last executing test programs: 1m32.866456963s ago: executing program 4 (id=253): prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0], 0xfc}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/146) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg(r4, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000b80)="ddab", 0x2}], 0x1}}], 0x1, 0x40000) 1m31.476226532s ago: executing program 4 (id=257): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) r0 = socket(0x23, 0x5, 0x0) close(0x3) syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESDEC=r0]) 1m30.368267091s ago: executing program 3 (id=260): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = syz_open_procfs(r0, 0x0) sendfile(r3, r4, 0x0, 0x100000003) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mapper/control\x00', 0x2, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r5, 0x0, 0x0, 0x804, 0x0, 0x0) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[], 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) chdir(&(0x7f0000000100)='./dev\x00') ioctl$OCFS2_IOC_UNRESVSP(r3, 0x40305829, &(0x7f0000000180)={0x1, 0x2, 0x8ad, 0xfffffffffffffff9, 0x0, 0xfffffff8}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) 1m29.019215768s ago: executing program 4 (id=265): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m28.386306673s ago: executing program 4 (id=267): syz_ublk_setup_io_uring(0x1985, &(0x7f0000000240)={0x0, 0x8be, 0x400, 0x1024002, 0x8004d}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002780)=@raw={'raw\x00', 0x3c1, 0x3, 0x12e8, 0x1120, 0x178, 0xc, 0x1120, 0x178, 0x1218, 0x258, 0x258, 0x1218, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1348) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) listen(r2, 0x2005) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040014, 0x0, 0x0) pipe2(0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40012042, &(0x7f00000003c0)=@rc={0x1f, @any, 0x5}, 0x80) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b52, &(0x7f0000000140)={0x0, 0x1, 0x6, 0x2, 0x200, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) r8 = socket(0x2, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f00000458c0)={0x1f, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x7) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, r1, 0x0, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) 1m23.082633194s ago: executing program 3 (id=271): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x42, 0x4, 0x368, 0xffffffff, 0xb0, 0xb0, 0x1e0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0x2, 0xf04, 0x6, 0x5, 0x6, 0x4a17d47f, 0x26]}}}, {{@ip={@private, @rand_addr=0x64010102, 0x0, 0x0, 'bridge_slave_0\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@connbytes={{0x38}, {[{0x7fffffff}, {0x8}], 0x571dc3c1a8f3e291, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x81, 0xe, [0x10, 0x2a, 0x28, 0x18, 0x32, 0xd, 0x19, 0xf, 0x25, 0x2c, 0x9, 0x37, 0x32, 0x16, 0x22, 0x4], 0x0, 0xa, 0x6}}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) 1m21.929978648s ago: executing program 3 (id=278): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x2b, 0x9, 0x70bd2d, 0x25dfdbfe, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40070) 1m21.217578803s ago: executing program 4 (id=281): pipe2(&(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x40b, 0xffffffff80000000) 1m20.757406275s ago: executing program 3 (id=282): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) read(r0, &(0x7f0000002fc0)=""/52, 0x34) 1m19.840417709s ago: executing program 4 (id=285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=@newtfilter={0xe0, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x4}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xb0, 0x2, [@TCA_BASIC_ACT={0xac, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000000, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}, @m_sample={0x54, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x26, 0x6, "ec5183e0a532844c17af174e03676707c1faf3eb36793d6d64d759d38140a9db6222"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xe0}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) 1m19.364396126s ago: executing program 1 (id=286): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000001000010425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="c187000000000000140012800a000100767863616e000000", @ANYRES32, @ANYBLOB="080013"], 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004050) 1m18.501603999s ago: executing program 1 (id=288): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1m17.844712095s ago: executing program 1 (id=290): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r4, &(0x7f0000000480), 0x0, 0x10022, 0x0) sendmmsg$inet6(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0xffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000000c0)="ac", 0x1}], 0x1}}], 0x1, 0x20000944) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002b40)={0x2020}, 0x2020) 1m14.936556893s ago: executing program 1 (id=291): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4ea2, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x1000, 0x4) 1m14.790256247s ago: executing program 3 (id=292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) 1m14.413208711s ago: executing program 3 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) 1m10.158745804s ago: executing program 2 (id=296): mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0fc5:1227:bi', 0xc) 1m9.07703875s ago: executing program 2 (id=297): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000004000100060808004149004001040800", 0x58}], 0x1) 1m8.6547482s ago: executing program 2 (id=298): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1m8.150728944s ago: executing program 2 (id=300): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1m7.697138043s ago: executing program 2 (id=301): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r4, &(0x7f0000000480), 0x0, 0x10022, 0x0) sendmmsg$inet6(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0xffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000000c0)="ac", 0x1}], 0x1}}], 0x1, 0x20000944) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000002b40)={0x2020}, 0x2020) 1m4.402141696s ago: executing program 32 (id=285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=@newtfilter={0xe0, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x4}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xb0, 0x2, [@TCA_BASIC_ACT={0xac, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000000, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}, @m_sample={0x54, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x26, 0x6, "ec5183e0a532844c17af174e03676707c1faf3eb36793d6d64d759d38140a9db6222"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xe0}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) 1m3.69170791s ago: executing program 2 (id=305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f00000004c0)=ANY=[], 0x92) 1m1.679083466s ago: executing program 1 (id=306): pipe2(&(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x40b, 0xffffffff80000000) 1m1.200890161s ago: executing program 1 (id=308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x4, 0xfffffff9, 0x8, 0x93}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 58.987811122s ago: executing program 33 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) 47.792382784s ago: executing program 34 (id=305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f00000004c0)=ANY=[], 0x92) 45.987046096s ago: executing program 35 (id=308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x4, 0xfffffff9, 0x8, 0x93}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 17.787763969s ago: executing program 0 (id=355): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, 0x0, 0x0) setns(0xc9, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x38, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x3}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2}}, @RTA_OIF={0x8, 0x4, 0x2}]}, 0x38}}, 0x0) 17.54915339s ago: executing program 0 (id=356): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)}], 0x1) 17.115258862s ago: executing program 0 (id=357): r0 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) write$smackfs_cipso(r0, 0x0, 0x31) 16.795604883s ago: executing program 0 (id=358): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x4c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x1}}, 0x4c}}, 0x800) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x68}}, 0x24008004) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 16.066473287s ago: executing program 0 (id=359): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 15.386799871s ago: executing program 0 (id=360): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x4202c78) write$ppp(r1, &(0x7f0000000180)="00003b90", 0x4) 0s ago: executing program 36 (id=360): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x4202c78) write$ppp(r1, &(0x7f0000000180)="00003b90", 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. [ 75.850450][ T5576] cgroup: Unknown subsys name 'net' [ 76.090853][ T5576] cgroup: Unknown subsys name 'cpuset' [ 76.166335][ T5576] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.728151][ T5576] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.072301][ T5600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.072301][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.075465][ T5600] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.084376][ T5599] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.096343][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.111745][ T5599] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.117831][ T5600] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.129662][ T5599] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.132204][ T5599] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.133010][ T5599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.135208][ T5599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.137831][ T5599] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.139888][ T5599] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.148532][ T5599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.149492][ T5608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.150199][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.151910][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.152322][ T5608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.153545][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.153965][ T5608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.156240][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.272641][ T5597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.276109][ T5597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.295920][ T5595] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.301843][ T5595] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.522189][ T127] cfg80211: failed to load regulatory.db [ 82.216660][ T5596] Bluetooth: hci4: command tx timeout [ 82.295745][ T5596] Bluetooth: hci1: command tx timeout [ 82.295857][ T5596] Bluetooth: hci2: command tx timeout [ 82.295936][ T5596] Bluetooth: hci3: command tx timeout [ 82.375782][ T5595] Bluetooth: hci0: command tx timeout [ 82.625245][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.626911][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.627130][ T5586] bridge_slave_0: entered allmulticast mode [ 82.629591][ T5586] bridge_slave_0: entered promiscuous mode [ 82.692873][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.692936][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.693025][ T5586] bridge_slave_1: entered allmulticast mode [ 82.695742][ T5586] bridge_slave_1: entered promiscuous mode [ 82.733172][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.733286][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.733434][ T5587] bridge_slave_0: entered allmulticast mode [ 82.736746][ T5587] bridge_slave_0: entered promiscuous mode [ 82.781939][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.782033][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.782122][ T5590] bridge_slave_0: entered allmulticast mode [ 82.783465][ T5590] bridge_slave_0: entered promiscuous mode [ 82.785147][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.785266][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.785407][ T5589] bridge_slave_0: entered allmulticast mode [ 82.788712][ T5589] bridge_slave_0: entered promiscuous mode [ 82.791605][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.791713][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.791844][ T5587] bridge_slave_1: entered allmulticast mode [ 82.795563][ T5587] bridge_slave_1: entered promiscuous mode [ 82.800650][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.800756][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.800908][ T5588] bridge_slave_0: entered allmulticast mode [ 82.803256][ T5588] bridge_slave_0: entered promiscuous mode [ 82.836979][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.837993][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.838142][ T5589] bridge_slave_1: entered allmulticast mode [ 82.841405][ T5589] bridge_slave_1: entered promiscuous mode [ 82.863367][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.863496][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.863634][ T5588] bridge_slave_1: entered allmulticast mode [ 82.866559][ T5588] bridge_slave_1: entered promiscuous mode [ 82.873932][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.875000][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.875113][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.875254][ T5590] bridge_slave_1: entered allmulticast mode [ 82.880133][ T5590] bridge_slave_1: entered promiscuous mode [ 82.945322][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.008600][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.046053][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.048252][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.050590][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.238629][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.241392][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.271332][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.273475][ T5586] team0: Port device team_slave_0 added [ 83.276639][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.321496][ T5586] team0: Port device team_slave_1 added [ 83.350431][ T5587] team0: Port device team_slave_0 added [ 83.388697][ T5589] team0: Port device team_slave_0 added [ 83.392894][ T5587] team0: Port device team_slave_1 added [ 83.394767][ T5588] team0: Port device team_slave_0 added [ 83.415151][ T5590] team0: Port device team_slave_0 added [ 83.422499][ T5589] team0: Port device team_slave_1 added [ 83.449280][ T5588] team0: Port device team_slave_1 added [ 83.450146][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.450154][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.450167][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.453296][ T5590] team0: Port device team_slave_1 added [ 83.508943][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.508956][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.508978][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.548958][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.548970][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.548992][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.603481][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.603493][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.603516][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.606716][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.606742][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.606766][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.608705][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.608717][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.608740][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.615931][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.615943][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.615966][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.634009][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.634021][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.634043][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.639292][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.639304][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.639327][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.657084][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.657096][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.657118][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.789967][ T5586] hsr_slave_0: entered promiscuous mode [ 83.791705][ T5586] hsr_slave_1: entered promiscuous mode [ 83.903941][ T5587] hsr_slave_0: entered promiscuous mode [ 83.905094][ T5587] hsr_slave_1: entered promiscuous mode [ 83.907002][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 83.907105][ T5587] Cannot create hsr debugfs directory [ 83.936416][ T5589] hsr_slave_0: entered promiscuous mode [ 83.937944][ T5589] hsr_slave_1: entered promiscuous mode [ 83.938787][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 83.938807][ T5589] Cannot create hsr debugfs directory [ 83.977900][ T5588] hsr_slave_0: entered promiscuous mode [ 83.978603][ T5588] hsr_slave_1: entered promiscuous mode [ 83.979150][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 83.979165][ T5588] Cannot create hsr debugfs directory [ 83.985246][ T5590] hsr_slave_0: entered promiscuous mode [ 83.987399][ T5590] hsr_slave_1: entered promiscuous mode [ 83.988305][ T5590] debugfs: 'hsr0' already exists in 'hsr' [ 83.988324][ T5590] Cannot create hsr debugfs directory [ 84.296057][ T5595] Bluetooth: hci4: command tx timeout [ 84.375756][ T5595] Bluetooth: hci3: command tx timeout [ 84.375779][ T5596] Bluetooth: hci2: command tx timeout [ 84.375787][ T5595] Bluetooth: hci1: command tx timeout [ 84.455936][ T5596] Bluetooth: hci0: command tx timeout [ 85.032736][ T5586] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.066339][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.077596][ T5586] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.119588][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.124098][ T5586] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.168817][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.191652][ T5586] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.229666][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.312018][ T5589] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.340198][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.343940][ T5589] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.379528][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.394680][ T5589] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.419304][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.442957][ T5589] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.468679][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.593506][ T5588] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.629424][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.634043][ T5588] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.651369][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.655004][ T5588] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.689227][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.712961][ T5588] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.749221][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.860837][ T5590] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.890169][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.895279][ T5590] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.928001][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.933876][ T5590] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.968244][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.990427][ T5590] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.029784][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.131468][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.187661][ T5587] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.228354][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.238623][ T5587] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.268097][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.271279][ T5587] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.319832][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.325200][ T5587] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.349114][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.377279][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.385764][ T5596] Bluetooth: hci4: command tx timeout [ 86.400892][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.430727][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.430863][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.455933][ T5596] Bluetooth: hci1: command tx timeout [ 86.455959][ T5596] Bluetooth: hci3: command tx timeout [ 86.456878][ T5596] Bluetooth: hci2: command tx timeout [ 86.494042][ T3428] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.494126][ T3428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.537389][ T5597] Bluetooth: hci0: command tx timeout [ 86.541358][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.596290][ T3428] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.596512][ T3428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.629464][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.656441][ T3428] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.656520][ T3428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.729793][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.773907][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.773976][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.803423][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.845069][ T3428] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.845162][ T3428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.960866][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.030452][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.052174][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.054146][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.120166][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.120297][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.219421][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.258165][ T1547] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.258351][ T1547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.322053][ T1547] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.324104][ T1547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.830201][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.133552][ T5586] veth0_vlan: entered promiscuous mode [ 88.210548][ T5586] veth1_vlan: entered promiscuous mode [ 88.299691][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.456520][ T5597] Bluetooth: hci4: command tx timeout [ 88.490013][ T5586] veth0_macvtap: entered promiscuous mode [ 88.536196][ T5597] Bluetooth: hci3: command tx timeout [ 88.536223][ T5597] Bluetooth: hci1: command tx timeout [ 88.536244][ T5597] Bluetooth: hci2: command tx timeout [ 88.542670][ T5586] veth1_macvtap: entered promiscuous mode [ 88.617278][ T5596] Bluetooth: hci0: command tx timeout [ 88.686285][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.692407][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.756113][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.756935][ T5589] veth0_vlan: entered promiscuous mode [ 88.829356][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.848677][ T5589] veth1_vlan: entered promiscuous mode [ 88.864513][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.268839][ T5588] veth0_vlan: entered promiscuous mode [ 89.304823][ T5589] veth0_macvtap: entered promiscuous mode [ 89.350924][ T5590] veth0_vlan: entered promiscuous mode [ 89.357067][ T5589] veth1_macvtap: entered promiscuous mode [ 89.373013][ T5588] veth1_vlan: entered promiscuous mode [ 89.402797][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.404491][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.473216][ T5590] veth1_vlan: entered promiscuous mode [ 89.513215][ T3436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.513231][ T3436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.519551][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.559856][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.577111][ T5587] veth0_vlan: entered promiscuous mode [ 89.618030][ T5587] veth1_vlan: entered promiscuous mode [ 89.619431][ T5588] veth0_macvtap: entered promiscuous mode [ 89.641783][ T5588] veth1_macvtap: entered promiscuous mode [ 89.699098][ T5590] veth0_macvtap: entered promiscuous mode [ 89.794337][ T5590] veth1_macvtap: entered promiscuous mode [ 89.983880][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.060933][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.066701][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.069133][ T5587] veth0_macvtap: entered promiscuous mode [ 90.193891][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.194643][ T5587] veth1_macvtap: entered promiscuous mode [ 90.223795][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.223812][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.449333][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.527788][ T1547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.527805][ T1547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.618653][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.932163][ T5791] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8'. [ 91.105800][ T3416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.105816][ T3416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.460339][ T1547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.460359][ T1547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.662976][ T5800] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10'. [ 91.761173][ T3428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.761190][ T3428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.331339][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.331356][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.424055][ T104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.675560][ T3416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.675581][ T3416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.903487][ T1547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.903506][ T1547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.046815][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.050179][ T1547] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.050926][ T104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.051301][ T104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.118945][ T3436] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.787639][ T5816] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14'. [ 94.138533][ T3436] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.142112][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.142152][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.142187][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.142218][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.142251][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.142285][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.142318][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.142349][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.142381][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.142412][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.142445][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.142477][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.279901][ T3436] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.482555][ T5823] syz_tun: entered allmulticast mode [ 94.569661][ T5823] dvmrp8: entered allmulticast mode [ 94.949113][ T5821] syz_tun: left allmulticast mode [ 97.160920][ T5872] syzkaller0: entered promiscuous mode [ 97.160944][ T5872] syzkaller0: entered allmulticast mode [ 97.188316][ T5872] tipc: Started in network mode [ 97.188348][ T5872] tipc: Node identity 06f53ff56f16, cluster identity 4711 [ 97.192840][ T5872] tipc: Enabled bearer , priority 0 [ 97.304090][ T5870] tipc: Resetting bearer [ 97.862020][ T5879] syz.4.33 (5879) used greatest stack depth: 19368 bytes left [ 99.036924][ T5870] tipc: Disabling bearer [ 99.650677][ T5719] tipc: Node number set to 1776500725 [ 99.881989][ T5911] 9p: Bad value for 'wfdno' [ 100.249147][ T37] audit: type=1800 audit(1786495158.827:2): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.44" name="memory_backed" dev="configfs" ino=8849 res=0 errno=0 [ 100.287787][ T37] audit: type=1800 audit(1786495158.887:3): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.44" name="power" dev="configfs" ino=8128 res=0 errno=0 [ 101.241853][ T5915] null_blk: disk my_zoned_dev created [ 101.534578][ T5938] Zero length message leads to an empty skb [ 104.073545][ T5972] dvmrp8: entered allmulticast mode [ 106.493198][ T6003] binder_alloc: 5999: pid 5999 spamming oneway? 1 buffers allocated for a total size of 4096 [ 107.203030][ T6014] 9p: Bad value for 'rfdno' [ 107.412030][ T6019] syz_tun: entered allmulticast mode [ 107.421742][ T6007] syz_tun: left allmulticast mode [ 108.329208][ T6038] 9p: Bad value for 'rfdno' [ 108.417601][ T6040] binder_alloc: 6033: pid 6033 spamming oneway? 1 buffers allocated for a total size of 4096 [ 108.549914][ T37] audit: type=1800 audit(1786495167.157:4): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.98" name="memory_backed" dev="configfs" ino=9463 res=0 errno=0 [ 108.552063][ T37] audit: type=1800 audit(1786495167.157:5): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.98" name="power" dev="configfs" ino=9466 res=0 errno=0 [ 109.309071][ T6064] 9p: Bad value for 'rfdno' [ 109.542312][ T37] audit: type=1800 audit(1786495168.147:6): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.112" name="memory_backed" dev="configfs" ino=9497 res=0 errno=0 [ 109.570345][ T6071] binder_alloc: 6070: pid 6070 spamming oneway? 1 buffers allocated for a total size of 4096 [ 109.570908][ T37] audit: type=1800 audit(1786495168.177:7): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.112" name="power" dev="configfs" ino=9501 res=0 errno=0 [ 111.042752][ T6107] binder_alloc: 6106: pid 6106 spamming oneway? 1 buffers allocated for a total size of 4096 [ 111.133161][ T37] audit: type=1800 audit(1786495169.737:8): pid=6109 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.125" name="memory_backed" dev="configfs" ino=9203 res=0 errno=0 [ 111.145739][ T37] audit: type=1800 audit(1786495169.747:9): pid=6109 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.125" name="power" dev="configfs" ino=9206 res=0 errno=0 [ 111.193967][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 111.193985][ T6111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.127'. [ 112.752583][ T6139] binder_alloc: 6137: pid 6137 spamming oneway? 1 buffers allocated for a total size of 4096 [ 113.278400][ T6147] fuse: Invalid rootmode [ 113.542017][ T6159] netlink: 48 bytes leftover after parsing attributes in process `syz.2.145'. [ 114.043793][ T6169] binder_alloc: 6168: pid 6168 spamming oneway? 1 buffers allocated for a total size of 4096 [ 114.259930][ T6180] fuse: Invalid rootmode [ 114.675813][ T6190] netlink: 48 bytes leftover after parsing attributes in process `syz.2.157'. [ 115.461880][ T6211] ======================================================= [ 115.461880][ T6211] WARNING: The mand mount option has been deprecated and [ 115.461880][ T6211] and is ignored by this kernel. Remove the mand [ 115.461880][ T6211] option from the mount to silence this warning. [ 115.461880][ T6211] ======================================================= [ 115.596540][ T6217] fuse: Invalid rootmode [ 115.723329][ T6221] netlink: 48 bytes leftover after parsing attributes in process `syz.1.168'. [ 115.968991][ T6225] binder_alloc: 6224: pid 6224 spamming oneway? 1 buffers allocated for a total size of 4096 [ 117.449900][ T6243] fuse: Bad value for 'rootmode' [ 117.725016][ T6256] netlink: 48 bytes leftover after parsing attributes in process `syz.4.181'. [ 117.784704][ T6259] binder_alloc: 6258: pid 6258 spamming oneway? 1 buffers allocated for a total size of 4096 [ 117.963893][ T6261] dvmrp8: entered allmulticast mode [ 118.487103][ T6279] fuse: Bad value for 'rootmode' [ 118.862802][ T6282] mmap: syz.3.188 (6282) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 120.581518][ T6292] netlink: 48 bytes leftover after parsing attributes in process `syz.4.195'. [ 120.788408][ T6294] fuse: Unknown parameter '0x00000000000000030000000000000000000000000000000000000000' [ 121.227996][ T6301] binder_alloc: 6300: pid 6300 spamming oneway? 1 buffers allocated for a total size of 4096 [ 122.428017][ T6316] fuse: Bad value for 'rootmode' [ 122.690631][ T6315] syz.4.204 (6315) used greatest stack depth: 19360 bytes left [ 122.895835][ T6324] netlink: 48 bytes leftover after parsing attributes in process `syz.4.208'. [ 123.045315][ T6327] dvmrp8: entered allmulticast mode [ 123.822617][ T6332] binder_alloc: 6329: pid 6329 spamming oneway? 1 buffers allocated for a total size of 4096 [ 124.106441][ T6342] fuse: Unknown parameter 'use00000000000000000000' [ 125.293464][ T6357] nbd: must specify a device to reconfigure [ 125.381017][ T6360] binder_alloc: 6359: pid 6359 spamming oneway? 1 buffers allocated for a total size of 4096 [ 126.584444][ T6375] fuse: Unknown parameter 'use00000000000000000000' [ 127.856816][ T6392] nbd: must specify a device to reconfigure [ 127.879076][ T6394] random: crng reseeded on system resumption [ 129.291295][ T6413] fuse: Unknown parameter 'use00000000000000000000' [ 130.180776][ T6436] 9p: Bad value for 'rfdno' [ 132.372155][ T6453] 9p: Bad value for 'rfdno' [ 132.473059][ T6454] fuse: Unknown parameter 'user_i00000000000000000000' [ 132.699746][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.699831][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.033303][ T6469] nbd: must specify a device to reconfigure [ 134.192964][ T6473] 9p: Bad value for 'rfdno' [ 134.283182][ T5598] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 134.645752][ T5598] usb 4-1: device descriptor read/64, error -71 [ 136.040078][ T5598] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 136.171267][ T6487] netlink: 36 bytes leftover after parsing attributes in process `syz.1.269'. [ 137.166713][ T5598] usb 4-1: device descriptor read/64, error -71 [ 138.234564][ T5598] usb usb4-port1: attempt power cycle [ 141.250802][ T6511] 9p: Bad value for 'rfdno' [ 141.450218][ T6514] nbd: must specify a device to reconfigure [ 144.351261][ T6550] netlink: 16 bytes leftover after parsing attributes in process `syz.1.286'. [ 144.351281][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'. [ 152.513592][ T6582] Bluetooth: MGMT ver 1.23 [ 158.124137][ T6606] netlink: 36 bytes leftover after parsing attributes in process `syz.0.303'. [ 159.978998][ T5597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.010326][ T5597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.014573][ T5597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.027843][ T5597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.029785][ T5597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 162.216055][ T5596] Bluetooth: hci5: command tx timeout [ 164.301335][ T5596] Bluetooth: hci5: command tx timeout [ 166.289589][ T5597] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 166.341761][ T5597] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 166.348240][ T5597] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 166.375445][ T5597] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 166.376358][ T5597] Bluetooth: hci5: command tx timeout [ 166.387483][ T5597] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 168.455894][ T5597] Bluetooth: hci6: command tx timeout [ 168.456107][ T5597] Bluetooth: hci5: command tx timeout [ 168.613982][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 170.536926][ T5596] Bluetooth: hci6: command tx timeout [ 172.665213][ T5596] Bluetooth: hci6: command tx timeout [ 174.835045][ T5596] Bluetooth: hci6: command tx timeout [ 177.130430][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.155289][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.173599][ T5597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.178691][ T5597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.179965][ T5597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.288066][ T5596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.324672][ T5596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.332746][ T5596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.333942][ T5596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.334799][ T5596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.426534][ T5597] Bluetooth: hci2: command tx timeout [ 180.375713][ T5597] Bluetooth: hci0: command tx timeout [ 181.505804][ T5597] Bluetooth: hci2: command tx timeout [ 182.277437][ T6612] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.277562][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.277737][ T6612] bridge_slave_0: entered allmulticast mode [ 182.319093][ T6612] bridge_slave_0: entered promiscuous mode [ 182.422461][ T6612] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.422596][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.422772][ T6612] bridge_slave_1: entered allmulticast mode [ 182.454695][ T6612] bridge_slave_1: entered promiscuous mode [ 182.456875][ T5597] Bluetooth: hci0: command tx timeout [ 183.322035][ T6612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.520890][ T6612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.575806][ T5597] Bluetooth: hci2: command tx timeout [ 184.816541][ T5597] Bluetooth: hci0: command tx timeout [ 185.507918][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 185.655699][ T5597] Bluetooth: hci2: command tx timeout [ 185.665838][ T31] usb 1-1: device descriptor read/64, error -71 [ 185.685821][ T6638] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.685937][ T6638] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.686153][ T6638] bridge_slave_0: entered allmulticast mode [ 185.688745][ T6638] bridge_slave_0: entered promiscuous mode [ 185.945804][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 185.966029][ T6612] team0: Port device team_slave_0 added [ 185.967256][ T6638] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.967381][ T6638] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.967559][ T6638] bridge_slave_1: entered allmulticast mode [ 185.972341][ T6638] bridge_slave_1: entered promiscuous mode [ 186.167937][ T31] usb 1-1: device descriptor read/64, error -71 [ 186.207383][ T6612] team0: Port device team_slave_1 added [ 186.295912][ T31] usb usb1-port1: attempt power cycle [ 186.748774][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 186.766232][ T31] usb 1-1: device descriptor read/8, error -71 [ 186.872411][ T5597] Bluetooth: hci0: command tx timeout [ 193.002817][ T6776] vicodec vicodec.0: Removing vicodec [ 194.147189][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.147258][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.860814][ T6638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.007704][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.007720][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.007744][ T6612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.014748][ T6638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.578765][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.578782][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.578807][ T6612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.835955][ T6784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.845043][ T1336] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.519071][ T6638] team0: Port device team_slave_0 added [ 198.576988][ T6638] team0: Port device team_slave_1 added [ 199.150332][ T6612] hsr_slave_0: entered promiscuous mode [ 199.153411][ T6612] hsr_slave_1: entered promiscuous mode [ 199.169156][ T6612] debugfs: 'hsr0' already exists in 'hsr' [ 199.169179][ T6612] Cannot create hsr debugfs directory [ 199.623601][ T6638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.623618][ T6638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.623643][ T6638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.057815][ T6638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.057831][ T6638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.057855][ T6638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.899427][ T6638] hsr_slave_0: entered promiscuous mode [ 204.900744][ T6638] hsr_slave_1: entered promiscuous mode [ 204.901643][ T6638] debugfs: 'hsr0' already exists in 'hsr' [ 204.901664][ T6638] Cannot create hsr debugfs directory [ 212.745376][ T6698] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.745572][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.762422][ T6698] bridge_slave_0: entered allmulticast mode [ 212.785782][ T6698] bridge_slave_0: entered promiscuous mode [ 213.392732][ T6681] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.426435][ T6681] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.464188][ T6681] bridge_slave_0: entered allmulticast mode [ 213.562564][ T6681] bridge_slave_0: entered promiscuous mode [ 213.769892][ T6698] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.770020][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.770197][ T6698] bridge_slave_1: entered allmulticast mode [ 213.797674][ T6698] bridge_slave_1: entered promiscuous mode [ 213.803694][ T6681] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.803838][ T6681] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.804017][ T6681] bridge_slave_1: entered allmulticast mode [ 213.838648][ T6681] bridge_slave_1: entered promiscuous mode [ 217.606417][ T1336] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.473271][ T6698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.490627][ T6681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.544615][ T6698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.587742][ T6681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.165082][ T6698] team0: Port device team_slave_0 added [ 220.281800][ T6681] team0: Port device team_slave_0 added [ 220.285303][ T6698] team0: Port device team_slave_1 added [ 220.323380][ T5596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.360879][ T6681] team0: Port device team_slave_1 added [ 220.363427][ T5596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.378864][ T5596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.394917][ T5596] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.401591][ T5596] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.375396][ T6698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.375412][ T6698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.375436][ T6698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.426936][ T6681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.426950][ T6681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.426973][ T6681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.500821][ T5596] Bluetooth: hci1: command tx timeout [ 222.729642][ T6698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.729658][ T6698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.729681][ T6698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.734094][ T6681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.734108][ T6681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.734130][ T6681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.577473][ T5596] Bluetooth: hci1: command tx timeout [ 225.153806][ T5597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.182134][ T5597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.183967][ T5597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.194929][ T5597] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.212245][ T5597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.897685][ T5597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 225.931427][ T5597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 225.934683][ T5597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 225.956079][ T5597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 225.963623][ T5597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 226.755766][ T5596] Bluetooth: hci1: command tx timeout [ 227.335718][ T5596] Bluetooth: hci4: command tx timeout [ 228.047371][ T6698] hsr_slave_0: entered promiscuous mode [ 228.055297][ T6698] hsr_slave_1: entered promiscuous mode [ 228.056411][ T5596] Bluetooth: hci5: command tx timeout [ 228.089780][ T6698] debugfs: 'hsr0' already exists in 'hsr' [ 228.089803][ T6698] Cannot create hsr debugfs directory [ 228.230025][ T6681] hsr_slave_0: entered promiscuous mode [ 228.231335][ T6681] hsr_slave_1: entered promiscuous mode [ 228.234781][ T6681] debugfs: 'hsr0' already exists in 'hsr' [ 228.234803][ T6681] Cannot create hsr debugfs directory [ 228.835746][ T5596] Bluetooth: hci1: command tx timeout [ 229.416164][ T5596] Bluetooth: hci4: command tx timeout [ 230.135828][ T5596] Bluetooth: hci5: command tx timeout [ 231.495752][ T5596] Bluetooth: hci4: command tx timeout [ 232.257701][ T5596] Bluetooth: hci5: command tx timeout [ 233.576025][ T5596] Bluetooth: hci4: command tx timeout [ 234.296012][ T5596] Bluetooth: hci5: command tx timeout [ 237.121083][ T5595] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.126678][ T5595] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.127704][ T5595] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.128813][ T5595] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.129557][ T5595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.177534][ T5595] Bluetooth: hci3: command tx timeout [ 241.255736][ T5595] Bluetooth: hci3: command tx timeout [ 241.644644][ T5596] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 241.675890][ T5596] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 241.676956][ T5596] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 241.679844][ T5596] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 241.682352][ T5596] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 243.338873][ T5595] Bluetooth: hci3: command tx timeout [ 243.759723][ T1336] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.815749][ T5595] Bluetooth: hci6: command tx timeout [ 245.415747][ T5595] Bluetooth: hci3: command tx timeout [ 245.895902][ T5595] Bluetooth: hci6: command tx timeout [ 247.992736][ T5595] Bluetooth: hci6: command tx timeout [ 250.056001][ T5595] Bluetooth: hci6: command tx timeout [ 255.582911][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.582977][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.637587][ T6838] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.637786][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.637974][ T6838] bridge_slave_0: entered allmulticast mode [ 264.642665][ T6838] bridge_slave_0: entered promiscuous mode [ 265.683807][ T6838] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.683927][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.684136][ T6838] bridge_slave_1: entered allmulticast mode [ 265.708830][ T6838] bridge_slave_1: entered promiscuous mode [ 267.454960][ T6838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.095262][ T6838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.105412][ T6847] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.105601][ T6847] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.124557][ T6847] bridge_slave_0: entered allmulticast mode [ 268.135366][ T6847] bridge_slave_0: entered promiscuous mode [ 268.211182][ T6852] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.211300][ T6852] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.211837][ T6852] bridge_slave_0: entered allmulticast mode [ 268.247358][ T6852] bridge_slave_0: entered promiscuous mode [ 268.374865][ T6847] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.374983][ T6847] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.375192][ T6847] bridge_slave_1: entered allmulticast mode [ 268.402025][ T6847] bridge_slave_1: entered promiscuous mode [ 268.441981][ T6852] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.442098][ T6852] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.442299][ T6852] bridge_slave_1: entered allmulticast mode [ 268.450791][ T6852] bridge_slave_1: entered promiscuous mode [ 269.230828][ T6838] team0: Port device team_slave_0 added [ 269.742694][ T6838] team0: Port device team_slave_1 added [ 269.910042][ T6847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.053864][ T6852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.335572][ T6847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.908595][ T6852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.674768][ T6838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.674783][ T6838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.674807][ T6838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.476734][ T6838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.476750][ T6838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.476774][ T6838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.987207][ T6847] team0: Port device team_slave_0 added [ 275.903611][ T6852] team0: Port device team_slave_0 added [ 275.956015][ T6847] team0: Port device team_slave_1 added [ 276.365082][ T6612] syz-executor (6612) used greatest stack depth: 18464 bytes left [ 276.367245][ T6638] syz-executor (6638) used greatest stack depth: 17632 bytes left [ 276.607875][ T6852] team0: Port device team_slave_1 added [ 280.497638][ T6847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.497654][ T6847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.497686][ T6847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.609404][ T5596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.667133][ T5596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.669496][ T5596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.670639][ T5596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.671284][ T5596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.139499][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.139514][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.139538][ T6852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.205473][ T6847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.205488][ T6847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.205511][ T6847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.251964][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.252085][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.252294][ T6871] bridge_slave_0: entered allmulticast mode [ 281.270913][ T6871] bridge_slave_0: entered promiscuous mode [ 281.416626][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.416642][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.416666][ T6852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.420986][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.421151][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.421339][ T6871] bridge_slave_1: entered allmulticast mode [ 281.434380][ T6871] bridge_slave_1: entered promiscuous mode [ 282.776230][ T5596] Bluetooth: hci0: command tx timeout [ 284.847416][ T6871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.855734][ T5596] Bluetooth: hci0: command tx timeout [ 286.935998][ T5596] Bluetooth: hci0: command tx timeout [ 287.387685][ T5595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.421829][ T5595] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.423680][ T5595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.466752][ T5595] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.467808][ T5595] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.257147][ T5596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 288.302075][ T5596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 288.315139][ T5596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 288.321934][ T5596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 288.483456][ T5596] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 289.015717][ T5596] Bluetooth: hci0: command tx timeout [ 289.495904][ T5596] Bluetooth: hci1: command tx timeout [ 290.855813][ T5596] Bluetooth: hci2: command tx timeout [ 291.149527][ T6871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.581765][ T5596] Bluetooth: hci1: command tx timeout [ 292.953736][ T5596] Bluetooth: hci2: command tx timeout [ 293.655702][ T5596] Bluetooth: hci1: command tx timeout [ 295.015719][ T5596] Bluetooth: hci2: command tx timeout [ 295.735793][ T5596] Bluetooth: hci1: command tx timeout [ 297.096047][ T5596] Bluetooth: hci2: command tx timeout [ 297.461579][ T5595] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.497734][ T5595] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.501464][ T5595] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.502587][ T5595] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.503862][ T5595] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.087425][ T6871] team0: Port device team_slave_0 added [ 299.092481][ T6881] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.092600][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.092853][ T6881] bridge_slave_0: entered allmulticast mode [ 299.101864][ T6881] bridge_slave_0: entered promiscuous mode [ 299.575803][ T5596] Bluetooth: hci4: command tx timeout [ 300.187904][ T5595] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.232260][ T5595] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.233336][ T5595] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.252661][ T5595] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.263466][ T5595] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.656155][ T5596] Bluetooth: hci4: command tx timeout [ 302.465752][ T5596] Bluetooth: hci5: command tx timeout [ 303.735940][ T5596] Bluetooth: hci4: command tx timeout [ 304.535849][ T5596] Bluetooth: hci5: command tx timeout [ 305.815872][ T5596] Bluetooth: hci4: command tx timeout [ 306.615720][ T5596] Bluetooth: hci5: command tx timeout [ 308.695737][ T5596] Bluetooth: hci5: command tx timeout [ 317.021917][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.021996][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.487978][ T6938] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.489893][ T6938] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.490106][ T6938] bridge_slave_0: entered allmulticast mode [ 322.494526][ T6938] bridge_slave_0: entered promiscuous mode [ 322.691880][ T6938] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.691999][ T6938] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.692211][ T6938] bridge_slave_1: entered allmulticast mode [ 322.701296][ T6938] bridge_slave_1: entered promiscuous mode [ 329.644836][ T6938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.273903][ T6938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.503660][ T6938] team0: Port device team_slave_0 added [ 334.196578][ T6955] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.196701][ T6955] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.197325][ T6955] bridge_slave_0: entered allmulticast mode [ 334.199942][ T6955] bridge_slave_0: entered promiscuous mode [ 335.742759][ T6938] team0: Port device team_slave_1 added [ 335.842684][ T6955] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.854815][ T6955] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.855086][ T6955] bridge_slave_1: entered allmulticast mode [ 335.884676][ T6955] bridge_slave_1: entered promiscuous mode [ 337.040227][ T6951] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.041445][ T6951] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.043434][ T6951] bridge_slave_0: entered allmulticast mode [ 337.047672][ T6951] bridge_slave_0: entered promiscuous mode [ 342.612710][ T6951] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.612832][ T6951] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.613047][ T6951] bridge_slave_1: entered allmulticast mode [ 342.647924][ T6951] bridge_slave_1: entered promiscuous mode [ 343.173971][ T6955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.442671][ T5595] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.448882][ T5595] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.453246][ T5595] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.471315][ T5595] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.480793][ T5595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.008611][ T6955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.655861][ T5595] Bluetooth: hci3: command tx timeout [ 345.946297][ T5596] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 345.968953][ T5596] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 345.994580][ T5596] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 345.999328][ T5596] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 346.000136][ T5596] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 346.159264][ T5597] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 346.183372][ T5597] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 346.184383][ T5597] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 346.197717][ T5597] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 346.227949][ T5597] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 347.748638][ T5595] Bluetooth: hci3: command tx timeout [ 348.296019][ T5595] Bluetooth: hci7: command tx timeout [ 348.696129][ T5595] Bluetooth: hci6: command tx timeout [ 349.826204][ T5595] Bluetooth: hci3: command tx timeout [ 350.405751][ T5595] Bluetooth: hci7: command tx timeout [ 350.775909][ T5595] Bluetooth: hci6: command tx timeout [ 351.915919][ T5595] Bluetooth: hci3: command tx timeout [ 352.455721][ T5595] Bluetooth: hci7: command tx timeout [ 352.873647][ T5595] Bluetooth: hci6: command tx timeout [ 354.535767][ T5595] Bluetooth: hci7: command tx timeout [ 355.155805][ T5595] Bluetooth: hci6: command tx timeout [ 358.428046][ T6984] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.428176][ T6984] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.428388][ T6984] bridge_slave_0: entered allmulticast mode [ 358.459187][ T6984] bridge_slave_0: entered promiscuous mode [ 358.905997][ T6984] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.906136][ T6984] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.906364][ T6984] bridge_slave_1: entered allmulticast mode [ 359.048578][ T6984] bridge_slave_1: entered promiscuous mode [ 359.249859][ T5596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.289312][ T5596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.302934][ T5596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.309210][ T5596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.313953][ T5596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.412449][ T5596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.417860][ T5597] Bluetooth: hci0: command tx timeout [ 361.461073][ T5596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.463931][ T5596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.618437][ T5596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.716877][ T5596] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.495895][ T5596] Bluetooth: hci0: command tx timeout [ 363.818730][ T5596] Bluetooth: hci2: command tx timeout [ 365.575817][ T5596] Bluetooth: hci0: command tx timeout [ 365.895762][ T5596] Bluetooth: hci2: command tx timeout [ 367.655720][ T5596] Bluetooth: hci0: command tx timeout [ 368.015867][ T5596] Bluetooth: hci2: command tx timeout [ 370.055822][ T5596] Bluetooth: hci2: command tx timeout [ 373.605052][ T1336] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.459940][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.460010][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.366722][ T7042] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.366840][ T7042] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.367057][ T7042] bridge_slave_0: entered allmulticast mode [ 392.372163][ T7042] bridge_slave_0: entered promiscuous mode [ 394.577349][ T7042] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.577472][ T7042] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.578105][ T7042] bridge_slave_1: entered allmulticast mode [ 394.600467][ T7042] bridge_slave_1: entered promiscuous mode [ 395.428975][ T7035] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.429104][ T7035] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.429430][ T7035] bridge_slave_0: entered allmulticast mode [ 395.457344][ T7035] bridge_slave_0: entered promiscuous mode [ 395.566659][ T7035] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.567690][ T7035] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.567918][ T7035] bridge_slave_1: entered allmulticast mode [ 395.597804][ T7035] bridge_slave_1: entered promiscuous mode [ 397.761148][ T7042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.382823][ T7042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.677345][ T7035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.368381][ T7045] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.368531][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.368798][ T7045] bridge_slave_0: entered allmulticast mode [ 400.373518][ T7045] bridge_slave_0: entered promiscuous mode [ 402.549758][ T7035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.511542][ T7045] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.511665][ T7045] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.511992][ T7045] bridge_slave_1: entered allmulticast mode [ 403.547462][ T7045] bridge_slave_1: entered promiscuous mode [ 404.304576][ T7042] team0: Port device team_slave_0 added [ 405.737641][ T7042] team0: Port device team_slave_1 added [ 406.641800][ T5595] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 406.678842][ T5595] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 406.679986][ T5595] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 406.707569][ T5595] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 406.709559][ T5595] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 407.317158][ T5596] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 407.487922][ T5596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 408.409813][ T5596] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 408.580947][ T5596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 408.708998][ T5596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 409.178565][ T5595] Bluetooth: hci4: command tx timeout [ 410.567402][ T5596] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 410.721413][ T5596] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 410.723934][ T5596] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 410.752060][ T5596] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 410.763404][ T5596] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 411.335853][ T5597] Bluetooth: hci1: command 0x0406 tx timeout [ 411.335864][ T5596] Bluetooth: hci4: command tx timeout [ 412.456100][ T5596] Bluetooth: hci5: command tx timeout [ 412.856062][ T5595] Bluetooth: hci8: command tx timeout [ 413.415745][ T5595] Bluetooth: hci4: command tx timeout [ 414.536057][ T5595] Bluetooth: hci5: command tx timeout [ 414.946452][ T5596] Bluetooth: hci8: command tx timeout [ 415.495826][ T5595] Bluetooth: hci4: command tx timeout [ 416.615758][ T5595] Bluetooth: hci5: command tx timeout [ 417.016015][ T5595] Bluetooth: hci8: command tx timeout [ 418.695862][ T5595] Bluetooth: hci5: command tx timeout [ 419.095710][ T5595] Bluetooth: hci8: command tx timeout [ 421.460276][ T5596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 421.495106][ T5596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 421.516298][ T5596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 421.522805][ T5596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 421.540238][ T5596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 423.576007][ T5596] Bluetooth: hci3: command tx timeout [ 423.661386][ T5595] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 423.693447][ T5595] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 423.700579][ T5595] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 423.716838][ T5595] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 423.720719][ T5595] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 425.656306][ T5596] Bluetooth: hci3: command tx timeout [ 426.057049][ T5596] Bluetooth: hci6: command tx timeout [ 427.735981][ T5595] Bluetooth: hci3: command tx timeout [ 428.137277][ T5595] Bluetooth: hci6: command tx timeout [ 429.815770][ T5595] Bluetooth: hci3: command tx timeout [ 430.215721][ T5595] Bluetooth: hci6: command tx timeout [ 432.419806][ T5595] Bluetooth: hci6: command tx timeout [ 440.080912][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.088545][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.495198][ T7136] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.495352][ T7136] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.495592][ T7136] bridge_slave_0: entered allmulticast mode [ 444.502579][ T7136] bridge_slave_0: entered promiscuous mode [ 445.030563][ T38] INFO: task syz-executor:6847 blocked for more than 143 seconds. [ 445.030593][ T38] Not tainted syzkaller #0 [ 445.030603][ T38] Blocked by coredump. [ 445.030609][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.030618][ T38] task:syz-executor state:D stack:19160 pid:6847 tgid:6847 ppid:1 task_flags:0x40054c flags:0x00080003 [ 445.030683][ T38] Call Trace: [ 445.030690][ T38] [ 445.030710][ T38] __schedule+0x16dc/0x5500 [ 445.030780][ T38] ? __pfx___schedule+0x10/0x10 [ 445.030821][ T38] rt_mutex_schedule+0x76/0xf0 [ 445.030842][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 445.030880][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 445.030904][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 445.030927][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 445.030960][ T38] ? rcu_barrier+0x4c/0x530 [ 445.030988][ T38] ? rcu_barrier+0x4c/0x530 [ 445.031018][ T38] ? rcu_barrier+0x4c/0x530 [ 445.031040][ T38] mutex_lock_nested+0x168/0x1d0 [ 445.031059][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 445.031086][ T38] rcu_barrier+0x4c/0x530 [ 445.031120][ T38] netdev_run_todo+0x2ff/0x10d0 [ 445.031149][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 445.031178][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 445.031200][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 445.031229][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 445.031264][ T38] ? netdev_state_change+0x1bc/0x210 [ 445.031288][ T38] tun_chr_close+0x13f/0x1c0 [ 445.031315][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 445.031342][ T38] __fput+0x42a/0xa80 [ 445.031369][ T38] task_work_run+0x1d9/0x270 [ 445.031401][ T38] ? __pfx_task_work_run+0x10/0x10 [ 445.031430][ T38] ? do_exit+0x735/0x2360 [ 445.031455][ T38] ? kmem_cache_free+0x187/0x6c0 [ 445.031474][ T38] ? put_net+0x191/0x260 [ 445.031494][ T38] ? do_exit+0x735/0x2360 [ 445.031524][ T38] do_exit+0x73a/0x2360 [ 445.031550][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 445.031575][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 445.031607][ T38] ? __pfx_do_exit+0x10/0x10 [ 445.031634][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 445.031654][ T38] ? rt_spin_lock+0x1e0/0x400 [ 445.031683][ T38] ? rt_spin_unlock+0x157/0x200 [ 445.031714][ T38] do_group_exit+0x22d/0x2f0 [ 445.031741][ T38] ? rt_spin_unlock+0x163/0x200 [ 445.031765][ T38] get_signal+0x121b/0x12c0 [ 445.031808][ T38] arch_do_signal_or_restart+0xbb/0x860 [ 445.031838][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 445.031862][ T38] ? kmem_cache_free+0x526/0x6c0 [ 445.031900][ T38] exit_to_user_mode_loop+0x104/0x730 [ 445.031930][ T38] ? rcu_is_watching+0x15/0xb0 [ 445.031953][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.031974][ T38] do_syscall_64+0x353/0x580 [ 445.032003][ T38] ? clear_bhb_loop+0x70/0xc0 [ 445.032027][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.032047][ T38] RIP: 0033:0x7f46475fe90e [ 445.032069][ T38] RSP: 002b:00007ffe91f246b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 445.032089][ T38] RAX: 0000000000000084 RBX: 000055555fba5500 RCX: 00007f46475fe90e [ 445.032103][ T38] RDX: 0000000000000084 RSI: 00007f46483f4670 RDI: 0000000000000003 [ 445.032115][ T38] RBP: 0000000000000001 R08: 00007ffe91f24734 R09: 000000000000000c [ 445.032128][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 445.032139][ T38] R13: 0000000000000000 R14: 00007f46483f4670 R15: 0000000000000000 [ 445.032169][ T38] [ 445.032178][ T38] INFO: task syz-executor:6852 blocked for more than 143 seconds. [ 445.032191][ T38] Not tainted syzkaller #0 [ 445.032200][ T38] Blocked by coredump. [ 445.032206][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.032214][ T38] task:syz-executor stat[ 445.032214][ T38] task:syz-executor state:D stack:19240 pid:6852 tgid:6852 ppid:1 task_flags:0x40054c flags:0x00080003 [ 445.032258][ T38] Call Trace: [ 445.032264][ T38] [ 445.032275][ T38] __schedule+0x16dc/0x5500 [ 445.032327][ T38] ? __pfx___schedule+0x10/0x10 [ 445.032367][ T38] rt_mutex_schedule+0x76/0xf0 [ 445.032387][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 445.032423][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 445.032447][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 445.032470][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 445.032502][ T38] ? rcu_barrier+0x4c/0x530 [ 445.032531][ T38] ? rcu_barrier+0x4c/0x530 [ 445.032560][ T38] ? rcu_barrier+0x4c/0x530 [ 445.032582][ T38] mutex_lock_nested+0x168/0x1d0 [ 445.032602][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 445.032628][ T38] rcu_barrier+0x4c/0x530 [ 445.032662][ T38] netdev_run_todo+0x2ff/0x10d0 [ 445.032690][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 445.032726][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 445.032749][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 445.032777][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 445.032811][ T38] ? netdev_state_change+0x1bc/0x210 [ 445.032835][ T38] tun_chr_close+0x13f/0x1c0 [ 445.032861][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 445.032887][ T38] __fput+0x42a/0xa80 [ 445.032913][ T38] task_work_run+0x1d9/0x270 [ 445.032944][ T38] ? __pfx_task_work_run+0x10/0x10 [ 445.032973][ T38] ? do_exit+0x735/0x2360 [ 445.032997][ T38] ? kmem_cache_free+0x187/0x6c0 [ 445.033016][ T38] ? put_net+0x191/0x260 [ 445.033035][ T38] ? do_exit+0x735/0x2360 [ 445.033066][ T38] do_exit+0x73a/0x2360 [ 445.033092][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 445.033118][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 445.033157][ T38] ? __pfx_do_exit+0x10/0x10 [ 445.033184][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 445.033204][ T38] ? rt_spin_lock+0x1e0/0x400 [ 445.033232][ T38] ? rt_spin_unlock+0x157/0x200 [ 445.033256][ T38] do_group_exit+0x22d/0x2f0 [ 445.033283][ T38] ? rt_spin_unlock+0x163/0x200 [ 445.033307][ T38] get_signal+0x121b/0x12c0 [ 445.033349][ T38] arch_do_signal_or_restart+0xbb/0x860 [ 445.033377][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 445.033401][ T38] ? kmem_cache_free+0x526/0x6c0 [ 445.033439][ T38] exit_to_user_mode_loop+0x104/0x730 [ 445.033467][ T38] ? rcu_is_watching+0x15/0xb0 [ 445.033490][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.033511][ T38] do_syscall_64+0x353/0x580 [ 445.033539][ T38] ? clear_bhb_loop+0x70/0xc0 [ 445.033562][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.033581][ T38] RIP: 0033:0x7f451a89e90e [ 445.033598][ T38] RSP: 002b:00007ffd113e3478 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 445.033617][ T38] RAX: 0000000000000084 RBX: 00005555661ec500 RCX: 00007f451a89e90e [ 445.033630][ T38] RDX: 0000000000000084 RSI: 00007f451b694670 RDI: 0000000000000003 [ 445.033643][ T38] RBP: 0000000000000001 R08: 00007ffd113e34f4 R09: 000000000000000c [ 445.033655][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 445.033666][ T38] R13: 0000000000000000 R14: 00007f451b694670 R15: 0000000000000000 [ 445.033696][ T38] [ 445.033761][ T38] [ 445.033761][ T38] Showing all locks held in the system: [ 445.033772][ T38] 1 lock held by khungtaskd/38: [ 445.033782][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 445.033839][ T38] 3 locks held by kworker/1:2/127: [ 445.033850][ T38] #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 445.033898][ T38] #1: ffffc900030bfc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 445.033943][ T38] #2: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 445.033999][ T38] 10 locks held by kworker/u8:6/151: [ 445.034015][ T38] 6 locks held by kworker/u8:10/1336: [ 445.034026][ T38] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 445.034072][ T38] #1: ffffc900063b7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 445.034118][ T38] #2: ffffffff8f59d8a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 445.034162][ T38] #3: ffff888061cc5160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 445.034214][ T38] #4: ffff88801af2c310 (&devlink->lock_key#5){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 445.034272][ T38] #5: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 445.034331][ T38] 3 locks held by kworker/u8:17/3428: [ 445.034342][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 445.034389][ T38] #1: ffffc9000e77fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 445.034435][ T38] #2: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 445.034486][ T38] 2 locks held by getty/5346: [ 445.034497][ T38] #0: ffff888036dae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 445.034542][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 445.034602][ T38] 4 locks held by kworker/u8:28/6538: [ 445.034615][ T38] 1 lock held by syz-executor/6838: [ 445.034625][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 445.034674][ T38] 1 lock held by syz-executor/6847: [ 445.034685][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 445.034740][ T38] 1 lock held by syz-executor/6852: [ 445.034751][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 445.034799][ T38] 1 lock held by syz-executor/6871: [ 445.034810][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 445.034859][ T38] 1 lock held by syz-executor/6881: [ 445.034869][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 445.034919][ T38] 1 lock held by syz-executor/6938: [ 445.034930][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 445.034978][ T38] 2 locks held by syz-executor/6951: [ 445.034989][ T38] #0: ffffffff8ed10a68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 445.035039][ T38] #1: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 445.035088][ T38] 1 lock held by syz-executor/6955: [ 445.035098][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 445.035148][ T38] 1 lock held by syz-executor/6973: [ 445.035158][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 445.035206][ T38] 1 lock held by syz-executor/6984: [ 445.035216][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 445.035266][ T38] 1 lock held by syz-executor/7035: [ 445.035276][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 445.035323][ T38] 1 lock held by syz-executor/7042: [ 445.035334][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 445.035382][ T38] 2 locks held by syz-executor/7045: [ 445.035393][ T38] #0: ffffffff8ed10a68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 445.035442][ T38] #1: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 445.035492][ T38] 1 lock held by syz-executor/7078: [ 445.035502][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 445.035551][ T38] 1 lock held by syz-executor/7083: [ 445.035561][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 445.035610][ T38] 1 lock held by syz-executor/7136: [ 445.228363][ T38] #0: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 445.228425][ T38] 2 locks held by syz-executor/7143: [ 445.228436][ T38] #0: ffffffff8ed10a68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 445.228488][ T38] #1: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 445.228533][ T38] 2 locks held by syz-executor/7147: [ 445.228544][ T38] #0: ffffffff8ed10a68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 445.228594][ T38] #1: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 445.228638][ T38] 1 lock held by syz-executor/7163: [ 445.228648][ T38] #0: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 445.228698][ T38] 3 locks held by syz-executor/7176: [ 445.228712][ T38] [ 445.228717][ T38] ============================================= [ 445.228717][ T38] [ 445.228737][ T38] NMI backtrace for cpu 0 [ 445.228758][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 445.228783][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.228794][ T38] Call Trace: [ 445.228801][ T38] [ 445.228808][ T38] dump_stack_lvl+0xe8/0x150 [ 445.228836][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 445.228859][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 445.228889][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 445.228915][ T38] sys_info+0x135/0x170 [ 445.228933][ T38] watchdog+0xfd7/0x1030 [ 445.228967][ T38] ? watchdog+0x1c7/0x1030 [ 445.228999][ T38] kthread+0x388/0x470 [ 445.229025][ T38] ? __pfx_watchdog+0x10/0x10 [ 445.229050][ T38] ? __pfx_kthread+0x10/0x10 [ 445.229076][ T38] ret_from_fork+0x514/0xb70 [ 445.229105][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 445.229132][ T38] ? __switch_to+0xc89/0x1420 [ 445.229156][ T38] ? __pfx_kthread+0x10/0x10 [ 445.229182][ T38] ret_from_fork_asm+0x1a/0x30 [ 445.229225][ T38] [ 445.229237][ T38] Sending NMI from CPU 0 to CPUs 1: [ 445.229263][ C1] NMI backtrace for cpu 1 [ 445.229280][ C1] CPU: 1 UID: 0 PID: 6535 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 445.229300][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.229310][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 445.229332][ C1] RIP: 0010:debug_smp_processor_id+0x0/0x20 [ 445.229360][ C1] Code: e0 8e 29 8e 4c 89 f6 e8 be ee bb f9 e9 67 ff ff ff cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 c7 c7 20 59 ca 8b 48 c7 c6 60 59 ca 8b eb 1c 66 66 [ 445.229374][ C1] RSP: 0018:ffffc900072ee6d8 EFLAGS: 00000282 [ 445.229388][ C1] RAX: 0000000000000001 RBX: ffffc900072ee7b8 RCX: ffff888025741f00 [ 445.229401][ C1] RDX: ffffc900072ee701 RSI: dffffc0000000000 RDI: ffffc900072ee7b0 [ 445.229414][ C1] RBP: 1ffffffff207be01 R08: ffffc900072eff38 R09: 0000000000000000 [ 445.229426][ C1] R10: ffffc900072ee7f8 R11: fffff52000e5dd01 R12: ffffc900072e8000 [ 445.229439][ C1] R13: ffffffff8177725f R14: ffffc900072ee7a8 R15: ffffc900072eff48 [ 445.229452][ C1] FS: 0000000000000000(0000) GS:ffff888125d46000(0000) knlGS:0000000000000000 [ 445.229466][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.229478][ C1] CR2: 00007f8491137e20 CR3: 0000000075bfc000 CR4: 00000000003526f0 [ 445.229493][ C1] Call Trace: [ 445.229499][ C1] [ 445.229505][ C1] rcu_is_watching+0x15/0xb0 [ 445.229526][ C1] unwind_next_frame+0x1b66/0x2550 [ 445.229547][ C1] ? ret_from_fork+0x514/0xb70 [ 445.229570][ C1] ? unwind_next_frame+0x8f/0x2550 [ 445.229588][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 445.229615][ C1] arch_stack_walk+0x11b/0x150 [ 445.229634][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 445.229662][ C1] stack_trace_save+0xa9/0x100 [ 445.229686][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 445.229712][ C1] ? __lock_acquire+0x683/0x2ce0 [ 445.229730][ C1] kasan_save_track+0x3e/0x80 [ 445.229757][ C1] ? kasan_save_track+0x3e/0x80 [ 445.229781][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 445.229797][ C1] ? __kmalloc_noprof+0x41a/0x780 [ 445.229812][ C1] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 445.229829][ C1] ? ieee80211_inform_bss+0x163/0x10d0 [ 445.229851][ C1] ? cfg80211_inform_single_bss_data+0xd98/0x1bf0 [ 445.229879][ C1] ? cfg80211_inform_bss_data+0x25b/0x3d50 [ 445.229904][ C1] ? cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 445.229930][ C1] ? ieee80211_bss_info_update+0x791/0xa50 [ 445.229953][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 [ 445.229977][ C1] ? ieee80211_iface_work+0x78a/0x1010 [ 445.230001][ C1] ? cfg80211_wiphy_work+0x29e/0x420 [ 445.230018][ C1] ? process_scheduled_works+0xa8e/0x14e0 [ 445.230036][ C1] ? worker_thread+0xa47/0xfb0 [ 445.230054][ C1] ? kthread+0x388/0x470 [ 445.230075][ C1] ? ret_from_fork+0x514/0xb70 [ 445.230119][ C1] __kasan_kmalloc+0x93/0xb0 [ 445.230136][ C1] __kmalloc_noprof+0x41a/0x780 [ 445.230152][ C1] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 445.230168][ C1] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 445.230195][ C1] ieee802_11_parse_elems_full+0x14b/0x2db0 [ 445.230217][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 445.230240][ C1] ? kvfree_call_rcu+0xd4/0x3c0 [ 445.230257][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 445.230288][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 445.230305][ C1] ? cfg80211_update_known_bss+0xa51/0x1430 [ 445.230325][ C1] ieee80211_inform_bss+0x163/0x10d0 [ 445.230351][ C1] ? __cfg80211_bss_update+0x125c/0x2010 [ 445.230377][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 445.230399][ C1] ? rt_spin_lock+0x20e/0x400 [ 445.230424][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 445.230447][ C1] cfg80211_inform_single_bss_data+0xd98/0x1bf0 [ 445.230474][ C1] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 445.230505][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 445.230545][ C1] ? _ieee802_11_parse_elems_full+0x2c0/0x4950 [ 445.230562][ C1] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 445.230590][ C1] cfg80211_inform_bss_data+0x25b/0x3d50 [ 445.230630][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 445.230675][ C1] ? __lock_acquire+0x683/0x2ce0 [ 445.230699][ C1] ? cfg80211_defragment_element+0x3e/0x360 [ 445.230728][ C1] ? ieee80211_bss_info_update+0x30f/0xa50 [ 445.230753][ C1] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 445.230782][ C1] ? ieee80211_bss_info_update+0x30f/0xa50 [ 445.230808][ C1] ieee80211_bss_info_update+0x791/0xa50 [ 445.230835][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 445.230858][ C1] ? sta_info_get+0x4f/0x300 [ 445.230889][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 445.230915][ C1] ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 [ 445.230947][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 445.230973][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 445.231000][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 445.231023][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 445.231046][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 445.231069][ C1] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 445.231090][ C1] ? reacquire_held_locks+0x104/0x190 [ 445.231117][ C1] ? rt_spin_unlock+0x163/0x200 [ 445.231139][ C1] ieee80211_iface_work+0x78a/0x1010 [ 445.231169][ C1] cfg80211_wiphy_work+0x29e/0x420 [ 445.231195][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 445.231214][ C1] process_scheduled_works+0xa8e/0x14e0 [ 445.231245][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 445.231267][ C1] ? assign_work+0x3cf/0x5d0 [ 445.231287][ C1] worker_thread+0xa47/0xfb0 [ 445.231320][ C1] kthread+0x388/0x470 [ 445.231343][ C1] ? __pfx_worker_thread+0x10/0x10 [ 445.231361][ C1] ? __pfx_kthread+0x10/0x10 [ 445.231384][ C1] ret_from_fork+0x514/0xb70 [ 445.231409][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 445.231432][ C1] ? __switch_to+0xc89/0x1420 [ 445.231454][ C1] ? __pfx_kthread+0x10/0x10 [ 445.231478][ C1] ret_from_fork_asm+0x1a/0x30 [ 445.231510][ C1] [ 445.496450][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 445.496471][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 445.496492][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.496503][ T38] Call Trace: [ 445.496511][ T38] [ 445.496519][ T38] vpanic+0x56c/0xa60 [ 445.496552][ T38] ? __pfx___schedule+0x10/0x10 [ 445.496577][ T38] ? __pfx_vpanic+0x10/0x10 [ 445.496612][ T38] panic+0xc5/0xd0 [ 445.496638][ T38] ? __pfx_panic+0x10/0x10 [ 445.496661][ T38] ? preempt_schedule_common+0x82/0xd0 [ 445.496686][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 445.496707][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 445.496732][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 445.496757][ T38] watchdog+0x1030/0x1030 [ 445.496791][ T38] ? watchdog+0x1c7/0x1030 [ 445.496822][ T38] kthread+0x388/0x470 [ 445.496848][ T38] ? __pfx_watchdog+0x10/0x10 [ 445.496872][ T38] ? __pfx_kthread+0x10/0x10 [ 445.496898][ T38] ret_from_fork+0x514/0xb70 [ 445.496927][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 445.496953][ T38] ? __switch_to+0xc89/0x1420 [ 445.496977][ T38] ? __pfx_kthread+0x10/0x10 [ 445.497003][ T38] ret_from_fork_asm+0x1a/0x30 [ 445.497044][ T38] [ 445.497309][ T38] Kernel Offset: disabled