last executing test programs: 1m39.426226655s ago: executing program 1 (id=253): getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044103, &(0x7f0000000080)) 1m37.600016679s ago: executing program 1 (id=262): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 1m36.572099088s ago: executing program 1 (id=264): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x4000) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x4008000) r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x7}, 0x0, 0x0, 0x4, 0x9, 0xffffffffffffffff, 0x2, 0x24, 0x6}}], 0x58}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20000040) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r5, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}, 0x10) 1m35.484088512s ago: executing program 1 (id=267): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x0, 0x2, @scatter={0x0, 0x40000, 0x0}, 0x0, 0x0, 0x800004, 0x10030, 0x1, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getpgid(r3) 1m33.723576901s ago: executing program 1 (id=270): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000feff53"], 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1}}, 0x40) 1m32.099736756s ago: executing program 1 (id=282): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) dup(0xffffffffffffffff) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'multiq3\x00', [0x2000, 0x0, 0x100c139, 0x4, 0x4, 0x5, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x8104, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x8b, 0x6, 0x2, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) 1m26.441256359s ago: executing program 2 (id=287): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000100)) 1m24.011094432s ago: executing program 2 (id=290): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) open(&(0x7f0000000100)='./file0\x00', 0x20000, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sock_ops}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m14.809092243s ago: executing program 32 (id=282): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) dup(0xffffffffffffffff) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'multiq3\x00', [0x2000, 0x0, 0x100c139, 0x4, 0x4, 0x5, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x8104, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x8b, 0x6, 0x2, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) 1m13.762560753s ago: executing program 2 (id=294): socket$igmp(0x2, 0x3, 0x2) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x40, r0, 0x801, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m9.72142481s ago: executing program 2 (id=297): r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x400) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0xfe5e) 1m8.181879208s ago: executing program 2 (id=300): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) 1m3.948568744s ago: executing program 2 (id=305): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000006, 0x40032, 0xffffffffffffffff, 0x0) 53.187999304s ago: executing program 3 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x2, &(0x7f0000000080)=0x2, 0x4) sched_setscheduler(r0, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x801, 0x0) msgget(0x3, 0x710) msgget(0x1, 0x240) msgctl$IPC_RMID(0x0, 0x0) 49.05343222s ago: executing program 3 (id=312): syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x20000030) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001280)={0x0, @in6={{0xa, 0x4e20, 0x5, @mcast2, 0x8000}}, 0x3, 0x8001}, 0x90) 47.69943505s ago: executing program 33 (id=305): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000006, 0x40032, 0xffffffffffffffff, 0x0) 47.575048032s ago: executing program 3 (id=314): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, 0x0, 0x7, 0x0, 0x0, 0x4002000}, 0x2200c010) recvmmsg(r0, &(0x7f0000006c40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xe0000000}], 0x2, 0xe3e5736060ea5a56, 0x0) 46.180140496s ago: executing program 3 (id=316): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 43.0032607s ago: executing program 0 (id=318): r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f0000000040)=[{0x3, 0x67e, 0x800}, {}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000400)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r6, 0x29, 0x35, &(0x7f0000000000)=0xaf, 0x4) sendmmsg$inet6(r6, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x12003, 0x0) 42.828824927s ago: executing program 3 (id=319): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xcb44, 0x800, 0x2, 0x26c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f00000006c0)="3b000000010001", 0x7) 37.854973613s ago: executing program 3 (id=320): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@polexpire={0xd8, 0x1b, 0x1, 0x70bd26, 0x25dfdbfc, {{{@in=@private=0xa010101, @in=@local, 0x4e24, 0x0, 0x4f20, 0x45, 0x2, 0xc0, 0x20, 0x32}, {0x69c, 0x6, 0x9, 0x7, 0x8f9e, 0x1ff, 0x2, 0x2800000000000000}, {0x80, 0x4, 0x6, 0x5}, 0x3, 0x0, 0x0, 0x0, 0x1, 0x2}}, [@mark={0xc, 0x15, {0x35075b, 0x9}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x9}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20040000}, 0x48000) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) 37.854663093s ago: executing program 0 (id=321): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000, 0x54ce4b76}, 0x20) 30.910180028s ago: executing program 0 (id=322): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, 0x0, 0x7, 0x0, 0x0, 0x4002000}, 0x2200c010) recvmmsg(r0, &(0x7f0000006c40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xe0000000}], 0x2, 0xe3e5736060ea5a56, 0x0) 26.085243891s ago: executing program 0 (id=323): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40f03, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)=')\x80', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000003ac0)={0x3, 0x1, 0xffffffff, 0x0, 0x6}) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) 21.991030443s ago: executing program 34 (id=320): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@polexpire={0xd8, 0x1b, 0x1, 0x70bd26, 0x25dfdbfc, {{{@in=@private=0xa010101, @in=@local, 0x4e24, 0x0, 0x4f20, 0x45, 0x2, 0xc0, 0x20, 0x32}, {0x69c, 0x6, 0x9, 0x7, 0x8f9e, 0x1ff, 0x2, 0x2800000000000000}, {0x80, 0x4, 0x6, 0x5}, 0x3, 0x0, 0x0, 0x0, 0x1, 0x2}}, [@mark={0xc, 0x15, {0x35075b, 0x9}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x9}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20040000}, 0x48000) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) 19.236118187s ago: executing program 0 (id=325): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) lsetxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v2={0xa, 0x3, 0x15, 0x5}, 0x9, 0x1) 18.388049948s ago: executing program 0 (id=326): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x5dabcbcf}, 0x1c) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0xc4, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x3, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 0s ago: executing program 35 (id=326): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x5dabcbcf}, 0x1c) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0xc4, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x3, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.84' (ED25519) to the list of known hosts. [ 83.055438][ T5759] cgroup: Unknown subsys name 'net' [ 83.227112][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.922220][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.830315][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.842772][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.852325][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.861640][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.869510][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.878366][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.885696][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.893668][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.910673][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.918713][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.922558][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.934462][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.938136][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.968012][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.988161][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.995338][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.016209][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.017570][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.031471][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.040119][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.047610][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.069797][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.077296][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.085654][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.794032][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 87.835978][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 87.857211][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 87.936973][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 88.060956][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.069874][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.077265][ T5769] bridge_slave_0: entered allmulticast mode [ 88.084854][ T5769] bridge_slave_0: entered promiscuous mode [ 88.116046][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.123362][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.131007][ T5773] bridge_slave_0: entered allmulticast mode [ 88.138642][ T5773] bridge_slave_0: entered promiscuous mode [ 88.146921][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.154358][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.161696][ T5769] bridge_slave_1: entered allmulticast mode [ 88.169655][ T5769] bridge_slave_1: entered promiscuous mode [ 88.195216][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.202732][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.210176][ T5773] bridge_slave_1: entered allmulticast mode [ 88.217259][ T5773] bridge_slave_1: entered promiscuous mode [ 88.299744][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.314468][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.324102][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.332560][ T5777] bridge_slave_0: entered allmulticast mode [ 88.340339][ T5777] bridge_slave_0: entered promiscuous mode [ 88.349533][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.356717][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.364024][ T5777] bridge_slave_1: entered allmulticast mode [ 88.371557][ T5777] bridge_slave_1: entered promiscuous mode [ 88.381347][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.406067][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.450795][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.513152][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.520965][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.529171][ T5768] bridge_slave_0: entered allmulticast mode [ 88.536294][ T5768] bridge_slave_0: entered promiscuous mode [ 88.559411][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.572624][ T5769] team0: Port device team_slave_0 added [ 88.585059][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.592405][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.599918][ T5768] bridge_slave_1: entered allmulticast mode [ 88.607348][ T5768] bridge_slave_1: entered promiscuous mode [ 88.617216][ T5773] team0: Port device team_slave_0 added [ 88.628077][ T5773] team0: Port device team_slave_1 added [ 88.636582][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.660759][ T5769] team0: Port device team_slave_1 added [ 88.721778][ T5777] team0: Port device team_slave_0 added [ 88.770233][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.777236][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.803526][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.820052][ T5777] team0: Port device team_slave_1 added [ 88.828852][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.841326][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.851340][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.858394][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.884446][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.897595][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.904797][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.930904][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.944057][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.951374][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.981709][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.048606][ T51] Bluetooth: hci3: command tx timeout [ 89.083319][ T5768] team0: Port device team_slave_0 added [ 89.093675][ T5768] team0: Port device team_slave_1 added [ 89.114324][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.121567][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.147915][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.149061][ T51] Bluetooth: hci2: command tx timeout [ 89.158576][ T5084] Bluetooth: hci0: command tx timeout [ 89.164445][ T5784] Bluetooth: hci1: command tx timeout [ 89.179420][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.186498][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.213259][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.294142][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.301462][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.327635][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.357477][ T5773] hsr_slave_0: entered promiscuous mode [ 89.364407][ T5773] hsr_slave_1: entered promiscuous mode [ 89.376319][ T5769] hsr_slave_0: entered promiscuous mode [ 89.384147][ T5769] hsr_slave_1: entered promiscuous mode [ 89.390751][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.399388][ T5769] Cannot create hsr debugfs directory [ 89.405776][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.412987][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.439379][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.475170][ T5777] hsr_slave_0: entered promiscuous mode [ 89.482032][ T5777] hsr_slave_1: entered promiscuous mode [ 89.489487][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.497236][ T5777] Cannot create hsr debugfs directory [ 89.642937][ T5768] hsr_slave_0: entered promiscuous mode [ 89.649872][ T5768] hsr_slave_1: entered promiscuous mode [ 89.656363][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.664175][ T5768] Cannot create hsr debugfs directory [ 90.056640][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.074554][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.085119][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.096875][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.174568][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.194818][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.210530][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.223958][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.304143][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.315726][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.327656][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.339887][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.451253][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.462923][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.474303][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.485109][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.632043][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.650626][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.695338][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.738587][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.757119][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.764680][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.777193][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.800774][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.833606][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.840831][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.854261][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.861490][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.871935][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.879263][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.889645][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.896835][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.924565][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.999939][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.007517][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.030824][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.054206][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.061613][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.095017][ T1314] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.102462][ T1314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.138585][ T5784] Bluetooth: hci3: command tx timeout [ 91.184937][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.208037][ T5784] Bluetooth: hci0: command tx timeout [ 91.208230][ T51] Bluetooth: hci1: command tx timeout [ 91.214814][ T5084] Bluetooth: hci2: command tx timeout [ 91.335920][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.695632][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.724255][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.782641][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.863658][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.893556][ T5769] veth0_vlan: entered promiscuous mode [ 91.902530][ T5777] veth0_vlan: entered promiscuous mode [ 91.944979][ T5769] veth1_vlan: entered promiscuous mode [ 91.957529][ T5777] veth1_vlan: entered promiscuous mode [ 91.979980][ T5773] veth0_vlan: entered promiscuous mode [ 92.017397][ T5773] veth1_vlan: entered promiscuous mode [ 92.093787][ T5768] veth0_vlan: entered promiscuous mode [ 92.106037][ T5769] veth0_macvtap: entered promiscuous mode [ 92.122546][ T5777] veth0_macvtap: entered promiscuous mode [ 92.135258][ T5769] veth1_macvtap: entered promiscuous mode [ 92.143975][ T5773] veth0_macvtap: entered promiscuous mode [ 92.156168][ T5773] veth1_macvtap: entered promiscuous mode [ 92.167634][ T5777] veth1_macvtap: entered promiscuous mode [ 92.177440][ T5768] veth1_vlan: entered promiscuous mode [ 92.202608][ T8] cfg80211: failed to load regulatory.db [ 92.234397][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.251521][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.263068][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.279630][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.303900][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.315606][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.327428][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.341208][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.356294][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.367254][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.377670][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.389205][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.401156][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.414798][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.424760][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.433890][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.442956][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.458783][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.467636][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.476984][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.486104][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.507355][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.518225][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.530103][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.540976][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.553400][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.569736][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.579286][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.589338][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.598305][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.696004][ T5768] veth0_macvtap: entered promiscuous mode [ 92.752777][ T5768] veth1_macvtap: entered promiscuous mode [ 92.801784][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.816145][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.827172][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.841672][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.849747][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.863479][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.873790][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.884439][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.897264][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.924302][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.940351][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.952354][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.963256][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.976413][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.987318][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.999273][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.024826][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.036383][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.062484][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.071924][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.082831][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.094543][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.146701][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.156329][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.195122][ T1347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.208782][ T5784] Bluetooth: hci3: command tx timeout [ 93.225064][ T1347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.288170][ T5784] Bluetooth: hci1: command tx timeout [ 93.289743][ T5084] Bluetooth: hci0: command tx timeout [ 93.293672][ T5784] Bluetooth: hci2: command tx timeout [ 93.313280][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.322102][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.427303][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.466413][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.619794][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.640788][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.743110][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.751568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.287888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.823543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.824854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.832655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.927765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 95.937848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 96.088261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.133494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.335537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.336879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.318130][ T5784] Bluetooth: hci3: command tx timeout [ 97.321892][ T5084] Bluetooth: hci0: command tx timeout [ 97.323981][ T5784] Bluetooth: hci1: command tx timeout [ 97.329358][ T51] Bluetooth: hci2: command tx timeout [ 97.364573][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.953155][ T5888] syz.1.8[5888]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 102.045695][ T5899] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.298756][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 114.910377][ T6010] process 'syz.2.45' launched './file0' with NULL argv: empty string added [ 115.778690][ T5869] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 116.071882][ T5869] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.200438][ T5869] usb 3-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 116.213118][ T5869] usb 3-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 116.226855][ T5869] usb 3-1: config 1 interface 0 has no altsetting 0 [ 116.235880][ T5869] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.287907][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 116.296012][ T5869] usb 3-1: SerialNumber: syz [ 118.215373][ T5869] usb 3-1: USB disconnect, device number 2 [ 118.358161][ T5891] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 118.578615][ T5891] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 118.610978][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.627861][ T5891] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.649203][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.662515][ T5891] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.683455][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.696041][ T5891] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.717010][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.728634][ T5891] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.749233][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.761521][ T5891] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.784050][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.794894][ T5891] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.817753][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.831436][ T5891] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.853303][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.877966][ T5891] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.909368][ T5891] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 118.925447][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.945763][ T5891] usb 4-1: Product: syz [ 118.956200][ T5891] usb 4-1: Manufacturer: syz [ 118.973300][ T5891] usb 4-1: SerialNumber: syz [ 119.005690][ T5891] usb 4-1: config 0 descriptor?? [ 119.281387][ T5891] usb 4-1: USB disconnect, device number 2 [ 120.818543][ T5084] Bluetooth: hci1: Invalid handle: 0x20c9 > 0x0eff [ 121.197962][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'. [ 125.217876][ T5824] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 125.419720][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.428079][ T5869] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.437859][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.457780][ T5824] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 125.467275][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.513746][ T5824] usb 3-1: config 0 descriptor?? [ 125.657844][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 125.670017][ T5869] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 125.692372][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.720574][ T5869] usb 4-1: config 0 descriptor?? [ 125.757791][ T5869] gspca_main: sq930x-2.14.0 probing 041e:403c [ 125.966285][ T5824] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 125.996536][ T5824] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 126.022204][ T5824] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 126.042348][ T5824] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 126.060640][ T5824] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 126.103539][ T5824] logitech 0003:046D:C29C.0001: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 126.171097][ T5824] logitech 0003:046D:C29C.0001: no inputs found [ 126.242895][ T5824] usb 3-1: USB disconnect, device number 3 [ 126.278209][ T5869] gspca_sq930x: reg_r 001f failed -71 [ 126.283989][ T5869] sq930x: probe of 4-1:0.0 failed with error -71 [ 126.330248][ T5869] usb 4-1: USB disconnect, device number 3 [ 126.377056][ T6110] fido_id[6110]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 126.993247][ T6120] sctp: [Deprecated]: syz.2.77 (pid 6120) Use of int in maxseg socket option. [ 126.993247][ T6120] Use struct sctp_assoc_value instead [ 127.047829][ T5869] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.422422][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.435580][ T5869] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 127.446181][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.218036][ T5869] usb 1-1: config 0 descriptor?? [ 128.266445][ T6132] Zero length message leads to an empty skb [ 128.274932][ T5869] pwc: Askey VC010 type 2 USB webcam detected. [ 129.463269][ T6133] sched: RT throttling activated [ 130.092140][ T5869] pwc: recv_control_msg error -32 req 02 val 2b00 [ 130.134228][ T5869] pwc: recv_control_msg error -32 req 02 val 2700 [ 130.171882][ T5869] pwc: recv_control_msg error -32 req 02 val 2c00 [ 130.335170][ T5084] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 130.345877][ T5084] CPU: 0 PID: 5084 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 130.353504][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.363623][ T5084] Workqueue: hci2 hci_rx_work [ 130.368411][ T5084] Call Trace: [ 130.371742][ T5084] [ 130.374735][ T5084] dump_stack_lvl+0x16c/0x230 [ 130.379483][ T5084] ? show_regs_print_info+0x20/0x20 [ 130.384741][ T5084] ? load_image+0x3b0/0x3b0 [ 130.389319][ T5084] sysfs_create_dir_ns+0x256/0x280 [ 130.394493][ T5084] ? hci_rx_work+0x43a/0xd80 [ 130.399170][ T5084] ? sysfs_warn_dup+0xa0/0xa0 [ 130.403920][ T5084] ? do_raw_spin_unlock+0x121/0x230 [ 130.409179][ T5084] kobject_add_internal+0x6b8/0xc70 [ 130.414448][ T5084] kobject_add+0x156/0x220 [ 130.418921][ T5084] ? __rwlock_init+0x150/0x150 [ 130.423833][ T5084] ? kobject_init+0x1e0/0x1e0 [ 130.428619][ T5084] ? _raw_spin_unlock+0x28/0x40 [ 130.433537][ T5084] ? get_device_parent+0x366/0x390 [ 130.438818][ T5084] device_add+0x408/0xc20 [ 130.443215][ T5084] hci_conn_add_sysfs+0xd5/0x1e0 [ 130.448301][ T5084] le_conn_complete_evt+0xf36/0x1500 [ 130.453644][ T5084] ? hci_event_packet+0x4a7/0x1210 [ 130.458827][ T5084] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 130.465119][ T5084] ? __copy_skb_header+0xa7/0x550 [ 130.470210][ T5084] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 130.475915][ T5084] ? skb_pull_data+0xfb/0x200 [ 130.480698][ T5084] hci_le_conn_complete_evt+0x187/0x440 [ 130.486442][ T5084] ? hci_remote_host_features_evt+0x160/0x160 [ 130.492692][ T5084] hci_event_packet+0x795/0x1210 [ 130.497748][ T5084] ? bis_list+0x290/0x290 [ 130.502157][ T5084] ? lockdep_hardirqs_on+0x98/0x150 [ 130.507544][ T5084] ? hci_send_to_monitor+0xd7/0x4f0 [ 130.512806][ T5084] hci_rx_work+0x43a/0xd80 [ 130.517277][ T5084] ? process_scheduled_works+0x957/0x15b0 [ 130.523215][ T5084] process_scheduled_works+0xa45/0x15b0 [ 130.528832][ T5084] ? assign_work+0x400/0x400 [ 130.533474][ T5084] ? assign_work+0x39e/0x400 [ 130.538292][ T5084] worker_thread+0xa55/0xfc0 [ 130.542930][ T5084] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 130.548872][ T5084] ? _raw_spin_unlock+0x40/0x40 [ 130.553849][ T5084] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 130.559793][ T5084] kthread+0x2fa/0x390 [ 130.563901][ T5084] ? pr_cont_work+0x560/0x560 [ 130.568700][ T5084] ? kthread_blkcg+0xd0/0xd0 [ 130.573319][ T5084] ret_from_fork+0x48/0x80 [ 130.577778][ T5084] ? kthread_blkcg+0xd0/0xd0 [ 130.582408][ T5084] ret_from_fork_asm+0x11/0x20 [ 130.587223][ T5084] [ 130.599154][ T5869] pwc: recv_control_msg error -71 req 04 val 1000 [ 130.605806][ T5084] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 130.620286][ T5084] Bluetooth: hci2: failed to register connection device [ 130.647833][ T5869] pwc: recv_control_msg error -71 req 04 val 1300 [ 130.654902][ T5869] pwc: recv_control_msg error -71 req 04 val 1400 [ 130.668283][ T5869] pwc: recv_control_msg error -71 req 02 val 2000 [ 130.676631][ T5869] pwc: recv_control_msg error -71 req 02 val 2100 [ 130.687947][ T5869] pwc: recv_control_msg error -71 req 04 val 1500 [ 130.726476][ T5869] pwc: recv_control_msg error -71 req 02 val 2500 [ 130.755178][ T5869] pwc: recv_control_msg error -71 req 02 val 2400 [ 130.796379][ T5869] pwc: recv_control_msg error -71 req 02 val 2600 [ 130.824393][ T5869] pwc: recv_control_msg error -71 req 02 val 2900 [ 130.842431][ T5869] pwc: recv_control_msg error -71 req 02 val 2800 [ 130.880444][ T5869] pwc: recv_control_msg error -71 req 04 val 1100 [ 130.907970][ T5869] pwc: recv_control_msg error -71 req 04 val 1200 [ 131.026656][ T5869] pwc: Registered as video103. [ 131.079419][ T5869] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 131.179424][ T5869] usb 1-1: USB disconnect, device number 2 [ 133.881608][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.888528][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.091076][ T6163] input: syz1 as /devices/virtual/input/input6 [ 134.944642][ T6176] vivid-001: disconnect [ 134.963749][ T6174] vivid-001: reconnect [ 136.883066][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 137.474332][ T6186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.97'. [ 139.848105][ T5099] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 140.047847][ T5099] usb 3-1: Using ep0 maxpacket: 32 [ 140.072431][ T5099] usb 3-1: config 0 interface 0 has no altsetting 0 [ 140.089100][ T5099] usb 3-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 140.118995][ T5099] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.140993][ T5099] usb 3-1: config 0 descriptor?? [ 140.167085][ T5099] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 140.188892][ T5099] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 140.199973][ T5099] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 140.209267][ T5099] usb 3-1: media controller created [ 140.385107][ T5099] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.259825][ T5099] set interface failed [ 141.260404][ T5099] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 141.272250][ T5099] error writing reg: 0xff, val: 0x00 [ 141.402365][ T5099] dvb_usb_mxl111sf: probe of 3-1:0.0 failed with error -22 [ 141.483013][ T6211] qnx6: unable to read the first superblock [ 141.769259][ T5099] usb 3-1: USB disconnect, device number 4 [ 142.365107][ T6221] Bluetooth: MGMT ver 1.22 [ 144.028134][ T5824] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 144.217738][ T5824] usb 1-1: Using ep0 maxpacket: 16 [ 144.232636][ T5824] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.244355][ T5824] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.255877][ T5824] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 144.261408][ T967] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 144.281166][ T5824] usb 1-1: config 0 interface 0 has no altsetting 0 [ 144.290645][ T5824] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 144.303455][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.330929][ T5824] usb 1-1: config 0 descriptor?? [ 144.489356][ T967] usb 4-1: Using ep0 maxpacket: 8 [ 144.502877][ T967] usb 4-1: unable to get BOS descriptor or descriptor too short [ 144.519681][ T967] usb 4-1: config 43 has an invalid interface number: 231 but max is 0 [ 144.529872][ T967] usb 4-1: config 43 has no interface number 0 [ 144.536148][ T967] usb 4-1: config 43 interface 231 has no altsetting 0 [ 144.562401][ T967] usb 4-1: New USB device found, idVendor=2019, idProduct=5303, bcdDevice=f1.f5 [ 144.584756][ T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.603639][ T967] usb 4-1: Product: syz [ 144.613304][ T967] usb 4-1: Manufacturer: syz [ 144.622927][ T967] usb 4-1: SerialNumber: syz [ 144.758389][ T5824] hid (null): report_id 27588 is invalid [ 144.876891][ T967] usb 4-1: USB disconnect, device number 4 [ 144.961843][ T5099] usb 1-1: USB disconnect, device number 3 [ 146.913393][ T6259] netlink: 80 bytes leftover after parsing attributes in process `syz.1.124'. [ 146.932165][ T6259] netlink: 80 bytes leftover after parsing attributes in process `syz.1.124'. [ 148.916843][ T6282] netlink: 36 bytes leftover after parsing attributes in process `syz.1.134'. [ 157.448961][ T6349] netlink: 168 bytes leftover after parsing attributes in process `syz.1.150'. [ 160.893943][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 161.268088][ T5099] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 161.547741][ T5099] usb 2-1: Using ep0 maxpacket: 32 [ 161.571843][ T5099] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.597879][ T5099] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 161.617931][ T5099] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.639304][ T5099] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 161.662542][ T5099] usb 2-1: config 1 interface 1 has no altsetting 0 [ 161.682339][ T5099] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.697884][ T5099] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.706062][ T5099] usb 2-1: Product: syz [ 161.727753][ T5099] usb 2-1: Manufacturer: syz [ 161.732447][ T5099] usb 2-1: SerialNumber: syz [ 162.041732][ T5099] usb 2-1: USB disconnect, device number 2 [ 162.121111][ T5775] udevd[5775]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.860305][ T6388] mmap: syz.3.161 (6388) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 164.548910][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 164.767883][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 164.807192][ T23] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 164.859145][ T23] usb 2-1: config 2 has no interface number 0 [ 164.892855][ T23] usb 2-1: config 2 interface 31 has no altsetting 0 [ 164.962226][ T23] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 165.081282][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.195642][ T23] usb 2-1: Product: syz [ 165.243868][ T23] usb 2-1: Manufacturer: syz [ 165.348178][ T23] usb 2-1: SerialNumber: syz [ 168.136428][ T23] ch9200: probe of 2-1:2.31 failed with error -22 [ 168.185015][ T23] usb 2-1: USB disconnect, device number 3 [ 170.224929][ T6425] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 176.601178][ T6468] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 178.837460][ T5099] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 180.252906][ T6485] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 180.275017][ T6485] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 180.288560][ T6485] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 180.685364][ T6491] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 181.128249][ T5824] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 181.329961][ T5824] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.343844][ T5824] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.365142][ T5824] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 181.377814][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 182.997864][ T5824] usb 4-1: SerialNumber: syz [ 185.764652][ T5824] usb 4-1: 0:2 : does not exist [ 185.852245][ T5824] usb 4-1: USB disconnect, device number 7 [ 186.934613][ T5775] udevd[5775]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.232649][ T28] audit: type=1326 audit(1766727531.889:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.2.202" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f316078f749 code=0x0 [ 188.028053][ T6533] serio: Serial port ptm0 [ 188.234694][ T6538] tmpfs: Unknown parameter 'usrquotauencer' [ 188.665092][ T5099] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 188.889360][ T5099] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 188.891239][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 188.933664][ T5099] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.003326][ T5099] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 189.056043][ T5099] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 189.093526][ T5099] usb 1-1: Manufacturer: syz [ 189.102783][ T5099] usb 1-1: config 0 descriptor?? [ 189.481259][ T6554] syz.1.211 uses obsolete (PF_INET,SOCK_PACKET) [ 191.838915][ T28] audit: type=1326 audit(1766727536.499:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.2.212" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f316078f749 code=0x0 [ 195.664101][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.670979][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.691328][ T5099] igorplugusb 1-1:0.0: incorrect number of endpoints [ 195.839905][ T5099] usb 1-1: USB disconnect, device number 4 [ 199.427776][ T5099] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 199.825851][ T5099] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.852713][ T5099] usb 3-1: config 0 has no interfaces? [ 200.727010][ T5099] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 200.748211][ T5099] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.780688][ T5099] usb 3-1: config 0 descriptor?? [ 202.323297][ T8] usb 3-1: USB disconnect, device number 5 [ 202.654909][ T6601] syz.0.227: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 202.676775][ T6601] CPU: 1 PID: 6601 Comm: syz.0.227 Not tainted syzkaller #0 [ 202.684335][ T6601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.694492][ T6601] Call Trace: [ 202.697817][ T6601] [ 202.700803][ T6601] dump_stack_lvl+0x16c/0x230 [ 202.705640][ T6601] ? show_regs_print_info+0x20/0x20 [ 202.710908][ T6601] ? load_image+0x3b0/0x3b0 [ 202.715659][ T6601] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 202.722135][ T6601] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 202.728816][ T6601] warn_alloc+0x210/0x300 [ 202.733261][ T6601] ? zone_watermark_ok_safe+0x230/0x230 [ 202.738897][ T6601] ? _raw_spin_unlock+0x28/0x40 [ 202.743967][ T6601] ? netlink_rcv_skb+0x216/0x480 [ 202.749104][ T6601] __vmalloc_node_range+0x662/0x1320 [ 202.754414][ T6601] ? __asan_memset+0x22/0x40 [ 202.759042][ T6601] ? free_vm_area+0x50/0x50 [ 202.763572][ T6601] ? kvmalloc_node+0x70/0x180 [ 202.768278][ T6601] ? rcu_is_watching+0x15/0xb0 [ 202.773057][ T6601] ? kvmalloc_node+0x70/0x180 [ 202.777757][ T6601] ? trace_kmalloc+0x1f/0xa0 [ 202.782567][ T6601] kvmalloc_node+0x13f/0x180 [ 202.787170][ T6601] ? hash_ipportnet6_resize+0x28f/0x1e50 [ 202.792827][ T6601] hash_ipportnet6_resize+0x28f/0x1e50 [ 202.798334][ T6601] ? lockdep_hardirqs_on+0x98/0x150 [ 202.803678][ T6601] call_ad+0x43f/0xae0 [ 202.807769][ T6601] ? ip_set_ad+0x930/0x930 [ 202.812388][ T6601] ? __nla_parse+0x40/0x50 [ 202.816835][ T6601] ip_set_ad+0x787/0x930 [ 202.821109][ T6601] ? trace_raw_output_contention_end+0xd0/0xd0 [ 202.827315][ T6601] ? ip_set_dump_done+0x1e0/0x1e0 [ 202.832594][ T6601] ? rcu_is_watching+0x15/0xb0 [ 202.837435][ T6601] nfnetlink_rcv_msg+0xb49/0x1130 [ 202.842485][ T6601] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.848577][ T6601] ? nfnetlink_rcv_msg+0x20e/0x1130 [ 202.854026][ T6601] ? nfnetlink_unbind+0x160/0x160 [ 202.859193][ T6601] ? __dev_queue_xmit+0x1a64/0x35a0 [ 202.864425][ T6601] ? __netlink_deliver_tap+0x5ab/0x830 [ 202.869897][ T6601] ? netlink_deliver_tap+0x19c/0x1b0 [ 202.875300][ T6601] ? netlink_unicast+0x72c/0x8d0 [ 202.880362][ T6601] ? netlink_sendmsg+0x8c1/0xbe0 [ 202.885541][ T6601] ? ____sys_sendmsg+0x5bf/0x950 [ 202.890605][ T6601] ? ___sys_sendmsg+0x220/0x290 [ 202.895474][ T6601] ? __se_sys_sendmsg+0x1a5/0x270 [ 202.900521][ T6601] ? do_syscall_64+0x55/0xb0 [ 202.905224][ T6601] netlink_rcv_skb+0x216/0x480 [ 202.910110][ T6601] ? nfnetlink_unbind+0x160/0x160 [ 202.915157][ T6601] ? netlink_ack+0x1110/0x1110 [ 202.920033][ T6601] ? apparmor_capable+0x137/0x1a0 [ 202.925077][ T6601] ? bpf_lsm_capable+0x9/0x10 [ 202.929878][ T6601] ? security_capable+0x89/0xb0 [ 202.935047][ T6601] nfnetlink_rcv+0x274/0x2180 [ 202.939794][ T6601] ? __local_bh_enable_ip+0x12e/0x1c0 [ 202.945324][ T6601] ? lockdep_hardirqs_on+0x98/0x150 [ 202.950773][ T6601] ? __local_bh_enable_ip+0x12e/0x1c0 [ 202.956253][ T6601] ? _local_bh_enable+0xa0/0xa0 [ 202.961159][ T6601] ? __dev_queue_xmit+0x245/0x35a0 [ 202.966393][ T6601] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 202.971998][ T6601] ? __dev_queue_xmit+0x245/0x35a0 [ 202.977181][ T6601] ? ref_tracker_free+0x634/0x7d0 [ 202.982689][ T6601] ? __copy_skb_header+0xa7/0x550 [ 202.988026][ T6601] ? refcount_inc+0x70/0x70 [ 202.992560][ T6601] ? __skb_clone+0x63/0x790 [ 202.997181][ T6601] ? __skb_clone+0x480/0x790 [ 203.001802][ T6601] ? __netlink_deliver_tap+0x7e8/0x830 [ 203.007642][ T6601] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.012966][ T6601] ? __lock_acquire+0x7c80/0x7c80 [ 203.018340][ T6601] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.023948][ T6601] netlink_unicast+0x751/0x8d0 [ 203.028851][ T6601] netlink_sendmsg+0x8c1/0xbe0 [ 203.033671][ T6601] ? netlink_getsockopt+0x580/0x580 [ 203.038912][ T6601] ? aa_sock_msg_perm+0x94/0x150 [ 203.044170][ T6601] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 203.049634][ T6601] ? security_socket_sendmsg+0x80/0xa0 [ 203.055322][ T6601] ? netlink_getsockopt+0x580/0x580 [ 203.060558][ T6601] ____sys_sendmsg+0x5bf/0x950 [ 203.065466][ T6601] ? __asan_memset+0x22/0x40 [ 203.070191][ T6601] ? __sys_sendmsg_sock+0x30/0x30 [ 203.075283][ T6601] ? __import_iovec+0x5f2/0x860 [ 203.080348][ T6601] ? import_iovec+0x73/0xa0 [ 203.084971][ T6601] ___sys_sendmsg+0x220/0x290 [ 203.089685][ T6601] ? __sys_sendmsg+0x270/0x270 [ 203.095195][ T6601] ? debug_mutex_init+0x38/0x70 [ 203.100363][ T6601] __se_sys_sendmsg+0x1a5/0x270 [ 203.105447][ T6601] ? __x64_sys_sendmsg+0x80/0x80 [ 203.110439][ T6601] ? lockdep_hardirqs_on+0x98/0x150 [ 203.115693][ T6601] do_syscall_64+0x55/0xb0 [ 203.120134][ T6601] ? clear_bhb_loop+0x40/0x90 [ 203.124843][ T6601] ? clear_bhb_loop+0x40/0x90 [ 203.129548][ T6601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.135481][ T6601] RIP: 0033:0x7fe4fd98f749 [ 203.140036][ T6601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.159890][ T6601] RSP: 002b:00007fe4fe82c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.169576][ T6601] RAX: ffffffffffffffda RBX: 00007fe4fdbe5fa0 RCX: 00007fe4fd98f749 [ 203.178384][ T6601] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 203.186838][ T6601] RBP: 00007fe4fda13f91 R08: 0000000000000000 R09: 0000000000000000 [ 203.195544][ T6601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.203652][ T6601] R13: 00007fe4fdbe6038 R14: 00007fe4fdbe5fa0 R15: 00007ffda1bc8f18 [ 203.212095][ T6601] [ 203.215446][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.233113][ T6601] Mem-Info: [ 203.236326][ T6601] active_anon:27860 inactive_anon:0 isolated_anon:0 [ 203.236326][ T6601] active_file:19641 inactive_file:39945 isolated_file:0 [ 203.236326][ T6601] unevictable:768 dirty:1583 writeback:0 [ 203.236326][ T6601] slab_reclaimable:10570 slab_unreclaimable:92656 [ 203.236326][ T6601] mapped:29098 shmem:23469 pagetables:636 [ 203.236326][ T6601] sec_pagetables:0 bounce:0 [ 203.236326][ T6601] kernel_misc_reclaimable:0 [ 203.236326][ T6601] free:1319728 free_pcp:10681 free_cma:0 [ 203.337833][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 203.346974][ T6601] Node 0 active_anon:111460kB inactive_anon:0kB active_file:78584kB inactive_file:159584kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104848kB dirty:6412kB writeback:0kB shmem:92336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11540kB pagetables:2548kB sec_pagetables:0kB all_unreclaimable? no [ 203.396703][ T6601] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 203.427650][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.435091][ T6601] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.514250][ T6601] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 203.537999][ T6601] Node 0 DMA32 free:1373000kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:106416kB inactive_anon:0kB active_file:78584kB inactive_file:158264kB unevictable:1536kB writepending:6412kB present:3129332kB managed:2589640kB mlocked:0kB bounce:0kB free_pcp:23672kB local_pcp:8640kB free_cma:0kB [ 203.568893][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.596298][ T23] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 203.606358][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.629849][ T23] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 203.649578][ T23] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 203.659746][ T6601] lowmem_reserve[]: 0 0 1 1 1 [ 203.674182][ T6601] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 203.701865][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.725420][ T23] usb 2-1: Manufacturer: syz [ 203.733881][ T6601] lowmem_reserve[]: 0 0 0 0 0 [ 203.744710][ T6601] Node 1 Normal free:3890544kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24720kB local_pcp:12032kB free_cma:0kB [ 203.762148][ T23] usb 2-1: config 0 descriptor?? [ 203.830713][ T6601] lowmem_reserve[]: 0 0 0 0 0 [ 203.835650][ T6601] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 203.868229][ T6601] Node 0 DMA32: 5*4kB (M) 10*8kB (UME) 72*16kB (UME) 71*32kB (UME) 28*64kB (UME) 11*128kB (UE) 25*256kB (UM) 47*512kB (ME) 25*1024kB (UME) 14*2048kB (UM) 313*4096kB (M) = 1373508kB [ 203.897591][ T6601] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 203.917561][ T6601] Node 1 Normal: 280*4kB (UME) 56*8kB (UME) 37*16kB (UME) 58*32kB (UME) 15*64kB (UE) 6*128kB (UME) 1*256kB (E) 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3890544kB [ 204.134039][ T6601] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.155733][ T23] igorplugusb 2-1:0.0: incorrect number of endpoints [ 204.173842][ T6601] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.183572][ T6601] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.193470][ T6601] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.202963][ T6601] 78227 total pagecache pages [ 204.207939][ T6601] 0 pages in swap cache [ 204.212242][ T6601] Free swap = 124472kB [ 204.216454][ T6601] Total swap = 124996kB [ 204.220821][ T6601] 2097051 pages RAM [ 204.224781][ T6601] 0 pages HighMem/MovableOnly [ 204.229659][ T6601] 416127 pages reserved [ 204.233960][ T6601] 0 pages cma reserved [ 204.252912][ T23] usb 2-1: USB disconnect, device number 4 [ 206.968813][ T5891] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 207.173151][ T5891] usb 2-1: not running at top speed; connect to a high speed hub [ 207.284610][ T5891] usb 2-1: config 8 has an invalid interface number: 75 but max is 0 [ 207.377834][ T5891] usb 2-1: config 8 has no interface number 0 [ 207.384033][ T5891] usb 2-1: config 8 interface 75 altsetting 12 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 207.602118][ T5891] usb 2-1: config 8 interface 75 has no altsetting 0 [ 207.612640][ T5891] usb 2-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=e2.af [ 207.638838][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.647533][ T5891] usb 2-1: Product: syz [ 207.652660][ T5891] usb 2-1: Manufacturer: syz [ 207.657454][ T5891] usb 2-1: SerialNumber: syz [ 208.529351][ T5891] usb 2-1: USB disconnect, device number 5 [ 212.776574][ T6707] tmpfs: Bad value for 'mpol' [ 212.828904][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 212.835822][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 212.842031][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 212.859209][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 216.527088][ T6729] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 216.534183][ T6729] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.589052][ T6729] vhci_hcd vhci_hcd.0: Device attached [ 216.620106][ T6733] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 216.626823][ T6733] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.669373][ T6733] vhci_hcd vhci_hcd.0: Device attached [ 216.698121][ T6729] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11) [ 216.704816][ T6729] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 216.760869][ T6729] vhci_hcd vhci_hcd.0: Device attached [ 216.772962][ T6733] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(14) [ 216.780265][ T6733] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 216.824136][ T6733] vhci_hcd vhci_hcd.0: Device attached [ 216.829566][ T6729] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(16) [ 216.829623][ T6729] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.834491][ T6729] vhci_hcd vhci_hcd.0: Device attached [ 216.851629][ T6729] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(18) [ 216.851658][ T6729] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 216.851744][ T6729] vhci_hcd vhci_hcd.0: Device attached [ 216.852938][ T6729] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 216.878342][ T8] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 216.888846][ T6729] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 216.912827][ T6729] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(25) [ 216.912857][ T6729] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.912925][ T6729] vhci_hcd vhci_hcd.0: Device attached [ 216.957311][ T6729] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(30) [ 216.957343][ T6729] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 216.957394][ T6729] vhci_hcd vhci_hcd.0: Device attached [ 216.979140][ T6729] vhci_hcd vhci_hcd.0: port 0 already used [ 217.050690][ T6738] vhci_hcd: connection closed [ 217.051752][ T6734] vhci_hcd: connection closed [ 217.052055][ T6740] vhci_hcd: connection closed [ 217.058017][ T6730] vhci_hcd: connection reset by peer [ 217.058714][ T6744] vhci_hcd: connection closed [ 217.059530][ T6746] vhci_hcd: connection closed [ 217.078003][ T6750] vhci_hcd: connection closed [ 217.080320][ T1339] vhci_hcd: stop threads [ 217.081198][ T1339] vhci_hcd: release socket [ 217.081827][ T1339] vhci_hcd: disconnect device [ 217.082131][ T1339] vhci_hcd: stop threads [ 217.082140][ T1339] vhci_hcd: release socket [ 217.082167][ T1339] vhci_hcd: disconnect device [ 217.086972][ T1339] vhci_hcd: stop threads [ 217.357923][ T1339] vhci_hcd: release socket [ 217.367734][ T1339] vhci_hcd: disconnect device [ 217.378110][ T1339] vhci_hcd: stop threads [ 217.382524][ T1339] vhci_hcd: release socket [ 217.398270][ T1339] vhci_hcd: disconnect device [ 217.407722][ T1339] vhci_hcd: stop threads [ 217.412051][ T1339] vhci_hcd: release socket [ 217.428015][ T1339] vhci_hcd: disconnect device [ 217.437911][ T1339] vhci_hcd: stop threads [ 217.442253][ T1339] vhci_hcd: release socket [ 217.458089][ T1339] vhci_hcd: disconnect device [ 217.463419][ T1339] vhci_hcd: stop threads [ 217.477737][ T1339] vhci_hcd: release socket [ 217.487765][ T1339] vhci_hcd: disconnect device [ 217.637939][ T6753] vhci_hcd: connection closed [ 217.639615][ T1314] vhci_hcd: stop threads [ 217.673531][ T1314] vhci_hcd: release socket [ 217.690689][ T1314] vhci_hcd: disconnect device [ 217.893961][ T6764] tipc: Started in network mode [ 217.899570][ T6764] tipc: Node identity 4, cluster identity 4711 [ 217.906338][ T6764] tipc: Node number set to 4 [ 220.880052][ T6786] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 222.186367][ T5891] IPVS: starting estimator thread 0... [ 223.158839][ T8] vhci_hcd: vhci_device speed not set [ 223.773280][ T6787] IPVS: using max 5 ests per chain, 12000 per kthread [ 232.167323][ T5099] usb usb38-port1: attempt power cycle [ 232.174852][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 237.159454][ T5099] usb usb38-port1: unable to enumerate USB device [ 249.373712][ T5084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.392419][ T5084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.404302][ T5084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.438413][ T5084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.476334][ T5084] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 249.488196][ T5084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.608894][ T5772] Bluetooth: hci4: command tx timeout [ 253.688668][ T5772] Bluetooth: hci4: command tx timeout [ 254.479187][ T6835] chnl_net:caif_netlink_parms(): no params data found [ 256.170180][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.176564][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.874281][ T5772] Bluetooth: hci4: command tx timeout [ 261.118060][ T5772] Bluetooth: hci4: command tx timeout [ 261.754618][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.814409][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.839291][ T6835] bridge_slave_0: entered allmulticast mode [ 261.908507][ T6835] bridge_slave_0: entered promiscuous mode [ 261.986316][ T6835] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.039959][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.087909][ T6835] bridge_slave_1: entered allmulticast mode [ 262.159406][ T6835] bridge_slave_1: entered promiscuous mode [ 263.160890][ T6835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.407071][ T6835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.550726][ T6835] team0: Port device team_slave_0 added [ 264.714608][ T6835] team0: Port device team_slave_1 added [ 265.331727][ T1823] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 265.375871][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.439897][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.588311][ T6835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.600843][ T1823] usb 4-1: Using ep0 maxpacket: 8 [ 265.646922][ T1823] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 265.696460][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.709161][ T1823] usb 4-1: config 0 has no interface number 0 [ 265.758420][ T1823] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 265.780821][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.824295][ T1823] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 265.898012][ T1823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.973408][ T6835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.022002][ T1823] usb 4-1: config 0 descriptor?? [ 266.180012][ T1823] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 266.432121][ T1823] usb 4-1: USB disconnect, device number 8 [ 267.623023][ T6835] hsr_slave_0: entered promiscuous mode [ 267.829651][ T6835] hsr_slave_1: entered promiscuous mode [ 268.018391][ T6835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.026241][ T6835] Cannot create hsr debugfs directory [ 278.156808][ T5084] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.177963][ T5084] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.186980][ T5084] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.205897][ T5084] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.222403][ T5084] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.231582][ T5084] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.108761][ T5084] Bluetooth: hci5: command tx timeout [ 285.791533][ T5084] Bluetooth: hci5: command tx timeout [ 287.865490][ T5084] Bluetooth: hci5: command tx timeout [ 289.929782][ T5084] Bluetooth: hci5: command tx timeout [ 292.179172][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.291542][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.314302][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.330374][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.355941][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 292.370212][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.488322][ T5772] Bluetooth: hci0: command tx timeout [ 297.179007][ T5772] Bluetooth: hci0: command tx timeout [ 299.207745][ T5772] Bluetooth: hci0: command tx timeout [ 301.288454][ T5772] Bluetooth: hci0: command tx timeout [ 318.170390][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.176773][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.169897][ T6916] chnl_net:caif_netlink_parms(): no params data found [ 339.764866][ T5084] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.784941][ T5084] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.808906][ T5084] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.835576][ T5084] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.846947][ T5084] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 339.877338][ T5084] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.189995][ T6916] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.177833][ T6916] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.185185][ T6916] bridge_slave_0: entered allmulticast mode [ 342.158573][ T5772] Bluetooth: hci6: command tx timeout [ 342.198416][ T6916] bridge_slave_0: entered promiscuous mode [ 343.171011][ T6916] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.217689][ T5772] Bluetooth: hci6: command tx timeout [ 344.312215][ T6916] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.387926][ T6916] bridge_slave_1: entered allmulticast mode [ 344.459504][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.480310][ T5084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.501291][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.521329][ T6916] bridge_slave_1: entered promiscuous mode [ 344.528378][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.573527][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 344.585864][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.176734][ T6916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.280602][ T6916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.999782][ T5772] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 346.018117][ T5772] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 346.039174][ T5772] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 346.065654][ T5772] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 346.083872][ T5772] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 346.097739][ T5772] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 346.250915][ T5772] Bluetooth: hci6: command tx timeout [ 346.728978][ T5772] Bluetooth: hci3: command tx timeout [ 347.165943][ T6916] team0: Port device team_slave_0 added [ 347.186812][ T6916] team0: Port device team_slave_1 added [ 348.175685][ T5772] Bluetooth: hci7: command tx timeout [ 348.328708][ T5772] Bluetooth: hci6: command tx timeout [ 348.808358][ T5772] Bluetooth: hci3: command tx timeout [ 350.251168][ T5772] Bluetooth: hci7: command tx timeout [ 350.888316][ T5772] Bluetooth: hci3: command tx timeout [ 352.328565][ T5772] Bluetooth: hci7: command tx timeout [ 352.541714][ T5084] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 352.562077][ T5084] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 352.575391][ T5084] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 352.605607][ T5084] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 352.646387][ T5084] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 352.656131][ T5084] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 352.969240][ T5084] Bluetooth: hci3: command tx timeout [ 354.428311][ T5084] Bluetooth: hci7: command tx timeout [ 354.808361][ T5084] Bluetooth: hci8: command tx timeout [ 355.161024][ T6941] chnl_net:caif_netlink_parms(): no params data found [ 355.761937][ T6941] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.792178][ T6941] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.808496][ T6941] bridge_slave_0: entered allmulticast mode [ 355.848288][ T6941] bridge_slave_0: entered promiscuous mode [ 355.889522][ T6941] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.897133][ T6941] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.929462][ T6941] bridge_slave_1: entered allmulticast mode [ 355.972282][ T6941] bridge_slave_1: entered promiscuous mode [ 356.195604][ T6941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.232652][ T6941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.615997][ T6941] team0: Port device team_slave_0 added [ 356.681546][ T6941] team0: Port device team_slave_1 added [ 356.887922][ T5084] Bluetooth: hci8: command tx timeout [ 357.018326][ T6941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.025511][ T6941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.098260][ T6941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.138464][ T6941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.145608][ T6941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.173360][ T6941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.636698][ T6941] hsr_slave_0: entered promiscuous mode [ 357.673097][ T6941] hsr_slave_1: entered promiscuous mode [ 357.700690][ T6941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.718850][ T6941] Cannot create hsr debugfs directory [ 358.968861][ T5084] Bluetooth: hci8: command tx timeout [ 359.249056][ T6941] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 359.286404][ T6941] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 359.374264][ T6941] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 359.429213][ T6941] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 359.853954][ T6941] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.862974][ T6941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.876444][ T6941] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.885858][ T6941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.818396][ T6941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.047979][ T5084] Bluetooth: hci8: command tx timeout [ 361.121267][ T6941] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.188619][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.334994][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.358202][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.385584][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.404584][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 363.413829][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.841697][ T6941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.608962][ T5772] Bluetooth: hci0: command tx timeout [ 366.182367][ T6941] veth0_vlan: entered promiscuous mode [ 366.269685][ T6941] veth1_vlan: entered promiscuous mode [ 366.575366][ T6941] veth0_macvtap: entered promiscuous mode [ 366.644723][ T6941] veth1_macvtap: entered promiscuous mode [ 366.842969][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.872916][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.921331][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.950883][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.985924][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.018091][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.043066][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.081752][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.170948][ T6941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.181879][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.204309][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.226994][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.239920][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.258710][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.290258][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.317000][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.357217][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.399893][ T6941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.474161][ T6941] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.507971][ T6941] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.516951][ T6941] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.547999][ T6941] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.688043][ T5772] Bluetooth: hci0: command tx timeout [ 368.194493][ T1347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.230199][ T1347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.564468][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.591433][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.769149][ T5772] Bluetooth: hci0: command tx timeout [ 371.848672][ T5772] Bluetooth: hci0: command tx timeout [ 374.170455][ T5784] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 374.181432][ T5784] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 374.272653][ T5784] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 374.289274][ T5784] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 374.300801][ T5784] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 374.310146][ T5784] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 375.870331][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 376.172047][ T6977] chnl_net:caif_netlink_parms(): no params data found [ 376.409908][ T5772] Bluetooth: hci9: command tx timeout [ 377.003777][ T6977] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.039524][ T6977] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.068492][ T6977] bridge_slave_0: entered allmulticast mode [ 377.098706][ T6977] bridge_slave_0: entered promiscuous mode [ 377.143375][ T6977] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.159100][ T6977] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.166421][ T6977] bridge_slave_1: entered allmulticast mode [ 377.174095][ T6977] bridge_slave_1: entered promiscuous mode [ 377.445572][ T6977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.514830][ T6977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.964288][ T6977] team0: Port device team_slave_0 added [ 378.011089][ T6977] team0: Port device team_slave_1 added [ 378.182333][ T6977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.197828][ T6977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.272151][ T6977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.329067][ T6977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.336407][ T6977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.428285][ T6977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.493027][ T5772] Bluetooth: hci9: command tx timeout [ 378.900476][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.907144][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.098703][ T6977] hsr_slave_0: entered promiscuous mode [ 379.132341][ T6977] hsr_slave_1: entered promiscuous mode [ 379.150337][ T6977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.159912][ T6977] Cannot create hsr debugfs directory [ 380.573317][ T5772] Bluetooth: hci9: command tx timeout [ 380.792861][ T6977] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 380.844146][ T6977] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 380.941970][ T6977] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 380.987204][ T6977] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 381.176976][ T6977] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.184196][ T6977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.192633][ T6977] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.200565][ T6977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.979379][ T6977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.169258][ T6977] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.648824][ T5772] Bluetooth: hci9: command tx timeout [ 384.216805][ T6977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.183066][ T6977] veth0_vlan: entered promiscuous mode [ 387.461626][ T6977] veth1_vlan: entered promiscuous mode [ 387.949351][ T6977] veth0_macvtap: entered promiscuous mode [ 388.060350][ T6977] veth1_macvtap: entered promiscuous mode [ 388.178950][ T6977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.293359][ T6977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.341236][ T6977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.378083][ T6977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.439142][ T6977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.477870][ T6977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.548743][ T6977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.591639][ T6977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.634591][ T6977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.681717][ T6977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.777158][ T6977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.878369][ T6977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.948125][ T6977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.007909][ T6977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.048932][ T6977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.094370][ T6977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.141556][ T6977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.158611][ T6977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.169149][ T6977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.179157][ T6977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.289783][ T6977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.379343][ T6977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.476139][ T5084] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 389.502960][ T5084] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 389.529595][ T5084] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 389.546765][ T5084] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 389.557984][ T5084] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 389.566676][ T5084] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 389.626149][ T6977] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.758559][ T6977] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.797119][ T6977] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.846350][ T6977] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.716781][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.778025][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.135803][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.157762][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.769605][ T5772] Bluetooth: hci10: command tx timeout [ 393.849809][ T5772] Bluetooth: hci10: command tx timeout [ 395.928874][ T5772] Bluetooth: hci10: command tx timeout [ 398.008493][ T5772] Bluetooth: hci10: command tx timeout [ 401.456076][ T5084] Bluetooth: hci5: command 0x0406 tx timeout [ 413.252845][ T5084] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 413.276643][ T5084] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 413.292295][ T5084] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 413.307258][ T5084] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 413.330120][ T5084] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 413.348597][ T5084] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 415.441250][ T7012] chnl_net:caif_netlink_parms(): no params data found [ 415.528283][ T5084] Bluetooth: hci11: command tx timeout [ 416.186974][ T7012] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.196470][ T7012] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.206858][ T7012] bridge_slave_0: entered allmulticast mode [ 416.237405][ T7012] bridge_slave_0: entered promiscuous mode [ 416.274336][ T7012] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.318728][ T7012] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.327085][ T7012] bridge_slave_1: entered allmulticast mode [ 416.378274][ T7012] bridge_slave_1: entered promiscuous mode [ 416.783972][ T7012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.871597][ T7012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.195643][ T7012] team0: Port device team_slave_0 added [ 417.225909][ T7012] team0: Port device team_slave_1 added [ 417.603826][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.612531][ T5084] Bluetooth: hci11: command tx timeout [ 417.637919][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.700947][ T7012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.752160][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.767955][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.858354][ T7012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.186543][ T7012] hsr_slave_0: entered promiscuous mode [ 418.209808][ T7012] hsr_slave_1: entered promiscuous mode [ 418.229762][ T7012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.253877][ T7012] Cannot create hsr debugfs directory [ 419.591687][ T7012] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.688164][ T5084] Bluetooth: hci11: command tx timeout [ 420.181140][ T7012] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.878602][ T7012] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.426291][ T7012] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.768860][ T5084] Bluetooth: hci11: command tx timeout [ 423.122771][ T7012] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 423.164841][ T7012] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 423.176712][ T7012] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 423.295260][ T7012] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 423.881897][ T7012] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.889699][ T7012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.898231][ T7012] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.908750][ T7012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.178482][ T5772] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 424.189983][ T5772] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 424.207736][ T5772] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 424.311274][ T5772] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 424.326809][ T5772] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 424.345280][ T5772] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 426.185349][ T7032] chnl_net:caif_netlink_parms(): no params data found [ 426.488487][ T5772] Bluetooth: hci12: command tx timeout [ 427.106320][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.138071][ T7032] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.146145][ T7032] bridge_slave_0: entered allmulticast mode [ 427.156101][ T7032] bridge_slave_0: entered promiscuous mode [ 427.168019][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.175202][ T7032] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.183155][ T7032] bridge_slave_1: entered allmulticast mode [ 427.218320][ T7032] bridge_slave_1: entered promiscuous mode [ 427.576873][ T7032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.646187][ T7032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.177865][ T7032] team0: Port device team_slave_0 added [ 428.186936][ T7032] team0: Port device team_slave_1 added [ 428.568581][ T5772] Bluetooth: hci12: command tx timeout [ 428.628660][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.635812][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.724992][ T7032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.788803][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.795979][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.877891][ T7032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.186508][ T7032] hsr_slave_0: entered promiscuous mode [ 429.225025][ T7032] hsr_slave_1: entered promiscuous mode [ 429.262464][ T7032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.277934][ T7032] Cannot create hsr debugfs directory [ 430.648295][ T5772] Bluetooth: hci12: command tx timeout [ 431.166643][ T7032] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 431.177804][ T7032] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 431.331972][ T7032] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 431.415433][ T7032] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 431.985641][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.993683][ T7032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.002308][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.010039][ T7032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.728180][ T5772] Bluetooth: hci12: command tx timeout [ 433.016096][ T7032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.169514][ T7032] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.568624][ T29] INFO: task dhcpcd:5434 blocked for more than 143 seconds. [ 434.577121][ T29] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 434.674091][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.737866][ T29] task:dhcpcd state:D stack:24688 pid:5434 ppid:1 flags:0x00004002 [ 434.747404][ T29] Call Trace: [ 434.838331][ T29] [ 434.841567][ T29] __schedule+0x14d2/0x44d0 [ 434.846385][ T29] ? ____sys_sendmsg+0x5bf/0x950 [ 434.935702][ T29] ? asan.module_dtor+0x20/0x20 [ 434.968571][ T29] ? __mutex_lock+0x6b2/0xcc0 [ 434.976993][ T29] ? __mutex_trylock_common+0x84/0x250 [ 435.044759][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 435.129085][ T29] schedule+0xbd/0x170 [ 435.133491][ T29] schedule_preempt_disabled+0x13/0x20 [ 435.228106][ T29] __mutex_lock+0x6b7/0xcc0 [ 435.232927][ T29] ? __mutex_lock+0x4e8/0xcc0 [ 435.328045][ T29] ? netlink_dump+0x71f/0xde0 [ 435.333058][ T29] ? mutex_lock_nested+0x20/0x20 [ 435.459591][ T29] ? __build_skb_around+0x255/0x3d0 [ 435.465086][ T29] ? __alloc_skb+0x1b2/0x2c0 [ 435.568418][ T29] netlink_dump+0x71f/0xde0 [ 435.573361][ T29] ? netlink_lookup+0x200/0x200 [ 435.700414][ T29] ? netlink_autobind+0x300/0x300 [ 435.705832][ T29] ? netlink_lookup+0x30/0x200 [ 435.798011][ T29] ? netlink_lookup+0x30/0x200 [ 435.803216][ T29] __netlink_dump_start+0x5f1/0x810 [ 435.888026][ T29] rtnetlink_rcv_msg+0xba1/0xf10 [ 435.893295][ T29] ? inet_rtm_delroute+0x2e0/0x2e0 [ 435.998581][ T29] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 436.004005][ T29] ? rtnetlink_bind+0x80/0x80 [ 436.097998][ T29] ? mark_lock+0x94/0x320 [ 436.159957][ T29] ? __lock_acquire+0x1260/0x7c80 [ 436.165085][ T29] ? __kernel_text_address+0xd/0x30 [ 436.224205][ T29] ? mark_lock+0x94/0x320 [ 436.261521][ T29] ? mark_lock+0x94/0x320 [ 436.266135][ T29] ? __lock_acquire+0x1260/0x7c80 [ 436.318539][ T29] ? kmalloc_reserve+0x95/0x240 [ 436.323766][ T29] ? verify_lock_unused+0x140/0x140 [ 436.361219][ T29] ? inet_rtm_delroute+0x2e0/0x2e0 [ 436.366753][ T29] netlink_rcv_skb+0x216/0x480 [ 436.418495][ T29] ? rtnetlink_bind+0x80/0x80 [ 436.423579][ T29] ? netlink_ack+0x1110/0x1110 [ 436.474778][ T29] ? __lock_acquire+0x7c80/0x7c80 [ 436.488769][ T29] ? net_generic+0x1e/0x240 [ 436.493578][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 436.537381][ T29] netlink_unicast+0x751/0x8d0 [ 436.542635][ T29] netlink_sendmsg+0x8c1/0xbe0 [ 436.597768][ T29] ? netlink_getsockopt+0x580/0x580 [ 436.603271][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 436.648075][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 436.653644][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 436.695647][ T29] ? netlink_getsockopt+0x580/0x580 [ 436.727952][ T29] ____sys_sendmsg+0x5bf/0x950 [ 436.733119][ T29] ? __asan_memset+0x22/0x40 [ 436.779019][ T29] ? __sys_sendmsg_sock+0x30/0x30 [ 436.784336][ T29] ? __import_iovec+0x5f2/0x860 [ 436.837677][ T29] ? import_iovec+0x73/0xa0 [ 436.842522][ T29] ___sys_sendmsg+0x220/0x290 [ 436.847481][ T29] ? __sys_sendmsg+0x270/0x270 [ 436.882816][ T29] ? rcu_is_watching+0x15/0xb0 [ 436.930895][ T29] __se_sys_sendmsg+0x1a5/0x270 [ 436.936054][ T29] ? __bpf_trace_rseq_ip_fixup+0x1f0/0x1f0 [ 436.988030][ T29] ? __x64_sys_sendmsg+0x80/0x80 [ 436.993336][ T29] ? __secure_computing+0x111/0x2f0 [ 437.048184][ T29] do_syscall_64+0x55/0xb0 [ 437.052893][ T29] ? clear_bhb_loop+0x40/0x90 [ 437.077709][ T29] ? clear_bhb_loop+0x40/0x90 [ 437.082671][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.140774][ T29] RIP: 0033:0x7f13d9da2407 [ 437.145489][ T29] RSP: 002b:00007fff5b343190 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 437.176000][ T29] RAX: ffffffffffffffda RBX: 00007f13d9d18740 RCX: 00007f13d9da2407 [ 437.187657][ T29] RDX: 0000000000000000 RSI: 00007fff5b343210 RDI: 000000000000000c [ 437.196042][ T29] RBP: 00007fff5b347430 R08: 0000000000000000 R09: 0000000000000000 [ 437.274403][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00005623c9780c60 [ 437.307947][ T29] R13: 000000000000000c R14: 00007fff5b3473f0 R15: 00007fff5b347430 [ 437.316242][ T29] [ 437.368658][ T29] INFO: task syz-executor:6835 blocked for more than 146 seconds. [ 437.376673][ T29] Not tainted syzkaller #0 [ 437.457692][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 437.466684][ T29] task:syz-executor state:D stack:22280 pid:6835 ppid:1 flags:0x00004004 [ 437.567874][ T29] Call Trace: [ 437.571377][ T29] [ 437.574447][ T29] __schedule+0x14d2/0x44d0 [ 437.621318][ T29] ? asan.module_dtor+0x20/0x20 [ 437.626501][ T29] ? __mutex_lock+0x6b2/0xcc0 [ 437.688693][ T29] ? __mutex_trylock_common+0x84/0x250 [ 437.694578][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 437.768284][ T29] schedule+0xbd/0x170 [ 437.772837][ T29] schedule_preempt_disabled+0x13/0x20 [ 437.838573][ T29] __mutex_lock+0x6b7/0xcc0 [ 437.878376][ T29] ? __mutex_lock+0x4e8/0xcc0 [ 437.883365][ T29] ? rtnetlink_rcv_msg+0x76f/0xf10 [ 437.927721][ T29] ? mutex_lock_nested+0x20/0x20 [ 437.932999][ T29] rtnetlink_rcv_msg+0x76f/0xf10 [ 437.992146][ T29] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 438.028746][ T29] ? rtnetlink_bind+0x80/0x80 [ 438.033697][ T29] ? mark_lock+0x94/0x320 [ 438.125067][ T29] ? __lock_acquire+0x1260/0x7c80 [ 438.140886][ T29] ? __kernel_text_address+0xd/0x30 [ 438.176051][ T29] ? mark_lock+0x94/0x320 [ 438.191543][ T29] ? mark_lock+0x94/0x320 [ 438.196130][ T29] ? __lock_acquire+0x1260/0x7c80 [ 438.220955][ T29] ? kmalloc_reserve+0x95/0x240 [ 438.226117][ T29] ? verify_lock_unused+0x140/0x140 [ 438.275095][ T29] netlink_rcv_skb+0x216/0x480 [ 438.305109][ T29] ? rtnetlink_bind+0x80/0x80 [ 438.322511][ T29] ? netlink_ack+0x1110/0x1110 [ 438.357893][ T29] ? __lock_acquire+0x7c80/0x7c80 [ 438.363194][ T29] ? net_generic+0x1e/0x240 [ 438.397748][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 438.403344][ T29] netlink_unicast+0x751/0x8d0 [ 438.448208][ T29] netlink_sendmsg+0x8c1/0xbe0 [ 438.453283][ T29] ? netlink_getsockopt+0x580/0x580 [ 438.521982][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 438.527287][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 438.571351][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 438.577224][ T29] __sys_sendto+0x46a/0x620 [ 438.609478][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 438.615281][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 438.681659][ T29] ? lock_chain_count+0x20/0x20 [ 438.686849][ T29] __x64_sys_sendto+0xde/0xf0 [ 438.721188][ T29] do_syscall_64+0x55/0xb0 [ 438.725919][ T29] ? clear_bhb_loop+0x40/0x90 [ 438.777890][ T29] ? clear_bhb_loop+0x40/0x90 [ 438.782882][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.831476][ T29] RIP: 0033:0x7f203d9915dc [ 438.836166][ T29] RSP: 002b:00007ffde1fcccc0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 438.883569][ T29] RAX: ffffffffffffffda RBX: 00007f203e714620 RCX: 00007f203d9915dc [ 438.995719][ T29] RDX: 0000000000000054 RSI: 00007f203e714670 RDI: 0000000000000003 [ 439.038083][ T29] RBP: 0000000000000000 R08: 00007ffde1fccd14 R09: 000000000000000c [ 439.046297][ T29] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 439.107966][ T29] R13: 0000000000000000 R14: 00007f203e714670 R15: 0000000000000000 [ 439.116249][ T29] [ 439.158463][ T29] INFO: task syz-executor:6894 blocked for more than 147 seconds. [ 439.166430][ T29] Not tainted syzkaller #0 [ 439.172729][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 439.181539][ T29] task:syz-executor state:D stack:23496 pid:6894 ppid:1 flags:0x00004004 [ 439.337234][ T29] Call Trace: [ 439.358289][ T29] [ 439.361444][ T29] __schedule+0x14d2/0x44d0 [ 439.366249][ T29] ? asan.module_dtor+0x20/0x20 [ 439.428176][ T29] ? __mutex_lock+0x6b2/0xcc0 [ 439.433137][ T29] ? __mutex_trylock_common+0x84/0x250 [ 439.483988][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 439.521611][ T29] schedule+0xbd/0x170 [ 439.526160][ T29] schedule_preempt_disabled+0x13/0x20 [ 439.560878][ T29] __mutex_lock+0x6b7/0xcc0 [ 439.565673][ T29] ? __mutex_lock+0x4e8/0xcc0 [ 439.608207][ T29] ? rtnetlink_rcv_msg+0x76f/0xf10 [ 439.613594][ T29] ? mutex_lock_nested+0x20/0x20 [ 439.657869][ T29] rtnetlink_rcv_msg+0x76f/0xf10 [ 439.663094][ T29] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 439.717837][ T29] ? rtnetlink_bind+0x80/0x80 [ 439.722783][ T29] ? mark_lock+0x94/0x320 [ 439.727327][ T29] ? __lock_acquire+0x1260/0x7c80 [ 439.777598][ T29] ? __kernel_text_address+0xd/0x30 [ 439.783133][ T29] ? mark_lock+0x94/0x320 [ 439.838325][ T29] ? mark_lock+0x94/0x320 [ 439.843033][ T29] ? __lock_acquire+0x1260/0x7c80 [ 439.893740][ T29] ? kmalloc_reserve+0x95/0x240 [ 439.921911][ T29] ? verify_lock_unused+0x140/0x140 [ 439.927442][ T29] netlink_rcv_skb+0x216/0x480 [ 439.959221][ T29] ? rtnetlink_bind+0x80/0x80 [ 439.964330][ T29] ? netlink_ack+0x1110/0x1110 [ 440.022529][ T29] ? __lock_acquire+0x7c80/0x7c80 [ 440.035648][ T29] ? net_generic+0x1e/0x240 [ 440.057880][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 440.063382][ T29] netlink_unicast+0x751/0x8d0 [ 440.117691][ T29] netlink_sendmsg+0x8c1/0xbe0 [ 440.122763][ T29] ? netlink_getsockopt+0x580/0x580 [ 440.157595][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 440.162622][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 440.187304][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 440.205809][ T29] __sys_sendto+0x46a/0x620 [ 440.238134][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 440.243918][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 440.277642][ T29] ? lock_chain_count+0x20/0x20 [ 440.282803][ T29] __x64_sys_sendto+0xde/0xf0 [ 440.331777][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.338992][ T29] do_syscall_64+0x55/0xb0 [ 440.343610][ T29] ? clear_bhb_loop+0x40/0x90 [ 440.350657][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.398117][ T29] ? clear_bhb_loop+0x40/0x90 [ 440.457887][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.464063][ T29] RIP: 0033:0x7fb66f1915dc [ 440.495342][ T29] RSP: 002b:00007ffdbf1a17f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 440.534513][ T29] RAX: ffffffffffffffda RBX: 00007fb66ff14620 RCX: 00007fb66f1915dc [ 440.557813][ T29] RDX: 000000000000002c RSI: 00007fb66ff14670 RDI: 0000000000000003 [ 440.566172][ T29] RBP: 0000000000000000 R08: 00007ffdbf1a1844 R09: 000000000000000c [ 440.613581][ T29] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 440.645177][ T29] R13: 0000000000000000 R14: 00007fb66ff14670 R15: 0000000000000000 [ 440.667949][ T29] [ 440.683010][ T29] [ 440.683010][ T29] Showing all locks held in the system: [ 440.722378][ T29] 3 locks held by kworker/u4:0/11: [ 440.737606][ T29] #0: ffff888017871538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 440.777886][ T29] #1: ffffc90000107d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 440.807942][ T29] #2: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 440.848200][ T29] 3 locks held by kworker/1:1/27: [ 440.853441][ T29] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 440.913176][ T29] #1: ffffc90000a2fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 440.947870][ T29] #2: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 440.973613][ T29] 1 lock held by khungtaskd/29: [ 440.998374][ T29] #0: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 441.038927][ T29] 3 locks held by kworker/u4:2/42: [ 441.044244][ T29] #0: ffff88802c1bf538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 441.078606][ T29] #1: ffffc90000b2fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 441.129318][ T29] #2: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x14e0 [ 441.167923][ T29] 3 locks held by kworker/0:2/967: [ 441.173477][ T29] 3 locks held by kworker/u4:10/1339: [ 441.181580][ T29] 2 locks held by dhcpcd/5434: [ 441.186445][ T29] #0: ffff888019a84690 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x810 [ 441.215365][ T29] #1: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0x71f/0xde0 [ 441.256050][ T29] 2 locks held by getty/5532: [ 441.277638][ T29] #0: ffff88814ce250a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 441.297693][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 441.341730][ T29] 3 locks held by kworker/0:5/6162: [ 441.347151][ T29] 2 locks held by syz.1.282/6784: [ 441.377758][ T29] 1 lock held by syz.2.305/6834: [ 441.382911][ T29] 1 lock held by syz-executor/6835: [ 441.407912][ T29] #0: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 441.437808][ T29] 1 lock held by syz-executor/6894: [ 441.443216][ T29] #0: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 441.487882][ T29] 1 lock held by syz-executor/6916: [ 441.493293][ T29] #0: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 441.527323][ T29] 1 lock held by syz.0.326/6920: [ 441.544739][ T29] #0: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 441.571351][ T29] 1 lock held by syz-executor/6931: [ 441.576754][ T29] #0: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 441.610048][ T29] 1 lock held by syz-executor/6936: [ 441.615472][ T29] #0: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 441.657916][ T29] 1 lock held by syz-executor/6938: [ 441.663326][ T29] #0: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 441.697989][ T29] 1 lock held by syz-executor/6941: [ 441.703408][ T29] #0: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 441.761590][ T29] 1 lock held by syz-executor/6964: [ 441.767014][ T29] #0: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 441.798097][ T29] 1 lock held by syz-executor/6977: [ 441.803520][ T29] #0: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 441.860085][ T29] 1 lock held by syz-executor/7005: [ 441.865510][ T29] #0: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 441.907970][ T29] 1 lock held by syz-executor/7012: [ 441.913416][ T29] #0: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 441.961263][ T29] 2 locks held by kworker/1:2/7023: [ 441.966699][ T29] #0: ffff888017872538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 442.012922][ T29] #1: ffffc900032e7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 442.047375][ T29] 5 locks held by syz-executor/7032: [ 442.067960][ T29] #0: ffff8880222f4e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x212/0x510 [ 442.091733][ T29] #1: ffff8880222f40b8 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x4c9/0xfb0 [ 442.134003][ T29] #2: ffffffff8e1225c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa1/0x220 [ 442.166626][ T29] #3: ffff8880463d1338 (&conn->lock#2){+.+.}-{3:3}, at: l2cap_conn_del+0x70/0x660 [ 442.176347][ T29] #4: ffffffff8cd358f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x448/0x830 [ 442.187418][ T29] [ 442.339913][ T29] ============================================= [ 442.339913][ T29] [ 442.390061][ T29] NMI backtrace for cpu 1 [ 442.394559][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 442.401870][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 442.412064][ T29] Call Trace: [ 442.415475][ T29] [ 442.418512][ T29] dump_stack_lvl+0x16c/0x230 [ 442.423404][ T29] ? show_regs_print_info+0x20/0x20 [ 442.428804][ T29] ? load_image+0x3b0/0x3b0 [ 442.433534][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 442.438735][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 442.445217][ T29] ? _printk+0xd0/0x110 [ 442.449554][ T29] ? load_image+0x3b0/0x3b0 [ 442.454324][ T29] ? load_image+0x3b0/0x3b0 [ 442.459048][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 442.465341][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 442.471534][ T29] watchdog+0xf41/0xf80 [ 442.475886][ T29] ? watchdog+0x1e1/0xf80 [ 442.480430][ T29] kthread+0x2fa/0x390 [ 442.484668][ T29] ? hungtask_pm_notify+0x90/0x90 [ 442.489885][ T29] ? kthread_blkcg+0xd0/0xd0 [ 442.494712][ T29] ret_from_fork+0x48/0x80 [ 442.499312][ T29] ? kthread_blkcg+0xd0/0xd0 [ 442.504069][ T29] ret_from_fork_asm+0x11/0x20 [ 442.509086][ T29] [ 442.517484][ T29] Sending NMI from CPU 1 to CPUs 0: [ 442.523632][ C0] NMI backtrace for cpu 0 [ 442.523643][ C0] CPU: 0 PID: 6784 Comm: syz.1.282 Not tainted syzkaller #0 [ 442.523659][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 442.523669][ C0] RIP: 0010:multiq3_attach+0x686/0x940 [ 442.523695][ C0] Code: 00 74 08 48 89 df e8 b9 a7 db f9 8b 13 83 c2 0e b0 38 ee 41 80 3c 2c 00 74 08 48 89 df e8 a2 a7 db f9 8b 13 83 c2 0e b0 02 ee <41> 0f b6 04 2e 84 c0 75 25 48 8b 04 24 44 3b 38 7d 35 e8 93 39 84 [ 442.523709][ C0] RSP: 0018:ffffc90003697ab8 EFLAGS: 00000202 [ 442.523724][ C0] RAX: 0000000000000002 RBX: ffff88802b8559d0 RCX: 0000000000080000 [ 442.523735][ C0] RDX: 000000000000200e RSI: 000000000007ffff RDI: 0000000000080000 [ 442.523745][ C0] RBP: dffffc0000000000 R08: 0000000000000040 R09: 1ffffffff21b28b0 [ 442.523756][ C0] R10: dffffc0000000000 R11: fffffbfff21b28b1 R12: 1ffff1100570ab3a [ 442.523774][ C0] R13: 00000000017eef40 R14: 1ffff11005d80a92 R15: 00000000002fdde9 [ 442.523785][ C0] FS: 00007f06d9f7e6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 442.523804][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 442.523815][ C0] CR2: 00007ffd0d641f38 CR3: 000000004fb1a000 CR4: 00000000003506f0 [ 442.523829][ C0] Call Trace: [ 442.523836][ C0] [ 442.523846][ C0] comedi_device_attach+0x518/0x710 [ 442.523868][ C0] comedi_unlocked_ioctl+0x606/0xfe0 [ 442.523897][ C0] ? tomoyo_path_number_perm+0x477/0x590 [ 442.523922][ C0] ? comedi_poll+0x8c0/0x8c0 [ 442.523973][ C0] ? __fget_files+0x28/0x4d0 [ 442.524001][ C0] ? bpf_lsm_file_ioctl+0x9/0x10 [ 442.524016][ C0] ? security_file_ioctl+0x80/0xa0 [ 442.524039][ C0] ? comedi_poll+0x8c0/0x8c0 [ 442.524072][ C0] __se_sys_ioctl+0xfd/0x170 [ 442.524093][ C0] do_syscall_64+0x55/0xb0 [ 442.524109][ C0] ? clear_bhb_loop+0x40/0x90 [ 442.524146][ C0] ? clear_bhb_loop+0x40/0x90 [ 442.524167][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.524186][ C0] RIP: 0033:0x7f06d918f749 [ 442.524199][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.524211][ C0] RSP: 002b:00007f06d9f7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.524227][ C0] RAX: ffffffffffffffda RBX: 00007f06d93e6180 RCX: 00007f06d918f749 [ 442.524238][ C0] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000005 [ 442.524248][ C0] RBP: 00007f06d9213f91 R08: 0000000000000000 R09: 0000000000000000 [ 442.524258][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.524267][ C0] R13: 00007f06d93e6218 R14: 00007f06d93e6180 R15: 00007fff2aeba1a8 [ 442.524288][ C0] [ 443.178391][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 443.185438][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 443.192790][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 443.202990][ T29] Call Trace: [ 443.206389][ T29] [ 443.209436][ T29] dump_stack_lvl+0x16c/0x230 [ 443.214343][ T29] ? show_regs_print_info+0x20/0x20 [ 443.219730][ T29] ? load_image+0x3b0/0x3b0 [ 443.224438][ T29] panic+0x2c0/0x710 [ 443.228520][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 443.234351][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 443.239016][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 443.244735][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 443.251060][ T29] watchdog+0xf80/0xf80 [ 443.255373][ T29] ? watchdog+0x1e1/0xf80 [ 443.259879][ T29] kthread+0x2fa/0x390 [ 443.264109][ T29] ? hungtask_pm_notify+0x90/0x90 [ 443.269318][ T29] ? kthread_blkcg+0xd0/0xd0 [ 443.274052][ T29] ret_from_fork+0x48/0x80 [ 443.278618][ T29] ? kthread_blkcg+0xd0/0xd0 [ 443.283344][ T29] ret_from_fork_asm+0x11/0x20 [ 443.288362][ T29] [ 443.292118][ T29] Kernel Offset: disabled [ 443.296461][ T29] Rebooting in 86400 seconds..