last executing test programs: 1.971599641s ago: executing program 2 (id=3): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001600)=@mangle={'mangle\x00', 0x8, 0x6, 0x960, 0x770, 0x268, 0xf8, 0xf8, 0x470, 0x890, 0x890, 0x890, 0x890, 0x890, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x148, 0x170, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'veth0_to_team\x00', {}, 'netpci0\x00', {}, 0x14, 0x15}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @local, @local, @dev, @rand_addr=' \x01\x00', @private1, @mcast2, @dev, @private2, @private1, @mcast2, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9c0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2, 0x9, 0x6, 0x2, 0x2, 0x0, 0x70bd0b, 0x25dfdbff}, 0x10}}, 0x10) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000880)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x8, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x586, 0x6, 0xf667, 0xfffffffc, 0x7, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0xe39, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x2321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x1009b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) 1.715268019s ago: executing program 2 (id=6): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0xa0305, 0x0) pidfd_send_signal(r0, 0x38, &(0x7f0000000040)={0x26, 0xfaf, 0x7f}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0xd3, 0x1a, 0xd2, 0x40, 0x3f0, 0x581d, 0xbb42, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc5, 0x0, 0x3, 0xff, 0x1, 0x7, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0x0, 0x3, 0x1}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x2, 0x86, 0x3}}, {{0x9, 0x5, 0x87, 0x2, 0x400, 0xb, 0x7f, 0x14}}]}}]}}]}}, 0x0) 1.442189706s ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x50) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000000)={0x40, 0xf, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x3ff, 0x7, 0x6, 0x4678, 0xe0, 0xfe6, 0x2, 0x1000, 0x100, 0x9, 0x3ff}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107ff09058a02100000fa000905", @ANYRES32=r0], 0x0) 1.196059329s ago: executing program 4 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async, rerun: 32) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) (async) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabfee05ab5ac386dd63ec820e00102100fe80000000000000000f342662595553bd28c02d30f94671221c4e37f6000000000000000000ffffac1e00014e204e2104f19078ea03ae8185b925fd"], 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 32) 1.115956184s ago: executing program 1 (id=2): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x1}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0x4c08, 0x0) 804.350096ms ago: executing program 0 (id=1): setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_setup(0x7e3f, &(0x7f0000000240)={0x0, 0xcb98, 0x10, 0x1, 0xb2}, &(0x7f0000000000), &(0x7f0000000080)) r4 = gettid() r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r5, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) write$rfkill(r5, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a000001072414"], 0x0) splice(r3, 0x0, r6, 0x0, 0x4ffe2, 0x0) r7 = fanotify_init(0x200, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r7, 0x455, 0x8000003, r8, 0x0) syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182d1447ad1ad83700398d1c7", 0x11, 0xfffffffffffffffe) 700.187223ms ago: executing program 1 (id=7): prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0xae4d, 0x0, 0x0, 0x3], [0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x3, 0x400, 0x0, 0xed0, 0x4000000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0xfffffffc]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40000010}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) write$input_event(r0, &(0x7f0000000000)={{0x0, 0xea60}, 0x15}, 0x18) r3 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000002500)={0x1c, &(0x7f0000000040)={0x0, 0xe, 0x2, "1678"}, 0x0, 0x0}) 545.956624ms ago: executing program 4 (id=8): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x1d, 0x91, 0x67, 0x20, 0x174f, 0x6a31, 0x263f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x3c, 0x8f}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xfffffffffffffcc9, 0x1000000, 0x0}) 0s ago: executing program 2 (id=9): syz_usb_connect(0x1, 0x62d, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x55, 0x56, 0xa9, 0x8, 0xe8d, 0xa4, 0x2841, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61b, 0x3, 0x3, 0x9, 0x40, 0xf, [{{0x9, 0x4, 0xa1, 0x7, 0xa, 0xff, 0x0, 0x0, 0x47, [@hid_hid={0x9, 0x21, 0x2342, 0x4, 0x1, {0x22, 0x88e}}], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xeb01}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x2}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x8f, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0xac1}]}}, {{0x9, 0x5, 0x80, 0xc, 0x10, 0x8, 0x7, 0x6, [@generic={0x2e, 0x4, "392bd347aafed367c6f7f02c97b244634dcc76d29a72ad35346ecaeab6bcac3fab1498e744672bf331be2433"}, @generic={0x30, 0x24, "ccfa127c06adeaf67b50352c4abf5471e8265f5622640a35ca7db72bf7dfcaf876dcef76de7811747e5e1f53a4f7"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3bf, 0x1, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x8}]}}, {{0x9, 0x5, 0x1, 0x2, 0x20, 0x35, 0x7e, 0x3}}, {{0x9, 0x5, 0xe318b281ab022cd8, 0x0, 0x3ff, 0x0, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x7a}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x8}]}}, {{0x9, 0x5, 0xd, 0x0, 0x600, 0x3, 0x0, 0x3, [@generic={0xc3, 0x22, "4ff3526725a17222aadcbb7feb321796ba5d24d81cde5dff09b8fdc1cccc26473ac2538cdf450203e247c4706e0e2044a803fe3ad1de30c583d4265dd1ec33e2f1d35cc98880605f60f46f8472670a38926d34b162b38f43237520eb4ffcd79e4b82bf9da211f6318dc8c753bb847c229218c739b31907d43461659eb437c6177db6e0398635ec94324bccfc170c6d4de940c722a2ac2f21ff977ac32cd76ed4fa8c362843e87fcaf8c602c1fe32376c3151436dd4226c9e8acd7348b7377e7cf1"}, @generic={0x71, 0xc, "c0c8480c38dbef5f7060fcca62d3694a185568360be76afb29e4ac850e520a156d713dd16254e0cfd085a491e4a11c184d5467d4b2e94fa785222560a731ff58150d1816a8f784adb881ea6f23a6a494c5a11095d2e252ba7ed2f6137e09e1254a79aa8a152340bfa88eb939356c52"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x9, 0xff, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x97, 0x9}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x98, 0x80, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1cfd54c51347838b, 0x5, 0x1}, @generic={0x43, 0x1, "f6857ec2689ee67546a4c1ab840d34366ea5d6b6e3fb32436c11d4b078e205a25a7ab9e67e49cdd367b04c3544ab00461f655ebabb603be0fd9b812fd9ab92cddf"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0x2, 0x8, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7}]}}]}}, {{0x9, 0x4, 0x91, 0xd6, 0x6, 0x1f, 0x18, 0x58, 0x6, [], [{{0x9, 0x5, 0x1, 0x10, 0x200, 0x5, 0x3, 0x6, [@generic={0x86, 0x23, "d6b8933d8bac7b331762f0ab419ef8f7b3ee7a524fd03d9032472145bf4e0dd2e02828a91805c9f5bd262e44f9798a251160cb31e8f007da6a17483adb96c35c306c7a59b129ba8da3a811bb18c5de75abfd2d99237c2e18ecf719019a058ac736cb705c300d0df15875809e44399e9f9d78cb9e8a1e7d0dd2adb8fce7da3be4ae9be360"}]}}, {{0x9, 0x5, 0x2, 0x18, 0x400, 0x2, 0x1, 0x4}}, {{0x9, 0x5, 0x4, 0x2, 0x218, 0x8, 0x2, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5}]}}, {{0x9, 0x5, 0x7, 0x1, 0x40, 0xec, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0xffc0}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0xa5, 0x40, 0xfa, [@generic={0x92, 0x7, "2d6146e59acf8a03663ff1954dc91629483d91659c1170121ae641f951516016d80a0f622db52e13174fdeeb09df93bd29f72587043afa5f529c61bc85961b3baa1ff9bf3681023760d837d3dd822a4833596585852076f3b648ba24baef14ddd8e4882d3d35e19a0cbc65f5f46930c893038deeda0500f5418425d4a09d03104fa02586e098a46e37836f7e1f9ddedf"}, @generic={0x1b, 0x21, "71e69fa3221d7bebbc353428576ec2605b005b13407758b04b"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x4, 0x3b, 0x0, [@generic={0x5b, 0x23, "a888bf8b19adb45db015ed01da078467d173030916f1eadc95ed6570f673d0a02bd8a86509aa6a516a7498e24665858be2d65915834d8c45ba3a7dff5df3a5db70881e40f1ec6cc8642b06d48adc895d4fffeb6569b77e8a83"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xd, 0x2}]}}]}}, {{0x9, 0x4, 0xf6, 0x1, 0x3, 0x7b, 0x44, 0x47, 0x44, [@generic={0xcf, 0x22, "311da38ddac4e83da6e62ede73e912f4740151f73dc972e64ddfb166d83c2b8e777dcc94cca3a2e2734bbb0c377a616b8f3488ce6f90a6613338d3c6c758893d7114349c1121cc4f600fea2c45b2bd85e4464856ab1f0f600dd818d0272dbb9267bf25ddee795e46c897a78d334ab2b1c013575b649e3f92f7e9ed193e4ddf6bfa88a1806b3d9fe4a990febacd3c1884ffb4c37fc9153eabafec8f41eb00bdf1e698bb05d39482e5361304235e4f7faafd4d715053c67253ada05b2330be855ee75459c825741c95b4fe7867a3"}, @uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x26, 0x1, 0xf1, 0x7, "9ec53dfe9d84a8ce63"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x1, 0x41, 0xb, "6b44378aced316"}]}], [{{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x3, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x4}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x5, 0xf8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x15, 0x8}]}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0xe, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x4}, @generic={0x80, 0x31, "600fc4dbdc56b6036038b7a8f5554034f82d4eac949598bf0570bb72af4d5cc407994fadc33f4097ce098519178c2ee6a7df7375dad2cdaaa1ff526f27dbef8a1dae15ed74776f65fff9cd2af002b329f9cdbbb6e6bc05a517f42c8f00151f2a3db3498b8be23fe34c6238b86246c014c5ab45a9ef6fb4e57e7efe55200f"}]}}]}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x10, 0xba, 0x1, 0x40, 0x9}, 0x4a, &(0x7f00000000c0)={0x5, 0xf, 0x4a, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x8, 0x0, 0x6, [0xffc000, 0xc0, 0xff3f00, 0xf]}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x2, 0x5, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xd, 0x0, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xf, 0x2, 0x7fff}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "fea04f38cbf219a93b527b0eab126d9c"}]}, 0x1, [{0x70, &(0x7f00000001c0)=@string={0x70, 0x3, "e03e7093f73ec12d156e8ed1b9c68423b25de62172743629b05452333c1bc5f722abd638ba195d5c8c5886c0b391ae8aab3d6586b55790f0f5c68b67a97a07ee7bc126e2e7e04fba8225a8db6908c5b252fee2c1795879103f63cc0b31cf908aeb0c594cb8a080006b60eacaa498"}}]}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/mnt\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0014000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="004100002000010008001c00", @ANYRES32=r2, @ANYBLOB="b2c02e913ef3a7b647c22b590cf428c0c75fd691dcd6ec9b08384f35cd215162252dabe28357782004002556c6da92ab715fb27c298cf87b0900e54a0df13f923ba73b6134022f10c02cca6091a7278aebe70593b2769c1dc7f5ab8c6859498c22304ed4ea958ff7a39c98e7080a915647e599183b87c065"], 0x50}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x4, &(0x7f0000000240)=[{0x0, 0xfd, 0x3, 0x6}, {0x8, 0x82, 0x6, 0x5}, {0x101, 0x35, 0x3, 0xfffffffc}, {0x7, 0x2, 0x7e, 0x7eda}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.179' (ED25519) to the list of known hosts. [ 67.718130][ T5817] cgroup: Unknown subsys name 'net' [ 67.888146][ T5817] cgroup: Unknown subsys name 'cpuset' [ 67.896590][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.323083][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.428573][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.435036][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.168124][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.200892][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.210245][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.218312][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.226574][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.235101][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.243953][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.252565][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.260065][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.268289][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.284285][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.292173][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.305845][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.322122][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.330482][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.361092][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.361108][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.371914][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.377568][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.383643][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.392421][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.397787][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.406158][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.417825][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.419190][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.018433][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 74.111983][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 74.238300][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 74.252622][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 74.327953][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 74.348273][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.355578][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.362980][ T5849] bridge_slave_0: entered allmulticast mode [ 74.370303][ T5849] bridge_slave_0: entered promiscuous mode [ 74.420193][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.427556][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.435284][ T5849] bridge_slave_1: entered allmulticast mode [ 74.442265][ T5849] bridge_slave_1: entered promiscuous mode [ 74.549440][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.556701][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.563861][ T5843] bridge_slave_0: entered allmulticast mode [ 74.572211][ T5843] bridge_slave_0: entered promiscuous mode [ 74.597692][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.605001][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.612181][ T5846] bridge_slave_0: entered allmulticast mode [ 74.619498][ T5846] bridge_slave_0: entered promiscuous mode [ 74.642058][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.651805][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.659344][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.666742][ T5843] bridge_slave_1: entered allmulticast mode [ 74.673689][ T5843] bridge_slave_1: entered promiscuous mode [ 74.686942][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.694089][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.701569][ T5846] bridge_slave_1: entered allmulticast mode [ 74.709707][ T5846] bridge_slave_1: entered promiscuous mode [ 74.730852][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.784539][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.792057][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.799888][ T5845] bridge_slave_0: entered allmulticast mode [ 74.808538][ T5845] bridge_slave_0: entered promiscuous mode [ 74.862418][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.870712][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.880226][ T5845] bridge_slave_1: entered allmulticast mode [ 74.887465][ T5845] bridge_slave_1: entered promiscuous mode [ 74.896617][ T5849] team0: Port device team_slave_0 added [ 74.905452][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.918012][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.940482][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.947774][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.955189][ T5848] bridge_slave_0: entered allmulticast mode [ 74.962239][ T5848] bridge_slave_0: entered promiscuous mode [ 74.975992][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.007295][ T5849] team0: Port device team_slave_1 added [ 75.024580][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.033851][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.041596][ T5848] bridge_slave_1: entered allmulticast mode [ 75.049316][ T5848] bridge_slave_1: entered promiscuous mode [ 75.071101][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.082928][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.119286][ T5843] team0: Port device team_slave_0 added [ 75.152820][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.195224][ T5843] team0: Port device team_slave_1 added [ 75.203629][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.237041][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.244010][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.270871][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.306869][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.333509][ T5846] team0: Port device team_slave_0 added [ 75.343896][ T5845] team0: Port device team_slave_0 added [ 75.350316][ T5842] Bluetooth: hci0: command tx timeout [ 75.353487][ T5845] team0: Port device team_slave_1 added [ 75.363308][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.370718][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.396928][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.416466][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.423433][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.435490][ T5842] Bluetooth: hci4: command tx timeout [ 75.453169][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.468018][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.475079][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.501255][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.512540][ T5842] Bluetooth: hci3: command tx timeout [ 75.512840][ T5842] Bluetooth: hci2: command tx timeout [ 75.518096][ T5834] Bluetooth: hci1: command tx timeout [ 75.535815][ T5846] team0: Port device team_slave_1 added [ 75.573271][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.580918][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.607511][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.623630][ T5848] team0: Port device team_slave_0 added [ 75.671109][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.678289][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.704896][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.724364][ T5848] team0: Port device team_slave_1 added [ 75.731179][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.738245][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.764275][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.777023][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.784011][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.810344][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.848226][ T5849] hsr_slave_0: entered promiscuous mode [ 75.855079][ T5849] hsr_slave_1: entered promiscuous mode [ 75.956116][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.963088][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.990159][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.024164][ T5845] hsr_slave_0: entered promiscuous mode [ 76.031048][ T5845] hsr_slave_1: entered promiscuous mode [ 76.037323][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.045649][ T5845] Cannot create hsr debugfs directory [ 76.070702][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.077731][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.103849][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.126823][ T5843] hsr_slave_0: entered promiscuous mode [ 76.133200][ T5843] hsr_slave_1: entered promiscuous mode [ 76.140418][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.148260][ T5843] Cannot create hsr debugfs directory [ 76.187902][ T5846] hsr_slave_0: entered promiscuous mode [ 76.194667][ T5846] hsr_slave_1: entered promiscuous mode [ 76.201281][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.208997][ T5846] Cannot create hsr debugfs directory [ 76.427280][ T5848] hsr_slave_0: entered promiscuous mode [ 76.433617][ T5848] hsr_slave_1: entered promiscuous mode [ 76.439922][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.447808][ T5848] Cannot create hsr debugfs directory [ 76.777531][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.790906][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.805982][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.832205][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.925040][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.943394][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.970070][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.982384][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.049317][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.090560][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.102804][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.123937][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.206651][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.238055][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.260716][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.273946][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.352255][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.399669][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.413922][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.426634][ T5842] Bluetooth: hci0: command tx timeout [ 77.433528][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.445981][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.456101][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.490144][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.497461][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.515880][ T5842] Bluetooth: hci4: command tx timeout [ 77.539283][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.546435][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.562900][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.585369][ T5844] Bluetooth: hci3: command tx timeout [ 77.585376][ T5834] Bluetooth: hci2: command tx timeout [ 77.596978][ T5842] Bluetooth: hci1: command tx timeout [ 77.620063][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.641134][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.659650][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.666842][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.721668][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.728899][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.771927][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.799006][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.806193][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.821761][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.829025][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.967800][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.982084][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.029270][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.039955][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.072241][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.084771][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.091981][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.103979][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.134722][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.161455][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.172073][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.179216][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.206869][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.214013][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.239319][ T5849] veth0_vlan: entered promiscuous mode [ 78.284104][ T5849] veth1_vlan: entered promiscuous mode [ 78.308047][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.394388][ T5846] veth0_vlan: entered promiscuous mode [ 78.436271][ T5849] veth0_macvtap: entered promiscuous mode [ 78.456769][ T5849] veth1_macvtap: entered promiscuous mode [ 78.480376][ T5846] veth1_vlan: entered promiscuous mode [ 78.499021][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.518918][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.552644][ T5845] veth0_vlan: entered promiscuous mode [ 78.570626][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.583832][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.607626][ T5845] veth1_vlan: entered promiscuous mode [ 78.617606][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.628421][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.638160][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.647434][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.675674][ T5846] veth0_macvtap: entered promiscuous mode [ 78.741036][ T5848] veth0_vlan: entered promiscuous mode [ 78.754312][ T5846] veth1_macvtap: entered promiscuous mode [ 78.788382][ T5848] veth1_vlan: entered promiscuous mode [ 78.848954][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.887848][ T5845] veth0_macvtap: entered promiscuous mode [ 78.903429][ T977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.908902][ T5848] veth0_macvtap: entered promiscuous mode [ 78.921070][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.929217][ T977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.937782][ T5843] veth0_vlan: entered promiscuous mode [ 78.968254][ T5843] veth1_vlan: entered promiscuous mode [ 78.991646][ T5845] veth1_macvtap: entered promiscuous mode [ 79.004142][ T5848] veth1_macvtap: entered promiscuous mode [ 79.021367][ T5846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.032427][ T5846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.041325][ T5846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.050301][ T5846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.097562][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.110573][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.152313][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.168897][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.210924][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.227825][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.250332][ T5843] veth0_macvtap: entered promiscuous mode [ 79.250654][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.269719][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.282901][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.292461][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.301664][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.340009][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.351076][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.362278][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.372564][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.387885][ T5843] veth1_macvtap: entered promiscuous mode [ 79.472340][ T977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.483771][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.496704][ T5924] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 79.505135][ T977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.518203][ T5842] Bluetooth: hci0: command tx timeout [ 79.564439][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.585404][ T5842] Bluetooth: hci4: command tx timeout [ 79.640586][ T977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.662099][ T977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.670487][ T5842] Bluetooth: hci2: command tx timeout [ 79.675653][ T5844] Bluetooth: hci1: command tx timeout [ 79.676751][ T5842] Bluetooth: hci3: command tx timeout [ 79.693315][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.713258][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.722173][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.731326][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.784390][ T977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.795126][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.803888][ T977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.807623][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.875626][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.909179][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.925588][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.982724][ T977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.006720][ T977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.106457][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.132201][ T9] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 80.135513][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.155091][ T9] usb 3-1: config 0 has no interface number 0 [ 80.161281][ T9] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 80.185004][ T5896] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.214560][ T9] usb 3-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 80.237950][ T5932] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.262269][ T3453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.275575][ T9] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 80.304373][ T3453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.318485][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 80.355677][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.363348][ T5934] loop4: detected capacity change from 0 to 524255232 [ 80.372222][ T9] usb 3-1: Product: syz [ 80.376712][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 80.406705][ T5896] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 80.416018][ T9] usb 3-1: Manufacturer: syz [ 80.420680][ T9] usb 3-1: SerialNumber: syz [ 80.434672][ T5896] usb 4-1: config 0 has no interface number 0 [ 80.448379][ T5896] usb 4-1: config 0 interface 12 has no altsetting 0 [ 80.460729][ T9] usb 3-1: config 0 descriptor?? [ 80.469574][ T5896] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 80.487462][ T5927] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 80.508763][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.525146][ T5927] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 80.546366][ T5896] usb 4-1: Product: syz [ 80.550661][ T5896] usb 4-1: Manufacturer: syz [ 80.566331][ T5896] usb 4-1: SerialNumber: syz [ 80.590146][ T5896] usb 4-1: config 0 descriptor?? [ 80.781838][ T9] qmi_wwan 3-1:0.197: probe with driver qmi_wwan failed with error -71 [ 80.934859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.957171][ T5952] input: syz0 as /devices/virtual/input/input5 [ 80.966934][ T9] usb 3-1: USB disconnect, device number 2 [ 81.045975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 81.095117][ T5918] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.106479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 81.142976][ T5954] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 81.150201][ T5954] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 81.165007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 81.173305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 81.253140][ T5954] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 81.262236][ T5954] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 81.270927][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.296681][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 81.309047][ T5918] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 81.334125][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.384882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 81.399048][ T5918] usb 5-1: Product: syz [ 81.403295][ T5918] usb 5-1: Manufacturer: syz [ 81.409567][ T5918] usb 5-1: SerialNumber: syz [ 81.430050][ T5918] usb 5-1: config 0 descriptor?? [ 81.437429][ T24] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 81.455985][ T5930] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 81.463575][ T5954] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.491082][ T5918] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 81.500096][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 81.514806][ T5954] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 81.537743][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.544547][ T5954] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 81.553311][ T5954] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 81.623714][ T5954] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 81.630187][ T5954] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 81.665673][ C0] ------------[ cut here ]------------ [ 81.671385][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci4 [ 81.678134][ C0] WARNING: CPU: 0 PID: 5954 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0 [ 81.687160][ C0] Modules linked in: [ 81.691160][ C0] CPU: 0 UID: 0 PID: 5954 Comm: syz.0.1 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 81.702957][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.713017][ C0] RIP: 0010:__queue_work+0xd62/0xfe0 [ 81.718304][ C0] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 79 0e 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 c0 e0 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff [ 81.737912][ C0] RSP: 0018:ffffc90000007b08 EFLAGS: 00010046 [ 81.743987][ C0] RAX: 67f396d765264000 RBX: 0000000000000100 RCX: ffff88802d65bc00 [ 81.751957][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 81.759924][ C0] RBP: 1ffff1100f036a38 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 81.767906][ C0] R10: dffffc0000000000 R11: ffffed10170c4853 R12: dffffc0000000000 [ 81.775881][ C0] R13: ffff888032f54988 R14: 0000000000000008 R15: ffff8880781b5178 [ 81.783845][ C0] FS: 00007ff476e4d6c0(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 81.792773][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.799389][ C0] CR2: 00002000000e4030 CR3: 00000000302b0000 CR4: 00000000003526f0 [ 81.807358][ C0] Call Trace: [ 81.810650][ C0] [ 81.813508][ C0] call_timer_fn+0x17e/0x5f0 [ 81.818114][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 81.823921][ C0] ? call_timer_fn+0xbe/0x5f0 [ 81.828601][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 81.833726][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 81.838923][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 81.844735][ C0] __run_timer_base+0x646/0x860 [ 81.849582][ C0] ? ktime_get+0x3e/0x1f0 [ 81.853913][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 81.859276][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 81.865525][ C0] run_timer_softirq+0xb7/0x180 [ 81.870378][ C0] handle_softirqs+0x286/0x870 [ 81.875149][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 81.879921][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 81.885216][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 81.890412][ C0] __irq_exit_rcu+0xca/0x1f0 [ 81.895015][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 81.900228][ C0] irq_exit_rcu+0x9/0x30 [ 81.904468][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 81.910108][ C0] [ 81.913030][ C0] [ 81.915956][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 81.921935][ C0] RIP: 0010:finish_task_switch+0x26b/0x950 [ 81.927748][ C0] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 e9 27 05 00 00 4c 8b 75 d0 4c 89 e7 e8 1f a8 d7 09 e8 5a fe 35 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 81.947354][ C0] RSP: 0018:ffffc9000499f318 EFLAGS: 00000286 [ 81.953509][ C0] RAX: 67f396d765264000 RBX: 0000000000000000 RCX: 67f396d765264000 [ 81.961475][ C0] RDX: 0000000000000006 RSI: ffffffff8d982066 RDI: ffffffff8be28cc0 [ 81.969440][ C0] RBP: ffffc9000499f370 R08: ffffffff8fa104f7 R09: 1ffffffff1f4209e [ 81.977411][ C0] R10: dffffc0000000000 R11: fffffbfff1f4209f R12: ffff88802d65bc00 [ 81.985387][ C0] R13: dffffc0000000000 R14: ffff88802b8b8000 R15: ffff8880b863ab58 [ 81.993366][ C0] ? finish_task_switch+0x266/0x950 [ 81.998573][ C0] __schedule+0x16fd/0x4d00 [ 82.003114][ C0] ? schedule+0x165/0x360 [ 82.007470][ C0] ? __pfx___schedule+0x10/0x10 [ 82.012357][ C0] ? schedule+0x91/0x360 [ 82.016620][ C0] schedule+0x165/0x360 [ 82.020782][ C0] schedule_timeout+0x9a/0x270 [ 82.025546][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 82.030924][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 82.036119][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 82.041314][ C0] ? wait_for_completion+0x267/0x5d0 [ 82.046597][ C0] wait_for_completion+0x2bf/0x5d0 [ 82.051717][ C0] ? __pfx_wait_for_completion+0x10/0x10 [ 82.057361][ C0] ? flush_workqueue_prep_pwqs+0x47c/0x4f0 [ 82.063251][ C0] ? check_flush_dependency+0x23a/0x400 [ 82.068816][ C0] __flush_workqueue+0x6f7/0x14b0 [ 82.073866][ C0] ? drain_workqueue+0xb1/0x390 [ 82.078728][ C0] ? __pfx___flush_workqueue+0x10/0x10 [ 82.084205][ C0] drain_workqueue+0xd3/0x390 [ 82.088885][ C0] hci_dev_close_sync+0x659/0x1330 [ 82.094008][ C0] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 82.099561][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 82.105453][ C0] hci_dev_do_close+0x2f/0x90 [ 82.110126][ C0] hci_rfkill_set_block+0x21d/0x2e0 [ 82.115327][ C0] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 82.121040][ C0] rfkill_set_block+0x1d2/0x440 [ 82.125898][ C0] rfkill_fop_write+0x44b/0x570 [ 82.130744][ C0] ? common_file_perm+0x199/0x200 [ 82.135767][ C0] ? __pfx_rfkill_fop_write+0x10/0x10 [ 82.141140][ C0] ? security_kernfs_init_security+0x240/0x290 [ 82.147286][ C0] ? rw_verify_area+0x258/0x650 [ 82.152137][ C0] ? __pfx_rfkill_fop_write+0x10/0x10 [ 82.157513][ C0] vfs_write+0x27e/0xa90 [ 82.161765][ C0] ? __pfx_vfs_write+0x10/0x10 [ 82.166532][ C0] ? __fget_files+0x2a/0x420 [ 82.171298][ C0] ? __fget_files+0x2a/0x420 [ 82.175901][ C0] ? __fget_files+0x3a0/0x420 [ 82.180570][ C0] ? __fget_files+0x2a/0x420 [ 82.185175][ C0] ksys_write+0x145/0x250 [ 82.189503][ C0] ? __pfx_ksys_write+0x10/0x10 [ 82.194347][ C0] ? rcu_is_watching+0x15/0xb0 [ 82.199113][ C0] ? do_syscall_64+0xbe/0x3b0 [ 82.203798][ C0] do_syscall_64+0xfa/0x3b0 [ 82.208297][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 82.213493][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.219555][ C0] ? clear_bhb_loop+0x60/0xb0 [ 82.224228][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.230126][ C0] RIP: 0033:0x7ff475f8e929 [ 82.234642][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.254258][ C0] RSP: 002b:00007ff476e4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.262686][ C0] RAX: ffffffffffffffda RBX: 00007ff4761b6240 RCX: 00007ff475f8e929 [ 82.270650][ C0] RDX: 0000000000000008 RSI: 0000200000000300 RDI: 000000000000000a [ 82.278624][ C0] RBP: 00007ff476010b39 R08: 0000000000000000 R09: 0000000000000000 [ 82.286593][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.294560][ C0] R13: 0000000000000000 R14: 00007ff4761b6240 R15: 00007ff4762dfa28 [ 82.302549][ C0] [ 82.305568][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 82.312840][ C0] CPU: 0 UID: 0 PID: 5954 Comm: syz.0.1 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 82.324562][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 82.334611][ C0] Call Trace: [ 82.337885][ C0] [ 82.340725][ C0] dump_stack_lvl+0x99/0x250 [ 82.345367][ C0] ? __asan_memcpy+0x40/0x70 [ 82.350077][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.355279][ C0] ? __pfx__printk+0x10/0x10 [ 82.359873][ C0] panic+0x2db/0x790 [ 82.363772][ C0] ? __pfx_panic+0x10/0x10 [ 82.368184][ C0] ? show_trace_log_lvl+0x4fb/0x550 [ 82.373390][ C0] __warn+0x31b/0x4b0 [ 82.377369][ C0] ? __queue_work+0xd62/0xfe0 [ 82.382039][ C0] ? __queue_work+0xd62/0xfe0 [ 82.386710][ C0] report_bug+0x2be/0x4f0 [ 82.391124][ C0] ? __queue_work+0xd62/0xfe0 [ 82.395796][ C0] ? __queue_work+0xd62/0xfe0 [ 82.400464][ C0] ? __queue_work+0xd64/0xfe0 [ 82.405135][ C0] handle_bug+0x84/0x160 [ 82.409383][ C0] exc_invalid_op+0x1a/0x50 [ 82.413877][ C0] asm_exc_invalid_op+0x1a/0x20 [ 82.418807][ C0] RIP: 0010:__queue_work+0xd62/0xfe0 [ 82.424086][ C0] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 79 0e 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 c0 e0 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff [ 82.443692][ C0] RSP: 0018:ffffc90000007b08 EFLAGS: 00010046 [ 82.449753][ C0] RAX: 67f396d765264000 RBX: 0000000000000100 RCX: ffff88802d65bc00 [ 82.457715][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 82.465683][ C0] RBP: 1ffff1100f036a38 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 82.473650][ C0] R10: dffffc0000000000 R11: ffffed10170c4853 R12: dffffc0000000000 [ 82.481616][ C0] R13: ffff888032f54988 R14: 0000000000000008 R15: ffff8880781b5178 [ 82.489694][ C0] ? __queue_work+0xd61/0xfe0 [ 82.494388][ C0] call_timer_fn+0x17e/0x5f0 [ 82.498980][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 82.504784][ C0] ? call_timer_fn+0xbe/0x5f0 [ 82.509471][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 82.514590][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 82.519882][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 82.525857][ C0] __run_timer_base+0x646/0x860 [ 82.530707][ C0] ? ktime_get+0x3e/0x1f0 [ 82.535130][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 82.540498][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 82.546745][ C0] run_timer_softirq+0xb7/0x180 [ 82.551593][ C0] handle_softirqs+0x286/0x870 [ 82.556366][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 82.561133][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 82.566505][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 82.571785][ C0] __irq_exit_rcu+0xca/0x1f0 [ 82.576397][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 82.581597][ C0] irq_exit_rcu+0x9/0x30 [ 82.585838][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 82.591465][ C0] [ 82.594389][ C0] [ 82.597318][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 82.603293][ C0] RIP: 0010:finish_task_switch+0x26b/0x950 [ 82.609098][ C0] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 e9 27 05 00 00 4c 8b 75 d0 4c 89 e7 e8 1f a8 d7 09 e8 5a fe 35 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 82.628708][ C0] RSP: 0018:ffffc9000499f318 EFLAGS: 00000286 [ 82.634770][ C0] RAX: 67f396d765264000 RBX: 0000000000000000 RCX: 67f396d765264000 [ 82.642732][ C0] RDX: 0000000000000006 RSI: ffffffff8d982066 RDI: ffffffff8be28cc0 [ 82.650700][ C0] RBP: ffffc9000499f370 R08: ffffffff8fa104f7 R09: 1ffffffff1f4209e [ 82.658667][ C0] R10: dffffc0000000000 R11: fffffbfff1f4209f R12: ffff88802d65bc00 [ 82.666658][ C0] R13: dffffc0000000000 R14: ffff88802b8b8000 R15: ffff8880b863ab58 [ 82.674643][ C0] ? finish_task_switch+0x266/0x950 [ 82.679848][ C0] __schedule+0x16fd/0x4d00 [ 82.684392][ C0] ? schedule+0x165/0x360 [ 82.688726][ C0] ? __pfx___schedule+0x10/0x10 [ 82.693597][ C0] ? schedule+0x91/0x360 [ 82.697855][ C0] schedule+0x165/0x360 [ 82.702106][ C0] schedule_timeout+0x9a/0x270 [ 82.706873][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 82.712252][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 82.717450][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 82.722652][ C0] ? wait_for_completion+0x267/0x5d0 [ 82.727939][ C0] wait_for_completion+0x2bf/0x5d0 [ 82.733062][ C0] ? __pfx_wait_for_completion+0x10/0x10 [ 82.738695][ C0] ? flush_workqueue_prep_pwqs+0x47c/0x4f0 [ 82.744504][ C0] ? check_flush_dependency+0x23a/0x400 [ 82.750052][ C0] __flush_workqueue+0x6f7/0x14b0 [ 82.755082][ C0] ? drain_workqueue+0xb1/0x390 [ 82.759943][ C0] ? __pfx___flush_workqueue+0x10/0x10 [ 82.765411][ C0] drain_workqueue+0xd3/0x390 [ 82.770105][ C0] hci_dev_close_sync+0x659/0x1330 [ 82.775236][ C0] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 82.780790][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 82.786684][ C0] hci_dev_do_close+0x2f/0x90 [ 82.791360][ C0] hci_rfkill_set_block+0x21d/0x2e0 [ 82.796563][ C0] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 82.802290][ C0] rfkill_set_block+0x1d2/0x440 [ 82.807154][ C0] rfkill_fop_write+0x44b/0x570 [ 82.812023][ C0] ? common_file_perm+0x199/0x200 [ 82.817043][ C0] ? __pfx_rfkill_fop_write+0x10/0x10 [ 82.822422][ C0] ? security_kernfs_init_security+0x240/0x290 [ 82.828579][ C0] ? rw_verify_area+0x258/0x650 [ 82.834100][ C0] ? __pfx_rfkill_fop_write+0x10/0x10 [ 82.839493][ C0] vfs_write+0x27e/0xa90 [ 82.843750][ C0] ? __pfx_vfs_write+0x10/0x10 [ 82.848518][ C0] ? __fget_files+0x2a/0x420 [ 82.853106][ C0] ? __fget_files+0x2a/0x420 [ 82.857689][ C0] ? __fget_files+0x3a0/0x420 [ 82.862372][ C0] ? __fget_files+0x2a/0x420 [ 82.866967][ C0] ksys_write+0x145/0x250 [ 82.871314][ C0] ? __pfx_ksys_write+0x10/0x10 [ 82.876158][ C0] ? rcu_is_watching+0x15/0xb0 [ 82.881011][ C0] ? do_syscall_64+0xbe/0x3b0 [ 82.885691][ C0] do_syscall_64+0xfa/0x3b0 [ 82.890200][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 82.895400][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.901464][ C0] ? clear_bhb_loop+0x60/0xb0 [ 82.906135][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.912110][ C0] RIP: 0033:0x7ff475f8e929 [ 82.916523][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.936125][ C0] RSP: 002b:00007ff476e4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.944538][ C0] RAX: ffffffffffffffda RBX: 00007ff4761b6240 RCX: 00007ff475f8e929 [ 82.952502][ C0] RDX: 0000000000000008 RSI: 0000200000000300 RDI: 000000000000000a [ 82.960471][ C0] RBP: 00007ff476010b39 R08: 0000000000000000 R09: 0000000000000000 [ 82.968450][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.976422][ C0] R13: 0000000000000000 R14: 00007ff4761b6240 R15: 00007ff4762dfa28 [ 82.984403][ C0] [ 82.987681][ C0] Kernel Offset: disabled [ 82.992005][ C0] Rebooting in 86400 seconds..