last executing test programs: 2m24.298018236s ago: executing program 3 (id=211): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}], 0x1, 0x40088d4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @empty, 0x9}}}, 0x90) 2m23.946933778s ago: executing program 3 (id=216): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4, 0x3fff}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000001}, 0x40) 2m23.626918765s ago: executing program 3 (id=221): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_mtu(r5, 0x0, 0xa, 0x0, 0x0) listen(r0, 0x1000) r6 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) read$FUSE(r6, &(0x7f0000005040)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) 2m21.328841357s ago: executing program 4 (id=229): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000880)={'fscrypt:', @auto=[0x63, 0x39, 0x64, 0x65, 0x64, 0x66, 0x36, 0x38, 0x36, 0x62, 0x37, 0x31, 0x8, 0x34, 0x62, 0x34]}, &(0x7f00000008c0)={0x0, "83be91e3956f7eeab185c5532a737cbf86a019abc3c6c5b882e77c6b66c6d809ae8c0052697af3e28ee0d067c73f9e8f2c1af82447d244584968c7ffb982e9b4", 0x1e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x54, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000480)={'fscrypt:', @desc3}, &(0x7f0000000780)={0x0, "fe1b5c4bf346207d87478c27b86bb51289055bc124bb60432572800f18aa4fd90aabed9d0fe61c88c11301a15ee3f0f5cdf737eba09fed73da1807ecb5b00d17", 0x24}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x62, 0x37, 0x30, 0x38, 0x30, 0x30, 0x30, 0x62, 0x30, 0x42f52c3b5ed60cc6, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x27}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x66, 0x32, 0x64, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778999aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x8, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x15}, 0x48, r0) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="f291c81557", 0x5, r0) 2m20.544198883s ago: executing program 2 (id=230): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000020000103000000000000000002000000000000071f000000080001006401010108000b000d0000000800"], 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x44890) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010102}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 2m20.439735515s ago: executing program 1 (id=231): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=ANY=[], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x108, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcd, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2m20.39332074s ago: executing program 3 (id=232): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001100)='-v', 0x2) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) write$9p(r2, &(0x7f00000018c0)="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", 0x411) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x411) close_range(r0, 0xffffffffffffffff, 0x0) 2m20.165566827s ago: executing program 1 (id=234): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) io_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x44, 0x1, 0x7fffc, 0x25dfdbfd, {0x1}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40080d4) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) unshare(0xe060400) 2m20.164279902s ago: executing program 4 (id=235): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2m19.846192797s ago: executing program 2 (id=236): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0xffffff16, 0xfe7e) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2m19.746121848s ago: executing program 0 (id=237): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r2]) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x30004ca1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="08000000001a0000000000000000000000000000b5dc4c8a2eda9512ce39f419674234ca18dad21e92e283bc2ed71d7a236a4c3c900607a059d823871483607f0000000000000079a083ed3893d8413c32da8573a4cc9b2ae18d6e20a2a8607ad7", @ANYRES32=r3, @ANYRESHEX=r4, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000280), &(0x7f0000000500)}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r6, 0x0) unshare(0x22020400) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) 2m18.995363805s ago: executing program 4 (id=238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) 2m18.836051916s ago: executing program 4 (id=239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2m18.75039268s ago: executing program 1 (id=240): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "de00", 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1001, 0x0, 0x4, {[@window={0x3, 0x3, 0x10}]}}}}}}}}, 0x0) 2m18.463380799s ago: executing program 2 (id=241): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @empty, 0x9}}}, 0x90) 2m18.458025591s ago: executing program 4 (id=242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0) 2m18.360791638s ago: executing program 0 (id=243): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000804}, 0x2400c000) 2m18.25130104s ago: executing program 2 (id=244): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=ANY=[], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x108, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcd, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2m18.196082505s ago: executing program 4 (id=245): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='*:', 0x2) 2m18.100532732s ago: executing program 0 (id=246): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/1024, 0x400, 0x4a23) 2m17.992406566s ago: executing program 2 (id=247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x64, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x36, 0xe, {{{}, {}, @broadcast, @device_a, @random="0d1792a4efc1", {0x0, 0x81}}, 0xfffffffffffffffc, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x4, 0x51, 0x1}}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0x1, 0x41}}, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xfffffffd}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m17.884253842s ago: executing program 0 (id=248): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000400), 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000000c0)='S', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000000040), &(0x7f00000003c0)=0xffffffe2) 2m17.751430288s ago: executing program 2 (id=249): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)=""/154, 0x9a}, {&(0x7f00000008c0)=""/54, 0x36}, {&(0x7f0000005780)=""/4093, 0xffd}, {&(0x7f0000000340)=""/152, 0x98}, {&(0x7f00000000c0)=""/109, 0x6d}, {&(0x7f0000000440)=""/127, 0x7f}], 0x6}, 0x1}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x0, 0x0) 2m17.686062345s ago: executing program 1 (id=250): r0 = socket(0x10, 0x803, 0x8) ioctl$sock_ifreq(r0, 0x8995, 0x0) 2m17.543244755s ago: executing program 0 (id=251): r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_SOCKET={0x2d, 0x8, 0x0, 0x9, 0xfffffffffffffbff, 0x0, 0x7e8, 0x0, 0x7920d2c298655fb7, {0x0, 0x0, 0x4}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2m17.520063162s ago: executing program 3 (id=252): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000200)={0x1, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffff0}}, {{0xa, 0x4000, 0xa, @private1}}}, 0x108) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f00002e4000/0x2000)=nil, 0x2000, 0xa) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00005b2000/0x4000)=nil) mremap(&(0x7f000046e000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f00001b8000/0x1000)=nil) 2m17.329816321s ago: executing program 1 (id=253): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') unshare(0x2040400) setns(r0, 0x0) 2m17.21495338s ago: executing program 0 (id=254): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x50) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r2, 0xffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x1, 0x0, 0xffffffff}, 0x1c) close(0x3) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000140)='log\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f00000001c0), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x8, @remote, 0x101}, 0x1c) syz_usb_connect$uac3(0x0, 0x9f, &(0x7f00000002c0)=ANY=[], 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) 2m17.075070048s ago: executing program 1 (id=255): r0 = syz_ublk_setup_io_uring(0x11c6, &(0x7f0000000000)={0x0, 0x56a3, 0x1, 0x3, 0x374}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) syz_ublk_setup_io_uring(0x73c1, &(0x7f0000000080)={0x0, 0x5094, 0x20, 0x3, 0x297, 0x0, r0}, 0x0, &(0x7f0000002300), &(0x7f0000000180)) 2m17.074741528s ago: executing program 3 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000804}, 0x2400c000) 0s ago: executing program 32 (id=254): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x50) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r2, 0xffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x1, 0x0, 0xffffffff}, 0x1c) close(0x3) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000140)='log\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f00000001c0), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x8, @remote, 0x101}, 0x1c) syz_usb_connect$uac3(0x0, 0x9f, &(0x7f00000002c0)=ANY=[], 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts. [ 87.180613][ T9] cfg80211: failed to load regulatory.db [ 88.981717][ T5584] cgroup: Unknown subsys name 'net' [ 89.225834][ T5584] cgroup: Unknown subsys name 'cpuset' [ 89.277653][ T5584] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.213017][ T5584] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.448052][ T4914] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.455229][ T4914] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.458290][ T4914] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.463114][ T4914] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.463943][ T4914] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.520954][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.528848][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.552516][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.559831][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.569047][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.569756][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.584476][ T4914] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.591120][ T4914] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.598321][ T4914] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.599414][ T4914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.600847][ T4914] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.627173][ T4914] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.634368][ T4914] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.637305][ T4914] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.639280][ T4914] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.658016][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.662326][ T4914] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.663393][ T4914] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.671379][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.703706][ T4914] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.557974][ T5609] Bluetooth: hci2: command tx timeout [ 97.647144][ T5609] Bluetooth: hci0: command tx timeout [ 97.727221][ T4914] Bluetooth: hci1: command tx timeout [ 97.727460][ T5609] Bluetooth: hci4: command tx timeout [ 97.797755][ T5609] Bluetooth: hci3: command tx timeout [ 98.217296][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.218480][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.218593][ T5605] bridge_slave_0: entered allmulticast mode [ 98.220374][ T5605] bridge_slave_0: entered promiscuous mode [ 98.275811][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.275968][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.276113][ T5605] bridge_slave_1: entered allmulticast mode [ 98.299455][ T5605] bridge_slave_1: entered promiscuous mode [ 98.398378][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.398625][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.398797][ T5607] bridge_slave_0: entered allmulticast mode [ 98.400698][ T5607] bridge_slave_0: entered promiscuous mode [ 98.455846][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.456117][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.456275][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.456446][ T5607] bridge_slave_1: entered allmulticast mode [ 98.461657][ T5607] bridge_slave_1: entered promiscuous mode [ 98.516220][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.533733][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.533828][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.533937][ T5604] bridge_slave_0: entered allmulticast mode [ 98.535475][ T5604] bridge_slave_0: entered promiscuous mode [ 98.557250][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.557392][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.557603][ T5603] bridge_slave_0: entered allmulticast mode [ 98.562883][ T5603] bridge_slave_0: entered promiscuous mode [ 98.566902][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.570653][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.571596][ T5606] bridge_slave_0: entered allmulticast mode [ 98.575794][ T5606] bridge_slave_0: entered promiscuous mode [ 98.672453][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.672595][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.672766][ T5604] bridge_slave_1: entered allmulticast mode [ 98.674918][ T5604] bridge_slave_1: entered promiscuous mode [ 98.676091][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.676211][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.676514][ T5603] bridge_slave_1: entered allmulticast mode [ 98.681908][ T5603] bridge_slave_1: entered promiscuous mode [ 98.683263][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.683382][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.683936][ T5606] bridge_slave_1: entered allmulticast mode [ 98.688659][ T5606] bridge_slave_1: entered promiscuous mode [ 98.717340][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.778389][ T5605] team0: Port device team_slave_0 added [ 98.781260][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.831706][ T5605] team0: Port device team_slave_1 added [ 98.851153][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.854517][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.876613][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.908873][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.911445][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.913553][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.948672][ T5607] team0: Port device team_slave_0 added [ 98.989495][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.989510][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.989526][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.993119][ T5607] team0: Port device team_slave_1 added [ 99.074680][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.074700][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.074727][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.101560][ T5604] team0: Port device team_slave_0 added [ 99.104157][ T5603] team0: Port device team_slave_0 added [ 99.111910][ T5606] team0: Port device team_slave_0 added [ 99.148144][ T5603] team0: Port device team_slave_1 added [ 99.149983][ T5604] team0: Port device team_slave_1 added [ 99.151818][ T5606] team0: Port device team_slave_1 added [ 99.154055][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.154069][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.154084][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.229373][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.229387][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.229403][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.306882][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.307880][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.307911][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.309892][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.309908][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.309935][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.312459][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.312475][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.312502][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.340210][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.340238][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.340262][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.342987][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.343000][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.343024][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.344267][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.344278][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.344301][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.360301][ T5605] hsr_slave_0: entered promiscuous mode [ 99.361812][ T5605] hsr_slave_1: entered promiscuous mode [ 99.575044][ T5607] hsr_slave_0: entered promiscuous mode [ 99.576416][ T5607] hsr_slave_1: entered promiscuous mode [ 99.578565][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 99.578671][ T5607] Cannot create hsr debugfs directory [ 99.637112][ T5609] Bluetooth: hci2: command tx timeout [ 99.665077][ T5604] hsr_slave_0: entered promiscuous mode [ 99.665932][ T5604] hsr_slave_1: entered promiscuous mode [ 99.666528][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 99.666550][ T5604] Cannot create hsr debugfs directory [ 99.679062][ T5606] hsr_slave_0: entered promiscuous mode [ 99.680399][ T5606] hsr_slave_1: entered promiscuous mode [ 99.681677][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 99.681702][ T5606] Cannot create hsr debugfs directory [ 99.717098][ T5609] Bluetooth: hci0: command tx timeout [ 99.797090][ T5609] Bluetooth: hci4: command tx timeout [ 99.797127][ T4914] Bluetooth: hci1: command tx timeout [ 99.887213][ T4914] Bluetooth: hci3: command tx timeout [ 100.130107][ T5603] hsr_slave_0: entered promiscuous mode [ 100.131644][ T5603] hsr_slave_1: entered promiscuous mode [ 100.132732][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 100.132759][ T5603] Cannot create hsr debugfs directory [ 100.840393][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.898291][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.911259][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.926308][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.940143][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.971615][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.001087][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.031972][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.157572][ T5606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.184608][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.196803][ T5606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.221016][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.224057][ T5606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.251455][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.274197][ T5606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.311535][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.455095][ T5607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.484080][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.489565][ T5607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.521503][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.525451][ T5607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.572939][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.599335][ T5607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.632543][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.727327][ T4914] Bluetooth: hci2: command tx timeout [ 101.799808][ T4914] Bluetooth: hci0: command tx timeout [ 101.804860][ T5604] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.848475][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.858135][ T5604] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.877406][ T4914] Bluetooth: hci4: command tx timeout [ 101.877468][ T4914] Bluetooth: hci1: command tx timeout [ 101.918979][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.923530][ T5604] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.962717][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.967959][ T5609] Bluetooth: hci3: command tx timeout [ 102.004882][ T5604] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.032944][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.070008][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.171789][ T5603] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.212611][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.221762][ T5603] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.263435][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.272506][ T5603] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.312848][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.318548][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.341534][ T5603] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.382234][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.410702][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.432660][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.432812][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.491094][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.491272][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.558985][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.613533][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.613675][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.662779][ T3073] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.662943][ T3073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.689163][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.815697][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.889109][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.889349][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.899741][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.974195][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.974359][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.143281][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.253025][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.274240][ T1399] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.274350][ T1399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.323992][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.337739][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.521606][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.571983][ T3073] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.572220][ T3073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.674432][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.674558][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.797406][ T5609] Bluetooth: hci2: command tx timeout [ 103.877990][ T5609] Bluetooth: hci0: command tx timeout [ 103.957121][ T5609] Bluetooth: hci1: command tx timeout [ 103.957160][ T5609] Bluetooth: hci4: command tx timeout [ 103.986284][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.037022][ T4914] Bluetooth: hci3: command tx timeout [ 104.472850][ T5605] veth0_vlan: entered promiscuous mode [ 104.594084][ T5605] veth1_vlan: entered promiscuous mode [ 104.862928][ T5605] veth0_macvtap: entered promiscuous mode [ 104.885056][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.925176][ T5605] veth1_macvtap: entered promiscuous mode [ 105.121555][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.192355][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.197339][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.609218][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.798072][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.986397][ T5607] veth0_vlan: entered promiscuous mode [ 106.026556][ T3073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.026581][ T3073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.088362][ T5607] veth1_vlan: entered promiscuous mode [ 106.147244][ T5606] veth0_vlan: entered promiscuous mode [ 106.186866][ T1502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.186890][ T1502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.212874][ T5604] veth0_vlan: entered promiscuous mode [ 106.236834][ T5606] veth1_vlan: entered promiscuous mode [ 106.250444][ T5603] veth0_vlan: entered promiscuous mode [ 106.291937][ T5604] veth1_vlan: entered promiscuous mode [ 106.374335][ T5603] veth1_vlan: entered promiscuous mode [ 106.390701][ T5607] veth0_macvtap: entered promiscuous mode [ 106.444522][ T5607] veth1_macvtap: entered promiscuous mode [ 106.490048][ T5606] veth0_macvtap: entered promiscuous mode [ 106.551893][ T5606] veth1_macvtap: entered promiscuous mode [ 106.556886][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.571266][ T5604] veth0_macvtap: entered promiscuous mode [ 106.595490][ T5605] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.626440][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.630879][ T5604] veth1_macvtap: entered promiscuous mode [ 106.670066][ T5603] veth0_macvtap: entered promiscuous mode [ 106.770897][ T5603] veth1_macvtap: entered promiscuous mode [ 106.794431][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.828154][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.851579][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.952577][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.066339][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.177528][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.528983][ T1474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.529007][ T1474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.083860][ T1399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.083884][ T1399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.128355][ T1474] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.479793][ T1415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.479817][ T1415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.579143][ T1415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.579176][ T1415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.579231][ T1502] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.626434][ T1502] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.745777][ T1435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.745802][ T1435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.810229][ T5808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 108.810254][ T5808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'. [ 108.869974][ T5804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.110772][ T1399] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.111441][ T1399] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.118027][ T3073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.118046][ T3073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.310457][ T1415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.310482][ T1415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.412701][ T1399] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.708791][ T1435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.708814][ T1435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.959669][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.961269][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.961511][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.997925][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.077919][ T1399] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.078166][ T1399] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.078206][ T1399] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.078245][ T1399] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.078282][ T1399] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.167105][ T1399] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.304442][ T3073] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.351242][ T3073] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.352178][ T3073] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.409037][ T3073] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.855048][ T36] audit: type=1326 audit(1790425370.303:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5832 comm="syz.4.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3464d1e159 code=0x7ffc0000 [ 110.911434][ T36] audit: type=1326 audit(1790425370.323:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5832 comm="syz.4.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3464d1e159 code=0x7ffc0000 [ 110.911500][ T36] audit: type=1326 audit(1790425370.343:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5832 comm="syz.4.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3464d1e159 code=0x7ffc0000 [ 110.911547][ T36] audit: type=1326 audit(1790425370.353:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5832 comm="syz.4.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3464d1e159 code=0x7ffc0000 [ 110.911604][ T36] audit: type=1326 audit(1790425370.353:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5832 comm="syz.4.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3464d1e159 code=0x7ffc0000 [ 110.911651][ T36] audit: type=1326 audit(1790425370.353:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5832 comm="syz.4.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3464d1e159 code=0x7ffc0000 [ 110.914417][ T36] audit: type=1326 audit(1790425370.363:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5832 comm="syz.4.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3464d1e159 code=0x7ffc0000 [ 110.914470][ T36] audit: type=1326 audit(1790425370.363:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5832 comm="syz.4.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3464d1e159 code=0x7ffc0000 [ 110.914508][ T36] audit: type=1326 audit(1790425370.363:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5832 comm="syz.4.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3464d1e159 code=0x7ffc0000 [ 112.751789][ T5850] ptp ptp0: new virtual clock ptp1 [ 112.751819][ T5850] ptp ptp0: guarantee physical clock free running [ 112.752033][ T5851] ptp ptp0: delete virtual clock ptp1 [ 113.139780][ T5851] ptp ptp0: only physical clock in use now [ 114.961337][ T5888] syzkaller0: entered promiscuous mode [ 114.961368][ T5888] syzkaller0: entered allmulticast mode [ 116.559472][ T5733] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 119.722202][ T5733] usb 4-1: device descriptor read/all, error -71 [ 121.334656][ T5954] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 121.609340][ T36] audit: type=1326 audit(1790425381.063:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5961 comm="syz.3.56" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6335e159 code=0x7ffc0000 [ 121.614234][ T36] audit: type=1326 audit(1790425381.063:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5961 comm="syz.3.56" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6335e159 code=0x7ffc0000 [ 121.641925][ T36] audit: type=1326 audit(1790425381.083:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5961 comm="syz.3.56" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6335e159 code=0x7ffc0000 [ 121.641983][ T36] audit: type=1326 audit(1790425381.083:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5961 comm="syz.3.56" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6335e159 code=0x7ffc0000 [ 121.677745][ T36] audit: type=1326 audit(1790425381.133:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5961 comm="syz.3.56" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f6a6335e159 code=0x7ffc0000 [ 121.677795][ T36] audit: type=1326 audit(1790425381.133:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5961 comm="syz.3.56" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6335e159 code=0x7ffc0000 [ 121.677835][ T36] audit: type=1326 audit(1790425381.133:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5961 comm="syz.3.56" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6335e159 code=0x7ffc0000 [ 121.702477][ T36] audit: type=1326 audit(1790425381.153:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5961 comm="syz.3.56" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6a6335e159 code=0x7ffc0000 [ 121.702530][ T36] audit: type=1326 audit(1790425381.153:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5961 comm="syz.3.56" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6a6335e159 code=0x7ffc0000 [ 122.237140][ T1252] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 122.412620][ T1252] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 122.546748][ T1252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.546780][ T1252] usb 3-1: Product: syz [ 122.546796][ T1252] usb 3-1: Manufacturer: syz [ 122.546812][ T1252] usb 3-1: SerialNumber: syz [ 126.484010][ T1252] usb 3-1: can't set config #1, error -71 [ 126.765733][ T1252] usb 3-1: USB disconnect, device number 2 [ 128.886841][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.65'. [ 129.277780][ T6042] netlink: 'syz.3.78': attribute type 12 has an invalid length. [ 129.277825][ T6042] netlink: 'syz.3.78': attribute type 29 has an invalid length. [ 129.277840][ T6042] netlink: 'syz.3.78': attribute type 44 has an invalid length. [ 130.289945][ T6050] syz.4.79 (6050) used greatest stack depth: 19360 bytes left [ 130.491044][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 130.762454][ T9] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 130.804776][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.804810][ T9] usb 2-1: Product: syz [ 130.804826][ T9] usb 2-1: Manufacturer: syz [ 130.804842][ T9] usb 2-1: SerialNumber: syz [ 132.314514][ T6062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.399441][ T6062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.336757][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.350454][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.726292][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.92'. [ 134.376203][ T5619] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.558046][ T5619] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 134.559739][ T5619] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.559799][ T5619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.947714][ T6107] block nbd0: not configured, cannot reconfigure [ 136.173943][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.174327][ T6109] batadv_slave_0: entered promiscuous mode [ 137.482275][ T9] usb 2-1: USB disconnect, device number 2 [ 137.677457][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.105'. [ 138.776948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.846932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.856930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.262694][ T5718] usb 4-1: USB disconnect, device number 4 [ 140.757650][ T4914] Bluetooth: hci4: link tx timeout [ 140.757802][ T4914] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.029511][ T36] audit: type=1326 audit(1790425400.473:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6145 comm="syz.0.113" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f945bd2e159 code=0x0 [ 141.085200][ T5617] Bluetooth: hci4: link tx timeout [ 141.085223][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.838317][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 143.566958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.586949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.596950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.606952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.616950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.626957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.636963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.613647][ T6172] udevd[6172]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.148685][ T5619] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 145.922530][ T5619] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 145.938891][ T5619] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.938952][ T5619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.803357][ T6219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.132'. [ 147.941801][ T10] usb 1-1: USB disconnect, device number 2 [ 148.687044][ T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 149.308283][ T43] usb 3-1: device descriptor read/64, error -71 [ 149.598525][ T43] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 149.727041][ T43] usb 3-1: device descriptor read/64, error -71 [ 149.849997][ T43] usb usb3-port1: attempt power cycle [ 150.258395][ T43] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 150.328045][ T43] usb 3-1: device descriptor read/8, error -71 [ 150.597978][ T43] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 150.623286][ T43] usb 3-1: device descriptor read/8, error -71 [ 150.727372][ T43] usb usb3-port1: unable to enumerate USB device [ 150.955492][ T6249] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 153.414701][ T6281] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5607] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6281] [ 153.747565][ T4914] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 156.203449][ T6311] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 158.065619][ T6322] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5603] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6322] [ 158.156369][ T4914] Bluetooth: Frame is too long (len 16, expected len 4) [ 161.525796][ T6345] netlink: 'syz.0.173': attribute type 12 has an invalid length. [ 161.525821][ T6345] netlink: 'syz.0.173': attribute type 29 has an invalid length. [ 161.525836][ T6345] netlink: 260 bytes leftover after parsing attributes in process `syz.0.173'. [ 162.258989][ T6348] team0: Port device syz_tun added [ 162.988642][ T6360] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5605] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6360] [ 163.078510][ T4914] Bluetooth: Frame is too long (len 16, expected len 4) [ 165.721833][ T6385] tmpfs: Bad value for 'nr_inodes' [ 166.932174][ T6409] process 'syz.2.200' launched './file1' with NULL argv: empty string added [ 167.266615][ T6409] FAULT_INJECTION: forcing a failure. [ 167.266615][ T6409] name fail_futex, interval 1, probability 0, space 0, times 1 [ 167.266652][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz.2.200 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 167.266676][ T6409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.266699][ T6409] Call Trace: [ 167.266708][ T6409] [ 167.266717][ T6409] dump_stack_lvl+0xe8/0x150 [ 167.266752][ T6409] should_fail_ex+0x46b/0x600 [ 167.266785][ T6409] get_futex_key+0x1b4/0x1580 [ 167.266814][ T6409] ? __lock_acquire+0x747/0x2de0 [ 167.266843][ T6409] ? kasan_save_track+0x3e/0x80 [ 167.266874][ T6409] ? __kasan_slab_free+0x5c/0x80 [ 167.266902][ T6409] ? kmem_cache_free+0x187/0x6d0 [ 167.266932][ T6409] ? __pfx_get_futex_key+0x10/0x10 [ 167.266971][ T6409] futex_wake+0x119/0x600 [ 167.266999][ T6409] ? __pfx_futex_wake+0x10/0x10 [ 167.267040][ T6409] do_futex+0x458/0x4e0 [ 167.267065][ T6409] ? __pfx_do_futex+0x10/0x10 [ 167.267081][ T6409] ? kmem_cache_free+0x187/0x6d0 [ 167.267108][ T6409] ? do_sys_openat2+0x14e/0x200 [ 167.267145][ T6409] __se_sys_futex+0x3a8/0x450 [ 167.267173][ T6409] ? __pfx___se_sys_futex+0x10/0x10 [ 167.267193][ T6409] ? rcu_is_watching+0x16/0xb0 [ 167.267228][ T6409] ? __x64_sys_futex+0x21/0xf0 [ 167.267252][ T6409] do_syscall_64+0x166/0x520 [ 167.267272][ T6409] ? trace_irq_disable+0x3b/0x140 [ 167.267297][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.267318][ T6409] ? clear_bhb_loop+0x70/0xc0 [ 167.267342][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.267364][ T6409] RIP: 0033:0x7f13e875e159 [ 167.267383][ T6409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.267400][ T6409] RSP: 002b:00007f13e69b60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 167.267423][ T6409] RAX: ffffffffffffffda RBX: 00007f13e89e5fa8 RCX: 00007f13e875e159 [ 167.267438][ T6409] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f13e89e5fac [ 167.267451][ T6409] RBP: 00007f13e89e5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 167.267465][ T6409] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 167.267479][ T6409] R13: 00007f13e89e6038 R14: 00007ffd52724970 R15: 00007ffd52724a58 [ 167.267512][ T6409] [ 172.827928][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 174.187311][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.242'. [ 174.954359][ T6523] syz.3.232 (6523) used greatest stack depth: 19072 bytes left [ 175.352072][ T6515] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 175.352134][ T6515] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 186.998828][ T5718] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 187.122257][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 195.129181][ T5718] usb 1-1: device descriptor read/64, error -32 [ 195.587738][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.673740][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.250619][ T5718] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 220.603780][ T5718] usb 1-1: device descriptor read/64, error -110 [ 221.585870][ T5718] usb usb1-port1: attempt power cycle [ 223.256730][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 223.260760][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 223.261287][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 223.268992][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 231.931414][ T5718] raw-gadget.0 gadget.0: failed to queue resume event [ 233.576568][ T5718] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 257.002825][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.005099][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.690396][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 263.581991][ T5718] usb 1-1: device descriptor read/8, error -32 [ 264.402545][ T5718] raw-gadget.0 gadget.0: failed to queue suspend event [ 264.670785][ T5718] raw-gadget.0 gadget.0: failed to queue reset event [ 267.477882][ T5718] raw-gadget.0 gadget.0: failed to queue resume event [ 269.361911][ T5718] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 271.876386][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 271.970345][ T5718] usb 1-1: device descriptor read/8, error -32 [ 272.083889][ T5718] raw-gadget.0 gadget.0: failed to queue suspend event [ 272.185056][ T5718] usb usb1-port1: unable to enumerate USB device [ 318.021127][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.059162][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 375.226824][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 375.233851][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P176/1:b..l P30 [ 375.242095][ C1] rcu: (detected by 1, t=10503 jiffies, g=16977, q=1632 ncpus=2) [ 375.250120][ C1] task:ksoftirqd/1 state:R running task stack:22424 pid:30 tgid:30 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 375.263744][ C1] Call Trace: [ 375.267053][ C1] [ 375.269926][ C1] sched_show_task+0x4aa/0x5f0 [ 375.274844][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 375.280238][ C1] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 375.285493][ C1] ? wq_watchdog_touch+0xf9/0x160 [ 375.290668][ C1] print_other_cpu_stall+0xfbf/0x1350 [ 375.296056][ C1] ? trace_event_buffer_reserve+0x249/0x2d0 [ 375.302117][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 375.308074][ C1] rcu_sched_clock_irq+0x9fe/0x10e0 [ 375.313413][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 375.319176][ C1] ? rcu_is_watching+0x16/0xb0 [ 375.323986][ C1] ? trace_softirq_raise+0x3b/0x130 [ 375.329211][ C1] update_process_times+0x234/0x2d0 [ 375.334456][ C1] tick_nohz_handler+0x38f/0x6b0 [ 375.339426][ C1] ? __pfx_trace_event_raw_event_hrtimer_expire_entry+0x10/0x10 [ 375.347091][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 375.352608][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 375.357736][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 375.363233][ C1] __hrtimer_run_queues+0x3a0/0xaf0 [ 375.368649][ C1] hrtimer_interrupt+0x4c2/0xa80 [ 375.373759][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 375.379799][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 375.385733][ C1] [ 375.388660][ C1] [ 375.391594][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 375.397601][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x7d/0x120 [ 375.404193][ C1] Code: 8b 05 6f 04 df 10 45 31 c9 41 ba 00 01 00 00 eb 0c 49 ff c1 4c 39 c8 0f 84 98 00 00 00 4e 8b 5c ce 10 65 48 8b 1d 53 04 df 10 <41> 89 de 41 81 e6 00 00 00 ff 41 8b a8 fc 0b 00 00 44 21 d5 41 09 [ 375.423801][ C1] RSP: 0018:ffffc90000a4e728 EFLAGS: 00000212 [ 375.429873][ C1] RAX: 0000000000000020 RBX: 8000000000000002 RCX: 0000000000000005 [ 375.437857][ C1] RDX: ffffffff81caf83a RSI: ffffffff8e227a70 RDI: 000000000000000a [ 375.445946][ C1] RBP: 0000000000000100 R08: ffff88801d2c1f40 R09: 0000000000000012 [ 375.453911][ C1] R10: 0000000000000100 R11: 0000000000000012 R12: 000000575dbf2ab9 [ 375.461893][ C1] R13: 000000000000000a R14: 0000000000000100 R15: ffff88803deb471c [ 375.469942][ C1] ? rb_read_data_buffer+0x14a/0x5b0 [ 375.475390][ C1] rb_read_data_buffer+0x14a/0x5b0 [ 375.480563][ C1] check_buffer+0x288/0x860 [ 375.485096][ C1] ? __pfx_trace_clock_local+0x10/0x10 [ 375.490698][ C1] __rb_reserve_next+0x549/0xdd0 [ 375.495907][ C1] ring_buffer_lock_reserve+0xc0d/0x10c0 [ 375.501719][ C1] trace_event_buffer_lock_reserve+0x1d4/0x700 [ 375.507922][ C1] trace_event_buffer_reserve+0x1ef/0x2d0 [ 375.513867][ C1] trace_event_raw_event_lock_acquire+0x12c/0x2e0 [ 375.520356][ C1] ? __pfx_trace_event_raw_event_lock_acquire+0x10/0x10 [ 375.527292][ C1] ? trace_event_raw_event_lock+0x1c7/0x280 [ 375.533214][ C1] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 375.539536][ C1] lock_acquire+0x303/0x350 [ 375.544234][ C1] ? __kmalloc_noprof+0x1df/0x790 [ 375.549432][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 375.555426][ C1] rt_spin_trylock+0xfc/0x2b0 [ 375.560139][ C1] ? __kmalloc_noprof+0x1df/0x790 [ 375.565305][ C1] __kmalloc_noprof+0x1df/0x790 [ 375.570172][ C1] ? ieee802_11_parse_elems_full+0x14b/0x2de0 [ 375.576498][ C1] ? ieee802_11_parse_elems_full+0x14b/0x2de0 [ 375.582787][ C1] ieee802_11_parse_elems_full+0x14b/0x2de0 [ 375.588715][ C1] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 375.595019][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 375.600078][ C1] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 375.606173][ C1] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 375.614408][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 375.620839][ C1] ? cfg80211_update_known_bss+0xa51/0x1430 [ 375.626843][ C1] ieee80211_inform_bss+0x163/0x10d0 [ 375.632399][ C1] ? __cfg80211_bss_update+0x12a5/0x2060 [ 375.638053][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 375.643775][ C1] ? rt_spin_lock+0x210/0x400 [ 375.648595][ C1] ? __local_bh_disable_ip+0x3d/0x420 [ 375.653986][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 375.659727][ C1] cfg80211_inform_single_bss_data+0xd98/0x1bf0 [ 375.665992][ C1] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 375.672551][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 375.679346][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 375.685039][ C1] ? cfg80211_inform_bss_data+0x24b/0x3cc0 [ 375.690898][ C1] cfg80211_inform_bss_data+0x263/0x3cc0 [ 375.696712][ C1] ? __pfx_trace_clock_local+0x10/0x10 [ 375.702510][ C1] ? __rb_reserve_next+0x79f/0xdd0 [ 375.707678][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 375.713891][ C1] ? rb_commit+0x787/0x7e0 [ 375.718401][ C1] ? ring_buffer_unlock_commit+0x51d/0x6c0 [ 375.724262][ C1] ? trace_buffer_unlock_commit_regs+0x156/0x520 [ 375.730613][ C1] ? ring_buffer_event_data+0x94/0x100 [ 375.736120][ C1] ? trace_event_buffer_commit+0x258/0x7a0 [ 375.742050][ C1] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 375.748376][ C1] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 375.754485][ C1] ? ieee80211_bss_info_update+0x30f/0xa50 [ 375.760330][ C1] ieee80211_bss_info_update+0x791/0xa50 [ 375.766024][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 375.772301][ C1] ? rt_spin_unlock+0x159/0x200 [ 375.777175][ C1] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 375.783128][ C1] ieee80211_scan_rx+0x552/0xa40 [ 375.788155][ C1] ieee80211_rx_list+0x2d23/0x3b40 [ 375.793420][ C1] ? trace_event_buffer_commit+0x258/0x7a0 [ 375.799405][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 375.804948][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 375.810783][ C1] ? lock_acquire+0x115/0x350 [ 375.815513][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 375.821156][ C1] ? rt_spin_unlock+0x159/0x200 [ 375.826038][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 375.831074][ C1] ieee80211_rx_napi+0x1ad/0x3d0 [ 375.836054][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 375.841544][ C1] ? skb_dequeue+0x11a/0x150 [ 375.846335][ C1] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 375.852411][ C1] tasklet_action_common+0x31c/0x600 [ 375.857763][ C1] handle_softirqs+0x1da/0x6d0 [ 375.862606][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 375.867631][ C1] run_ksoftirqd+0x53/0x190 [ 375.872150][ C1] smpboot_thread_fn+0x565/0xa70 [ 375.877114][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 375.882453][ C1] kthread+0x38b/0x470 [ 375.886631][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 375.892095][ C1] ? __pfx_kthread+0x10/0x10 [ 375.896791][ C1] ret_from_fork+0x514/0xb70 [ 375.901413][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 375.906620][ C1] ? __switch_to+0xc89/0x1420 [ 375.911347][ C1] ? __pfx_kthread+0x10/0x10 [ 375.915953][ C1] ret_from_fork_asm+0x1a/0x30 [ 375.920845][ C1] [ 375.923858][ C1] task:kworker/u8:7 state:D stack:19832 pid:176 tgid:176 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 375.936034][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 375.942373][ C1] Call Trace: [ 375.945649][ C1] [ 375.948711][ C1] __schedule+0x16d9/0x5700 [ 375.953391][ C1] ? __pfx___schedule+0x10/0x10 [ 375.958355][ C1] schedule_rtlock+0x30/0x70 [ 375.962961][ C1] rtlock_slowlock_locked+0x35c9/0x3c20 [ 375.968621][ C1] ? trace_event_buffer_commit+0x258/0x7a0 [ 375.974534][ C1] ? rtlock_slowlock_locked+0x2ab/0x3c20 [ 375.980301][ C1] ? __pfx_trace_event_raw_event_lock_acquire+0x10/0x10 [ 375.987340][ C1] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 375.993343][ C1] ? rcu_is_watching+0x16/0xb0 [ 375.998187][ C1] rt_spin_lock+0x165/0x400 [ 376.002727][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 376.007750][ C1] ? trace_event_raw_event_softirq+0x106/0x1b0 [ 376.013975][ C1] tasklet_action_common+0xc5/0x600 [ 376.019187][ C1] ? workqueue_softirq_action+0xd1/0x150 [ 376.024852][ C1] handle_softirqs+0x1da/0x6d0 [ 376.029708][ C1] __local_bh_enable_ip+0x16f/0x2b0 [ 376.035269][ C1] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 376.041710][ C1] cfg80211_inform_single_bss_data+0x135d/0x1bf0 [ 376.048044][ C1] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 376.054508][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 376.061358][ C1] ? cfg80211_inform_bss_data+0x24b/0x3cc0 [ 376.067199][ C1] cfg80211_inform_bss_data+0x263/0x3cc0 [ 376.072906][ C1] ? __pfx_trace_clock_local+0x10/0x10 [ 376.078427][ C1] ? __rb_reserve_next+0x79f/0xdd0 [ 376.083570][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 376.089683][ C1] ? rb_commit+0x787/0x7e0 [ 376.094186][ C1] ? ring_buffer_unlock_commit+0x51d/0x6c0 [ 376.100162][ C1] ? trace_buffer_unlock_commit_regs+0x156/0x520 [ 376.106606][ C1] ? ring_buffer_event_data+0x94/0x100 [ 376.112117][ C1] ? trace_event_buffer_commit+0x258/0x7a0 [ 376.118056][ C1] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 376.124376][ C1] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 376.130484][ C1] ? ieee80211_bss_info_update+0x30f/0xa50 [ 376.136330][ C1] ieee80211_bss_info_update+0x791/0xa50 [ 376.142102][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 376.148346][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 376.154692][ C1] ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 [ 376.161034][ C1] ? trace_buffer_unlock_commit_regs+0x156/0x520 [ 376.167434][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 376.173723][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 376.180441][ C1] ? trace_event_raw_event_lock+0x1c7/0x280 [ 376.186346][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 376.192170][ C1] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 376.198463][ C1] ? reacquire_held_locks+0x117/0x1a0 [ 376.203876][ C1] ? rt_spin_unlock+0x159/0x200 [ 376.208810][ C1] ? rt_spin_unlock+0x165/0x200 [ 376.213719][ C1] ieee80211_iface_work+0x78a/0x1010 [ 376.219074][ C1] cfg80211_wiphy_work+0x29e/0x420 [ 376.224211][ C1] ? process_scheduled_works+0x97a/0x1630 [ 376.229969][ C1] process_scheduled_works+0xc3d/0x1630 [ 376.235707][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 376.241750][ C1] ? assign_work+0x3cf/0x5d0 [ 376.246389][ C1] worker_thread+0xa47/0xfb0 [ 376.251068][ C1] ? __kthread_parkme+0x71/0x1f0 [ 376.256076][ C1] kthread+0x38b/0x470 [ 376.260290][ C1] ? __pfx_worker_thread+0x10/0x10 [ 376.265405][ C1] ? __pfx_kthread+0x10/0x10 [ 376.270021][ C1] ret_from_fork+0x514/0xb70 [ 376.274637][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 376.279854][ C1] ? __switch_to+0xc89/0x1420 [ 376.284571][ C1] ? __pfx_kthread+0x10/0x10 [ 376.289199][ C1] ret_from_fork_asm+0x1a/0x30 [ 376.294074][ C1] [ 376.297123][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 592 jiffies! g16977 f0x0 RCU_GP_WAIT_FQS(5) ->state=I [ 376.308953][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=12224 [ 376.316887][ C1] rcu: rcu_preempt kthread starved for 700 jiffies! g16977 f0x0 RCU_GP_WAIT_FQS(5) ->state=I ->cpu=1 [ 376.328384][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 376.338394][ C1] rcu: RCU grace-period kthread stack dump: [ 376.344318][ C1] task:rcu_preempt state:I stack:25528 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 376.356304][ C1] Call Trace: [ 376.359625][ C1] [ 376.362641][ C1] __schedule+0x16d9/0x5700 [ 376.367240][ C1] ? trace_event_buffer_commit+0x258/0x7a0 [ 376.373269][ C1] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 376.379638][ C1] ? __pfx___schedule+0x10/0x10 [ 376.384531][ C1] ? lock_acquire+0x115/0x350 [ 376.389291][ C1] ? schedule+0x90/0x2b0 [ 376.393646][ C1] ? schedule+0x90/0x2b0 [ 376.397986][ C1] schedule+0x164/0x2b0 [ 376.402238][ C1] schedule_timeout+0x152/0x2c0 [ 376.407182][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 376.412739][ C1] ? __pfx_process_timeout+0x10/0x10 [ 376.418108][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 376.423954][ C1] ? prepare_to_swait_event+0x322/0x350 [ 376.429625][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 376.434656][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 376.440889][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 376.446208][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 376.451527][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 376.457507][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 376.462180][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 376.467477][ C1] ? __kthread_parkme+0x71/0x1f0 [ 376.472506][ C1] ? __kthread_parkme+0x199/0x1f0 [ 376.477630][ C1] kthread+0x38b/0x470 [ 376.481761][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 376.487022][ C1] ? __pfx_kthread+0x10/0x10 [ 376.491796][ C1] ret_from_fork+0x514/0xb70 [ 376.496469][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 376.501642][ C1] ? __switch_to+0xc89/0x1420 [ 376.506500][ C1] ? __pfx_kthread+0x10/0x10 [ 376.511163][ C1] ret_from_fork_asm+0x1a/0x30 [ 376.516145][ C1] [ 376.519186][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 376.525527][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 376.535271][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 376.545347][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x7d/0x120 [ 376.551967][ C1] Code: 8b 05 6f 04 df 10 45 31 c9 41 ba 00 01 00 00 eb 0c 49 ff c1 4c 39 c8 0f 84 98 00 00 00 4e 8b 5c ce 10 65 48 8b 1d 53 04 df 10 <41> 89 de 41 81 e6 00 00 00 ff 41 8b a8 fc 0b 00 00 44 21 d5 41 09 [ 376.571768][ C1] RSP: 0018:ffffc90000a4e728 EFLAGS: 00000212 [ 376.577876][ C1] RAX: 0000000000000020 RBX: 8000000000000002 RCX: 0000000000000005 [ 376.586064][ C1] RDX: ffffffff81caf83a RSI: ffffffff8e227a70 RDI: 000000000000000a [ 376.594058][ C1] RBP: 0000000000000100 R08: ffff88801d2c1f40 R09: 0000000000000012 [ 376.602327][ C1] R10: 0000000000000100 R11: 0000000000000012 R12: 000000575dbf2ab9 [ 376.610401][ C1] R13: 000000000000000a R14: 0000000000000100 R15: ffff88803deb471c [ 376.618386][ C1] FS: 0000000000000000(0000) GS:ffff888125cc4000(0000) knlGS:0000000000000000 [ 376.627337][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.633939][ C1] CR2: 00007f52b5118020 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 376.641977][ C1] Call Trace: [ 376.645268][ C1] [ 376.648253][ C1] rb_read_data_buffer+0x14a/0x5b0 [ 376.653619][ C1] check_buffer+0x288/0x860 [ 376.658207][ C1] ? __pfx_trace_clock_local+0x10/0x10 [ 376.663833][ C1] __rb_reserve_next+0x549/0xdd0 [ 376.669055][ C1] ring_buffer_lock_reserve+0xc0d/0x10c0 [ 376.675020][ C1] trace_event_buffer_lock_reserve+0x1d4/0x700 [ 376.681393][ C1] trace_event_buffer_reserve+0x1ef/0x2d0 [ 376.687204][ C1] trace_event_raw_event_lock_acquire+0x12c/0x2e0 [ 376.693728][ C1] ? __pfx_trace_event_raw_event_lock_acquire+0x10/0x10 [ 376.700809][ C1] ? trace_event_raw_event_lock+0x1c7/0x280 [ 376.706802][ C1] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 376.713226][ C1] lock_acquire+0x303/0x350 [ 376.717784][ C1] ? __kmalloc_noprof+0x1df/0x790 [ 376.722915][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 376.728815][ C1] rt_spin_trylock+0xfc/0x2b0 [ 376.733541][ C1] ? __kmalloc_noprof+0x1df/0x790 [ 376.738655][ C1] __kmalloc_noprof+0x1df/0x790 [ 376.743569][ C1] ? ieee802_11_parse_elems_full+0x14b/0x2de0 [ 376.749662][ C1] ? ieee802_11_parse_elems_full+0x14b/0x2de0 [ 376.755910][ C1] ieee802_11_parse_elems_full+0x14b/0x2de0 [ 376.761878][ C1] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 376.768230][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 376.773341][ C1] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 376.779421][ C1] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 376.787133][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 376.793542][ C1] ? cfg80211_update_known_bss+0xa51/0x1430 [ 376.799583][ C1] ieee80211_inform_bss+0x163/0x10d0 [ 376.804971][ C1] ? __cfg80211_bss_update+0x12a5/0x2060 [ 376.810662][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 376.816404][ C1] ? rt_spin_lock+0x210/0x400 [ 376.821189][ C1] ? __local_bh_disable_ip+0x3d/0x420 [ 376.826608][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 376.832390][ C1] cfg80211_inform_single_bss_data+0xd98/0x1bf0 [ 376.838678][ C1] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 376.845219][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 376.852218][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 376.858063][ C1] ? cfg80211_inform_bss_data+0x24b/0x3cc0 [ 376.863981][ C1] cfg80211_inform_bss_data+0x263/0x3cc0 [ 376.869750][ C1] ? __pfx_trace_clock_local+0x10/0x10 [ 376.875329][ C1] ? __rb_reserve_next+0x79f/0xdd0 [ 376.880541][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 376.886708][ C1] ? rb_commit+0x787/0x7e0 [ 376.891292][ C1] ? ring_buffer_unlock_commit+0x51d/0x6c0 [ 376.897273][ C1] ? trace_buffer_unlock_commit_regs+0x156/0x520 [ 376.903674][ C1] ? ring_buffer_event_data+0x94/0x100 [ 376.909210][ C1] ? trace_event_buffer_commit+0x258/0x7a0 [ 376.915206][ C1] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 376.921636][ C1] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 376.927817][ C1] ? ieee80211_bss_info_update+0x30f/0xa50 [ 376.933802][ C1] ieee80211_bss_info_update+0x791/0xa50 [ 376.939531][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 376.945852][ C1] ? rt_spin_unlock+0x159/0x200 [ 376.950734][ C1] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 376.956627][ C1] ieee80211_scan_rx+0x552/0xa40 [ 376.961707][ C1] ieee80211_rx_list+0x2d23/0x3b40 [ 376.966987][ C1] ? trace_event_buffer_commit+0x258/0x7a0 [ 376.972953][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 376.978552][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 376.984440][ C1] ? lock_acquire+0x115/0x350 [ 376.989263][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 376.994977][ C1] ? rt_spin_unlock+0x159/0x200 [ 376.999944][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 377.005026][ C1] ieee80211_rx_napi+0x1ad/0x3d0 [ 377.010063][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 377.015624][ C1] ? skb_dequeue+0x11a/0x150 [ 377.020314][ C1] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 377.026432][ C1] tasklet_action_common+0x31c/0x600 [ 377.031844][ C1] handle_softirqs+0x1da/0x6d0 [ 377.036739][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 377.041792][ C1] run_ksoftirqd+0x53/0x190 [ 377.046362][ C1] smpboot_thread_fn+0x565/0xa70 [ 377.051387][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 377.056550][ C1] kthread+0x38b/0x470 [ 377.060684][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 377.066253][ C1] ? __pfx_kthread+0x10/0x10 [ 377.070898][ C1] ret_from_fork+0x514/0xb70 [ 377.075572][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 377.080738][ C1] ? __switch_to+0xc89/0x1420 [ 377.085522][ C1] ? __pfx_kthread+0x10/0x10 [ 377.090205][ C1] ret_from_fork_asm+0x1a/0x30 [ 377.095285][ C1] [ 380.090287][ C1] sched: DL replenish lagged too much