553][T14329] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1961.817997][T14336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1961.818197][T14329] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1961.906456][T14322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1961.913925][T14322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1961.941156][T14322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1961.954851][T14322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1961.963054][T14322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1961.991535][T14322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1962.116526][T14336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1962.131717][T14336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1962.177348][T14336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1962.416516][T14322] hsr_slave_0: entered promiscuous mode [ 1962.423851][T14322] hsr_slave_1: entered promiscuous mode [ 1962.430189][T14322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1962.438109][T14322] Cannot create hsr debugfs directory [ 1962.450752][T14336] hsr_slave_0: entered promiscuous mode [ 1962.457477][T14336] hsr_slave_1: entered promiscuous mode [ 1962.464814][T14336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1962.473997][T14336] Cannot create hsr debugfs directory [ 1962.497368][ T1122] bridge_slave_1: left allmulticast mode [ 1962.505543][ T1122] bridge_slave_1: left promiscuous mode [ 1962.511460][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1962.524903][ T1122] bridge_slave_0: left allmulticast mode [ 1962.530584][ T1122] bridge_slave_0: left promiscuous mode [ 1962.536651][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1962.548629][ T1122] bridge_slave_1: left allmulticast mode [ 1962.554715][ T1122] bridge_slave_1: left promiscuous mode [ 1962.560448][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1962.569666][ T1122] bridge_slave_0: left allmulticast mode [ 1962.577923][ T1122] bridge_slave_0: left promiscuous mode [ 1962.584273][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1962.595167][ T1122] bridge_slave_1: left allmulticast mode [ 1962.600951][ T1122] bridge_slave_1: left promiscuous mode [ 1962.607612][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1962.617953][ T1122] bridge_slave_0: left allmulticast mode [ 1962.625569][ T1122] bridge_slave_0: left promiscuous mode [ 1962.631368][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1962.644129][ T1122] bridge_slave_1: left allmulticast mode [ 1962.649912][ T1122] bridge_slave_1: left promiscuous mode [ 1962.659041][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1962.670119][ T1122] bridge_slave_0: left allmulticast mode [ 1962.685405][ T1122] bridge_slave_0: left promiscuous mode [ 1962.691216][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1962.945303][T14329] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1962.961851][T14329] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1962.970967][T14329] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1962.986468][T14329] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1962.995603][T14329] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1963.004638][T14329] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1963.047994][T14329] Bluetooth: hci1: command tx timeout [ 1963.680319][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1963.693128][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1963.706176][ T1122] bond0 (unregistering): Released all slaves [ 1963.726336][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1963.739247][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1963.751064][ T1122] bond0 (unregistering): Released all slaves [ 1963.757496][T14329] Bluetooth: hci2: command tx timeout [ 1963.894870][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1963.908444][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1963.917352][T14329] Bluetooth: hci3: command tx timeout [ 1963.927119][ T1122] bond0 (unregistering): Released all slaves [ 1964.071519][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1964.084927][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1964.095963][ T1122] bond0 (unregistering): Released all slaves [ 1964.350597][ T1122] tipc: Disabling bearer [ 1964.356346][ T1122] tipc: Left network mode [ 1964.460377][ T1122] tipc: Disabling bearer [ 1964.478572][ T1122] tipc: Left network mode [ 1965.042683][T14329] Bluetooth: hci5: command tx timeout [ 1965.112714][T14329] Bluetooth: hci1: command tx timeout [ 1965.562810][T14003] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1965.582078][T14003] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1965.593281][T14003] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1965.603091][T14003] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1965.610996][T14003] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1965.619124][T14003] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1965.792510][T14419] chnl_net:caif_netlink_parms(): no params data found [ 1965.832450][T14329] Bluetooth: hci2: command tx timeout [ 1965.860600][T14412] chnl_net:caif_netlink_parms(): no params data found [ 1966.002237][T14329] Bluetooth: hci3: command tx timeout [ 1966.006991][T14433] chnl_net:caif_netlink_parms(): no params data found [ 1966.061652][ T1122] hsr_slave_0: left promiscuous mode [ 1966.075163][ T1122] hsr_slave_1: left promiscuous mode [ 1966.092588][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1966.100642][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1966.124927][ T1122] hsr_slave_0: left promiscuous mode [ 1966.131456][ T1122] hsr_slave_1: left promiscuous mode [ 1966.144080][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1966.163493][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1966.187883][ T1122] hsr_slave_0: left promiscuous mode [ 1966.203414][ T1122] hsr_slave_1: left promiscuous mode [ 1966.213228][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1966.220753][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1966.248765][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1966.256377][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1966.269863][ T1122] hsr_slave_0: left promiscuous mode [ 1966.276632][ T1122] hsr_slave_1: left promiscuous mode [ 1966.284658][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1966.297611][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1966.307230][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1966.323406][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1966.373347][ T1122] veth1_macvtap: left promiscuous mode [ 1966.378952][ T1122] veth0_macvtap: left promiscuous mode [ 1966.385246][ T1122] veth1_vlan: left promiscuous mode [ 1966.390647][ T1122] veth0_vlan: left promiscuous mode [ 1966.413866][ T1122] veth1_vlan: left promiscuous mode [ 1966.419293][ T1122] veth0_vlan: left promiscuous mode [ 1966.904588][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 1966.939480][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 1967.129797][T14329] Bluetooth: hci5: command tx timeout [ 1967.192705][T14329] Bluetooth: hci1: command tx timeout [ 1967.324266][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 1967.362189][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 1967.672562][T14329] Bluetooth: hci0: command tx timeout [ 1967.912515][T14329] Bluetooth: hci2: command tx timeout [ 1968.060504][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 1968.072728][T14329] Bluetooth: hci3: command tx timeout [ 1968.119461][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 1969.035120][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 1969.087638][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 1969.196438][T14329] Bluetooth: hci5: command tx timeout [ 1969.278580][T14329] Bluetooth: hci1: command tx timeout [ 1969.752531][T14329] Bluetooth: hci0: command tx timeout [ 1969.936745][T14416] chnl_net:caif_netlink_parms(): no params data found [ 1969.992559][T14329] Bluetooth: hci2: command tx timeout [ 1970.116682][T14412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1970.130164][T14412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1970.138077][T14412] bridge_slave_0: entered allmulticast mode [ 1970.146994][T14412] bridge_slave_0: entered promiscuous mode [ 1970.153725][T14329] Bluetooth: hci3: command tx timeout [ 1970.156578][T14412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1970.166920][T14412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1970.174587][T14412] bridge_slave_1: entered allmulticast mode [ 1970.182252][T14412] bridge_slave_1: entered promiscuous mode [ 1970.192531][T14419] bridge0: port 1(bridge_slave_0) entered blocking state [ 1970.199714][T14419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1970.207836][T14419] bridge_slave_0: entered allmulticast mode [ 1970.216425][T14419] bridge_slave_0: entered promiscuous mode [ 1970.241205][T14419] bridge0: port 2(bridge_slave_1) entered blocking state [ 1970.248811][T14419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1970.271905][T14419] bridge_slave_1: entered allmulticast mode [ 1970.280199][T14419] bridge_slave_1: entered promiscuous mode [ 1970.532566][T14433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1970.539943][T14433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1970.559126][T14433] bridge_slave_0: entered allmulticast mode [ 1970.582805][T14433] bridge_slave_0: entered promiscuous mode [ 1970.643348][T14416] bridge0: port 1(bridge_slave_0) entered blocking state [ 1970.650593][T14416] bridge0: port 1(bridge_slave_0) entered disabled state [ 1970.665483][T14416] bridge_slave_0: entered allmulticast mode [ 1970.681680][T14416] bridge_slave_0: entered promiscuous mode [ 1970.693428][T14433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1970.701159][T14433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1970.709805][T14433] bridge_slave_1: entered allmulticast mode [ 1970.742522][T14433] bridge_slave_1: entered promiscuous mode [ 1970.788499][T14412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1970.817268][T14412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1970.847608][T14419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1970.861791][T14416] bridge0: port 2(bridge_slave_1) entered blocking state [ 1970.870190][T14416] bridge0: port 2(bridge_slave_1) entered disabled state [ 1970.878237][T14416] bridge_slave_1: entered allmulticast mode [ 1970.886152][T14416] bridge_slave_1: entered promiscuous mode [ 1971.003419][T14419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1971.068823][T14433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1971.081593][T14433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1971.097875][T14412] team0: Port device team_slave_0 added [ 1971.107566][T14412] team0: Port device team_slave_1 added [ 1971.152067][T14419] team0: Port device team_slave_0 added [ 1971.207840][T14416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1971.223448][T14416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1971.264639][T14419] team0: Port device team_slave_1 added [ 1971.272704][T14329] Bluetooth: hci5: command tx timeout [ 1971.442498][T14412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1971.449540][T14412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1971.493400][T14412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1971.534915][T14416] team0: Port device team_slave_0 added [ 1971.549136][T14433] team0: Port device team_slave_0 added [ 1971.570606][T14419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1971.602827][T14419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1971.640580][T14419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1971.669611][T14457] chnl_net:caif_netlink_parms(): no params data found [ 1971.684118][T14412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1971.691215][T14412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1971.719318][T14412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1971.733796][T14416] team0: Port device team_slave_1 added [ 1971.743311][T14433] team0: Port device team_slave_1 added [ 1971.750143][T14419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1971.772896][T14419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1971.834587][T14329] Bluetooth: hci0: command tx timeout [ 1971.840184][T14419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1972.062356][T14433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1972.069391][T14433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1972.103034][T14433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1972.121572][T14433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1972.128914][T14433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1972.155330][T14433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1972.191499][T14416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1972.198916][T14416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1972.227082][T14416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1972.322054][T14416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1972.329522][T14416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1972.356650][T14416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1972.418530][T14412] hsr_slave_0: entered promiscuous mode [ 1972.425624][T14412] hsr_slave_1: entered promiscuous mode [ 1972.432037][T14412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1972.439994][T14412] Cannot create hsr debugfs directory [ 1972.473287][T14419] hsr_slave_0: entered promiscuous mode [ 1972.482031][T14419] hsr_slave_1: entered promiscuous mode [ 1972.489082][T14419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1972.497626][T14419] Cannot create hsr debugfs directory [ 1972.531566][T14457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1972.539043][T14457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1972.546400][T14457] bridge_slave_0: entered allmulticast mode [ 1972.554612][T14457] bridge_slave_0: entered promiscuous mode [ 1972.648957][T14457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1972.656726][T14457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1972.665013][T14457] bridge_slave_1: entered allmulticast mode [ 1972.672165][T14457] bridge_slave_1: entered promiscuous mode [ 1972.759725][T14416] hsr_slave_0: entered promiscuous mode [ 1972.766964][T14416] hsr_slave_1: entered promiscuous mode [ 1972.774632][T14416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1972.782221][T14416] Cannot create hsr debugfs directory [ 1972.807562][T14457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1972.820262][T14457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1972.849321][T14433] hsr_slave_0: entered promiscuous mode [ 1972.857083][T14433] hsr_slave_1: entered promiscuous mode [ 1972.864695][T14433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1972.880354][T14433] Cannot create hsr debugfs directory [ 1973.048024][T14457] team0: Port device team_slave_0 added [ 1973.057990][T14457] team0: Port device team_slave_1 added [ 1973.207048][T14457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1973.218842][T14457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1973.248764][T14457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1973.261664][T14457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1973.268846][T14457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1973.296409][T14457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1973.472683][ T1122] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1973.557545][T14457] hsr_slave_0: entered promiscuous mode [ 1973.566179][T14457] hsr_slave_1: entered promiscuous mode [ 1973.573666][T14457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1973.581372][T14457] Cannot create hsr debugfs directory [ 1973.661622][ T1122] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1973.771972][ T1122] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1973.886940][ T1122] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1973.913929][T14003] Bluetooth: hci0: command tx timeout [ 1974.076213][ T1122] bridge_slave_1: left allmulticast mode [ 1974.089871][ T1122] bridge_slave_1: left promiscuous mode [ 1974.096141][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1974.105516][ T1122] bridge_slave_0: left allmulticast mode [ 1974.111204][ T1122] bridge_slave_0: left promiscuous mode [ 1974.117760][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1974.128727][ T1122] bridge_slave_1: left allmulticast mode [ 1974.134562][ T1122] bridge_slave_1: left promiscuous mode [ 1974.140327][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1974.149721][ T1122] bridge_slave_0: left allmulticast mode [ 1974.156246][ T1122] bridge_slave_0: left promiscuous mode [ 1974.162026][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1974.172100][ T1122] bridge_slave_1: left allmulticast mode [ 1974.177859][ T1122] bridge_slave_1: left promiscuous mode [ 1974.184740][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1974.196543][ T1122] bridge_slave_0: left allmulticast mode [ 1974.202229][ T1122] bridge_slave_0: left promiscuous mode [ 1974.208475][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1974.219584][ T1122] bridge_slave_1: left allmulticast mode [ 1974.225501][ T1122] bridge_slave_1: left promiscuous mode [ 1974.231209][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1974.240969][ T1122] bridge_slave_0: left allmulticast mode [ 1974.246838][ T1122] bridge_slave_0: left promiscuous mode [ 1974.254347][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1974.271935][ T1122] bridge_slave_1: left allmulticast mode [ 1974.277867][ T1122] bridge_slave_1: left promiscuous mode [ 1974.283722][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1974.293900][ T1122] bridge_slave_0: left allmulticast mode [ 1974.299593][ T1122] bridge_slave_0: left promiscuous mode [ 1974.305925][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1974.316936][ T1122] bridge_slave_1: left allmulticast mode [ 1974.323402][ T1122] bridge_slave_1: left promiscuous mode [ 1974.329128][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1974.339899][ T1122] bridge_slave_0: left allmulticast mode [ 1974.346387][ T1122] bridge_slave_0: left promiscuous mode [ 1974.353675][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1975.131256][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1975.143760][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1975.156636][ T1122] bond0 (unregistering): Released all slaves [ 1975.176523][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1975.190127][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1975.202163][ T1122] bond0 (unregistering): Released all slaves [ 1975.223877][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1975.237015][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1975.248626][ T1122] bond0 (unregistering): Released all slaves [ 1975.263886][ T1122] bond0 (unregistering): Released all slaves [ 1975.285964][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1975.299143][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1975.311463][ T1122] bond0 (unregistering): Released all slaves [ 1975.457909][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1975.470044][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1975.481668][ T1122] bond0 (unregistering): Released all slaves [ 1975.580690][T14419] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1975.616129][T14419] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1975.645446][T14419] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1975.707536][T14419] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1976.240713][T14419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1976.318254][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.328634][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.355585][ T1122] hsr_slave_0: left promiscuous mode [ 1976.361765][ T1122] hsr_slave_1: left promiscuous mode [ 1976.372036][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1976.383528][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1976.391680][ T1122] hsr_slave_0: left promiscuous mode [ 1976.402032][ T1122] hsr_slave_1: left promiscuous mode [ 1976.410736][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1976.418973][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1976.437367][ T1122] hsr_slave_0: left promiscuous mode [ 1976.448948][ T1122] hsr_slave_1: left promiscuous mode [ 1976.455678][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1976.463216][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1976.474338][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1976.481779][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1976.510659][ T1122] veth1_macvtap: left promiscuous mode [ 1976.516715][ T1122] veth0_macvtap: left promiscuous mode [ 1976.522445][ T1122] veth1_vlan: left promiscuous mode [ 1976.527798][ T1122] veth0_vlan: left promiscuous mode [ 1976.816038][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 1976.856143][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 1977.177703][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 1977.216441][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 1978.353567][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 1978.406340][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 1979.041722][T14419] 8021q: adding VLAN 0 to HW filter on device team0 [ 1979.061525][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 1979.068743][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1979.116338][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 1979.123602][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1979.684060][T14419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1979.916462][T14419] veth0_vlan: entered promiscuous mode [ 1979.949605][T14419] veth1_vlan: entered promiscuous mode [ 1980.152194][T14419] veth0_macvtap: entered promiscuous mode [ 1980.199279][T14419] veth1_macvtap: entered promiscuous mode [ 1980.360897][T14419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1980.426229][T14416] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1980.449275][T14416] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1980.464484][T14416] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1980.509274][T14416] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1980.568688][T14419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1980.710948][T14419] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1980.720988][T14419] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1980.731189][T14419] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1980.742358][T14419] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1980.977927][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1981.061797][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1981.146162][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1981.169749][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1981.303285][T14416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1981.405559][T14457] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1981.453619][T14457] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1981.496998][T14416] 8021q: adding VLAN 0 to HW filter on device team0 [ 1981.576069][T14457] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1981.614148][T14457] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1981.651707][T13565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1981.658969][T13565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1981.704778][T13565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1981.712027][T13565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1982.455315][T14564] Can't find ip_set type hash:n [ 1982.761687][T14412] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1982.805770][T14412] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1982.833263][T14412] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1982.950803][T14433] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1982.987027][T14412] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1983.085312][T14416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1983.108844][T14433] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1983.146300][T14433] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1983.179062][T14433] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1983.545539][T14457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1983.571390][T14416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1983.639421][T14457] 8021q: adding VLAN 0 to HW filter on device team0 [ 1983.682037][ T5410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1983.689257][ T5410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1983.751504][ T5410] bridge0: port 2(bridge_slave_1) entered blocking state [ 1983.758954][ T5410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1983.780582][T14433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1983.805357][T14412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1983.896539][T14433] 8021q: adding VLAN 0 to HW filter on device team0 [ 1983.912013][T14412] 8021q: adding VLAN 0 to HW filter on device team0 [ 1983.981775][ T5410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1983.989049][ T5410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1984.059516][ T5412] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1984.104998][ T5410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1984.112323][ T5410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1984.141468][T13565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1984.148703][T13565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1984.229234][T13565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1984.236535][T13565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1984.326520][ T5412] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1984.348928][T14416] veth0_vlan: entered promiscuous mode [ 1984.446363][ T5412] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1984.493651][T14416] veth1_vlan: entered promiscuous mode [ 1984.598362][ T5412] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1984.745235][T14329] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1984.761074][T14329] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1984.773897][T14329] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1984.787648][T14329] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1984.799310][T14329] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1984.807463][T14329] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1984.910873][T14457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1984.995733][T14416] veth0_macvtap: entered promiscuous mode [ 1985.135677][T14416] veth1_macvtap: entered promiscuous mode [ 1985.186954][ T5412] bridge_slave_1: left allmulticast mode [ 1985.196972][ T5412] bridge_slave_1: left promiscuous mode [ 1985.212715][ T5412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1985.260253][ T5412] bridge_slave_0: left allmulticast mode [ 1985.271026][ T5412] bridge_slave_0: left promiscuous mode [ 1985.285257][ T5412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1985.697215][ T5412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1985.711807][ T5412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1985.727893][ T5412] bond0 (unregistering): Released all slaves [ 1986.020114][T14416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1986.039035][T14416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.061235][T14416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1986.086345][T14416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1986.106096][T14416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.120897][T14416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1986.240488][T14416] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1986.251304][T14416] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1986.266803][T14416] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1986.277280][T14416] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1986.328583][T14412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1986.418585][ T5412] hsr_slave_0: left promiscuous mode [ 1986.427494][ T5412] hsr_slave_1: left promiscuous mode [ 1986.441038][ T5412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1986.452104][ T5412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1986.464560][ T5412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1986.472067][ T5412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1986.514121][ T5412] veth1_macvtap: left promiscuous mode [ 1986.519776][ T5412] veth0_macvtap: left promiscuous mode [ 1986.530572][ T5412] veth1_vlan: left promiscuous mode [ 1986.537230][ T5412] veth0_vlan: left promiscuous mode [ 1986.876455][T14329] Bluetooth: hci3: command tx timeout [ 1987.588230][ T5412] team0 (unregistering): Port device team_slave_1 removed [ 1987.686850][ T5412] team0 (unregistering): Port device team_slave_0 removed [ 1988.742109][T14433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1988.767829][T14457] veth0_vlan: entered promiscuous mode [ 1988.953089][T14329] Bluetooth: hci3: command tx timeout [ 1988.996073][T14457] veth1_vlan: entered promiscuous mode [ 1989.051136][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1989.074294][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1989.167150][T14412] veth0_vlan: entered promiscuous mode [ 1989.232098][T14602] chnl_net:caif_netlink_parms(): no params data found [ 1989.265236][T14412] veth1_vlan: entered promiscuous mode [ 1989.277106][T14433] veth0_vlan: entered promiscuous mode [ 1989.291329][ T5410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1989.300729][ T5410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1989.320485][T14433] veth1_vlan: entered promiscuous mode [ 1989.335119][T14457] veth0_macvtap: entered promiscuous mode [ 1989.399635][T14457] veth1_macvtap: entered promiscuous mode [ 1989.503973][T14412] veth0_macvtap: entered promiscuous mode [ 1989.525617][T14412] veth1_macvtap: entered promiscuous mode [ 1989.566309][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1989.586898][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1989.608501][T14457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1989.651306][T14433] veth0_macvtap: entered promiscuous mode [ 1990.161460][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1990.215376][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.287862][T14457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1990.368179][T14602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1990.399125][T14602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1990.439609][T14602] bridge_slave_0: entered allmulticast mode [ 1990.451920][T14602] bridge_slave_0: entered promiscuous mode [ 1990.479114][T14457] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.495098][T14457] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.518303][T14457] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.528091][T14457] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.547910][T14433] veth1_macvtap: entered promiscuous mode [ 1990.568666][T14602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1990.583602][T14602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1990.591105][T14602] bridge_slave_1: entered allmulticast mode [ 1990.605904][T14602] bridge_slave_1: entered promiscuous mode [ 1990.690260][T14412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1990.708697][T14412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.720686][T14412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1990.739097][T14412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.751495][T14412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1990.860169][T14602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1990.883047][T14412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1990.897222][T14412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.910724][T14412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1990.923213][T14412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1991.158699][T14329] Bluetooth: hci3: command tx timeout [ 1991.286286][T14412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1991.394806][T14602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1991.693722][T14433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1991.719994][T14433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1991.737643][T14433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1991.762679][T14433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1991.774189][T14433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1991.784936][T14433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1991.797259][T14433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1991.825041][T14412] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1991.837108][T14412] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1991.847886][T14412] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1991.857140][T14412] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1992.718493][T14602] team0: Port device team_slave_0 added [ 1992.768594][T14602] team0: Port device team_slave_1 added [ 1992.851330][T14433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1992.870897][T14433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1992.883668][T14433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1992.895120][T14433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1992.905626][T14433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1992.916616][T14433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1992.928979][T14433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1992.947181][T14433] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1992.966691][T14433] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1992.976106][T14433] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1992.986116][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1992.995107][T14433] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1993.004008][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1993.143239][T14602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1993.162507][T14602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1993.190059][T14602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1993.202427][T14329] Bluetooth: hci3: command tx timeout [ 1993.206109][T14602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1993.219310][T14602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1993.375408][T14602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1993.973373][T13565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1993.988631][T13565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1994.142445][T14602] hsr_slave_0: entered promiscuous mode [ 1994.180711][T14602] hsr_slave_1: entered promiscuous mode [ 1994.347245][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1994.360857][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1994.541897][T13565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1994.577683][T13565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1994.628352][ T5410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1994.641102][ T5410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1994.789220][ T5410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1994.801692][ T5410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1996.320259][T14756] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1254'. [ 1996.538205][T14602] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1996.566332][T14602] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1996.623257][T14602] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1996.644264][T14767] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1376'. [ 1996.668792][T14602] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1997.178789][T14602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1997.558402][T14602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1997.598580][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1997.605964][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1997.660869][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1997.668146][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1997.882604][ T58] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1997.903338][T14194] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1998.191039][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 1998.204773][ T58] usb 5-1: config 48 has an invalid descriptor of length 102, skipping remainder of the config [ 1998.224995][ T58] usb 5-1: config 48 has 0 interfaces, different from the descriptor's value: 1 [ 1998.249022][T14194] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=fc.b9 [ 1998.259531][T14194] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1998.280425][T14194] usb 2-1: Product: syz [ 1998.280756][ T58] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1998.297323][T14194] usb 2-1: Manufacturer: syz [ 1998.301983][T14194] usb 2-1: SerialNumber: syz [ 1998.319705][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1998.331380][T14194] usb 2-1: config 0 descriptor?? [ 1998.354103][ T58] usb 5-1: SerialNumber: syz [ 1998.364319][T14194] cypress_m8 2-1:0.0: DeLorme Earthmate USB converter detected [ 1998.390885][T14602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1998.420785][T14194] earthmate ttyUSB0: required endpoint is missing [ 1998.660807][T14602] veth0_vlan: entered promiscuous mode [ 1998.667840][T14780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1998.701589][T14780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1998.728529][T14602] veth1_vlan: entered promiscuous mode [ 1998.973322][T14822] netlink: 'syz.1.1381': attribute type 1 has an invalid length. [ 1998.995089][T14602] veth0_macvtap: entered promiscuous mode [ 1999.060843][T14602] veth1_macvtap: entered promiscuous mode [ 1999.149946][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1999.176381][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.188878][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1999.222011][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.244637][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1999.270086][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.290073][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1999.324935][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.372528][T14602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1999.406566][T14830] netlink: 'syz.3.1392': attribute type 153 has an invalid length. [ 1999.427571][T14830] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1392'. [ 1999.531226][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1999.653183][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.677696][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1999.708965][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.739000][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1999.777897][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.809586][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1999.844059][ T9519] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1999.856185][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.888649][T14602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1999.929351][T14602] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1999.967779][T14602] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1999.995859][T14602] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.022149][T14602] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.065251][ T9519] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 2000.085689][ T9519] usb 1-1: config index 0 descriptor too short (expected 12315, got 27) [ 2000.114593][ T9519] usb 1-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 2000.150010][ T9519] usb 1-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 2000.206978][ T9519] usb 1-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 2000.249443][ T9519] usb 1-1: config index 1 descriptor too short (expected 12315, got 27) [ 2000.285589][ T9519] usb 1-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 2000.346859][ T9519] usb 1-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 2000.388334][ T9519] usb 1-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 2000.447781][ T9519] usb 1-1: config index 2 descriptor too short (expected 12315, got 27) [ 2000.466983][T13565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2000.471109][ T9519] usb 1-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 2000.524003][T13565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2000.536442][ T9519] usb 1-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 2000.576646][ T9519] usb 1-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 2000.658863][ T9519] usb 1-1: config index 3 descriptor too short (expected 12315, got 27) [ 2000.705393][ T58] usb 5-1: USB disconnect, device number 41 [ 2000.717789][ T9519] usb 1-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 2000.729793][ T5410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2000.773542][T14855] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1396'. [ 2000.783520][ T5410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2000.791001][ T9519] usb 1-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 2000.798656][ T8003] usb 2-1: USB disconnect, device number 32 [ 2000.835586][ T9519] usb 1-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 2000.846344][ T8003] cypress_m8 2-1:0.0: device disconnected [ 2000.925175][ T9519] usb 1-1: config index 4 descriptor too short (expected 12315, got 27) [ 2000.958679][ T9519] usb 1-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 2001.012691][ T9519] usb 1-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 2001.058747][ T9519] usb 1-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 2001.100791][ T9519] usb 1-1: config index 5 descriptor too short (expected 12315, got 27) [ 2001.153622][ T9519] usb 1-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 2001.172178][ T9519] usb 1-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 2001.190053][ T9519] usb 1-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 2001.245492][T14871] Cannot find set identified by id 0 to match [ 2001.251675][ T9519] usb 1-1: config index 6 descriptor too short (expected 12315, got 27) [ 2001.272225][ T9519] usb 1-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 2001.345894][ T9519] usb 1-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 2001.409486][ T9519] usb 1-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 2001.462713][ T9519] usb 1-1: config index 7 descriptor too short (expected 12315, got 27) [ 2001.496029][ T9519] usb 1-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 2001.510241][ T9519] usb 1-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 2001.534350][ T9519] usb 1-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 2001.597632][ T9519] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2001.623701][T14878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1400'. [ 2001.661482][ T9519] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2001.701767][ T9519] usb 1-1: Product: syz [ 2001.734262][ T9519] usb 1-1: Manufacturer: syz [ 2001.749219][ T9519] usb 1-1: SerialNumber: syz [ 2002.073325][ T9519] usb 1-1: USB disconnect, device number 31 [ 2003.013379][T14308] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2003.143366][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1406'. [ 2003.263476][T14308] usb 5-1: Using ep0 maxpacket: 8 [ 2003.280061][T14308] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2003.321089][T14308] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2003.412139][T14308] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2003.444915][T14308] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2003.470123][T14308] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2003.546359][T14308] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2003.600266][T14308] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2003.613865][T14913] process 'syz.3.1408' launched './file0' with NULL argv: empty string added [ 2003.638664][T14308] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2003.697615][T14308] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2003.731198][T14917] ======================================================= [ 2003.731198][T14917] WARNING: The mand mount option has been deprecated and [ 2003.731198][T14917] and is ignored by this kernel. Remove the mand [ 2003.731198][T14917] option from the mount to silence this warning. [ 2003.731198][T14917] ======================================================= [ 2003.809714][T14308] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2003.865026][T14308] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2003.875220][T14308] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2003.893946][T14308] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2003.935093][T14308] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2003.962656][T14308] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2003.991045][T14308] usb 5-1: string descriptor 0 read error: -22 [ 2004.022462][T14308] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2004.079246][T14308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.161729][T14308] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2004.826009][T14954] ptrace attach of "./syz-executor exec"[14602] was attempted by "./syz-executor exec"[14954] [ 2004.992535][ T58] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2005.040701][T14955] Cannot find add_set index 0 as target [ 2005.187023][ T58] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2005.212129][ T58] usb 1-1: New USB device found, idVendor=6c06, idProduct=cc79, bcdDevice=7b.f7 [ 2005.234877][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.252803][ T58] usb 1-1: Product: syz [ 2005.257476][ T58] usb 1-1: Manufacturer: syz [ 2005.262867][ T58] usb 1-1: SerialNumber: syz [ 2005.278941][ T58] usb 1-1: config 0 descriptor?? [ 2005.287455][ T58] usb-storage 1-1:0.0: USB Mass Storage device detected [ 2006.403657][ T58] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2006.592400][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 2006.600573][ T58] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2006.630098][ T58] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2006.654196][ T58] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2006.673362][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2006.691961][ T58] usb 2-1: Product: syz [ 2006.696300][ T58] usb 2-1: Manufacturer: syz [ 2006.700939][ T58] usb 2-1: SerialNumber: syz [ 2006.936380][ T58] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2006.969404][ T58] usb 2-1: USB disconnect, device number 33 [ 2006.986373][ T58] usblp1: removed [ 2007.360964][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 2007.360986][ T29] audit: type=1326 audit(1726026930.716:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14989 comm="syz.2.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7d17def9 code=0x7ffc0000 [ 2007.405450][ T29] audit: type=1326 audit(1726026930.716:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14989 comm="syz.2.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7d17def9 code=0x7ffc0000 [ 2007.443416][ T29] audit: type=1326 audit(1726026930.716:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14989 comm="syz.2.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f8a7d17def9 code=0x7ffc0000 [ 2007.482369][ T29] audit: type=1326 audit(1726026930.716:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14989 comm="syz.2.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7d17def9 code=0x7ffc0000 [ 2007.522900][ T29] audit: type=1326 audit(1726026930.716:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14989 comm="syz.2.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7d17def9 code=0x7ffc0000 [ 2007.550550][ T29] audit: type=1326 audit(1726026930.716:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14989 comm="syz.2.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a7d17def9 code=0x7ffc0000 [ 2007.619409][ T29] audit: type=1326 audit(1726026930.716:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14989 comm="syz.2.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7d17def9 code=0x7ffc0000 [ 2007.670075][ T58] usb 1-1: USB disconnect, device number 32 [ 2007.754068][ T9519] usb 5-1: USB disconnect, device number 42 [ 2007.828976][ T29] audit: type=1326 audit(1726026930.716:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14989 comm="syz.2.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7d17def9 code=0x7ffc0000 [ 2007.924963][ T29] audit: type=1326 audit(1726026930.726:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14989 comm="syz.2.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a7d17def9 code=0x7ffc0000 [ 2007.990681][T15014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1420'. [ 2008.010977][ T29] audit: type=1326 audit(1726026930.726:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14989 comm="syz.2.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7d17def9 code=0x7ffc0000 [ 2008.062507][T15014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2008.070435][T15014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2008.114606][T15014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2008.133707][T15014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2008.240929][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1421'. [ 2010.060392][T15049] tipc: Started in network mode [ 2010.095868][T15049] tipc: Node identity 101, cluster identity 4711 [ 2010.141654][T15049] tipc: Node number set to 257 [ 2010.187619][T15049] tipc: Cannot configure node identity twice [ 2010.944319][T14308] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2011.080872][ T5411] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2011.205249][T15082] usb usb8: usbfs: process 15082 (syz.1.1437) did not claim interface 0 before use [ 2011.334654][ T5411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2011.713162][ T5411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2011.772580][ T5411] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 2011.819340][ T5411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2011.909728][ T5411] usb 1-1: config 0 descriptor?? [ 2011.922685][T14308] usb 3-1: Using ep0 maxpacket: 16 [ 2011.930227][T14308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2011.952628][T14308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2011.970827][T14308] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2012.000342][T14308] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 2012.019532][T14308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2012.047170][T14308] usb 3-1: config 0 descriptor?? [ 2013.098547][ T5411] cypress 0003:04B4:07B1.000D: unknown main item tag 0x6 [ 2013.166483][ T5411] cypress 0003:04B4:07B1.000D: item fetching failed at offset 4/5 [ 2013.187013][T15072] syz.3.1436[15072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2013.187186][T15072] syz.3.1436[15072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2013.197939][T14308] ryos 0003:1E7D:31CE.000E: ignoring exceeding usage max [ 2013.228473][T14308] ryos 0003:1E7D:31CE.000E: ignoring exceeding usage max [ 2013.235643][T14308] ryos 0003:1E7D:31CE.000E: usage index exceeded [ 2013.242004][T14308] ryos 0003:1E7D:31CE.000E: item 0 0 2 2 parsing failed [ 2013.457590][ T5411] cypress 0003:04B4:07B1.000D: parse failed [ 2013.482470][ T5411] cypress 0003:04B4:07B1.000D: probe with driver cypress failed with error -22 [ 2013.514737][T14308] ryos 0003:1E7D:31CE.000E: parse failed [ 2013.521179][T14308] ryos 0003:1E7D:31CE.000E: probe with driver ryos failed with error -22 [ 2013.591139][T14308] usb 3-1: USB disconnect, device number 34 [ 2014.402586][ T9571] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2014.622397][ T9571] usb 4-1: Using ep0 maxpacket: 32 [ 2014.641934][ T9571] usb 4-1: config 0 has no interfaces? [ 2014.661348][ T9571] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2014.687944][ T9571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2014.722605][ T9571] usb 4-1: Product: syz [ 2014.726848][ T9571] usb 4-1: Manufacturer: syz [ 2014.747033][ T9571] usb 4-1: SerialNumber: syz [ 2014.771456][ T9571] usb 4-1: config 0 descriptor?? [ 2016.688544][ T8003] usb 1-1: USB disconnect, device number 33 [ 2017.194786][ T8003] usb 4-1: USB disconnect, device number 33 [ 2018.356957][T15168] hub 6-0:1.0: USB hub found [ 2018.701930][T15168] hub 6-0:1.0: 1 port detected [ 2019.073520][T13466] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2019.274708][T13466] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2019.316569][T13466] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2019.369914][T13466] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2019.402687][T13466] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2019.458699][T13466] usb 2-1: config 0 descriptor?? [ 2019.885957][T13466] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 2019.957451][T13466] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 2020.086686][T13466] cp2112 0003:10C4:EA90.000F: error requesting version [ 2020.132914][T13466] cp2112 0003:10C4:EA90.000F: probe with driver cp2112 failed with error -32 [ 2020.562139][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 2020.562160][ T29] audit: type=1326 audit(1726026943.916:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15222 comm="syz.3.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502f57def9 code=0x7ffc0000 [ 2020.658595][ T29] audit: type=1326 audit(1726026943.956:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15222 comm="syz.3.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502f57def9 code=0x7ffc0000 [ 2020.769586][ T29] audit: type=1326 audit(1726026943.956:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15222 comm="syz.3.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f502f57def9 code=0x7ffc0000 [ 2020.860447][ T29] audit: type=1326 audit(1726026943.956:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15222 comm="syz.3.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502f57def9 code=0x7ffc0000 [ 2020.956289][ T29] audit: type=1326 audit(1726026943.956:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15222 comm="syz.3.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502f57def9 code=0x7ffc0000 [ 2021.545348][ T29] audit: type=1326 audit(1726026944.906:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15263 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502f57def9 code=0x7ffc0000 [ 2021.579142][ T29] audit: type=1326 audit(1726026944.936:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15263 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502f57def9 code=0x7ffc0000 [ 2021.623420][ T29] audit: type=1326 audit(1726026944.976:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15263 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f502f57def9 code=0x7ffc0000 [ 2021.674889][T15266] syz.3.1473 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2021.694534][ T29] audit: type=1326 audit(1726026945.006:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15263 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502f57def9 code=0x7ffc0000 [ 2021.717664][ T29] audit: type=1326 audit(1726026945.016:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15263 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502f57def9 code=0x7ffc0000 [ 2021.787925][ T5411] usb 2-1: USB disconnect, device number 34 [ 2022.557852][ T9571] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 2022.577771][ T9571] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 2022.627000][ T9571] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 2022.812846][T15303] IPv6: Can't replace route, no match found [ 2023.478580][T15322] syz.4.1493[15322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2023.478760][T15322] syz.4.1493[15322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2025.441181][T15381] ip_vti0: entered promiscuous mode [ 2025.472517][T15381] vlan2: entered promiscuous mode [ 2025.493621][T15381] ip_vti0: left promiscuous mode [ 2025.769972][T15392] Bluetooth: MGMT ver 1.23 [ 2025.983991][T15398] syz.4.1523[15398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2025.984165][T15398] syz.4.1523[15398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2026.018925][T15398] vlan2: entered promiscuous mode [ 2026.074222][T15398] syz_tun: entered promiscuous mode [ 2026.097946][T15398] syz_tun: left promiscuous mode [ 2026.506920][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 2026.506942][ T29] audit: type=1326 audit(1726026949.866:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15412 comm="syz.4.1530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f365417def9 code=0x0 [ 2026.905802][T14329] Bluetooth: Wrong link type (-57) [ 2027.023032][T13466] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2027.244478][T13466] usb 4-1: Using ep0 maxpacket: 8 [ 2027.254628][T13466] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2027.275481][T13466] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2027.289902][T15439] nbd0: detected capacity change from 0 to 22 [ 2027.315194][T15443] block nbd0: shutting down sockets [ 2027.320825][T13466] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 2027.352572][T13466] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2027.377829][ T40] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.388704][ T40] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2027.403767][T15444] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.421788][T13466] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2027.438635][T15444] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2027.457206][T13466] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2027.466992][T13466] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2027.472686][T15444] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.475263][T13466] usb 4-1: Product: syz [ 2027.489624][T13466] usb 4-1: Manufacturer: syz [ 2027.497594][T13466] usb 4-1: SerialNumber: syz [ 2027.512209][T13466] usb 4-1: config 0 descriptor?? [ 2027.532659][T15444] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2027.554690][T14329] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 2027.565164][T14329] CPU: 1 UID: 0 PID: 14329 Comm: kworker/u9:5 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 2027.576179][T14329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2027.586280][T14329] Workqueue: hci0 hci_rx_work [ 2027.591033][T14329] Call Trace: [ 2027.594347][T14329] [ 2027.597321][T14329] dump_stack_lvl+0x241/0x360 [ 2027.602058][T14329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2027.607314][T14329] ? __pfx__printk+0x10/0x10 [ 2027.611988][T14329] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 2027.617333][T14329] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 2027.623034][T14329] sysfs_create_dir_ns+0x2ce/0x3a0 [ 2027.625502][T15444] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.628178][T14329] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2027.642894][T14329] kobject_add_internal+0x435/0x8d0 [ 2027.648151][T14329] kobject_add+0x152/0x220 [ 2027.652618][T14329] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2027.657867][T14329] ? device_add+0x3e7/0xbf0 [ 2027.659417][T15444] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2027.662388][T14329] ? __pfx_kobject_add+0x10/0x10 [ 2027.662422][T14329] ? _raw_spin_unlock+0x28/0x50 [ 2027.662463][T14329] ? get_device_parent+0x165/0x410 [ 2027.685234][T14329] device_add+0x4e5/0xbf0 [ 2027.689618][T14329] hci_conn_add_sysfs+0xe8/0x200 [ 2027.694608][T14329] le_conn_complete_evt+0xc9f/0x12e0 [ 2027.699962][T14329] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2027.702381][T15444] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.705970][T14329] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2027.706023][T14329] ? irqentry_exit+0x63/0x90 [ 2027.725464][T14329] ? lockdep_hardirqs_on+0x99/0x150 [ 2027.730722][T14329] hci_le_enh_conn_complete_evt+0x185/0x420 [ 2027.736683][T14329] hci_event_packet+0xa55/0x1540 [ 2027.737172][T13466] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2027.741738][T14329] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2027.753464][T15444] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2027.753769][T14329] ? __pfx_hci_event_packet+0x10/0x10 [ 2027.766931][T14329] ? hci_rx_work+0xe1/0xca0 [ 2027.771484][T14329] ? hci_rx_work+0xe0/0xca0 [ 2027.776040][T14329] ? kasan_check_range+0x86/0x290 [ 2027.778885][T15444] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.781100][T14329] hci_rx_work+0x3e8/0xca0 [ 2027.781152][T14329] ? process_scheduled_works+0x945/0x1830 [ 2027.790411][T13466] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2027.794566][T14329] process_scheduled_works+0xa2c/0x1830 [ 2027.794643][T14329] ? __pfx_process_scheduled_works+0x10/0x10 [ 2027.811272][T15444] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2027.812632][T14329] ? assign_work+0x364/0x3d0 [ 2027.812689][T14329] worker_thread+0x86d/0xd10 [ 2027.818844][T15444] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.824213][T14329] ? __kthread_parkme+0x169/0x1d0 [ 2027.824273][T14329] ? __pfx_worker_thread+0x10/0x10 [ 2027.824315][T14329] kthread+0x2f0/0x390 [ 2027.824351][T14329] ? __pfx_worker_thread+0x10/0x10 [ 2027.824386][T14329] ? __pfx_kthread+0x10/0x10 [ 2027.824423][T14329] ret_from_fork+0x4b/0x80 [ 2027.824456][T14329] ? __pfx_kthread+0x10/0x10 [ 2027.824495][T14329] ret_from_fork_asm+0x1a/0x30 [ 2027.824557][T14329] [ 2027.897969][T14329] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2027.913641][T14329] Bluetooth: hci0: failed to register connection device [ 2027.927649][T15444] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2027.943063][T15444] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.953709][T13466] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 2027.961409][T15444] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2027.962465][T13466] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 2028.002125][T13466] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2028.091323][T15444] ldm_validate_partition_table(): Disk read failed. [ 2028.154331][T13466] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 2028.161728][T15444] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2028.191173][T15444] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2028.237551][T15444] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2028.263507][T15444] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2028.272778][T15444] Dev nbd0: unable to read RDB block 0 [ 2028.278573][T15444] nbd0: unable to read partition table [ 2028.317904][T15444] nbd0: partition table beyond EOD, truncated [ 2028.329090][T14575] ldm_validate_partition_table(): Disk read failed. [ 2028.346450][T14575] Dev nbd0: unable to read RDB block 0 [ 2028.352543][T14575] nbd0: unable to read partition table [ 2028.358368][T14575] nbd0: partition table beyond EOD, truncated [ 2028.399161][T14575] ldm_validate_partition_table(): Disk read failed. [ 2028.451368][T14575] Dev nbd0: unable to read RDB block 0 [ 2028.462739][T14575] nbd0: unable to read partition table [ 2028.468735][T14575] nbd0: partition table beyond EOD, truncated [ 2029.191751][T15474] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 2029.199423][T15474] PKCS7: Only support pkcs7_signedData type [ 2029.390620][T15478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 2029.584774][T13466] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 2029.672877][T13466] usb 4-1: USB disconnect, device number 34 [ 2029.992765][T14329] Bluetooth: hci0: command tx timeout [ 2030.016626][T15491] random: crng reseeded on system resumption [ 2032.668699][T15509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1566'. [ 2032.712484][T15509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1566'. [ 2033.501263][T15537] Option '°/Õ¸ [ 2033.501263][T15537] ëíX^' to dns_resolver key: bad/missing value [ 2034.600356][T15562] program syz.2.1593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2035.801083][T15606] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 2035.923116][ T9012] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2036.122434][ T9012] usb 2-1: Using ep0 maxpacket: 8 [ 2036.138513][ T9012] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2036.150854][ T9012] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2036.166616][ T9012] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2036.189958][ T9012] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2036.202945][ T9012] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2036.216557][ T9012] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2036.227984][ T9012] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.365276][T15627] program syz.2.1617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2036.389988][T15599] block device autoloading is deprecated and will be removed. [ 2036.403100][T14329] Bluetooth: hci0: command tx timeout [ 2036.444906][ T58] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2036.459729][ T9012] usb 2-1: usb_control_msg returned -32 [ 2036.479472][ T9012] usbtmc 2-1:16.0: can't read capabilities [ 2036.549960][T14329] Bluetooth: Unexpected start frame (len 16) [ 2036.558050][T14329] Bluetooth: Frame is too long (len 16, expected len 4) [ 2036.904715][ T58] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2036.926030][ T58] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2036.957205][ T58] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2036.980292][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.039344][ T58] usb 4-1: Product: syz [ 2037.071213][ T58] usb 4-1: Manufacturer: syz [ 2037.137548][ T58] usb 4-1: SerialNumber: syz [ 2037.406631][ T58] usb 4-1: config 0 descriptor?? [ 2037.592976][T15623] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2037.643856][T15623] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2037.757770][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.758842][ T5411] usb 2-1: USB disconnect, device number 35 [ 2037.764644][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.790988][T15639] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 2037.907676][T15623] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2037.929211][T15623] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2038.474329][ T58] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 2039.610560][ T58] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 2039.780209][ T58] usb 4-1: USB disconnect, device number 35 [ 2040.004066][ T29] audit: type=1804 audit(1726026963.356:115): pid=15675 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1637" name="/newroot/59/file0/bus/file0" dev="ramfs" ino=77863 res=1 errno=0 [ 2040.502960][ T58] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2040.854939][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 2040.985949][ T58] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2041.042669][ T58] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2041.085445][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 2041.117278][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2041.188411][ T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2041.243166][ T58] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2041.280617][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2041.296291][ T58] usb 4-1: Product: syz [ 2041.300523][ T58] usb 4-1: Manufacturer: syz [ 2041.325953][ T58] usb 4-1: SerialNumber: syz [ 2041.349037][ T58] usb 4-1: config 0 descriptor?? [ 2041.602787][ T58] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2041.622948][ T58] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2041.723075][T14329] Bluetooth: hci0: Malformed LE Event: 0x1d [ 2041.795666][ T58] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 2041.826272][ T58] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 2041.893089][ T58] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2041.996596][ T58] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 2042.028719][T15714] netlink: 'syz.0.1652': attribute type 10 has an invalid length. [ 2042.599834][ T58] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 2042.622852][ T58] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 2042.643429][T14329] Bluetooth: hci0: adv larger than maximum supported [ 2042.645275][ T58] usb 4-1: USB disconnect, device number 36 [ 2043.598148][T14329] Bluetooth: hci1: adv larger than maximum supported [ 2043.620442][T15759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1672'. [ 2044.278790][ T29] audit: type=1326 audit(1726026967.636:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15767 comm="syz.2.1677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a7d17def9 code=0x0 [ 2045.031804][T14329] Bluetooth: hci3: adv larger than maximum supported [ 2045.244776][T15794] xt_HMARK: proto mask must be zero with L3 mode [ 2045.632901][T15806] trusted_key: encrypted_key: key user:syz not found [ 2045.692986][ T29] audit: type=1800 audit(1726026969.036:117): pid=15807 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1691" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2046.403787][ T9519] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2046.632368][ T9519] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2046.632409][ T9519] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2046.632441][ T9519] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2046.632468][ T9519] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2046.632516][ T9519] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2046.632546][ T9519] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2046.635226][ T9519] usb 4-1: config 0 descriptor?? [ 2047.060166][ T9519] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 2047.111761][ T9519] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2047.194713][T14329] Bluetooth: hci0: unknown advertising packet type: 0x63 [ 2047.383698][T15851] netlink: 4093 bytes leftover after parsing attributes in process `syz.4.1709'. [ 2047.405150][T15850] netlink: 4093 bytes leftover after parsing attributes in process `syz.4.1709'. [ 2049.027352][T13466] usb 4-1: USB disconnect, device number 37 [ 2049.937133][ T9012] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2050.142524][ T9012] usb 3-1: Using ep0 maxpacket: 8 [ 2050.152138][ T9012] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2050.182103][T13466] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2050.182434][ T9012] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2050.242393][ T9012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 2050.269692][ T9012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2050.298440][ T9012] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2050.365559][ T9012] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2050.386890][ T9012] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2050.422368][T13466] usb 4-1: Using ep0 maxpacket: 32 [ 2050.422602][ T9012] usb 3-1: Product: syz [ 2050.431824][ T9012] usb 3-1: Manufacturer: syz [ 2050.454939][T13466] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 2050.461563][ T9012] usb 3-1: SerialNumber: syz [ 2050.480421][ T9012] usb 3-1: config 0 descriptor?? [ 2050.485304][T13466] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2054.963823][T13466] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2054.975139][T13466] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2055.054462][T13466] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2055.118817][ T9012] usb 3-1: can't set config #0, error -71 [ 2055.138197][ T9012] usb 3-1: USB disconnect, device number 35 [ 2055.147831][T13466] usb 4-1: string descriptor 0 read error: -71 [ 2055.218686][T13466] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2055.292957][T13466] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2055.308741][T13466] usb 4-1: config 0 descriptor?? [ 2055.328802][T13466] usb 4-1: can't set config #0, error -71 [ 2055.361315][T13466] usb 4-1: USB disconnect, device number 38 [ 2055.638713][T15946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1745'. [ 2055.716405][ T9012] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2055.727136][T15948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1745'. [ 2055.928747][ T9012] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2055.936024][ T9012] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 2056.075039][T15960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1753'. [ 2056.196140][ T9012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2056.207913][ T9012] usb 3-1: config 0 descriptor?? [ 2056.233660][ T8003] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2056.844232][ T9012] (null): keene_cmd_main failed (-110) [ 2057.125391][ T8003] usb 1-1: Using ep0 maxpacket: 8 [ 2057.147055][T15968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2057.147572][ T8003] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2057.188904][ T8003] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2057.225037][ T8003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 2057.266576][ T8003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2057.286814][ T8003] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2057.324051][ T8003] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2057.340575][ T8003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2057.354223][ T8003] usb 1-1: Product: syz [ 2057.362287][ T8003] usb 1-1: Manufacturer: syz [ 2057.366934][ T8003] usb 1-1: SerialNumber: syz [ 2057.379651][ T8003] usb 1-1: config 0 descriptor?? [ 2057.606457][ T9012] video4linux radio32: keene_cmd_set failed (-71) [ 2057.627428][ T9012] radio-keene 3-1:0.0: V4L2 device registered as radio32 [ 2057.629417][ T8003] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2057.647931][ T29] audit: type=1800 audit(1726026981.006:118): pid=15987 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1762" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2057.662354][ T8003] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2057.667251][ C1] vkms_vblank_simulate: vblank timer overrun [ 2057.692867][ T9012] usb 3-1: USB disconnect, device number 36 [ 2057.743577][T15989] smc: net device lo applied user defined pnetid SYZ2 [ 2057.825226][ T8003] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 2057.849289][ T8003] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 2057.873108][ T8003] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2058.048845][ T8003] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 2058.310180][T15999] usb usb8: usbfs: process 15999 (syz.1.1768) did not claim interface 0 before use [ 2059.046683][ T8003] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 2059.056602][ T8003] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 2059.075679][ T8003] usb 1-1: USB disconnect, device number 34 [ 2059.819766][ T9519] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2059.952379][T16036] usb usb8: usbfs: process 16036 (syz.0.1783) did not claim interface 0 before use [ 2060.002491][ T9519] usb 5-1: Using ep0 maxpacket: 32 [ 2060.206790][ T9519] usb 5-1: config 0 has no interfaces? [ 2060.344110][ T9519] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2060.507345][ T9519] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2060.560110][ T9519] usb 5-1: Product: syz [ 2060.586178][ T9519] usb 5-1: Manufacturer: syz [ 2060.607213][ T9519] usb 5-1: SerialNumber: syz [ 2060.632899][ T9519] usb 5-1: config 0 descriptor?? [ 2060.906591][ T9519] usb 5-1: USB disconnect, device number 43 [ 2061.112720][ T9012] psmouse serio2: Failed to reset mouse on : -5 [ 2061.202494][ T58] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2061.402384][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 2061.417118][ T58] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2061.434082][ T58] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2061.446276][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 2061.457565][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2061.467835][ T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2061.488853][ T58] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2061.500243][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2061.508530][ T58] usb 4-1: Product: syz [ 2061.513449][ T58] usb 4-1: Manufacturer: syz [ 2061.518119][ T58] usb 4-1: SerialNumber: syz [ 2061.526822][ T58] usb 4-1: config 0 descriptor?? [ 2061.662474][ T29] audit: type=1326 audit(1726026985.016:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16059 comm="syz.0.1795" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a37def9 code=0x0 [ 2061.683552][ C1] vkms_vblank_simulate: vblank timer overrun [ 2061.753414][ T58] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2061.771221][ T58] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2061.950294][ T58] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 2061.976955][ T58] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 2062.007595][ T58] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2062.154784][ T58] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 2062.172336][T16066] nbd2: detected capacity change from 0 to 22 [ 2062.800451][ T58] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 2062.809004][T14329] block nbd2: Receive control failed (result -104) [ 2062.820921][ T58] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 2062.842113][ T58] usb 4-1: USB disconnect, device number 39 [ 2062.911366][T16077] usb usb8: usbfs: process 16077 (syz.0.1798) did not claim interface 0 before use [ 2063.732385][T14308] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2063.956319][T14308] usb 2-1: Using ep0 maxpacket: 32 [ 2063.965548][T14308] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 2063.987219][T14308] usb 2-1: config 0 has no interface number 0 [ 2064.004812][T14308] usb 2-1: too many endpoints for config 0 interface 235 altsetting 2: 81, using maximum allowed: 30 [ 2064.058955][T14308] usb 2-1: config 0 interface 235 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 81 [ 2064.077066][T14308] usb 2-1: config 0 interface 235 has no altsetting 0 [ 2064.086562][T14308] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 2064.099681][T14308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2064.320527][T16094] capability: warning: `syz.3.1805' uses 32-bit capabilities (legacy support in use) [ 2064.805873][ T9012] misc userio: Buffer overflowed, userio client isn't keeping up [ 2064.825022][T14308] usb 2-1: config 0 descriptor?? [ 2065.263049][ T29] audit: type=1326 audit(1726026988.586:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16074 comm="syz.1.1800" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdec97def9 code=0x0 [ 2065.428930][T16103] tipc: Started in network mode [ 2065.436163][T16103] tipc: Node identity ac1414aa, cluster identity 4711 [ 2065.447260][T16103] tipc: Enabled bearer , priority 10 [ 2067.164470][ T9012] input: PS/2 Generic Mouse as /devices/serio2/input/input8 [ 2067.185544][ T9519] tipc: Node number set to 2886997162 [ 2067.303115][T14308] usb 2-1: string descriptor 0 read error: -71 [ 2067.311877][T14308] gspca_main: sq930x-2.14.0 probing 041e:403c [ 2067.509079][ T9012] psmouse serio2: Failed to enable mouse on [ 2067.547604][T14308] gspca_sq930x: reg_r 001f failed -71 [ 2067.556021][T14308] sq930x 2-1:0.235: probe with driver sq930x failed with error -71 [ 2067.642675][T16113] usb usb8: usbfs: process 16113 (syz.3.1811) did not claim interface 0 before use [ 2068.246580][T14308] usb 2-1: USB disconnect, device number 36 [ 2069.460634][T16149] usb usb8: usbfs: process 16149 (syz.1.1825) did not claim interface 0 before use [ 2071.247131][T16183] usb usb8: usbfs: process 16183 (syz.1.1837) did not claim interface 0 before use [ 2072.329619][T14003] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2072.354181][T14003] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2072.363435][T14003] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2072.395160][T14003] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2072.416129][T14003] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2072.424342][T14003] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2074.473001][T14329] Bluetooth: hci4: command tx timeout [ 2074.687830][T16203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1844'. [ 2075.200078][ T29] audit: type=1326 audit(1726026998.556:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16215 comm="syz.0.1849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a37def9 code=0x0 [ 2075.226905][T16219] usb usb8: usbfs: process 16219 (syz.4.1848) did not claim interface 0 before use [ 2075.384435][T16189] chnl_net:caif_netlink_parms(): no params data found [ 2075.566079][T16189] bridge0: port 1(bridge_slave_0) entered blocking state [ 2075.582653][T16189] bridge0: port 1(bridge_slave_0) entered disabled state [ 2075.590228][T16189] bridge_slave_0: entered allmulticast mode [ 2075.600939][T16189] bridge_slave_0: entered promiscuous mode [ 2075.612188][T16189] bridge0: port 2(bridge_slave_1) entered blocking state [ 2075.619681][T16189] bridge0: port 2(bridge_slave_1) entered disabled state [ 2075.629622][T16189] bridge_slave_1: entered allmulticast mode [ 2075.637695][T16189] bridge_slave_1: entered promiscuous mode [ 2075.923808][T16189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2075.968914][T16189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2076.175923][T16189] team0: Port device team_slave_0 added [ 2076.229181][T16189] team0: Port device team_slave_1 added [ 2076.372204][T16189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2076.380113][T16189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2076.413888][T16189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2076.427761][T16189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2076.492946][T16189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2076.572430][T14329] Bluetooth: hci4: command tx timeout [ 2076.599866][T16189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2076.867733][T16189] hsr_slave_0: entered promiscuous mode [ 2076.899172][T16189] hsr_slave_1: entered promiscuous mode [ 2076.941117][T16189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2076.982932][T16189] Cannot create hsr debugfs directory [ 2077.267942][ T29] audit: type=1326 audit(1726027000.626:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16278 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a37def9 code=0x7ffc0000 [ 2077.341261][ T29] audit: type=1326 audit(1726027000.636:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16278 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e9a37def9 code=0x7ffc0000 [ 2077.413900][T16283] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 2077.422454][ T29] audit: type=1326 audit(1726027000.636:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16278 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a37def9 code=0x7ffc0000 [ 2077.463181][T16283] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 2077.486716][ T29] audit: type=1326 audit(1726027000.646:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16278 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e9a37def9 code=0x7ffc0000 [ 2077.533088][T16283] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 2077.587173][ T29] audit: type=1326 audit(1726027000.646:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16278 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a37def9 code=0x7ffc0000 [ 2077.675007][ T29] audit: type=1326 audit(1726027000.666:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16278 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a37def9 code=0x7ffc0000 [ 2077.714626][ T5410] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2077.762775][ T29] audit: type=1326 audit(1726027000.666:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16278 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f8e9a37def9 code=0x7ffc0000 [ 2077.802099][ T29] audit: type=1326 audit(1726027000.666:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16278 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a37def9 code=0x7ffc0000 [ 2077.838013][ T29] audit: type=1326 audit(1726027000.666:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16278 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a37def9 code=0x7ffc0000 [ 2078.009612][T16189] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.133948][ T5410] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.364745][T16189] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.506388][ T5410] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.633220][T14329] Bluetooth: hci4: command tx timeout [ 2078.715801][T16189] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2079.084062][ T5410] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2079.255621][T16189] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2079.598128][ T5410] bridge_slave_1: left allmulticast mode [ 2079.614413][ T5410] bridge_slave_1: left promiscuous mode [ 2079.640916][ T5410] bridge0: port 2(bridge_slave_1) entered disabled state [ 2079.674052][ T5410] bridge_slave_0: left allmulticast mode [ 2079.688176][ T5410] bridge_slave_0: left promiscuous mode [ 2079.838940][ T5410] bridge0: port 1(bridge_slave_0) entered disabled state [ 2080.713947][T14329] Bluetooth: hci4: command tx timeout [ 2080.931713][T16354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1894'. [ 2081.148786][ T5410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2081.439101][ T5410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2081.479952][ T5410] bond0 (unregistering): Released all slaves [ 2081.645234][ T5410] tipc: Left network mode [ 2081.649390][T16189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2081.662796][T16189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2081.678349][T16189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2081.737925][T16189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2081.899363][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 2081.899383][ T29] audit: type=1326 audit(1726027005.256:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16370 comm="syz.4.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365417def9 code=0x7ffc0000 [ 2081.947927][ T29] audit: type=1326 audit(1726027005.296:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16370 comm="syz.4.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f365417def9 code=0x7ffc0000 [ 2082.025397][ T29] audit: type=1326 audit(1726027005.296:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16370 comm="syz.4.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365417def9 code=0x7ffc0000 [ 2082.145551][ T29] audit: type=1326 audit(1726027005.296:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16370 comm="syz.4.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365417def9 code=0x7ffc0000 [ 2082.271936][ T29] audit: type=1326 audit(1726027005.626:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16378 comm="syz.3.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502f57def9 code=0x7ffc0000 [ 2082.338550][ T29] audit: type=1326 audit(1726027005.656:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16378 comm="syz.3.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f502f57def9 code=0x7ffc0000 [ 2082.398650][ T29] audit: type=1326 audit(1726027005.656:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16378 comm="syz.3.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502f57def9 code=0x7ffc0000 [ 2082.420970][ T29] audit: type=1326 audit(1726027005.656:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16378 comm="syz.3.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f502f57def9 code=0x7ffc0000 [ 2082.501763][ T29] audit: type=1326 audit(1726027005.656:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16378 comm="syz.3.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502f57def9 code=0x7ffc0000 [ 2082.514252][T16189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2082.619666][ T5410] hsr_slave_0: left promiscuous mode [ 2082.631093][ T5410] hsr_slave_1: left promiscuous mode [ 2082.656645][ T5410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2082.664725][ T5410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2082.681583][ T5410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2082.703120][ T5410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2082.752033][ T5410] veth1_macvtap: left promiscuous mode [ 2082.758597][ T5410] veth0_macvtap: left promiscuous mode [ 2082.764530][ T5410] veth1_vlan: left promiscuous mode [ 2082.769898][ T5410] veth0_vlan: left promiscuous mode [ 2083.761884][ T5410] team0 (unregistering): Port device team_slave_1 removed [ 2083.865300][ T5410] team0 (unregistering): Port device team_slave_0 removed [ 2084.485463][ T5410] smc: removing net device lo with user defined pnetid SYZ2 [ 2084.543954][T16406] bridge0: port 2(bridge_slave_1) entered disabled state [ 2084.552573][T16406] bridge0: port 1(bridge_slave_0) entered disabled state [ 2084.633865][T16408] bridge_slave_1: left allmulticast mode [ 2084.662631][T16408] bridge_slave_1: left promiscuous mode [ 2084.683856][T16408] bridge0: port 2(bridge_slave_1) entered disabled state [ 2084.725751][T16408] bridge_slave_0: left allmulticast mode [ 2084.736419][T16408] bridge0: port 1(bridge_slave_0) entered disabled state [ 2084.932726][T16415] mac80211_hwsim hwsim106 wlan0: entered promiscuous mode [ 2084.967595][T16415] macvlan2: entered allmulticast mode [ 2084.987876][T16415] mac80211_hwsim hwsim106 wlan0: entered allmulticast mode [ 2085.046589][T16415] mac80211_hwsim hwsim106 wlan0: left promiscuous mode [ 2085.192202][T16189] 8021q: adding VLAN 0 to HW filter on device team0 [ 2085.243853][T13565] bridge0: port 1(bridge_slave_0) entered blocking state [ 2085.251293][T13565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2085.363920][T16423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1913'. [ 2085.413638][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 2085.420839][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2085.924774][T14329] Bluetooth: hci1: command 0x0406 tx timeout [ 2085.925143][T14003] Bluetooth: hci5: command 0x0406 tx timeout [ 2086.060178][T16189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2086.131215][T16189] veth0_vlan: entered promiscuous mode [ 2086.169697][T16189] veth1_vlan: entered promiscuous mode [ 2086.257309][T16189] veth0_macvtap: entered promiscuous mode [ 2086.321243][T16189] veth1_macvtap: entered promiscuous mode [ 2086.385026][T16450] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2086.408775][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2086.430166][T16450] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2086.441308][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2086.474210][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2086.503159][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2086.526475][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2086.549927][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2086.579354][T16189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2086.629589][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2086.659990][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2086.690238][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2086.738816][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2086.762263][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2086.782260][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2086.814410][T16189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2086.872136][T16189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.883763][T16189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.895704][T16189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.904838][T16189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2088.394263][ T5410] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2088.921254][T16513] xt_bpf: check failed: parse error [ 2090.615295][T16532] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2090.673581][T16533] xt_bpf: check failed: parse error [ 2090.680086][T16532] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2091.917770][T14003] Bluetooth: hci0: command 0x0406 tx timeout [ 2092.794555][ T59] block nbd2: Possible stuck request ffff888026080000: control (read@0,4096B). Runtime 30 seconds [ 2092.849713][ T5410] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2093.038712][ T5410] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2093.145367][ T5410] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2093.462850][ T5410] bridge_slave_1: left allmulticast mode [ 2093.468581][ T5410] bridge_slave_1: left promiscuous mode [ 2093.503071][ T5410] bridge0: port 2(bridge_slave_1) entered disabled state [ 2093.714338][ T5410] bridge_slave_0: left allmulticast mode [ 2093.742340][ T5410] bridge_slave_0: left promiscuous mode [ 2093.802591][ T5410] bridge0: port 1(bridge_slave_0) entered disabled state [ 2095.408616][ T5410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2095.421509][ T5410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2095.448239][ T5410] bond0 (unregistering): Released all slaves [ 2095.688850][ T5410] hsr_slave_0: left promiscuous mode [ 2095.772406][ T5410] hsr_slave_1: left promiscuous mode [ 2095.798287][ T5410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2095.812760][ T5410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2095.833396][ T5410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2095.840844][ T5410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2095.912185][ T5410] veth1_macvtap: left promiscuous mode [ 2095.922780][ T5410] veth0_macvtap: left promiscuous mode [ 2095.946683][ T5410] veth1_vlan: left promiscuous mode [ 2095.952125][ T5410] veth0_vlan: left promiscuous mode [ 2097.643678][ T5410] team0 (unregistering): Port device team_slave_1 removed [ 2097.849189][ T5410] team0 (unregistering): Port device team_slave_0 removed [ 2098.817138][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1940'. [ 2099.207048][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.213972][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 2102.265690][T16734] capability: warning: `syz.0.1951' uses deprecated v2 capabilities in a way that may be insecure [ 2104.456681][T16797] smc: net device lo applied user defined pnetid SYZ2 [ 2109.413438][T16903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1961'. [ 2109.918096][ T5419] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2110.074971][ T5419] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2110.190450][ T5419] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2110.297707][ T5419] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2110.796032][ T5419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2110.807628][ T5419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2110.818673][ T5419] bond0 (unregistering): Released all slaves [ 2111.180030][ T5419] hsr_slave_0: left promiscuous mode [ 2111.188651][ T5419] hsr_slave_1: left promiscuous mode [ 2111.215959][ T5419] veth1_macvtap: left promiscuous mode [ 2111.221581][ T5419] veth0_macvtap: left promiscuous mode [ 2111.227940][ T5419] veth1_vlan: left promiscuous mode [ 2111.233521][ T5419] veth0_vlan: left promiscuous mode [ 2111.518433][T14003] Bluetooth: hci3: command 0x0406 tx timeout [ 2111.841366][ T5419] team0 (unregistering): Port device team_slave_1 removed [ 2111.897695][ T5419] team0 (unregistering): Port device team_slave_0 removed [ 2112.769551][ T5419] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2112.866060][ T5419] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2112.970496][ T5419] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2113.079711][ T5419] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2113.223932][ T5419] bridge_slave_1: left allmulticast mode [ 2113.229655][ T5419] bridge_slave_1: left promiscuous mode [ 2113.247079][ T5419] bridge0: port 2(bridge_slave_1) entered disabled state [ 2113.257211][ T5419] bridge_slave_0: left allmulticast mode [ 2113.263847][ T5419] bridge_slave_0: left promiscuous mode [ 2113.269655][ T5419] bridge0: port 1(bridge_slave_0) entered disabled state [ 2113.846264][ T5419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2113.857914][ T5419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2113.869379][ T5419] bond0 (unregistering): Released all slaves [ 2113.959646][ T5419] tipc: Disabling bearer [ 2113.979989][ T5419] tipc: Left network mode [ 2114.263931][ T5419] hsr_slave_0: left promiscuous mode [ 2114.270142][ T5419] hsr_slave_1: left promiscuous mode [ 2114.281239][ T5419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2114.290071][ T5419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2114.301814][ T5419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2114.309536][ T5419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2114.350917][ T5419] veth0_macvtap: left promiscuous mode [ 2114.356752][ T5419] veth1_vlan: left promiscuous mode [ 2114.362113][ T5419] veth0_vlan: left promiscuous mode [ 2114.925565][ T5419] team0 (unregistering): Port device team_slave_1 removed [ 2114.980648][ T5419] team0 (unregistering): Port device team_slave_0 removed [ 2115.475179][ T5419] smc: removing net device lo with user defined pnetid SYZ2 [ 2122.884830][ T59] block nbd2: Possible stuck request ffff888026080000: control (read@0,4096B). Runtime 60 seconds [ 2123.932396][ T4675] udevd[4675]: worker [14479] /devices/virtual/block/nbd2 is taking a long time [ 2152.952595][ T59] block nbd2: Possible stuck request ffff888026080000: control (read@0,4096B). Runtime 90 seconds [ 2160.636532][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.643245][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 2183.040031][ T59] block nbd2: Possible stuck request ffff888026080000: control (read@0,4096B). Runtime 120 seconds [ 2213.116856][ T59] block nbd2: Possible stuck request ffff888026080000: control (read@0,4096B). Runtime 150 seconds [ 2222.076442][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.076980][ T30] INFO: task udevd:14479 blocked for more than 143 seconds. [ 2222.083219][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.090241][ T30] Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 2222.104225][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2222.112940][ T30] task:udevd state:D stack:24864 pid:14479 tgid:14479 ppid:4675 flags:0x00004002 [ 2222.123161][ T30] Call Trace: [ 2222.126457][ T30] [ 2222.129390][ T30] __schedule+0x17ae/0x4a10 [ 2222.134018][ T30] ? __pfx___schedule+0x10/0x10 [ 2222.139004][ T30] ? __pfx_lock_release+0x10/0x10 [ 2222.144075][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 2222.149571][ T30] ? schedule+0x90/0x320 [ 2222.153952][ T30] schedule+0x14b/0x320 [ 2222.158522][ T30] schedule_preempt_disabled+0x13/0x30 [ 2222.165009][ T30] __mutex_lock+0x6a4/0xd70 [ 2222.169578][ T30] ? __mutex_lock+0x527/0xd70 [ 2222.174579][ T30] ? bdev_open+0xf0/0xc60 [ 2222.178958][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2222.184136][ T30] ? kobject_get_unless_zero+0x22d/0x330 [ 2222.189829][ T30] ? disk_block_events+0xa9/0x120 [ 2222.194920][ T30] ? bdev_open+0xb1/0xc60 [ 2222.199284][ T30] bdev_open+0xf0/0xc60 [ 2222.203823][ T30] ? iput+0x3ad/0x930 [ 2222.207862][ T30] blkdev_open+0x3e8/0x570 [ 2222.212344][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 2222.217315][ T30] do_dentry_open+0x970/0x1440 [ 2222.222100][ T30] vfs_open+0x3e/0x330 [ 2222.226233][ T30] path_openat+0x2b3e/0x3470 [ 2222.230848][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 2222.236635][ T30] ? __lock_acquire+0x137a/0x2040 [ 2222.241691][ T30] ? __pfx_path_openat+0x10/0x10 [ 2222.246742][ T30] do_filp_open+0x235/0x490 [ 2222.251269][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 2222.256359][ T30] ? _raw_spin_unlock+0x28/0x50 [ 2222.262021][ T30] ? alloc_fd+0x5a1/0x640 [ 2222.266600][ T30] do_sys_openat2+0x13e/0x1d0 [ 2222.271313][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 2222.276600][ T30] __x64_sys_openat+0x247/0x2a0 [ 2222.281488][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 2222.286929][ T30] ? do_syscall_64+0x100/0x230 [ 2222.291930][ T30] ? do_syscall_64+0xb6/0x230 [ 2222.296641][ T30] do_syscall_64+0xf3/0x230 [ 2222.301150][ T30] ? clear_bhb_loop+0x35/0x90 [ 2222.305865][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2222.311773][ T30] RIP: 0033:0x7fbd5eb169a4 [ 2222.316252][ T30] RSP: 002b:00007ffcc457b000 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2222.324728][ T30] RAX: ffffffffffffffda RBX: 000055e086b83ba0 RCX: 00007fbd5eb169a4 [ 2222.332776][ T30] RDX: 00000000000a0800 RSI: 000055e086b5d660 RDI: 00000000ffffff9c [ 2222.340757][ T30] RBP: 000055e086b5d660 R08: 0000000000000001 R09: 7fffffffffffffff [ 2222.348763][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 2222.356789][ T30] R13: 000055e086b6e6f0 R14: 0000000000000001 R15: 000055e086b5c910 [ 2222.365210][ T30] [ 2222.368298][ T30] INFO: task syz.2.1797:16065 blocked for more than 143 seconds. [ 2222.376177][ T30] Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 2222.383953][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2222.392701][ T30] task:syz.2.1797 state:D stack:24672 pid:16065 tgid:16065 ppid:14602 flags:0x00000004 [ 2222.403148][ T30] Call Trace: [ 2222.406451][ T30] [ 2222.409385][ T30] __schedule+0x17ae/0x4a10 [ 2222.413987][ T30] ? __pfx___schedule+0x10/0x10 [ 2222.418860][ T30] ? __pfx_lock_release+0x10/0x10 [ 2222.423924][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 2222.429407][ T30] ? schedule+0x90/0x320 [ 2222.433802][ T30] schedule+0x14b/0x320 [ 2222.437993][ T30] schedule_preempt_disabled+0x13/0x30 [ 2222.443510][ T30] __mutex_lock+0x6a4/0xd70 [ 2222.448029][ T30] ? __mutex_lock+0x527/0xd70 [ 2222.452778][ T30] ? bdev_release+0x184/0x700 [ 2222.457482][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2222.462593][ T30] ? __fsnotify_parent+0x20c/0x5e0 [ 2222.467991][ T30] bdev_release+0x184/0x700 [ 2222.472730][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2222.479099][ T30] blkdev_release+0x15/0x20 [ 2222.483671][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 2222.488893][ T30] __fput+0x24a/0x8a0 [ 2222.493055][ T30] task_work_run+0x24f/0x310 [ 2222.497900][ T30] ? __pfx_task_work_run+0x10/0x10 [ 2222.503117][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 2222.508888][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 2222.514656][ T30] do_syscall_64+0x100/0x230 [ 2222.519289][ T30] ? clear_bhb_loop+0x35/0x90 [ 2222.524016][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2222.530023][ T30] RIP: 0033:0x7f8a7d17def9 [ 2222.534504][ T30] RSP: 002b:00007ffe8617d208 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2222.542998][ T30] RAX: 0000000000000000 RBX: 00007f8a7d337a80 RCX: 00007f8a7d17def9 [ 2222.551003][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2222.559038][ T30] RBP: 00007f8a7d337a80 R08: 0000000000000006 R09: 00007ffe8617d4ff [ 2222.567542][ T30] R10: 00000000003fcaec R11: 0000000000000246 R12: 00000000001f79a4 [ 2222.575699][ T30] R13: 00007ffe8617d310 R14: 0000000000000032 R15: ffffffffffffffff [ 2222.583854][ T30] [ 2222.586887][ T30] INFO: task syz.2.1797:16066 blocked for more than 143 seconds. [ 2222.594717][ T30] Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 2222.602433][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2222.611120][ T30] task:syz.2.1797 state:D stack:26736 pid:16066 tgid:16065 ppid:14602 flags:0x00004004 [ 2222.621363][ T30] Call Trace: [ 2222.624717][ T30] [ 2222.627675][ T30] __schedule+0x17ae/0x4a10 [ 2222.632332][ T30] ? __pfx___schedule+0x10/0x10 [ 2222.637243][ T30] ? __pfx_lock_release+0x10/0x10 [ 2222.642349][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 2222.647823][ T30] ? schedule+0x90/0x320 [ 2222.652075][ T30] schedule+0x14b/0x320 [ 2222.656285][ T30] schedule_preempt_disabled+0x13/0x30 [ 2222.661750][ T30] __mutex_lock+0x6a4/0xd70 [ 2222.666328][ T30] ? __mutex_lock+0x527/0xd70 [ 2222.671285][ T30] ? bdev_release+0x184/0x700 [ 2222.676030][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2222.681066][ T30] ? __fsnotify_parent+0x20c/0x5e0 [ 2222.686241][ T30] bdev_release+0x184/0x700 [ 2222.690780][ T30] blkdev_release+0x15/0x20 [ 2222.695334][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 2222.700562][ T30] __fput+0x24a/0x8a0 [ 2222.704654][ T30] task_work_run+0x24f/0x310 [ 2222.709305][ T30] ? __pfx_task_work_run+0x10/0x10 [ 2222.714772][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 2222.720540][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 2222.726236][ T30] do_syscall_64+0x100/0x230 [ 2222.730849][ T30] ? clear_bhb_loop+0x35/0x90 [ 2222.735749][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2222.741677][ T30] RIP: 0033:0x7f8a7d17def9 [ 2222.746297][ T30] RSP: 002b:00007f8a7dea0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2222.754826][ T30] RAX: 0000000000000000 RBX: 00007f8a7d335f80 RCX: 00007f8a7d17def9 [ 2222.762881][ T30] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006 [ 2222.770893][ T30] RBP: 00007f8a7d1f09f6 R08: 0000000000000000 R09: 0000000000000000 [ 2222.779273][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2222.787394][ T30] R13: 0000000000000000 R14: 00007f8a7d335f80 R15: 00007ffe8617d0a8 [ 2222.795417][ T30] [ 2222.798437][ T30] INFO: task syz.2.1797:16067 blocked for more than 144 seconds. [ 2222.806178][ T30] Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 2222.813861][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2222.822603][ T30] task:syz.2.1797 state:D stack:20464 pid:16067 tgid:16065 ppid:14602 flags:0x00004006 [ 2222.833015][ T30] Call Trace: [ 2222.836340][ T30] [ 2222.839297][ T30] __schedule+0x17ae/0x4a10 [ 2222.844387][ T30] ? __pfx___schedule+0x10/0x10 [ 2222.849248][ T30] ? __pfx_lock_release+0x10/0x10 [ 2222.854344][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2222.860350][ T30] ? schedule+0x90/0x320 [ 2222.864672][ T30] schedule+0x14b/0x320 [ 2222.868893][ T30] io_schedule+0x8d/0x110 [ 2222.873354][ T30] folio_wait_bit_common+0x882/0x12b0 [ 2222.879044][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 2222.884986][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 2222.890659][ T30] ? __filemap_get_folio+0x769/0xc10 [ 2222.896004][ T30] do_read_cache_folio+0xb9/0x820 [ 2222.901045][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 2222.906683][ T30] read_part_sector+0xb3/0x330 [ 2222.911584][ T30] adfspart_check_POWERTEC+0xc8/0x8f0 [ 2222.917037][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 2222.922667][ T30] ? snprintf+0xda/0x120 [ 2222.926930][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 2222.933011][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 2222.938679][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 2222.943345][ T30] ? vsnprintf+0x184/0x1da0 [ 2222.947873][ T30] ? __pfx_snprintf+0x10/0x10 [ 2222.952617][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 2222.957613][ T30] bdev_disk_changed+0x72c/0x13d0 [ 2222.962825][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 2222.968305][ T30] blkdev_get_whole+0x2d2/0x450 [ 2222.973212][ T30] bdev_open+0x2d4/0xc60 [ 2222.977802][ T30] blkdev_open+0x3e8/0x570 [ 2222.982312][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 2222.987298][ T30] do_dentry_open+0x970/0x1440 [ 2222.992262][ T30] vfs_open+0x3e/0x330 [ 2222.996375][ T30] path_openat+0x2b3e/0x3470 [ 2223.000981][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 2223.006481][ T30] ? __lock_acquire+0x137a/0x2040 [ 2223.011543][ T30] ? __pfx_path_openat+0x10/0x10 [ 2223.016563][ T30] do_filp_open+0x235/0x490 [ 2223.021164][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 2223.026397][ T30] ? _raw_spin_unlock+0x28/0x50 [ 2223.031270][ T30] ? alloc_fd+0x5a1/0x640 [ 2223.035660][ T30] do_sys_openat2+0x13e/0x1d0 [ 2223.040353][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 2223.045744][ T30] __x64_sys_openat+0x247/0x2a0 [ 2223.050630][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 2223.056167][ T30] ? do_syscall_64+0x100/0x230 [ 2223.060947][ T30] ? do_syscall_64+0xb6/0x230 [ 2223.065701][ T30] do_syscall_64+0xf3/0x230 [ 2223.070303][ T30] ? clear_bhb_loop+0x35/0x90 [ 2223.075149][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2223.081415][ T30] RIP: 0033:0x7f8a7d17c890 [ 2223.086012][ T30] RSP: 002b:00007f8a7cbfeb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2223.094511][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8a7d17c890 [ 2223.102538][ T30] RDX: 0000000000000000 RSI: 00007f8a7cbfec10 RDI: 00000000ffffff9c [ 2223.110575][ T30] RBP: 00007f8a7cbfec10 R08: 0000000000000000 R09: 002364626e2f7665 [ 2223.118652][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2223.127315][ T30] R13: 0000000000000000 R14: 00007f8a7d336058 R15: 00007ffe8617d0a8 [ 2223.135646][ T30] [ 2223.138709][ T30] [ 2223.138709][ T30] Showing all locks held in the system: [ 2223.146876][ T30] 1 lock held by khungtaskd/30: [ 2223.151837][ T30] #0: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 2223.161771][ T30] 2 locks held by getty/4976: [ 2223.166605][ T30] #0: ffff88802fd4c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2223.176505][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 2223.186985][ T30] 1 lock held by udevd/14479: [ 2223.191822][ T30] #0: ffff88802600b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 2223.201521][ T30] 1 lock held by syz.2.1797/16065: [ 2223.206741][ T30] #0: ffff88802600b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x184/0x700 [ 2223.216453][ T30] 1 lock held by syz.2.1797/16066: [ 2223.221561][ T30] #0: ffff88802600b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x184/0x700 [ 2223.231222][ T30] 1 lock held by syz.2.1797/16067: [ 2223.236570][ T30] #0: ffff88802600b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 2223.245921][ T30] [ 2223.248245][ T30] ============================================= [ 2223.248245][ T30] [ 2223.256807][ T30] NMI backtrace for cpu 0 [ 2223.261152][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 2223.271654][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2223.281946][ T30] Call Trace: [ 2223.285761][ T30] [ 2223.289135][ T30] dump_stack_lvl+0x241/0x360 [ 2223.293875][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2223.299251][ T30] ? __pfx__printk+0x10/0x10 [ 2223.303864][ T30] ? vprintk_emit+0x667/0x7c0 [ 2223.308563][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 2223.313614][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 2223.318596][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2223.324103][ T30] ? _printk+0xd5/0x120 [ 2223.328354][ T30] ? __pfx__printk+0x10/0x10 [ 2223.332972][ T30] ? __wake_up_klogd+0xcc/0x110 [ 2223.337841][ T30] ? __pfx__printk+0x10/0x10 [ 2223.342444][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 2223.347742][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2223.353740][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 2223.359857][ T30] watchdog+0xff4/0x1040 [ 2223.364149][ T30] ? watchdog+0x1ea/0x1040 [ 2223.368590][ T30] ? __pfx_watchdog+0x10/0x10 [ 2223.373285][ T30] kthread+0x2f0/0x390 [ 2223.377375][ T30] ? __pfx_watchdog+0x10/0x10 [ 2223.382072][ T30] ? __pfx_kthread+0x10/0x10 [ 2223.386780][ T30] ret_from_fork+0x4b/0x80 [ 2223.391234][ T30] ? __pfx_kthread+0x10/0x10 [ 2223.395857][ T30] ret_from_fork_asm+0x1a/0x30 [ 2223.401001][ T30] [ 2223.405111][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2223.411374][ C1] NMI backtrace for cpu 1 [ 2223.411388][ C1] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 2223.411411][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2223.411423][ C1] Workqueue: bat_events batadv_tt_purge [ 2223.411448][ C1] RIP: 0010:__local_bh_disable_ip+0x10/0x220 [ 2223.411475][ C1] Code: af 47 00 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 <53> 48 83 e4 e0 48 81 ec a0 00 00 00 41 89 f7 48 89 7c 24 18 65 48 [ 2223.411497][ C1] RSP: 0018:ffffc90000bc7a60 EFLAGS: 00000282 [ 2223.411512][ C1] RAX: 00000000000002fd RBX: ffffffff8b7ea157 RCX: 1ffff110069ba651 [ 2223.411526][ C1] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff8b7ea157 [ 2223.411539][ C1] RBP: ffffc90000bc7a80 R08: ffffffff93fa6937 R09: 1ffffffff27f4d26 [ 2223.411553][ C1] R10: dffffc0000000000 R11: fffffbfff27f4d27 R12: ffff888034dd3288 [ 2223.411567][ C1] R13: 0000000000000000 R14: ffff88805f15bf40 R15: ffff888034dd3290 [ 2223.411580][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 2223.411596][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2223.411609][ C1] CR2: 000055f6167ee680 CR3: 000000000e534000 CR4: 00000000003506f0 [ 2223.411625][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2223.411636][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2223.411648][ C1] Call Trace: [ 2223.411656][ C1] [ 2223.411665][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 2223.411690][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2223.411717][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2223.411741][ C1] ? nmi_handle+0x2a/0x5a0 [ 2223.411768][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2223.411791][ C1] ? nmi_handle+0x14f/0x5a0 [ 2223.411808][ C1] ? nmi_handle+0x2a/0x5a0 [ 2223.411827][ C1] ? __local_bh_disable_ip+0x10/0x220 [ 2223.411849][ C1] ? default_do_nmi+0x63/0x160 [ 2223.411875][ C1] ? exc_nmi+0x123/0x1f0 [ 2223.411904][ C1] ? end_repeat_nmi+0xf/0x53 [ 2223.411929][ C1] ? batadv_tt_local_purge+0x107/0x340 [ 2223.411952][ C1] ? batadv_tt_local_purge+0x107/0x340 [ 2223.411971][ C1] ? __local_bh_disable_ip+0x10/0x220 [ 2223.411995][ C1] ? __local_bh_disable_ip+0x10/0x220 [ 2223.412019][ C1] ? __local_bh_disable_ip+0x10/0x220 [ 2223.412043][ C1] [ 2223.412049][ C1] [ 2223.412061][ C1] _raw_spin_lock_bh+0x1c/0x50 [ 2223.412088][ C1] batadv_tt_local_purge+0x107/0x340 [ 2223.412115][ C1] ? process_scheduled_works+0x945/0x1830 [ 2223.412139][ C1] batadv_tt_purge+0x35/0xa40 [ 2223.412171][ C1] ? process_scheduled_works+0x945/0x1830 [ 2223.412196][ C1] process_scheduled_works+0xa2c/0x1830 [ 2223.412239][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2223.412269][ C1] ? assign_work+0x364/0x3d0 [ 2223.412295][ C1] worker_thread+0x86d/0xd10 [ 2223.412329][ C1] ? __kthread_parkme+0x169/0x1d0 [ 2223.412356][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2223.412380][ C1] kthread+0x2f0/0x390 [ 2223.412408][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2223.412432][ C1] ? __pfx_kthread+0x10/0x10 [ 2223.412464][ C1] ret_from_fork+0x4b/0x80 [ 2223.412489][ C1] ? __pfx_kthread+0x10/0x10 [ 2223.412515][ C1] ret_from_fork_asm+0x1a/0x30 [ 2223.412551][ C1] [ 2223.422369][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2223.422394][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 2223.422427][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2223.422443][ T30] Call Trace: [ 2223.422455][ T30] [ 2223.422465][ T30] dump_stack_lvl+0x241/0x360 [ 2223.422503][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2223.422534][ T30] ? __pfx__printk+0x10/0x10 [ 2223.422557][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2223.422601][ T30] ? vscnprintf+0x5d/0x90 [ 2223.422635][ T30] panic+0x349/0x860 [ 2223.422662][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2223.422698][ T30] ? __pfx_panic+0x10/0x10 [ 2223.422721][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 2223.422751][ T30] ? __irq_work_queue_local+0x137/0x410 [ 2223.422787][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2223.422815][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2223.422846][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 2223.422882][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 2223.422919][ T30] watchdog+0x1033/0x1040 [ 2223.422954][ T30] ? watchdog+0x1ea/0x1040 [ 2223.422995][ T30] ? __pfx_watchdog+0x10/0x10 [ 2223.423029][ T30] kthread+0x2f0/0x390 [ 2223.423065][ T30] ? __pfx_watchdog+0x10/0x10 [ 2223.423098][ T30] ? __pfx_kthread+0x10/0x10 [ 2223.423141][ T30] ret_from_fork+0x4b/0x80 [ 2223.423175][ T30] ? __pfx_kthread+0x10/0x10 [ 2223.423212][ T30] ret_from_fork_asm+0x1a/0x30 [ 2223.423275][ T30] [ 2223.428061][ T30] Kernel Offset: disabled [ 2223.892401][ T30] Rebooting in 86400 seconds..