last executing test programs: 2m31.0096204s ago: executing program 4 (id=72): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x8) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0xa2) 2m30.789925812s ago: executing program 4 (id=74): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000700)={0x3, &(0x7f0000000000)=[{0x50}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) 2m30.454435826s ago: executing program 4 (id=77): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002200)={0x110, 0x0, r1, [{0x1400000000000007, 0x0, 0xe3, 0x0, '\x7f\xb4\xe4\xa3\xe8$I\x88\x8c\n}\xac\xa9\x0e\x92\x04\xbc\xd4\xba\xdb\xc6\xf9K\x0eS\x00\xbdu\xb9;\xcd\xeb\x1aL\xec?\x7f\\N\xe1E\x89\xc9f\xd1\x8ax\xf3\x81\x04KJ\v\xe9\x19H+\xdf\xe3\xdb\xa42Lh\xb8\xe4nL\xfe1\xd5`\x86Cc\xdd\xf2n\x0e\xa7\xf5\x86\x03\xee\xec8\xad\x06\xa8\xd70\xba\xa9\xae(\xc0\x063\xd5\xb6i\xeb\xae\xe2>f\xa1\xc7\xe8_\xd9\xae,\x8d\xb0\x01\xf0<\xd6_e\xa4F\x10\xc0\xc6\x10=\x17\x16\x1a\xd9\x8b\xafq\x1e_\xee \xbb\x92\x9f\x89\n\x1b\xaf\xa2DDi\xe4\x9begcv\xa1\xe4E\x8fs\x8e\xc6[.\x98\x0f;\xc3H5\xfb\x0e\xe8\xb2<>\r\xeb\x9b\f\xf6\x15\xf2\xc0&L\xec;\xca\xc0\xa3\xb6\x84\xc7h\x9c\x9d\xfdUY-o3\xce\x00\x003\x90\xdc\x9f\x95,\xb2\xa5\r\xcc\x98\xf5\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x110) 2m30.107598436s ago: executing program 4 (id=85): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x935, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x5, 0x5, {0x5, 0xb, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m30.014061184s ago: executing program 1 (id=87): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703", @ANYRES8], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 2m28.45407332s ago: executing program 1 (id=115): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x88081, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000001140)={0x28, 0x2, r1, 0x0, &(0x7f0000000000)='p', 0xb6299679db8e922f, 0x2823}) 2m28.281781313s ago: executing program 1 (id=118): futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 2m28.182446267s ago: executing program 4 (id=120): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000004c0)) add_key(&(0x7f0000000380)='big_key\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="d023d1", 0x3, r0) 2m28.144882678s ago: executing program 2 (id=121): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 2m28.070274422s ago: executing program 4 (id=123): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x4000001, 0x2b, 0x8}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x100000000) 2m27.970709544s ago: executing program 2 (id=124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x18, r1, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 2m27.811013117s ago: executing program 2 (id=126): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl(r0, 0xfffff000, &(0x7f0000000000)) 2m27.661012192s ago: executing program 2 (id=128): r0 = syz_usb_connect(0x0, 0x188, &(0x7f0000000740)=ANY=[@ANYBLOB="1201100130b67f4010110190a9b20102030109027601010000000009046c0000"], 0x0) syz_usb_disconnect(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2m27.32630639s ago: executing program 1 (id=131): getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb3, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b46, &(0x7f0000000000)) 2m27.195544329s ago: executing program 3 (id=132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110a00000000000000008300000020000e801c0000800c00020900000a000100080211"], 0x34}}, 0x0) 2m27.123652179s ago: executing program 1 (id=133): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400305"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m27.006287304s ago: executing program 3 (id=134): r0 = socket$kcm(0x10, 0x2, 0x4) socket$igmp(0x2, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="48000000140081fb7059ae08060c040002ff0f039000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) 2m26.947836179s ago: executing program 0 (id=135): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000002c0)={'wg1\x00', {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'wg1\x00', {0x2, 0x0, @loopback}}) 2m26.87848985s ago: executing program 0 (id=136): r0 = socket(0x15, 0x5, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x20) getsockname$packet(r0, 0x0, &(0x7f0000000100)) 2m26.840327698s ago: executing program 3 (id=137): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2m26.738188725s ago: executing program 0 (id=138): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x2) 2m26.70208917s ago: executing program 3 (id=139): syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa}, 0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) 2m26.581380707s ago: executing program 0 (id=140): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 2m26.173858416s ago: executing program 0 (id=141): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43000000000000109022400010000000009040000010300010009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "f81d36c1"}, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_012={0x0, 0x1, 0x4}]}}, 0x0}, 0x0) 2m26.066183654s ago: executing program 3 (id=142): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004808) sendmsg$sock(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x0) 2m25.890263922s ago: executing program 3 (id=143): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000140)) 2m25.447234532s ago: executing program 2 (id=144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x7, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x16, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0x1}, @window={0x3, 0x3, 0x8}]}}}}}}}, 0x0) 2m25.205048945s ago: executing program 2 (id=145): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x10000}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 2m25.132539144s ago: executing program 1 (id=146): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) 1m36.797490773s ago: executing program 0 (id=147): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x1000, 0x10) 4.109377918s ago: executing program 32 (id=146): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) 2.211882286s ago: executing program 33 (id=145): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x10000}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 1.97118713s ago: executing program 34 (id=143): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000140)) 85.872191ms ago: executing program 35 (id=123): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x4000001, 0x2b, 0x8}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x100000000) 0s ago: executing program 36 (id=147): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x1000, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.173' (ED25519) to the list of known hosts. [ 71.694928][ T5828] cgroup: Unknown subsys name 'net' [ 71.807980][ T5828] cgroup: Unknown subsys name 'cpuset' [ 71.818728][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.440610][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.731899][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.744989][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.755234][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.763282][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.771249][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.781080][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.788772][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.798491][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.806051][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.814291][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.822200][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.826659][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.832375][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.845807][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.856409][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.864432][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.865004][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.879624][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.880619][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.887289][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.895185][ T5854] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.902385][ T5853] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.909734][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.923299][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.924405][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.931734][ T5854] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.957747][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.968031][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.983095][ T5854] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.990886][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.362453][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 76.538847][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 76.571978][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 76.607476][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 76.657064][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 76.685626][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.694622][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.702017][ T5859] bridge_slave_0: entered allmulticast mode [ 76.710302][ T5859] bridge_slave_0: entered promiscuous mode [ 76.770554][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.778617][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.786647][ T5859] bridge_slave_1: entered allmulticast mode [ 76.794402][ T5859] bridge_slave_1: entered promiscuous mode [ 76.883525][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.916033][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.926597][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.934871][ T5857] bridge_slave_0: entered allmulticast mode [ 76.941957][ T5857] bridge_slave_0: entered promiscuous mode [ 76.951109][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.959008][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.966428][ T5857] bridge_slave_1: entered allmulticast mode [ 76.973829][ T5857] bridge_slave_1: entered promiscuous mode [ 76.983287][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.996221][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.003478][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.010792][ T5860] bridge_slave_0: entered allmulticast mode [ 77.018526][ T5860] bridge_slave_0: entered promiscuous mode [ 77.035684][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.043714][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.052176][ T5862] bridge_slave_0: entered allmulticast mode [ 77.060382][ T5862] bridge_slave_0: entered promiscuous mode [ 77.110472][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.118584][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.127440][ T5860] bridge_slave_1: entered allmulticast mode [ 77.135112][ T5860] bridge_slave_1: entered promiscuous mode [ 77.142194][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.149691][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.158524][ T5862] bridge_slave_1: entered allmulticast mode [ 77.166163][ T5862] bridge_slave_1: entered promiscuous mode [ 77.175731][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.218717][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.227981][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.236436][ T5858] bridge_slave_0: entered allmulticast mode [ 77.245135][ T5858] bridge_slave_0: entered promiscuous mode [ 77.274948][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.299886][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.311776][ T5859] team0: Port device team_slave_0 added [ 77.318980][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.327285][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.335953][ T5858] bridge_slave_1: entered allmulticast mode [ 77.344128][ T5858] bridge_slave_1: entered promiscuous mode [ 77.364176][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.389929][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.401151][ T5859] team0: Port device team_slave_1 added [ 77.430070][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.457879][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.509596][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.540575][ T5857] team0: Port device team_slave_0 added [ 77.560911][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.573399][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.611817][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.638065][ T5858] team0: Port device team_slave_0 added [ 77.647778][ T5860] team0: Port device team_slave_0 added [ 77.656706][ T5857] team0: Port device team_slave_1 added [ 77.676546][ T5862] team0: Port device team_slave_0 added [ 77.695408][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.703058][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.731177][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.751354][ T5858] team0: Port device team_slave_1 added [ 77.760744][ T5860] team0: Port device team_slave_1 added [ 77.769051][ T5862] team0: Port device team_slave_1 added [ 77.786571][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.796257][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.825265][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.839757][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.847217][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.873884][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.917125][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.925495][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.925504][ T5854] Bluetooth: hci2: command tx timeout [ 77.960815][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.997157][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.005078][ T5854] Bluetooth: hci4: command tx timeout [ 78.005087][ T5842] Bluetooth: hci0: command tx timeout [ 78.017956][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.044956][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.067416][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.074480][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.101694][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.114979][ T5854] Bluetooth: hci1: command tx timeout [ 78.120450][ T5842] Bluetooth: hci3: command tx timeout [ 78.124893][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.136425][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.165448][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.198901][ T5859] hsr_slave_0: entered promiscuous mode [ 78.206957][ T5859] hsr_slave_1: entered promiscuous mode [ 78.216087][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.225087][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.253647][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.269751][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.277509][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.308520][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.354462][ T5857] hsr_slave_0: entered promiscuous mode [ 78.361652][ T5857] hsr_slave_1: entered promiscuous mode [ 78.369125][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.378524][ T5857] Cannot create hsr debugfs directory [ 78.435898][ T5862] hsr_slave_0: entered promiscuous mode [ 78.442295][ T5862] hsr_slave_1: entered promiscuous mode [ 78.452370][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.460064][ T5862] Cannot create hsr debugfs directory [ 78.496653][ T5858] hsr_slave_0: entered promiscuous mode [ 78.503915][ T5858] hsr_slave_1: entered promiscuous mode [ 78.510180][ T5858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.518169][ T5858] Cannot create hsr debugfs directory [ 78.571105][ T5860] hsr_slave_0: entered promiscuous mode [ 78.578180][ T5860] hsr_slave_1: entered promiscuous mode [ 78.585398][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.593533][ T5860] Cannot create hsr debugfs directory [ 79.002370][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.024132][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.039967][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.059275][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.075929][ T5862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.089375][ T5862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.103809][ T5862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.116935][ T5862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.181260][ T5860] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.209686][ T5860] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.243317][ T5860] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.267189][ T5860] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.312299][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.329751][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.339531][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.350968][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.487724][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.515958][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.550291][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.565851][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.588801][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.620248][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.648611][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.676408][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.688914][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.730436][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.738162][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.766017][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.786048][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.793467][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.805522][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.812757][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.849699][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.857066][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.868864][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.876293][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.888019][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.895929][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.915713][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.988052][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.003966][ T5842] Bluetooth: hci2: command tx timeout [ 80.023988][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.031883][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.067781][ T5858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.083194][ T5842] Bluetooth: hci0: command tx timeout [ 80.084480][ T5854] Bluetooth: hci4: command tx timeout [ 80.106277][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.126355][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.135396][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.163309][ T5854] Bluetooth: hci3: command tx timeout [ 80.173318][ T5854] Bluetooth: hci1: command tx timeout [ 80.269641][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.308807][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.328069][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.340624][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.366035][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.383111][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.390249][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.409552][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.437376][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.444651][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.496888][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.561395][ T5860] veth0_vlan: entered promiscuous mode [ 80.571063][ T5858] veth0_vlan: entered promiscuous mode [ 80.588991][ T5862] veth0_vlan: entered promiscuous mode [ 80.612736][ T5857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.644098][ T5858] veth1_vlan: entered promiscuous mode [ 80.660793][ T5860] veth1_vlan: entered promiscuous mode [ 80.670278][ T5862] veth1_vlan: entered promiscuous mode [ 80.709540][ T5859] veth0_vlan: entered promiscuous mode [ 80.748964][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.762127][ T5859] veth1_vlan: entered promiscuous mode [ 80.785821][ T5862] veth0_macvtap: entered promiscuous mode [ 80.800771][ T5858] veth0_macvtap: entered promiscuous mode [ 80.814191][ T5858] veth1_macvtap: entered promiscuous mode [ 80.827047][ T5862] veth1_macvtap: entered promiscuous mode [ 80.864496][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.901452][ T5860] veth0_macvtap: entered promiscuous mode [ 80.911077][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.927016][ T5858] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.937123][ T5858] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.946244][ T5858] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.955678][ T5858] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.970436][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.981736][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.994236][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.007826][ T5860] veth1_macvtap: entered promiscuous mode [ 81.040306][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.052254][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.068972][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.097340][ T5859] veth0_macvtap: entered promiscuous mode [ 81.110053][ T5862] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.119261][ T5862] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.129583][ T5862] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.139021][ T5862] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.156869][ T5859] veth1_macvtap: entered promiscuous mode [ 81.172188][ T5857] veth0_vlan: entered promiscuous mode [ 81.182561][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.195114][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.206069][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.217953][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.231827][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.261160][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.279244][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.290533][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.302762][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.315563][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.328457][ T5860] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.337814][ T5860] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.347922][ T5860] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.357403][ T5860] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.371009][ T5857] veth1_vlan: entered promiscuous mode [ 81.456749][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.469414][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.480390][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.491609][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.501979][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.512557][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.526663][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.537174][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.550720][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.587234][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.607740][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.617882][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.628646][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.638976][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.649716][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.661567][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.680795][ T5859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.690165][ T5859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.701093][ T5859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.710995][ T5859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.729343][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.737787][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.804667][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.813867][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.847108][ T5857] veth0_macvtap: entered promiscuous mode [ 81.881794][ T5857] veth1_macvtap: entered promiscuous mode [ 81.918877][ T5858] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.934555][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.944014][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.951827][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.960936][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.016997][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.028997][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.056107][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.082864][ T5854] Bluetooth: hci2: command tx timeout [ 82.089180][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.101144][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.112327][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.124117][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.135417][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.148421][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.163673][ T5854] Bluetooth: hci0: command tx timeout [ 82.164861][ T5842] Bluetooth: hci4: command tx timeout [ 82.185559][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.189481][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.210198][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.243682][ T5842] Bluetooth: hci1: command tx timeout [ 82.249643][ T5842] Bluetooth: hci3: command tx timeout [ 82.253301][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.295189][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.314845][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.331027][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.342207][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.353449][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.364201][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.375646][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.410331][ T5857] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.420093][ T5857] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.430107][ T5857] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.439941][ T5857] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.451412][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.470604][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.576237][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.596832][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.715245][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.728337][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.925049][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.972763][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.006315][ T5918] netlink: 'syz.0.1': attribute type 63 has an invalid length. [ 83.106449][ T5922] netlink: 'syz.0.1': attribute type 63 has an invalid length. [ 83.920017][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 84.009739][ T5956] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.038667][ T5955] process 'syz.2.26' launched './file0' with NULL argv: empty string added [ 84.133907][ T5915] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.165511][ T5842] Bluetooth: hci2: command tx timeout [ 84.243891][ T5842] Bluetooth: hci4: command tx timeout [ 84.243938][ T5842] Bluetooth: hci0: command tx timeout [ 84.324001][ T5854] Bluetooth: hci3: command tx timeout [ 84.324051][ T5854] Bluetooth: hci1: command tx timeout [ 84.342970][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 84.350123][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.350172][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.350191][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.350222][ T5915] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 84.350241][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.353358][ T5915] usb 1-1: config 0 descriptor?? [ 84.543707][ T5893] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.712825][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 84.720897][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.767828][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.781677][ T5915] microsoft 0003:045E:07DA.0001: item fetching failed at offset 31/34 [ 84.783431][ T5893] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 84.810073][ T5915] microsoft 0003:045E:07DA.0001: parse failed [ 84.840497][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.842794][ T5915] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 84.875084][ T5893] usb 2-1: config 0 descriptor?? [ 84.991361][ T9] usb 1-1: USB disconnect, device number 2 [ 85.317922][ T5893] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0 [ 85.324010][ T5993] netlink: 'syz.2.43': attribute type 5 has an invalid length. [ 85.333351][ T5893] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0 [ 85.362324][ T5893] konepure 0003:1E7D:2DB4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.1-1/input0 [ 85.574414][ T5898] usb 2-1: USB disconnect, device number 2 [ 85.753347][ T5893] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.859693][ T6013] tipc: Started in network mode [ 85.865333][ T6013] tipc: Node identity , cluster identity 4711 [ 85.871465][ T6013] tipc: Failed to set node id, please configure manually [ 85.878905][ T6013] tipc: Enabling of bearer rejected, failed to enable media [ 85.884706][ T5897] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.915626][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.927957][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.943746][ T5893] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 85.955804][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.967825][ T5893] usb 4-1: config 0 descriptor?? [ 86.064677][ T5897] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 86.080376][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.093148][ T5897] usb 3-1: config 0 descriptor?? [ 86.099237][ T5966] syz.1.31 (5966) used greatest stack depth: 18832 bytes left [ 86.109078][ T5897] cp210x 3-1:0.0: cp210x converter detected [ 86.317524][ T5897] usb 3-1: cp210x converter now attached to ttyUSB0 [ 86.332992][ T6023] netlink: 'syz.0.57': attribute type 8 has an invalid length. [ 86.361320][ T6025] warning: `syz.1.58' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.456078][ T5893] chicony 0003:04F2:1421.0003: hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.3-1/input0 [ 86.559656][ T9] usb 3-1: USB disconnect, device number 2 [ 86.604586][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 86.619950][ T9] cp210x 3-1:0.0: device disconnected [ 86.646695][ T5898] usb 4-1: USB disconnect, device number 2 [ 87.823162][ T6073] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 87.823189][ T6073] CUSE: unknown device info "3ܟ,̘" [ 87.823202][ T6073] CUSE: DEVNAME unspecified [ 88.298959][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.342784][ T5894] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 88.465513][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.490095][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.497438][ T5894] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 88.508610][ T5894] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 88.511907][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 88.530053][ T5894] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 88.536243][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.558979][ T5894] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 88.561570][ T9] usb 5-1: config 0 descriptor?? [ 88.583194][ T5894] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 88.600028][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0 [ 88.641393][ T5894] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 88.654164][ T5894] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 88.663319][ T5894] usb 2-1: Product: syz [ 88.669301][ T5894] usb 2-1: Manufacturer: syz [ 88.680202][ T5894] usb 2-1: SerialNumber: syz [ 88.690472][ T5894] usb 2-1: config 0 descriptor?? [ 88.703426][ T6087] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 88.713345][ T5894] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 88.747199][ T5894] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 88.973310][ T5893] usb 2-1: USB disconnect, device number 3 [ 88.982892][ T5893] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 89.027441][ T9] input: HID 28bd:0935 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0935.0004/input/input6 [ 89.283789][ T9] uclogic 0003:28BD:0935.0004: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0935] on usb-dummy_hcd.4-1/input0 [ 89.315606][ T9] usb 5-1: USB disconnect, device number 2 [ 90.673487][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.731897][ T6178] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.846291][ T25] usb 3-1: config 0 has an invalid interface number: 108 but max is 0 [ 90.883701][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.931543][ T25] usb 3-1: config 0 has no interface number 0 [ 90.946499][ T25] usb 3-1: New USB device found, idVendor=1110, idProduct=9001, bcdDevice=b2.a9 [ 90.964947][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.982784][ T25] usb 3-1: Product: syz [ 90.987137][ T25] usb 3-1: Manufacturer: syz [ 90.991796][ T25] usb 3-1: SerialNumber: syz [ 91.033283][ T25] usb 3-1: config 0 descriptor?? [ 91.051054][ T25] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9001) Rev (0XB2A9): ADI930 [ 91.214482][ T25] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 91.242856][ T5894] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.413458][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 91.432548][ T5894] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 91.449900][ T5894] usb 2-1: config 0 has no interface number 0 [ 91.473354][ T5894] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 91.492919][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.500986][ T5894] usb 2-1: Product: syz [ 91.518234][ T5894] usb 2-1: Manufacturer: syz [ 91.529285][ T5894] usb 2-1: SerialNumber: syz [ 91.549364][ T5894] usb 2-1: config 0 descriptor?? [ 91.554616][ T5894] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 91.554700][ T5894] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 91.817299][ T5894] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 91.974417][ T5894] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 92.164054][ T5897] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.176131][ T46] cfg80211: failed to load regulatory.db [ 92.212404][ T9] usb 2-1: USB disconnect, device number 4 [ 92.233758][ T9] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 92.237401][ T25] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 92.257929][ T46] usb 3-1: Direct firmware load for ueagle-atm/adi930.fw failed with error -2 [ 92.267055][ T25] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 92.285789][ T46] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/adi930.fw [ 92.303618][ T25] usb 3-1: USB disconnect, device number 3 [ 92.369613][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.390897][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.424476][ T5897] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 92.448308][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.479797][ T5897] usb 1-1: config 0 descriptor?? [ 92.980003][ T5897] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 93.042099][ T5897] arvo 0003:1E7D:30D4.0005: unbalanced collection at end of report description [ 93.090662][ T5897] arvo 0003:1E7D:30D4.0005: parse failed [ 93.475215][ T5897] arvo 0003:1E7D:30D4.0005: probe with driver arvo failed with error -22 [ 98.896548][ T5897] usb 1-1: USB disconnect, device number 3 [ 103.292632][ C0] sched: DL replenish lagged too much [ 134.559957][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.582379][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 183.357122][ T46] usb 3-1: [UEAGLE-ATM] firmware is not available [ 225.144554][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 225.150942][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 228.775722][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 228.781861][ T5853] Bluetooth: hci4: command 0x0406 tx timeout [ 228.802781][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 228.808914][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 228.862729][ T5853] Bluetooth: hci0: command 0x0406 tx timeout [ 236.084336][ T5153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.102692][ T5153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.111789][ T5153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.479200][ T5153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.487887][ T5153] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 237.495580][ T5153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.536445][ T5153] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.548742][ T5153] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.557170][ T5153] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.565959][ T5153] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.581655][ T5153] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 238.971336][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.663103][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.683060][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.713122][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.723517][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.731629][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 240.740106][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.892845][ T54] Bluetooth: hci5: command tx timeout [ 240.905307][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.929462][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.960054][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.970558][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 241.004429][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.012775][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.020937][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.028744][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 241.047105][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.057084][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 241.065571][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 241.074503][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 241.489277][ T5843] Bluetooth: hci6: command tx timeout [ 242.802848][ T54] Bluetooth: hci0: command tx timeout [ 243.803377][ T54] Bluetooth: hci5: command tx timeout [ 243.808858][ T54] Bluetooth: hci6: command tx timeout [ 244.648638][ T5843] Bluetooth: hci1: command tx timeout [ 244.654544][ T54] Bluetooth: hci2: command tx timeout [ 244.821721][ T6228] chnl_net:caif_netlink_parms(): no params data found [ 244.882851][ T5843] Bluetooth: hci0: command tx timeout [ 245.107089][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.135986][ T6228] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.176946][ T6228] bridge_slave_0: entered allmulticast mode [ 245.213118][ T6228] bridge_slave_0: entered promiscuous mode [ 245.241944][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.262842][ T6228] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.299382][ T6228] bridge_slave_1: entered allmulticast mode [ 245.332741][ T6228] bridge_slave_1: entered promiscuous mode [ 245.479309][ T6228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.539121][ T6228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.691500][ T6228] team0: Port device team_slave_0 added [ 245.738268][ T6228] team0: Port device team_slave_1 added [ 245.843001][ T5843] Bluetooth: hci6: command tx timeout [ 245.848478][ T5843] Bluetooth: hci5: command tx timeout [ 245.854715][ T31] INFO: task syz.4.123:6161 blocked for more than 153 seconds. [ 245.862486][ T31] Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 245.892730][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 246.012631][ T31] task:syz.4.123 state:D stack:24128 pid:6161 tgid:6161 ppid:5862 flags:0x00000000 [ 246.095651][ T31] Call Trace: [ 246.099013][ T31] [ 246.101976][ T31] __schedule+0x184f/0x4c30 [ 246.132680][ T31] ? __pfx___schedule+0x10/0x10 [ 246.137627][ T31] ? __pfx_lock_release+0x10/0x10 [ 246.163103][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 246.169196][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 246.208573][ T31] ? _raw_spin_lock_irq+0xdf/0x120 [ 246.224654][ T31] ? schedule+0x90/0x320 [ 246.228977][ T31] schedule+0x14b/0x320 [ 246.253297][ T31] ? down_read+0x6a5/0xa40 [ 246.257800][ T31] schedule_preempt_disabled+0x13/0x30 [ 246.292620][ T31] down_read+0x705/0xa40 [ 246.319773][ T31] ? __pfx_down_read+0x10/0x10 [ 246.325054][ T31] ? mm_release+0x263/0x430 [ 246.329615][ T31] ? __pfx_mm_release+0x10/0x10 [ 246.361007][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 246.382650][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 246.387945][ T31] exit_mm+0xd4/0x310 [ 246.391968][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 246.440641][ T31] ? __pfx_exit_mm+0x10/0x10 [ 246.445752][ T31] ? taskstats_exit+0x326/0xa60 [ 246.450668][ T31] do_exit+0x9b2/0x28e0 [ 246.486324][ T31] ? __pfx_do_exit+0x10/0x10 [ 246.491003][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 246.524822][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 246.531251][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 246.569613][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 246.582857][ T31] do_group_exit+0x207/0x2c0 [ 246.587526][ T31] __x64_sys_exit_group+0x3f/0x40 [ 246.612846][ T31] x64_sys_call+0x2634/0x2640 [ 246.617617][ T31] do_syscall_64+0xf3/0x230 [ 246.622165][ T31] ? clear_bhb_loop+0x35/0x90 [ 246.653970][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.659963][ T31] RIP: 0033:0x7fde7217e719 [ 246.692912][ T31] RSP: 002b:00007fde7245fd98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 246.701417][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fde7217e719 [ 246.722689][ T5843] Bluetooth: hci1: command tx timeout [ 246.728171][ T5843] Bluetooth: hci2: command tx timeout [ 246.872695][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.880756][ T31] RBP: 00007fde7245fdec R08: 00007fde7245fe7f R09: 0000000000015f16 [ 246.922894][ T31] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000032 [ 246.931537][ T31] R13: 0000000000015f16 R14: 0000000000015f0b R15: 00007fde7245fe40 [ 246.978231][ T5843] Bluetooth: hci0: command tx timeout [ 246.998605][ T31] [ 247.021100][ T31] [ 247.021100][ T31] Showing all locks held in the system: [ 247.190469][ T31] 1 lock held by khungtaskd/31: [ 247.213325][ T31] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 247.262616][ T31] 3 locks held by kworker/u8:5/1124: [ 247.267973][ T31] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 247.320483][ T31] #1: ffffc900041b7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 247.353325][ T31] #2: ffffffff8fcd3908 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 247.362425][ T31] 3 locks held by kworker/u8:8/3015: [ 247.400395][ T31] #0: ffff88814d1d9948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 247.452610][ T31] #1: ffffc9000ba0fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 247.482693][ T31] #2: ffffffff8fcd3908 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 247.492230][ T31] 2 locks held by getty/5599: [ 247.531284][ T31] #0: ffff888035c890a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 247.562627][ T31] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 247.589076][ T31] 1 lock held by syz-executor/5857: [ 247.602804][ T31] #0: ffffffff8e93d200 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 247.653506][ T31] 1 lock held by syz-executor/5858: [ 247.658779][ T31] #0: ffffffff8e93d200 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 247.708769][ T31] 1 lock held by syz-executor/5859: [ 247.714392][ T31] #0: ffffffff8fcd3908 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 247.746931][ T31] 1 lock held by syz-executor/5860: [ 247.752206][ T31] #0: ffffffff8e93d200 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 247.800016][ T31] 3 locks held by kworker/0:5/5898: [ 247.812829][ T31] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 247.837603][ T31] #1: ffffc90004177d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 247.893556][ T31] #2: ffffffff8fcd3908 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 247.923110][ T5843] Bluetooth: hci5: command tx timeout [ 247.928580][ T5843] Bluetooth: hci6: command tx timeout [ 247.942888][ T31] 2 locks held by kworker/u8:10/6214: [ 247.948329][ T31] 3 locks held by kworker/1:8/6216: [ 247.979661][ T31] 1 lock held by syz-executor/6222: [ 248.011157][ T31] #0: ffffffff8fcd3908 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab7/0x20a0 [ 248.040341][ T31] 1 lock held by syz-executor/6228: [ 248.052757][ T31] #0: ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 248.092639][ T31] 2 locks held by syz-executor/6230: [ 248.098001][ T31] #0: ffffffff8fcc6dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 248.135350][ T31] #1: ffffffff8fcd3908 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 248.172765][ T31] 2 locks held by syz-executor/6238: [ 248.178125][ T31] #0: ffffffff8fcc6dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 248.227356][ T31] #1: ffffffff8fcd3908 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 248.263035][ T31] 2 locks held by syz-executor/6239: [ 248.268391][ T31] #0: ffffffff8fcc6dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 248.303153][ T31] #1: ffffffff8fcd3908 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 248.347919][ T31] [ 248.350311][ T31] ============================================= [ 248.350311][ T31] [ 248.452598][ T31] NMI backtrace for cpu 0 [ 248.457073][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 248.467612][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 248.477703][ T31] Call Trace: [ 248.481016][ T31] [ 248.483991][ T31] dump_stack_lvl+0x241/0x360 [ 248.488711][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.494007][ T31] ? __pfx__printk+0x10/0x10 [ 248.498647][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 248.503635][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 248.509135][ T31] ? _printk+0xd5/0x120 [ 248.513329][ T31] ? __pfx__printk+0x10/0x10 [ 248.517959][ T31] ? __wake_up_klogd+0xcc/0x110 [ 248.522853][ T31] ? __pfx__printk+0x10/0x10 [ 248.527478][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 248.532544][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 248.538570][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 248.544609][ T31] watchdog+0xff4/0x1040 [ 248.548907][ T31] ? watchdog+0x1ea/0x1040 [ 248.553380][ T31] ? __pfx_watchdog+0x10/0x10 [ 248.558113][ T31] kthread+0x2f0/0x390 [ 248.562230][ T31] ? __pfx_watchdog+0x10/0x10 [ 248.566963][ T31] ? __pfx_kthread+0x10/0x10 [ 248.571597][ T31] ret_from_fork+0x4b/0x80 [ 248.576060][ T31] ? __pfx_kthread+0x10/0x10 [ 248.580689][ T31] ret_from_fork_asm+0x1a/0x30 [ 248.585516][ T31] [ 248.589465][ T31] Sending NMI from CPU 0 to CPUs 1: [ 248.595205][ C1] NMI backtrace for cpu 1 [ 248.595219][ C1] CPU: 1 UID: 0 PID: 6216 Comm: kworker/1:8 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 248.595241][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 248.595253][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 248.595285][ C1] RIP: 0010:unwind_next_frame+0xcf/0x22d0 [ 248.595315][ C1] Code: 20 bf 01 00 00 00 e8 d0 d7 21 00 49 8d 6d 50 48 89 e8 48 c1 e8 03 48 89 44 24 38 42 80 3c 20 00 74 08 48 89 ef e8 61 49 bd 00 <48> 8b 5d 00 48 85 db 74 24 48 81 c3 88 00 00 00 48 89 d8 48 c1 e8 [ 248.595337][ C1] RSP: 0018:ffffc90000a18870 EFLAGS: 00000246 [ 248.595352][ C1] RAX: 1ffff9200014313e RBX: 1ffff92000143134 RCX: ffffffff9a3d4903 [ 248.595366][ C1] RDX: dffffc0000000000 RSI: ffffc90000a11000 RDI: 0000000000000001 [ 248.595379][ C1] RBP: ffffc90000a189f0 R08: ffffc90000a18990 R09: 0000000000000000 [ 248.595391][ C1] R10: ffffc90000a189f0 R11: fffff52000143140 R12: dffffc0000000000 [ 248.595405][ C1] R13: ffffc90000a189a0 R14: ffffffff8137c0c5 R15: ffffc90000a189a8 [ 248.595419][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 248.595434][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.595446][ C1] CR2: 00007fb70e7ff604 CR3: 000000000e734000 CR4: 00000000003526f0 [ 248.595463][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 248.595473][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 248.595485][ C1] Call Trace: [ 248.595490][ C1] [ 248.595498][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 248.595524][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 248.595553][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 248.595578][ C1] ? nmi_handle+0x2a/0x5a0 [ 248.595604][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 248.595628][ C1] ? nmi_handle+0x14f/0x5a0 [ 248.595646][ C1] ? nmi_handle+0x2a/0x5a0 [ 248.595665][ C1] ? unwind_next_frame+0xcf/0x22d0 [ 248.595692][ C1] ? default_do_nmi+0x63/0x160 [ 248.595727][ C1] ? exc_nmi+0x123/0x1f0 [ 248.595753][ C1] ? end_repeat_nmi+0xf/0x53 [ 248.595774][ C1] ? arch_stack_walk+0xe5/0x150 [ 248.595797][ C1] ? unwind_next_frame+0xcf/0x22d0 [ 248.595825][ C1] ? unwind_next_frame+0xcf/0x22d0 [ 248.595853][ C1] ? unwind_next_frame+0xcf/0x22d0 [ 248.595885][ C1] [ 248.595891][ C1] [ 248.595902][ C1] ? __unwind_start+0xf8/0x740 [ 248.595921][ C1] __unwind_start+0x59a/0x740 [ 248.595945][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 248.595968][ C1] arch_stack_walk+0xe5/0x150 [ 248.595988][ C1] ? arch_stack_walk+0xe5/0x150 [ 248.596009][ C1] stack_trace_save+0x118/0x1d0 [ 248.596031][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 248.596058][ C1] ref_tracker_free+0x105/0x7e0 [ 248.596080][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 248.596109][ C1] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 248.596130][ C1] dst_destroy+0x105/0x360 [ 248.596151][ C1] ? rcu_core+0xa37/0x17a0 [ 248.596167][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 248.596189][ C1] rcu_core+0xaaa/0x17a0 [ 248.596213][ C1] ? __pfx_rcu_core+0x10/0x10 [ 248.596229][ C1] ? __run_timer_base+0x178/0x8e0 [ 248.596253][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 248.596295][ C1] handle_softirqs+0x2c5/0x980 [ 248.596322][ C1] ? do_softirq+0x11b/0x1e0 [ 248.596346][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 248.596374][ C1] do_softirq+0x11b/0x1e0 [ 248.596395][ C1] [ 248.596401][ C1] [ 248.596408][ C1] ? __pfx_do_softirq+0x10/0x10 [ 248.596430][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 248.596459][ C1] ? rcu_is_watching+0x15/0xb0 [ 248.596479][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 248.596503][ C1] ? neigh_periodic_work+0xb35/0xd50 [ 248.596528][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 248.596552][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 248.596582][ C1] neigh_periodic_work+0xb35/0xd50 [ 248.596612][ C1] ? process_scheduled_works+0x976/0x1850 [ 248.596637][ C1] process_scheduled_works+0xa63/0x1850 [ 248.596674][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 248.596702][ C1] ? assign_work+0x364/0x3d0 [ 248.596728][ C1] worker_thread+0x870/0xd30 [ 248.596757][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 248.596779][ C1] ? __kthread_parkme+0x169/0x1d0 [ 248.596806][ C1] ? __pfx_worker_thread+0x10/0x10 [ 248.596830][ C1] kthread+0x2f0/0x390 [ 248.596846][ C1] ? __pfx_worker_thread+0x10/0x10 [ 248.596871][ C1] ? __pfx_kthread+0x10/0x10 [ 248.596888][ C1] ret_from_fork+0x4b/0x80 [ 248.596913][ C1] ? __pfx_kthread+0x10/0x10 [ 248.596929][ C1] ret_from_fork_asm+0x1a/0x30 [ 248.596967][ C1] [ 249.712733][ T5843] Bluetooth: hci2: command tx timeout [ 249.718216][ T5843] Bluetooth: hci1: command tx timeout [ 249.723729][ T5843] Bluetooth: hci0: command tx timeout [ 249.852673][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 249.859592][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 249.870140][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 249.880242][ T31] Call Trace: [ 249.883556][ T31] [ 249.886513][ T31] dump_stack_lvl+0x241/0x360 [ 249.891239][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.896484][ T31] ? __pfx__printk+0x10/0x10 [ 249.901111][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 249.907247][ T31] ? vscnprintf+0x5d/0x90 [ 249.911631][ T31] panic+0x349/0x880 [ 249.915567][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 249.921770][ T31] ? __pfx_panic+0x10/0x10 [ 249.926229][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 249.931644][ T31] ? __irq_work_queue_local+0x137/0x410 [ 249.937234][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 249.942638][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 249.948832][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 249.955029][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 249.961225][ T31] watchdog+0x1033/0x1040 [ 249.965597][ T31] ? watchdog+0x1ea/0x1040 [ 249.970059][ T31] ? __pfx_watchdog+0x10/0x10 [ 249.974775][ T31] kthread+0x2f0/0x390 [ 249.978884][ T31] ? __pfx_watchdog+0x10/0x10 [ 249.983602][ T31] ? __pfx_kthread+0x10/0x10 [ 249.988228][ T31] ret_from_fork+0x4b/0x80 [ 249.992685][ T31] ? __pfx_kthread+0x10/0x10 [ 249.997301][ T31] ret_from_fork_asm+0x1a/0x30 [ 250.002125][ T31] [ 250.005503][ T31] Kernel Offset: disabled [ 250.009832][ T31] Rebooting in 86400 seconds..