last executing test programs: 2m14.509024538s ago: executing program 3 (id=788): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001840)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x172f, 0x34, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x66, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0x46a5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc, 0x9}}}}}]}}]}}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x6}, 0x8) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="09c74c72eed4641b40077cc6be07b1c1", 0x10) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x2000300, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c04, 0x80) renameat(r1, &(0x7f0000001400)='./file0/file0\x00', r1, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x140, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12e, 0x1, 0x1, 0xc0, 0x40, 0x8, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x4, {{0xb, 0x24, 0x6, 0x0, 0x0, "05cd7dd3e747"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x200, 0x7fff, 0xa3}, [@mdlm={0x15}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x0, 0x6, 0x8}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0xfff7, 0x6, 0x7f}, @mdlm_detail={0xba, 0x24, 0x13, 0x3, "16c2534159b6b21746a99e6c0e83ba301cbd8d7cd36653f5a28e2f515f95d0daaa140a8840ed91531fe207544a9897bf5126a1cfc870b16bbe54e8a401cc27077739469916d6d045a8869f4eea7bb72d939cb80bbdf70bc8373b842be526888166c14cc2df435d980354586d04ba4a35b9e436c8a44c606c34b43d269b83579ed2c5d2257205bfd60786e927bdc218774745a6069a2e4ef10ce3a1807feaf3c352c90367c9247ca6aed3ff83677d239b126025545593"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x81}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x62, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x81, 0x6}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x9, 0x9, 0x8, 0x60, 0x5}, 0x17, &(0x7f0000000180)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xa3e0e932715fbe2, 0x0, 0x3, 0xa23}, @wireless={0xb, 0x10, 0x1, 0x2, 0x11, 0x1d, 0x1, 0x1, 0x68}]}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x80a}}]}) 2m13.713134637s ago: executing program 3 (id=802): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, 0x0, 0x0, 0x40000100, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 2m13.339689979s ago: executing program 3 (id=805): r0 = syz_usb_connect(0x4, 0x36, &(0x7f0000000100)=ANY=[], 0x0) (async) syz_open_dev$evdev(0x0, 0x2, 0x903d01) syz_usb_connect$uac1(0x2, 0x72, 0x0, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, 0x0) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0xff, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, 0x0) (async) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = syz_open_dev$video(0x0, 0x8, 0x140) (async) r5 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f00000001c0)={0x33, &(0x7f0000000200)=[{0x2b, '\x00', @data=0x10, 0x9}]}) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) (async) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, 0xfffffffffffffffd) (async) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0xfffffffffffffffe, 0x0) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$kcm(0x10, 0x2, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x1f, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r7], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x168, &(0x7f0000000200)=ANY=[]) (async) modify_ldt$write(0x1, &(0x7f0000000000)={0xcb3, 0x0, 0x400, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x10) 2m13.205973559s ago: executing program 3 (id=807): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r2, &(0x7f0000000180)={'#! ', './file0', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<\x03W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e\x00\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI\x00\x00\x00\x00\x00\x00'}]}, 0x76) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2m12.577173958s ago: executing program 3 (id=815): socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xe400000e) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000131) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x278, r3, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x248, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x3}, {0x3, 0x8}, {}, {0x5, 0x6}, {0x1, 0x6}, {0x6, 0x6}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x5}, {0x0, 0x3}, {0x2, 0x6}, {0x2, 0x1}, {0x0, 0xa}, {0x0, 0xa}, {0x4, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x3, 0x4}, {0x0, 0x2}, {0x1, 0x2}, {0x6, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0xf559, 0x47, 0x9, 0x0, 0x0, 0x496]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2}, {0x1, 0x4}, {0x4, 0x7}, {0x0, 0x1}, {0x2, 0x7}, {0x6, 0x9}, {0x6, 0x9}, {0x1, 0x9}, {0x7, 0x7}, {0x7, 0x5}, {0x5, 0x5}, {0x6}, {0x0, 0x3}, {0x7, 0x1}, {0x2, 0x2}, {0x1, 0x7}, {0x7, 0x9}, {0x6, 0x8}, {0x6, 0x9}, {0x5, 0x1}, {0x3, 0x8}, {0x6, 0x2}, {0x5, 0x8}, {0x7}, {0x2}, {0x1, 0x8}, {0x7, 0x8}, {0x2, 0x8}, {0x0, 0x3}, {0x4, 0x2}, {0x3, 0xa}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x15e, 0x7, 0x1ff, 0xfffd, 0x2990, 0x4, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x98f, 0x6, 0x80, 0x1, 0x2, 0x7f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x36, 0x3, 0x60, 0x9, 0x6, 0xc, 0x48, 0x5, 0x6c, 0x12, 0x6c, 0xb, 0x0, 0x12, 0x1]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x7}, {0x2, 0x9}, {0x3, 0x4}, {0x4}, {0x3, 0x8}, {0x7, 0x2}, {0x1, 0xa}, {0x0, 0x9}, {0x1}, {0x2}, {0x5, 0x1}, {0x7, 0xa}, {0x4, 0x9}, {0x1, 0x4}, {0x7, 0x8}, {0x1, 0x2}, {0x7, 0x8}, {0x1, 0x8}, {0x5, 0xa}, {0x3, 0x2}, {0x3, 0x2}, {0x4, 0x3}, {0x1, 0xa}, {0x3, 0x2}, {0x3}, {0x7}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x2, 0x5, 0x60, 0x5, 0x6, 0x3, 0x1b, 0x3, 0x3, 0x6c, 0x30, 0xc, 0x24, 0x6c, 0xb, 0x1, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x5, 0x9, 0x6, 0xa, 0xc3, 0x100, 0x1ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x2, 0x4}, {0x7, 0x3}, {0x6}, {0x2, 0x9}, {0x1, 0x9}, {0x4, 0x2}, {0x2, 0x2}, {0x1, 0x1}, {0x5, 0x2}, {0x1, 0x9}, {0x7, 0x8}, {0x6, 0x4}, {0x6, 0x7}, {0x1, 0x3}, {0x4, 0x8}, {0x1, 0x8}, {0x3, 0x9}, {0x4, 0x6}, {0x2, 0x2}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0x1}, {0x2, 0x2}, {0x4, 0x8}, {0x0, 0x1}, {0x4, 0x4}, {0x3, 0x4}, {0x3, 0x6}, {0x7, 0x1}, {0x0, 0x4}, {0x0, 0x6}, {0x7, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x0, 0x4}, {0x3}, {0x4}, {0x0, 0x9}, {0x1, 0x1}, {0x1, 0x2}, {0x3}, {0x4, 0x6}, {0x1, 0x5}, {0x4, 0x2}, {0x5, 0x2}, {0x7, 0x8}, {0x4, 0x8}, {0x0, 0x5}, {0x0, 0x6}, {0x7, 0x8}, {0x3, 0x2}, {0x4, 0x1b}, {0x6}, {0x0, 0x2}, {0x5, 0x2}, {0x5, 0xa}, {0x6, 0x9}, {0x0, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x7, 0x4}, {0x3, 0x2}]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0x3}, {0x0, 0x5}, {0x0, 0x1}, {0x7}, {0x1, 0xa}, {0x1, 0x1}, {0x1, 0x7}, {0x3, 0x7}, {0x1}, {0x4, 0xa}, {}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x2}, {0x4, 0x2}, {0x3, 0x3}, {0x4, 0x5}, {0x4, 0xa}, {0x3, 0x8}, {0x6, 0x9}, {0x1, 0xa}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x4}, {0x7}, {0x1, 0x4}, {0x0, 0x9}, {0x6, 0x6}, {0x1, 0x6}, {}, {0x1, 0xa}, {0x7, 0x6}, {0x3, 0x5}, {0x5, 0x1}, {0x0, 0x5}, {0x0, 0x9}, {}, {0x6, 0x5}, {0x7, 0x2}, {0x6, 0x2}, {0x7}, {0x6, 0x7}, {0x7, 0x13}, {0x5, 0x2}, {0x4, 0x9}, {}, {0x3, 0xa}, {0x3, 0x5}, {0x4, 0x8}, {0x0, 0xa}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0x7}, {0x4, 0x2}, {0x4, 0x9}, {0x0, 0xa}, {0x3, 0x5}, {0x2, 0x9}, {0x6, 0x4}, {0x6, 0x4}, {}, {0x5, 0x7}, {0x5, 0x2}, {0x7, 0x4}, {0x0, 0x1}, {0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x4}, {0x0, 0x8}, {0x2, 0x5}, {0x5, 0x6}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x2}, {0x4, 0x8}, {0x6}, {0x1, 0x3}, {0x0, 0x3}, {0x5, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x8, 0x7f, 0x3ff, 0x7, 0x8, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x6, 0x764, 0xf992, 0x7, 0x9, 0x3, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4000000}, 0x3400c002) fcntl$setlease(r1, 0x400, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r7, &(0x7f0000000300)="89ba41c9", 0x4) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x75) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x8}) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket(0xa, 0x3, 0x87) 2m11.849126314s ago: executing program 3 (id=827): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000027000900040000000000000002000000b35147dd5000fca3e1e3b944093dcd67b36bf8b419ed8dff890ff6cb25b039742e52f605076405ee63b7d079c6489486485a5e8d1491820e7f2c1e060e1a2db16dec386ae0883f1476b81d36a99fd19261d71a3e4751bd841bd86763314f74704a95bd84649d23e85a5f7d3ad0ca5c6599e91628ff5aefc91798e2f2ea3433386db3053463f5574f85b5adb973b6e303a164527dd40ba53d8795"], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x14) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x8, 0x1) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r1, 0x80184151, &(0x7f0000000180)={0x0, &(0x7f00000000c0)="6d8b858e03b7dac655ea4b9c65d39153340601a8cdedad86acc72637abbe080b4130ad0e45e318edcf5773ecb67c78c38fdd7ce20563bb5028d383a581dbf4627a7e9dccb5b0668e4edab7844244a45fa99a77935bed4d669f98b5322f6837bd65130e5126d987015f6b5ac64b312be7ee7639a18b7eb44f866322471fa24d2dd315c80f2bfbcbf5bf09d02c4fcd67ee52227220b2f5f84caf2f204ac398cca2aad47953183c5b7df9a4ec4a815a66aad2", 0xb1}) 1m56.500425429s ago: executing program 32 (id=827): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000027000900040000000000000002000000b35147dd5000fca3e1e3b944093dcd67b36bf8b419ed8dff890ff6cb25b039742e52f605076405ee63b7d079c6489486485a5e8d1491820e7f2c1e060e1a2db16dec386ae0883f1476b81d36a99fd19261d71a3e4751bd841bd86763314f74704a95bd84649d23e85a5f7d3ad0ca5c6599e91628ff5aefc91798e2f2ea3433386db3053463f5574f85b5adb973b6e303a164527dd40ba53d8795"], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x14) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x8, 0x1) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r1, 0x80184151, &(0x7f0000000180)={0x0, &(0x7f00000000c0)="6d8b858e03b7dac655ea4b9c65d39153340601a8cdedad86acc72637abbe080b4130ad0e45e318edcf5773ecb67c78c38fdd7ce20563bb5028d383a581dbf4627a7e9dccb5b0668e4edab7844244a45fa99a77935bed4d669f98b5322f6837bd65130e5126d987015f6b5ac64b312be7ee7639a18b7eb44f866322471fa24d2dd315c80f2bfbcbf5bf09d02c4fcd67ee52227220b2f5f84caf2f204ac398cca2aad47953183c5b7df9a4ec4a815a66aad2", 0xb1}) 1m3.356672281s ago: executing program 0 (id=1358): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) recvmmsg(r0, 0x0, 0x0, 0x40000100, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) mq_unlink(&(0x7f0000000000)='eth0\x00') r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1800000056000100fcffffff000080000700007112"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="200000009375"}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000100)={{0x8, 0x4, 0x8, 0x853e, 'syz0\x00', 0x401}, 0x6, 0x4, 0xd, 0x0, 0x0, 0x4, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f00000005c0)={{0x4, 0x6, 0xfffffff5, 0x1000, '\x00', 0x5}, 0x1, [0x3, 0x2, 0x5, 0xd, 0xa, 0x1, 0x2, 0xd4892b3, 0x3, 0x2, 0x0, 0x8000000000, 0x8000, 0xc, 0x9, 0x3c0000, 0xffffffffffffffff, 0x3, 0x8, 0x7ff, 0x200, 0x6, 0x7, 0x6, 0x17, 0x80000001, 0x80000000, 0xffff, 0x2, 0x100000001, 0x7, 0x9, 0x86, 0x3ff, 0x400e3, 0xe12, 0x4, 0xa, 0x1, 0xfff, 0x8, 0x4000000000000000, 0xffffffffffffffff, 0x8, 0x1, 0x5, 0x6, 0x6, 0x1, 0x6, 0x10001, 0x401, 0xffffffffffffd5de, 0x7, 0x8, 0x1, 0x4, 0xc, 0x52c, 0x2, 0x9, 0x2, 0x7, 0xdf69, 0x1, 0x1, 0xc, 0x3, 0x60a, 0x8, 0x1ff, 0x8, 0x79, 0x1, 0x4, 0x84, 0x80, 0xfffffffffffffff7, 0x6, 0x0, 0x80000001, 0x6, 0xb, 0x8, 0x0, 0x7f, 0x7, 0xfffffffffffffe89, 0x0, 0x1, 0xfff, 0x2, 0x8, 0xfff, 0x2, 0x0, 0x9, 0x1, 0x2, 0xf5, 0x400, 0x7, 0x25f3, 0x8000, 0xd, 0x40, 0x8e21, 0x5, 0xac68, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x8000000000000000, 0x4, 0x1000, 0x2, 0x7, 0xffffffffffffffff, 0xd, 0x1, 0x3, 0x81, 0x81, 0xffffffffffffffff, 0x3, 0x4, 0x2]}) 1m3.269433097s ago: executing program 0 (id=1359): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001d40)=[{0x0}], 0x1}, 0x2) 1m3.265643857s ago: executing program 0 (id=1360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000040)={0x1, 0x2, 0x300000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'tunl0\x00', 0x8000}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m3.218226178s ago: executing program 0 (id=1361): r0 = socket(0x2, 0x5, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa00000010b70558f3070440a34605b409d5008276cd950134ca79abbd3ca58fd0b924874e0d2eca120ea9a54586e15b4e1a302150166991835437f6afd0bf8c0ec3529d39665ee9855b6a0d8865d68218f21800c8b6c3881ce23c8d249a779bfd0bb2cf6b18cabd6bf3f84db1758de183f4ec596544dad66237cc6c58b6e3976debe29f36177fb6a1e61982b6ebf9362976bdd64b662978b1f43d07cbf01af07e75ee4539ce440bf2674e3f8ae2628c6381c00446ced378d9d42fc74e755b93f0927c47cd49c8"], 0x18, 0x4855}, 0x24000052) 1m3.131778116s ago: executing program 0 (id=1362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3) (async) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x9, 0x90000) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000500)={0x1d, &(0x7f0000000440)=[{0x3a, '\x00', @buffer={"5c448629f8eaed19d21900670964611605b1c3c3293f6f8af890df25a46f1059", 0x20}, 0x2}, {0x7d, '\x00', @st={0x4, [{0x0, @uvalue=0x4e8}, {0x2, @uvalue=0x7fffffff}, {0x3, @svalue=0x1}, {0x1, @svalue=0x99f}]}, 0x5}]}) (async) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r4, 0x6f44, 0x959) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x4834, 0x0, 0xfffffffe, 0x1, 0x10, 0x1, 0x2}, 0x9c) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) read$msr(r6, &(0x7f00000001c0)=""/217, 0xd9) (async) getsockopt$inet_tcp_int(r6, 0x6, 0xe, &(0x7f00000000c0), &(0x7f0000000240)=0x4) recvmsg(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/141, 0x8d}], 0x1}, 0x40000021) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) (async) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r7, 0xa) 1m2.269366214s ago: executing program 0 (id=1366): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0xb635773f04ebbeed, 0x8033, r0, 0xe2ec4000) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) recvmmsg(r1, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x7, 0x0, &(0x7f0000000140)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, &(0x7f0000000280)={0x4f}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="b80000001900010300"], 0xb8}}, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r8, 0xae71, 0x0) ioctl$UI_SET_PHYS(r4, 0x4008556c, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close(r8) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(0x3) 34.876754905s ago: executing program 2 (id=1440): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001b24f048a37aaf674000700000a54000000060a030400000000000000000a0000080900010073797a310000000028"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000000000000000000000000000dabe", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 34.497002001s ago: executing program 2 (id=1442): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x121540) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000140)={0x2, 0x1ff, 0x81, 0x6, 0x8, 0x5}) read$char_usb(r2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x7, 0x7fffffffffffe, 0x5, 0x8, 0x9, 0x7f, 0x800000000f4a, 0x100000000, 0xbdb], 0xc000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x100000, 0x0, 0x5d, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x2c}}, 0x4000010) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'pim6reg\x00'}) connect$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x2}}, 0x10) syz_clone(0x21100491, 0x0, 0x0, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) 31.599909964s ago: executing program 2 (id=1452): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x810000, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) (async) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000003c0)={0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), 0x0, 0x0, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f00000002c0)={0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f0000000300)={0x0}) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, r3, r4, r5, r6, r7], 0x6}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000000580)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x7fff, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x0, 0x37, 0x130, 0x67, 0x0, 0x2, 0x11, 0x0, @private=0xa010101, @remote, {[@noop]}}, {0x6e24, 0x4e20, 0x118, 0x0, @opaque="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"}}}, 0x13e) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000400)=0x7000) (async) statx(0xffffffffffffff9c, &(0x7f00000064c0)='./file0\x00', 0x0, 0x800, 0x0) 30.285450263s ago: executing program 4 (id=1454): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000040)={0x33, 0x6, 0xffff}) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}, 0x2) 30.252929178s ago: executing program 4 (id=1455): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) shutdown(r0, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xf8, 0x0, 0x1, 0x90, 0x6, @multicast}, 0x14) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[], 0xfdef) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2001860000"], 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f00000000c0)=0x10, 0x12) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000080)={0x1, 0xd9, 0x0, 0x0, 0x4, 0xb, 0x8000}, 0xc) 30.142854672s ago: executing program 2 (id=1456): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40081120, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x10, 0xfffffffd}}, 0x50) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000440)={0x0, 0xc, 0x3, "182102"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004aaf36207205a5580a2701020301090223000100347a000904010901a37d7e030905000040f82ef1770b0fea745ee9e200020401080b"], 0x0) 29.350553383s ago: executing program 1 (id=1459): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0xc0000101}]}) connect$pppl2tp(r0, &(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x1, 0x2, 0x0, {0xa, 0x4e21, 0x6, @empty, 0x2}}}, 0x3a) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$printer(r5, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0x31, 0x6a, {0x6a, 0xe, "9255657c5cb0d3fbcffe3ecb8a4116046118cbc89da6202375db272a04296dc807000080e2d000000000b7114915b764948761f279cfd46c1f6746fda99015da3c9379da0eb4c98ef9a492dd64c6bad9c2e32f74fa116dfc4d9787a45d6a22000000000000000000"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2012}}}, &(0x7f0000000000)={0x34, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x25}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000300)={0x20, 0x0, 0xf3, {0xf1, "81662d3bda4badb6ce85594834ac01138392c527b28ed4a12cde3cc75ca92b1f9028ce039340841ff466382f2e20ce6155e1785563f88279a91212ea57c24390b8a5e3801e7ec75540e2bd5b449c7f859a379f0df03cab6d35b2e0b285d056daa2bec2cf266792b711f767355bec6a60b88dbaf93936a67e7c09da85e94ac31d158604974413def46cf31725e90938b9a632ad77ee25841174a5af864a236533f58e0b0a72dc66b7559e4d5b8d6a56f56d0318ba942df120bb4873a2f2d2d81db65cac24e5c0831eaedf9b4163f18989c8b3c32f5eb243fc752451edd19aa85a5b3e179f803cd5230506d2a0001607cd00"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x3}}) 26.622849725s ago: executing program 2 (id=1460): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000ffc8df25060000000c001900", @ANYRES32=r2, @ANYBLOB="08000500060000000800178004000600"], 0x2c}, 0x1, 0x0, 0x0, 0x408d1}, 0x40800) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000ffc8df25060000000c001900", @ANYRES32=r2, @ANYBLOB="08000500060000000800178004000600"], 0x2c}, 0x1, 0x0, 0x0, 0x408d1}, 0x40800) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800"], 0x70}}, 0x8000) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800"], 0x70}}, 0x8000) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b06c900060008"], 0xe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r4, 0x89e1, 0x0) (async) ioctl$SIOCGETNODEID(r4, 0x89e1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, r3, 0x0) (async) r6 = dup3(r5, r3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00005c4000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$OCFS2_IOC_GROUP_ADD64(r6, 0x40186f03, &(0x7f0000000240)={0x1, 0x280000, 0x7fffffff, 0xfffd}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000664000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x210000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, &(0x7f00000049c0), 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, &(0x7f00000049c0), 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615cf8c6e94b3ac320fa50046f5c18ac35b49243870e4e6b90c76177feda5469369b2b5a4739cc0b68c1772f1c9b9320d88426bc8f139429054c85b62f2a1dfc705453bea4cabf1f5eee5a0d301fb7c62e36dba0"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) capset(0x0, &(0x7f0000000080)={0x0, 0x4, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 26.445864461s ago: executing program 4 (id=1461): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) migrate_pages(0x0, 0x266d, &(0x7f0000000100)=0xff, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r1, 0x29, 0x42, 0x0, 0x0) mprotect(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0xffffffff, 0x0) mmap$panthor(&(0x7f000000d000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x6) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f00000000c0)="00012c615bc22000") syz_open_dev$char_usb(0xc, 0xb4, 0x1010000) 25.803978149s ago: executing program 1 (id=1462): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000180)) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0000009200000000000000002000100000010000000000200000000030005000000000002000000d3000001"], 0x50}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790db5c4e"}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r5) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000380)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x1c}}, 0x4008000) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x100000000003b) 24.948839063s ago: executing program 1 (id=1463): syz_usb_connect$midi(0x4, 0x32, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424020244"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) syz_usb_connect(0x3, 0x804, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000a40)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x340, 0x4, 0x3, 0x2, 0x10, 0x7e}, 0x4b, &(0x7f0000000940)=ANY=[@ANYBLOB="050f4b0006071002083807000b10010c00007f088100100c100a0500a9190000f00800141004067d3a351a85dd966b53289b01b08dc6460a1003000600010000000a1003021c000e040000"], 0x2, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x447}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) 24.639679475s ago: executing program 2 (id=1464): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000011c0)={@void, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x4, 0x1c, 0x66, 0x0, 0x20, 0x2, 0x0, @private=0xa0100ff, @local}, {0x11, 0x9c, 0x0, @empty}}}}}}, 0x2e) syz_usb_connect(0x5, 0x207, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000300)=[{&(0x7f0000001bc0)=""/251, 0xfb}], 0x1, 0x7, 0x38000000) syz_usb_connect(0x2, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2a, 0xb2, 0x6d, 0x8, 0x411, 0x5, 0x106c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x8, 0xec, 0x70, 0x74, "", [{{0x9, 0x4, 0x4b, 0x9, 0x2, 0x5c, 0x60, 0xcd, 0x6, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "b072"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x52, 0x6, 0x9}}], [{{0x9, 0x5, 0x80, 0x4, 0x400, 0xa, 0x0, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8000}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x8, 0x3, 0x8}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 23.087522705s ago: executing program 4 (id=1465): ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) (async) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x1, 0xe2, "ef25ca", 0x6, 0x5}) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1f8, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x81}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x40}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x2}}]}, 0x1f8}}, 0x84) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004e054}, 0x801) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xf0, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) (async) r3 = syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r3, &(0x7f0000000900)={0x2c, &(0x7f0000000680)={0x40, 0x3d, 0xb3, {0xb3, 0x5, "23e38f6c592dd17e3f00f36744359e56d7c7c4710098b9d4c6d1eaebd56e645632055930300f40c5ec8cfb1a43b8f4e1a528f1f49dd956fab500869ed99a290f4d926254dcdfcc3fd4546396c7386486c12745c3eace8500ba808aea7a79a826baac104af87be1ec9c7c496e4bedeca3cde2203573d4100289c631d6819cc0d9ee5fde9e8d164472472a47e02294293eea804bcdcb7d2bf32daa280740e0f2b5b178d2e658523caeda74d76e3caabc9ef5"}}, &(0x7f0000000740)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "5d91202fb95befaf094556afff859eaa42f1deed9a4c7e5c316e3e50959a5e9827cf309142a0df4727f4120f9bafe554758b1a942a0761a22f222dd4afb98cf53142875c4e1d9f8ed7249e0a365b34b3576f61dae6eec0345abd73cdddd2f7c7992c2f0ed9eba90ea6bb2a159516f645c0bbeff70440e9ee13258b0bc7fb071cbbfc59c3d4be3566495c5f5993f50573158a99f8006c6e364e9a8b517befb34c0880af3b2d87e7abaabfbec58bd6c2518c01f4a41ae058aeee015e32dd52a5305ee88834aeb0e42b2c6031685e6e6520ae7e6464aab91d4eba57176afaebe334e3"}}, &(0x7f0000000840)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000880)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x80, 0x7, 0x0, "f6d797a3", "9ccd8a65"}}, &(0x7f00000008c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x2, 0x2, 0x8b, 0x3, 0x5, 0x7f}}}, &(0x7f0000000d80)={0x84, &(0x7f0000000940)={0x20, 0x14, 0x64, "6aa6995eb9ecd8676579684ed78c27a2b7060de9b888a278ea1335dd89573eee0dde9528f2d2216e0b2b5c1b741c26ff6443efcecec617a18e0f42a98e6815dcdfeb137d8e439778a9773f6c8b6cbc1c7a5855d646449b15f6737eab0c5a3074a17adc7b"}, &(0x7f00000009c0)={0x0, 0xa, 0x1}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x80, 0x20}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x9d2}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000b40)={0x40, 0xb, 0x2, '#\\'}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x4d0e}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "d834"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x8e4}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000d00)={0x40, 0x1e, 0x1}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x8}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000010c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000ec0)={0x1a4, r4, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x71}}}}, [@NL80211_ATTR_IE={0x168, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0x80, 0xe}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0xc, 0x6}}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}, @random_vendor={0xdd, 0xa0, "6a516a06a8a895a43aa7cca5131b44f9b14ebcdfb22464e32aec1b1188e2678fe3cc11dcb66119be9a27abce405bedb59cb6b1fa565a8f4d8163412c971b9a2dd12f36154bd81f7adf62e1902bceb36a2a1ce24f0e49438459b2356c2b1b18626e5e46b55b7f5671baa2e1e95865697222d33023f49ecaac0783f4071448b9d4a801ca6ecd40c67a53fbd53c614158c7c07d3f85d7c7c7dddc13d3eadcd91dfd"}, @supported_rates={0x1, 0x6, [{0xb}, {0xc}, {0x30}, {0x60}, {0x9}, {0x4}]}, @ibss={0x6, 0x2}, @preq={0x82, 0x78, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x6, 0x1, 0xf0, @device_a, 0x4, @value=@broadcast, 0x1, 0x3, 0x8, [{{0x1}, @broadcast, 0x5}, {{0x1}, @broadcast, 0x68968d5e}, {{0x1, 0x0, 0x1}, @broadcast}, {{0x1, 0x0, 0x1}, @device_a, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0xfffffffb}, {{}, @device_a, 0xd5}, {{0x1, 0x0, 0x1}, @device_b, 0x7fffffff}, {{0x1, 0x0, 0x1}, @device_b, 0x1}]}}, @channel_switch={0x25, 0x3, {0x0, 0xab, 0xe8}}, @rann={0x7e, 0x15, {{0x1, 0x4}, 0x3, 0x5, @broadcast, 0x400, 0xb7, 0xab45}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x25}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x26}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) r5 = dup2(r0, r0) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000001440)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001400)={&(0x7f0000001140)={0x2b0, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x284, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @payload={{0xc}, @void}}]}, {0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_OP={0x8}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x1dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xf0, 0x6, 0x1, 0x0, "4b0be255bbf2cbd73daae8720d57e592ea73359d952479a55786e39f756cd8117818e848aaa72d79d79006d6fd4dac14e2ec561077269b43c300a1bb83fd8030b26af1388391ce9998d135815dd153f2a4ee89331c638277d3138919ffbad613c2d428c4c207521abc99e7e340c6e20129f6e279105d655a1eb22965bad7de191c4178630d67d4c67d770bed8a4c8e85873127cbb3fa92d1c263f7d47c0f98ffe666f9367ecd550a1ee4bb9e6c2d96fd2edea0f4834ed27989681556af6fdce7ad265d7ec78ea33c6287f852ba71a514e25628093b622811d6837ec0bf821b64107d8d784782bb08acb24182"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @redir={{0xa}, @void}}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xca}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x47}]}}}, {0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}]}, {0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x400}]}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4048081) (async) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x38, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1b, 0x1}}}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x10}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x200}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x40040) (async) read$fb(r5, &(0x7f0000001580)=""/71, 0x47) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000001700)={&(0x7f0000001600), 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x40, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x40}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x23d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) (async) ioctl$FE_GET_FRONTEND(r5, 0x80246f4d, &(0x7f0000001740)={0x0, 0x0, @vsb}) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r7) (async) write$P9_RVERSION(r5, &(0x7f00000017c0)={0x13, 0x65, 0xffff, 0x2, 0x6, '9P2000'}, 0x13) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x20, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x800) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001940), r5) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x54, r9, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x30}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40048a1) (async, rerun: 32) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20004}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0xc4, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x840}, 0x20000088) (rerun: 32) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x34, 0x0, 0xb00, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1f, 0x5de, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x801) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d40)) 22.768678083s ago: executing program 1 (id=1466): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000ec0)={0xf7fb0000, 0x8000000, 0x2, 0x6, 0x2f}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r3) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x12}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x15}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040088) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 19.924824486s ago: executing program 4 (id=1467): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close(0x3) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) recvmsg$can_bcm(r1, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}, 0x2) 18.982261362s ago: executing program 4 (id=1468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0x541b, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000000)={0xffffffffffffffdb, 0xfffffffffffffffb}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x2) brk(0x689d80000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xf8, 0x0, 0x1, 0x90, 0x6, @multicast}, 0x14) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'batadv_slave_1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 15.384670924s ago: executing program 1 (id=1469): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0xfffe, 0x0, @loopback}, 0x1c) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0xfffe, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 15.150421975s ago: executing program 1 (id=1470): openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x0, 0xd, 0x2, "134604cea4ddbc704c17bc74772190f5070001ebfffdfffffee793000000e000", 0x41415270}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="ff1900000000000000ffffff8100e0ff0806"], 0x2e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = syz_usbip_server_init(0x6) syz_usbip_server_init(0x5) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000002060101000000000000000003000000050004000200000005000400000000000900020073797a31000000000c0007800800134000000005050005000200000005000100060000002db1528cafc1d98ce4b5f85594ef81abe00a029c073a29f4bf206d6256d34651b41b0b8844cd4bcada4124b64620902585dfb00487f313f4d86dce8b2ed7a8dd4d059efa48f41cac46f832daa47cf04dacd4", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x4850}, 0x2000c004) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r6, 0x40045201, &(0x7f0000000040)=0xfffffffd) r7 = syz_open_pts(0xffffffffffffffff, 0x60001) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f00000000c0)={0x6, 0x2, 0xffffffff, 0xff, 0x7, "b5454946b0e8fbf9a90dddaf15cca2ee9aa8bc", 0x10000, 0x10001}) 9.271899676s ago: executing program 33 (id=1464): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000011c0)={@void, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x4, 0x1c, 0x66, 0x0, 0x20, 0x2, 0x0, @private=0xa0100ff, @local}, {0x11, 0x9c, 0x0, @empty}}}}}}, 0x2e) syz_usb_connect(0x5, 0x207, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000300)=[{&(0x7f0000001bc0)=""/251, 0xfb}], 0x1, 0x7, 0x38000000) syz_usb_connect(0x2, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2a, 0xb2, 0x6d, 0x8, 0x411, 0x5, 0x106c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x8, 0xec, 0x70, 0x74, "", [{{0x9, 0x4, 0x4b, 0x9, 0x2, 0x5c, 0x60, 0xcd, 0x6, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "b072"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x52, 0x6, 0x9}}], [{{0x9, 0x5, 0x80, 0x4, 0x400, 0xa, 0x0, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8000}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x8, 0x3, 0x8}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 3.082644419s ago: executing program 34 (id=1468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0x541b, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000000)={0xffffffffffffffdb, 0xfffffffffffffffb}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x2) brk(0x689d80000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xf8, 0x0, 0x1, 0x90, 0x6, @multicast}, 0x14) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'batadv_slave_1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 0s ago: executing program 35 (id=1470): openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x0, 0xd, 0x2, "134604cea4ddbc704c17bc74772190f5070001ebfffdfffffee793000000e000", 0x41415270}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="ff1900000000000000ffffff8100e0ff0806"], 0x2e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = syz_usbip_server_init(0x6) syz_usbip_server_init(0x5) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000002060101000000000000000003000000050004000200000005000400000000000900020073797a31000000000c0007800800134000000005050005000200000005000100060000002db1528cafc1d98ce4b5f85594ef81abe00a029c073a29f4bf206d6256d34651b41b0b8844cd4bcada4124b64620902585dfb00487f313f4d86dce8b2ed7a8dd4d059efa48f41cac46f832daa47cf04dacd4", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x4850}, 0x2000c004) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r6, 0x40045201, &(0x7f0000000040)=0xfffffffd) r7 = syz_open_pts(0xffffffffffffffff, 0x60001) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f00000000c0)={0x6, 0x2, 0xffffffff, 0xff, 0x7, "b5454946b0e8fbf9a90dddaf15cca2ee9aa8bc", 0x10000, 0x10001}) kernel console output (not intermixed with test programs): id 4) [ 428.970944][ T9934] team0: Port device team_slave_0 added [ 429.149716][ T6076] usb 2-1: USB disconnect, device number 90 [ 429.189354][T10068] FAULT_INJECTION: forcing a failure. [ 429.189354][T10068] name fail_futex, interval 1, probability 0, space 0, times 1 [ 429.189396][T10068] CPU: 1 UID: 0 PID: 10068 Comm: syz.1.1398 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 429.189428][T10068] Tainted: [L]=SOFTLOCKUP [ 429.189436][T10068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 429.189450][T10068] Call Trace: [ 429.189459][T10068] [ 429.189468][T10068] dump_stack_lvl+0xe8/0x150 [ 429.189502][T10068] should_fail_ex+0x46b/0x600 [ 429.189542][T10068] get_futex_key+0x1b0/0x1590 [ 429.189576][T10068] ? perf_lock_task_context+0x785/0x850 [ 429.189608][T10068] ? __pfx_get_futex_key+0x10/0x10 [ 429.189635][T10068] ? __lock_acquire+0x6b5/0x2d10 [ 429.189666][T10068] ? __lock_acquire+0x6b5/0x2d10 [ 429.189701][T10068] futex_wake+0x114/0x580 [ 429.189733][T10068] ? __pfx_futex_wake+0x10/0x10 [ 429.189757][T10068] ? do_raw_spin_lock+0x12b/0x2f0 [ 429.189793][T10068] do_futex+0x395/0x420 [ 429.189823][T10068] ? __might_fault+0xaf/0x130 [ 429.189855][T10068] ? __pfx_do_futex+0x10/0x10 [ 429.189890][T10068] ? __might_fault+0xaf/0x130 [ 429.189921][T10068] mm_release+0x101/0x290 [ 429.189958][T10068] exit_mm+0x51/0x250 [ 429.189981][T10068] ? unwind_deferred_task_exit+0x67/0xa0 [ 429.190017][T10068] do_exit+0x6a2/0x22c0 [ 429.190046][T10068] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 429.190085][T10068] ? __pfx_do_exit+0x10/0x10 [ 429.190108][T10068] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 429.190145][T10068] ? reacquire_held_locks+0x104/0x190 [ 429.190177][T10068] ? rt_spin_lock+0x1e0/0x400 [ 429.190214][T10068] do_group_exit+0x21b/0x2d0 [ 429.190242][T10068] ? rt_spin_unlock+0x160/0x200 [ 429.190293][T10068] get_signal+0x1284/0x1330 [ 429.190346][T10068] arch_do_signal_or_restart+0xbc/0x840 [ 429.190375][T10068] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 429.190407][T10068] ? __x64_sys_recvmmsg+0x198/0x250 [ 429.190441][T10068] exit_to_user_mode_loop+0xa9/0x680 [ 429.190467][T10068] ? rcu_is_watching+0x15/0xb0 [ 429.190499][T10068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.190524][T10068] do_syscall_64+0x353/0x580 [ 429.190558][T10068] ? trace_irq_disable+0x3b/0x140 [ 429.190584][T10068] ? clear_bhb_loop+0x40/0x90 [ 429.190613][T10068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.190636][T10068] RIP: 0033:0x7f090586ce59 [ 429.190658][T10068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.190679][T10068] RSP: 002b:00007f0903abe028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 429.190703][T10068] RAX: fffffffffffffe00 RBX: 00007f0905ae5fa0 RCX: 00007f090586ce59 [ 429.190721][T10068] RDX: 0000000000000001 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 429.190736][T10068] RBP: 00007f0903abe090 R08: 0000000000000000 R09: 0000000000000000 [ 429.190750][T10068] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000001 [ 429.190765][T10068] R13: 00007f0905ae6038 R14: 00007f0905ae5fa0 R15: 00007ffe627401e8 [ 429.190800][T10068] [ 429.570918][ T7353] udevd[7353]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.678247][T10078] loop2: detected capacity change from 0 to 7 [ 429.679428][T10078] Dev loop2: unable to read RDB block 7 [ 429.679472][T10078] loop2: unable to read partition table [ 429.679694][T10078] loop2: partition table beyond EOD, truncated [ 429.679743][T10078] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 429.888183][ T9934] team0: Port device team_slave_1 added [ 429.888276][T10069] netlink: 'syz.2.1397': attribute type 1 has an invalid length. [ 429.950297][T10073] syzkaller1: entered promiscuous mode [ 429.950323][T10073] syzkaller1: entered allmulticast mode [ 430.695562][ T9934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.695582][ T9934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.695612][ T9934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.750437][ T9934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.750457][ T9934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.750489][ T9934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.929940][ T1245] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 431.057763][ T8218] hsr_slave_0: left promiscuous mode [ 431.076944][ T5712] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 431.079634][ T1245] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.079697][ T1245] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 431.079715][ T1245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.083972][ T1245] usb 3-1: config 0 descriptor?? [ 431.097144][ T8218] hsr_slave_1: left promiscuous mode [ 431.146218][ T1245] pwc: Askey VC010 type 2 USB webcam detected. [ 431.179469][ T8218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.179612][ T8218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.227057][ T8218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.227080][ T8218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.253132][ T5712] usb 2-1: Using ep0 maxpacket: 8 [ 431.255523][ T5712] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 431.288788][ T5712] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 431.288820][ T5712] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 431.288843][ T5712] usb 2-1: Product: syz [ 431.288859][ T5712] usb 2-1: Manufacturer: syz [ 431.288875][ T5712] usb 2-1: SerialNumber: syz [ 431.496013][ T1245] pwc: recv_control_msg error -32 req 02 val 2b00 [ 431.502370][ T1245] pwc: recv_control_msg error -32 req 02 val 2700 [ 431.553102][ T5712] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 431.553127][ T5712] usb 2-1: Handspring Visor / Palm OS: port 47, is for unknown use [ 431.553146][ T5712] usb 2-1: Handspring Visor / Palm OS: port 118, is for unknown use [ 431.553166][ T5712] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 431.622784][ T1245] pwc: recv_control_msg error -32 req 02 val 2c00 [ 431.766173][ T5712] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 431.785231][ T5712] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 431.803089][ T5712] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 431.836592][ T1245] pwc: recv_control_msg error -32 req 04 val 1300 [ 431.842322][ T1245] pwc: recv_control_msg error -32 req 04 val 1400 [ 431.861832][ T1245] pwc: recv_control_msg error -32 req 02 val 2000 [ 431.862535][ T1245] pwc: recv_control_msg error -32 req 02 val 2100 [ 431.865295][ T1245] pwc: recv_control_msg error -32 req 04 val 1500 [ 432.000026][ T32] usb 2-1: USB disconnect, device number 91 [ 432.074991][ T1245] pwc: recv_control_msg error -71 req 02 val 2400 [ 432.075474][ T1245] pwc: recv_control_msg error -71 req 02 val 2600 [ 432.077939][ T1245] pwc: recv_control_msg error -71 req 02 val 2900 [ 432.080384][ T1245] pwc: recv_control_msg error -71 req 02 val 2800 [ 432.082796][ T32] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 432.084043][ T1245] pwc: recv_control_msg error -71 req 04 val 1100 [ 432.094538][ T1245] pwc: recv_control_msg error -71 req 04 val 1200 [ 432.142514][ T32] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 432.145663][ T32] visor 2-1:1.0: device disconnected [ 432.183626][ T8218] veth1_macvtap: left promiscuous mode [ 432.183849][ T8218] veth0_macvtap: left promiscuous mode [ 432.223309][ T8218] veth0_vlan: left promiscuous mode [ 432.281398][ T1245] pwc: Registered as video103. [ 432.285046][ T1245] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 432.348662][ T1245] usb 3-1: USB disconnect, device number 75 [ 432.692806][T10112] loop2: detected capacity change from 0 to 7 [ 432.694364][T10112] Dev loop2: unable to read RDB block 7 [ 432.694403][T10112] loop2: unable to read partition table [ 432.694574][T10112] loop2: partition table beyond EOD, truncated [ 432.694591][T10112] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 433.206978][ T5712] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 433.297187][ T32] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 433.359259][ T5712] usb 3-1: config 3 has an invalid interface number: 34 but max is 0 [ 433.359291][ T5712] usb 3-1: config 3 has no interface number 0 [ 433.359341][ T5712] usb 3-1: config 3 interface 34 has no altsetting 0 [ 433.361814][ T5712] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=d2.36 [ 433.361845][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.361873][ T5712] usb 3-1: Product: syz [ 433.361884][ T5712] usb 3-1: Manufacturer: ÑŠ [ 433.361894][ T5712] usb 3-1: SerialNumber: syz [ 433.459114][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 433.465182][ T32] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.465219][ T32] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 433.465244][ T32] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 433.465271][ T32] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 433.465299][ T32] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 433.465324][ T32] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 433.465351][ T32] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 433.483061][ T32] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 433.483095][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 433.483118][ T32] usb 2-1: SerialNumber: syz [ 433.618081][ T32] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 433.869320][ T5712] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in warm state. [ 433.874981][T10130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.875525][T10130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.911947][ T5712] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 433.912772][ T5712] dvbdev: DVB: registering new adapter (Terratec Cinergy T USB XXS (HD)/ T3) [ 433.912831][ T5712] usb 3-1: media controller created [ 433.966029][ T5712] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 434.151824][ T10] usb 2-1: USB disconnect, device number 92 [ 434.210244][ T5712] DVB: Unable to find symbol dib7000p_attach() [ 434.210257][ T5712] dvb-usb: no frontend was attached by 'Terratec Cinergy T USB XXS (HD)/ T3' [ 434.307044][ T5712] rc_core: IR keymap rc-dib0700-rc5 not found [ 434.307066][ T5712] Registered IR keymap rc-empty [ 434.307295][ T5712] dvb-usb: could not initialize remote control. [ 434.307303][ T5712] dvb-usb: Terratec Cinergy T USB XXS (HD)/ T3 successfully initialized and connected. [ 434.334800][ T5712] usb 3-1: USB disconnect, device number 76 [ 434.483584][ T5712] dvb-usb: Terratec Cinergy T USB XXS (HD)/ T3 successfully deinitialized and disconnected. [ 434.753526][T10139] loop2: detected capacity change from 0 to 7 [ 434.754711][T10139] Dev loop2: unable to read RDB block 7 [ 434.754755][T10139] loop2: unable to read partition table [ 434.754985][T10139] loop2: partition table beyond EOD, truncated [ 434.755006][T10139] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 434.775017][ T8218] team0 (unregistering): Port device team_slave_1 removed [ 434.960760][ T8218] team0 (unregistering): Port device team_slave_0 removed [ 435.356200][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 435.798673][ T9934] hsr_slave_0: entered promiscuous mode [ 435.800386][ T9934] hsr_slave_1: entered promiscuous mode [ 435.801779][ T9934] debugfs: 'hsr0' already exists in 'hsr' [ 435.801811][ T9934] Cannot create hsr debugfs directory [ 435.977251][ T1245] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 436.127011][ T1245] usb 3-1: Using ep0 maxpacket: 32 [ 436.129222][ T1245] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 436.129279][ T1245] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 436.129300][ T1245] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 436.129326][ T1245] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 436.131749][ T1245] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 436.131780][ T1245] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.131796][ T1245] usb 3-1: Product: syz [ 436.131806][ T1245] usb 3-1: Manufacturer: syz [ 436.131818][ T1245] usb 3-1: SerialNumber: syz [ 436.228742][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 436.250266][ T1245] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input34 [ 436.406889][ T1245] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 436.406911][ T1245] (id 0x00) [ 436.480163][T10161] loop2: detected capacity change from 0 to 7 [ 436.481672][T10161] Dev loop2: unable to read RDB block 7 [ 436.481715][T10161] loop2: unable to read partition table [ 436.481933][T10161] loop2: partition table beyond EOD, truncated [ 436.481953][T10161] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 436.676893][ T1245] rc_core: IR keymap rc-imon-pad not found [ 436.676913][ T1245] Registered IR keymap rc-empty [ 436.676993][ T1245] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 436.677012][ T1245] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 436.722973][ T1245] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 436.784365][ T1245] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input35 [ 436.839459][ T1245] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:77> initialized [ 437.181715][ T5802] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 437.332779][ T5802] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 437.332962][ T5802] usb 2-1: config 0 has no interface number 0 [ 437.333009][ T5802] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 437.333038][ T5802] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 437.333067][ T5802] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 437.335360][ T5802] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 437.335389][ T5802] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 437.335411][ T5802] usb 2-1: Product: syz [ 437.335427][ T5802] usb 2-1: SerialNumber: syz [ 437.463800][ T5802] usb 2-1: config 0 descriptor?? [ 437.518101][ T5802] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 437.521089][T10167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.561924][ T5802] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input36 [ 438.485391][T10164] mac80211_hwsim hwsim7 ..ãc¤±: renamed from wlan1 (while UP) [ 438.697998][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 438.702849][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 438.703095][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 438.703345][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 438.703629][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 438.703971][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 438.704351][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 438.704699][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 438.705062][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 438.705473][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 438.748037][ T5802] usb 2-1: USB disconnect, device number 93 [ 438.748131][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 438.805961][ T32] usb 3-1: USB disconnect, device number 77 [ 438.838884][ T5802] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 439.916946][ T32] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 440.061913][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.062013][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.086818][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 440.095763][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 440.105100][ T32] usb 2-1: config 1 has an invalid descriptor of length 196, skipping remainder of the config [ 440.105126][ T32] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 440.112234][ T32] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 440.112266][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.112289][ T32] usb 2-1: Product: syz [ 440.112305][ T32] usb 2-1: Manufacturer: syz [ 440.112321][ T32] usb 2-1: SerialNumber: syz [ 440.310631][T10210] loop2: detected capacity change from 0 to 7 [ 440.313880][T10210] Dev loop2: unable to read RDB block 7 [ 440.313925][T10210] loop2: unable to read partition table [ 440.314139][T10210] loop2: partition table beyond EOD, truncated [ 440.341926][T10210] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 440.619737][ T32] usb 2-1: USB disconnect, device number 94 [ 440.929446][ T5802] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 441.081425][ T5802] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 441.081461][ T5802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.118764][ T5802] usb 3-1: config 0 descriptor?? [ 441.133805][ T5802] cp210x 3-1:0.0: cp210x converter detected [ 441.321535][ T5802] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 441.321587][ T5802] cp210x 3-1:0.0: querying part number failed [ 441.396236][ T5802] usb 3-1: cp210x converter now attached to ttyUSB0 [ 441.539958][T10245] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1435'. [ 441.570105][ T5802] usb 3-1: USB disconnect, device number 78 [ 441.647479][ T5802] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 441.666035][ T5802] cp210x 3-1:0.0: device disconnected [ 441.681107][ T8218] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.799594][T10241] could not allocate digest TFM handle poly1305-neon [ 441.961205][T10238] netlink: 'syz.1.1435': attribute type 2 has an invalid length. [ 442.657692][T10270] loop2: detected capacity change from 0 to 7 [ 442.673825][T10270] Dev loop2: unable to read RDB block 7 [ 442.673870][T10270] loop2: unable to read partition table [ 442.674076][T10270] loop2: partition table beyond EOD, truncated [ 442.674112][T10270] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 443.146349][ T8218] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.336866][ T6076] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 443.497590][ T6076] usb 3-1: Using ep0 maxpacket: 32 [ 443.506489][ T6076] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 443.506520][ T6076] usb 3-1: config 0 has no interface number 0 [ 443.506577][ T6076] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 443.506608][ T6076] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 443.506634][ T6076] usb 3-1: config 0 interface 85 has no altsetting 0 [ 443.571382][ T6076] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 443.571416][ T6076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.571439][ T6076] usb 3-1: Product: syz [ 443.571455][ T6076] usb 3-1: Manufacturer: syz [ 443.571471][ T6076] usb 3-1: SerialNumber: syz [ 443.632238][ T6076] usb 3-1: config 0 descriptor?? [ 443.874798][T10301] FAULT_INJECTION: forcing a failure. [ 443.874798][T10301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.875066][T10301] CPU: 1 UID: 0 PID: 10301 Comm: syz.1.1446 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 443.875099][T10301] Tainted: [L]=SOFTLOCKUP [ 443.875107][T10301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 443.875122][T10301] Call Trace: [ 443.875131][T10301] [ 443.875140][T10301] dump_stack_lvl+0xe8/0x150 [ 443.875176][T10301] should_fail_ex+0x46b/0x600 [ 443.875217][T10301] _copy_from_iter+0x1d3/0x1670 [ 443.875248][T10301] ? trace_kmem_cache_alloc+0x29/0xe0 [ 443.875275][T10301] ? __alloc_skb+0x27d/0x7d0 [ 443.875307][T10301] ? __pfx__copy_from_iter+0x10/0x10 [ 443.875328][T10301] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 443.875355][T10301] ? __alloc_skb+0x27d/0x7d0 [ 443.875392][T10301] ? netlink_sendmsg+0x650/0xb40 [ 443.875413][T10301] ? skb_put+0x11b/0x210 [ 443.875450][T10301] netlink_sendmsg+0x6c0/0xb40 [ 443.875481][T10301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.875506][T10301] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 443.875541][T10301] ? aa_sock_msg_perm+0x122/0x200 [ 443.875567][T10301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.875589][T10301] sock_sendmsg_nosec+0x13a/0x180 [ 443.875620][T10301] ____sys_sendmsg+0x55c/0x870 [ 443.875661][T10301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.875701][T10301] ? import_iovec+0x73/0xa0 [ 443.875726][T10301] ___sys_sendmsg+0x2a5/0x360 [ 443.875755][T10301] ? __lock_acquire+0x6b5/0x2d10 [ 443.875784][T10301] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.875839][T10301] ? __fget_files+0x2a/0x420 [ 443.875861][T10301] ? __fget_files+0x3a6/0x420 [ 443.875893][T10301] __x64_sys_sendmsg+0x1c3/0x2a0 [ 443.875931][T10301] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 443.875970][T10301] ? __pfx_ksys_write+0x10/0x10 [ 443.876004][T10301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.876038][T10301] do_syscall_64+0x174/0x580 [ 443.876070][T10301] ? trace_irq_disable+0x3b/0x140 [ 443.876096][T10301] ? clear_bhb_loop+0x40/0x90 [ 443.876123][T10301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.876146][T10301] RIP: 0033:0x7f090586ce59 [ 443.876167][T10301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.876187][T10301] RSP: 002b:00007f0903abe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.876210][T10301] RAX: ffffffffffffffda RBX: 00007f0905ae5fa0 RCX: 00007f090586ce59 [ 443.876225][T10301] RDX: 0000000000002014 RSI: 0000200000000000 RDI: 0000000000000004 [ 443.876239][T10301] RBP: 00007f0903abe090 R08: 0000000000000000 R09: 0000000000000000 [ 443.876253][T10301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.876267][T10301] R13: 00007f0905ae6038 R14: 00007f0905ae5fa0 R15: 00007ffe627401e8 [ 443.876301][T10301] [ 444.085374][T10281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.095586][T10281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.622913][T10311] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 444.790661][ T32] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 444.933250][ T32] usb 2-1: device descriptor read/64, error -71 [ 445.052370][ T8218] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.141613][ T6076] appletouch 3-1:0.85: Failed to read mode from device. [ 445.141869][ T6076] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 445.188053][ T32] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 445.191055][ T6076] usb 3-1: USB disconnect, device number 79 [ 445.327020][ T32] usb 2-1: device descriptor read/64, error -71 [ 445.441969][ T32] usb usb2-port1: attempt power cycle [ 445.826922][ T32] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 445.858359][ T32] usb 2-1: device descriptor read/8, error -71 [ 445.892647][ T8218] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.096994][ T32] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 446.122662][ T32] usb 2-1: device descriptor read/8, error -71 [ 446.233286][ T32] usb usb2-port1: unable to enumerate USB device [ 446.533273][T10339] syzkaller1: entered promiscuous mode [ 446.533292][T10339] syzkaller1: entered allmulticast mode [ 446.605204][ T9934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 446.763083][ T9934] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 446.999647][T10354] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 447.098903][ T9934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 447.283436][ T9934] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 447.363417][ T9934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 447.653520][ T9934] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 447.897197][ T10] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 448.036867][ T10] usb 3-1: device descriptor read/64, error -71 [ 448.245638][ T9934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 448.278155][ T10] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 448.305004][ T9934] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 448.407011][ T10] usb 3-1: device descriptor read/64, error -71 [ 448.466965][ T1245] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 448.518980][ T10] usb usb3-port1: attempt power cycle [ 448.679832][ T1245] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 448.679863][ T1245] usb 2-1: config 0 has no interface number 0 [ 448.679911][ T1245] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 448.693135][ T1245] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 448.693214][ T1245] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 448.693268][ T1245] usb 2-1: Manufacturer: syz [ 448.693312][ T1245] usb 2-1: SerialNumber: syz [ 448.744399][ T1245] usb 2-1: config 0 descriptor?? [ 448.796287][ T8218] bridge_slave_1: left allmulticast mode [ 448.796324][ T8218] bridge_slave_1: left promiscuous mode [ 448.825944][ T8218] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.907849][ T10] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 448.927533][ T10] usb 3-1: device descriptor read/8, error -71 [ 449.026143][ T8218] bridge_slave_0: left allmulticast mode [ 449.026182][ T8218] bridge_slave_0: left promiscuous mode [ 449.026487][ T8218] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.181584][ T10] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 449.199383][ T10] usb 3-1: device descriptor read/8, error -71 [ 449.313587][ T10] usb usb3-port1: unable to enumerate USB device [ 450.277720][ T8218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.357539][ T8218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.379737][ T8218] bond0 (unregistering): Released all slaves [ 451.253882][ T5802] usb 2-1: USB disconnect, device number 99 [ 451.435006][ T9934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.458113][T10437] netlink: 'syz.2.1460': attribute type 25 has an invalid length. [ 451.458718][T10437] netlink: 'syz.2.1460': attribute type 25 has an invalid length. [ 452.004138][ T61] Bluetooth: latency 512 > 499 [ 452.081824][T10449] bridge0: port 3(veth0_to_bridge) entered blocking state [ 452.082465][T10449] bridge0: port 3(veth0_to_bridge) entered disabled state [ 452.082830][T10449] veth0_to_bridge: entered allmulticast mode [ 452.089641][T10454] binder: 10436:10454 ioctl 40186f03 200000000240 returned -22 [ 452.125141][T10454] binder_alloc: 10436: binder_alloc_buf, no vma [ 452.150071][T10449] veth0_to_bridge: entered promiscuous mode [ 452.150315][T10449] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.154022][T10449] bridge0: port 3(veth0_to_bridge) entered blocking state [ 452.154193][T10449] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 452.331804][ T9934] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.362137][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 452.401070][ T8163] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.401327][ T8163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.531586][ T7598] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.531777][ T7598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.757081][ T5760] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 452.859097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.860150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.860480][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.861128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.861448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.862164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.862479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.863171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.863493][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.864178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.990398][ T5760] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 452.990430][ T5760] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 452.990451][ T5760] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 452.990472][ T5760] usb 2-1: config 220 has no interface number 2 [ 452.990557][ T5760] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 452.990588][ T5760] usb 2-1: config 220 interface 0 has no altsetting 0 [ 452.990617][ T5760] usb 2-1: config 220 interface 76 has no altsetting 0 [ 452.990638][ T5760] usb 2-1: config 220 interface 1 has no altsetting 0 [ 453.224129][ T5760] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 453.224163][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.224186][ T5760] usb 2-1: Product: syz [ 453.224202][ T5760] usb 2-1: Manufacturer: syz [ 453.224218][ T5760] usb 2-1: SerialNumber: syz [ 453.520557][T10460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.522945][T10460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.670488][ T5760] usb 2-1: selecting invalid altsetting 0 [ 453.710052][ T5760] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 453.710090][ T5760] uvcvideo 2-1:220.0: No valid video chain found. [ 453.733279][ T32] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 453.818785][ T5760] usb 2-1: selecting invalid altsetting 0 [ 453.818827][ T5760] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 453.852947][ T5760] usb 2-1: USB disconnect, device number 100 [ 453.958406][ T32] usb 3-1: not running at top speed; connect to a high speed hub [ 453.960249][ T32] usb 3-1: config 8 has an invalid interface number: 75 but max is 0 [ 453.960278][ T32] usb 3-1: config 8 has no interface number 0 [ 453.960324][ T32] usb 3-1: config 8 interface 75 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 453.960352][ T32] usb 3-1: config 8 interface 75 has no altsetting 0 [ 453.963319][ T32] usb 3-1: New USB device found, idVendor=0411, idProduct=0005, bcdDevice=10.6c [ 453.963350][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.963373][ T32] usb 3-1: Product: syz [ 453.963389][ T32] usb 3-1: Manufacturer: syz [ 453.963405][ T32] usb 3-1: SerialNumber: syz [ 454.136858][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 457.867079][ C0] net_ratelimit: 4345 callbacks suppressed [ 457.867100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.868401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.869623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.870100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.871526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.872174][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.873303][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.874985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.876114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.876800][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.165892][ T32] pegasus 3-1:8.75: Missing or invalid endpoints [ 461.833296][T10464] syzkaller1: entered promiscuous mode [ 461.833324][T10464] syzkaller1: entered allmulticast mode [ 461.960732][ T6076] usb 3-1: USB disconnect, device number 84 [ 462.877445][ C0] net_ratelimit: 3724 callbacks suppressed [ 462.877468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.877957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.878933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.879352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.880054][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.881090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.881787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.882207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.883194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.883634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.909975][ C0] net_ratelimit: 4860 callbacks suppressed [ 467.909995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.910856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.911534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.912029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.913163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.913621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.914407][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.915531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.916308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.927168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.373667][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 468.439011][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 468.444155][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 468.468794][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 468.485195][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 469.016882][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 470.616995][ T5623] Bluetooth: hci2: command tx timeout [ 470.882670][ T5625] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 470.882878][ T5625] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 470.922298][ T5625] usb 5-1: USB disconnect, device number 8 [ 472.697127][ T5623] Bluetooth: hci2: command tx timeout [ 472.916941][ C0] net_ratelimit: 3688 callbacks suppressed [ 472.916957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.917401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.918221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.919569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.920346][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.920782][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.921556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.922331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.923465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.924242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.524614][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 474.609190][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 474.640158][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 474.649879][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 474.688203][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 474.783149][ T5623] Bluetooth: hci2: command tx timeout [ 475.594716][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 475.654208][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 475.679682][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 475.758070][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 475.759126][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 476.786810][ T5623] Bluetooth: hci3: command tx timeout [ 476.867202][ T5623] Bluetooth: hci2: command tx timeout [ 477.612417][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 477.681124][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 477.685075][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 477.709811][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 477.743702][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 477.897049][ T5623] Bluetooth: hci5: command tx timeout [ 477.931070][ C0] net_ratelimit: 3972 callbacks suppressed [ 477.931092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.931740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.933673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.934316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.935776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.937505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.938661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.939336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.940473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.941610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.857497][ T5623] Bluetooth: hci3: command tx timeout [ 479.907269][ T5623] Bluetooth: hci6: command tx timeout [ 479.976969][ T5623] Bluetooth: hci5: command tx timeout [ 480.696068][ T8218] hsr_slave_0: left promiscuous mode [ 480.937019][ T5623] Bluetooth: hci3: command tx timeout [ 480.980508][ T8218] hsr_slave_1: left promiscuous mode [ 480.981729][ T8218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.981758][ T8218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.275986][ T8218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.276018][ T8218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.976949][ T5623] Bluetooth: hci6: command tx timeout [ 482.056886][ T5623] Bluetooth: hci5: command tx timeout [ 482.801634][ T8218] veth1_macvtap: left promiscuous mode [ 482.801757][ T8218] veth0_macvtap: left promiscuous mode [ 482.802118][ T8218] veth1_vlan: left promiscuous mode [ 482.802361][ T8218] veth0_vlan: left promiscuous mode [ 482.938472][ C0] net_ratelimit: 3025 callbacks suppressed [ 482.938489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.939314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.939749][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.940869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.941306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.942084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.943200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.943969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.944414][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.945210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.025161][ T5623] Bluetooth: hci3: command tx timeout [ 484.056854][ T5623] Bluetooth: hci6: command tx timeout [ 484.136938][ T5623] Bluetooth: hci5: command tx timeout [ 486.142508][ T5623] Bluetooth: hci6: command tx timeout [ 487.946876][ C0] net_ratelimit: 5767 callbacks suppressed [ 487.946899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.948373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.949200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.949687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.950487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.951306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.952763][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.953565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.954366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.954808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.957449][ C0] net_ratelimit: 5780 callbacks suppressed [ 492.957465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.958281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.959105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.959548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.960703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.961173][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.961976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.963200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.964287][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.964772][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.966833][ C0] net_ratelimit: 5150 callbacks suppressed [ 497.966856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.967494][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.968487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.969292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.970398][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.971127][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.971854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.972303][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.973400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.973833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.506148][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.506275][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.976922][ C0] net_ratelimit: 5104 callbacks suppressed [ 502.976943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.977589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.978721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.979193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.980336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.980753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.981502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.982583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.983401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.983839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.987632][ C0] net_ratelimit: 5325 callbacks suppressed [ 507.987650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.988452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.988881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.989666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.990656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.991440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.992562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.992995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.994115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.994891][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.725307][ T8218] team0 (unregistering): Port device team_slave_1 removed [ 511.630176][ T8218] team0 (unregistering): Port device team_slave_0 removed [ 512.998104][ C0] net_ratelimit: 4631 callbacks suppressed [ 512.998128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.998615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.999395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.000535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.001337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.001845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.002665][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.003660][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.004430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.005564][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.006786][ C0] net_ratelimit: 5404 callbacks suppressed [ 518.006806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.007301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.008433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.008963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.010393][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.010833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.011613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.012738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.013559][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.014173][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.060302][ C0] net_ratelimit: 5095 callbacks suppressed [ 523.060328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.061361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.062573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.063029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.064171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.064973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.065802][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.066593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.191131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.192958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.067118][ C0] net_ratelimit: 5047 callbacks suppressed [ 528.067135][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.067921][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.068965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.070087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.070549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.071722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.072512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.073288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.074064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.074505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.141248][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 529.212952][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 529.224332][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 529.263967][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 529.273645][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 531.418985][ T5623] Bluetooth: hci0: command tx timeout [ 533.077298][ C0] net_ratelimit: 5010 callbacks suppressed [ 533.077315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.077766][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.078548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.079370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.080187][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.081323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.081754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.082948][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.083731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.084547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.497157][ T5623] Bluetooth: hci0: command tx timeout [ 535.163348][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 535.230671][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 535.233418][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 535.234836][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 535.250458][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 535.576905][ T5623] Bluetooth: hci0: command tx timeout [ 536.434113][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 536.502200][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 536.541193][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 536.571525][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 536.572965][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 537.416991][ T5623] Bluetooth: hci1: command tx timeout [ 537.656938][ T5623] Bluetooth: hci0: command tx timeout [ 538.087534][ C0] net_ratelimit: 4700 callbacks suppressed [ 538.087560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.088165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.089557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.090083][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.090978][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.095025][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.097487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.098322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.101604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.104987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.704846][ T5623] Bluetooth: hci4: command tx timeout [ 539.496938][ T5623] Bluetooth: hci1: command tx timeout [ 540.776889][ T5623] Bluetooth: hci4: command tx timeout [ 541.133736][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 541.243395][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 541.255941][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 541.272770][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 541.273853][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 541.576792][ T5623] Bluetooth: hci1: command tx timeout [ 542.516997][T10549] virt_wifi0 speed is unknown, defaulting to 1000 [ 542.772701][T10564] virt_wifi0 speed is unknown, defaulting to 1000 [ 542.860352][ T5623] Bluetooth: hci4: command tx timeout [ 543.097193][ C0] net_ratelimit: 3581 callbacks suppressed [ 543.097213][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.098334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.099970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.100593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.102244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.103376][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.104489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.105610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.106261][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.107946][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.417651][ T5623] Bluetooth: hci7: command tx timeout [ 543.656978][ T5623] Bluetooth: hci1: command tx timeout [ 544.924003][T10557] virt_wifi0 speed is unknown, defaulting to 1000 [ 544.943422][ T5623] Bluetooth: hci4: command tx timeout [ 544.944292][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 544.962569][T10549] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.962964][T10549] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.963351][T10549] bridge_slave_0: entered allmulticast mode [ 545.035709][T10549] bridge_slave_0: entered promiscuous mode [ 545.271108][T10549] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.271494][T10549] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.271844][T10549] bridge_slave_1: entered allmulticast mode [ 545.302394][T10549] bridge_slave_1: entered promiscuous mode [ 545.422223][T10589] virt_wifi0 speed is unknown, defaulting to 1000 [ 545.496865][ T5623] Bluetooth: hci7: command tx timeout [ 545.583523][T10549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.803056][T10549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.157454][T10549] team0: Port device team_slave_0 added [ 547.218665][T10549] team0: Port device team_slave_1 added [ 547.568049][T10549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.568069][T10549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.568101][T10549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.587244][ T5623] Bluetooth: hci7: command tx timeout [ 547.703125][T10549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.703144][T10549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.703177][T10549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.107421][ C0] net_ratelimit: 4243 callbacks suppressed [ 548.107444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.109197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.110339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.110995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.112095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.113257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.114420][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.116091][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.116790][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.118448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.656887][ T61] Bluetooth: hci7: command tx timeout [ 552.177080][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 552.388602][T10564] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.389875][T10564] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.390234][T10564] bridge_slave_0: entered allmulticast mode [ 552.422674][T10564] bridge_slave_0: entered promiscuous mode [ 552.571509][T10564] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.571890][T10564] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.572248][T10564] bridge_slave_1: entered allmulticast mode [ 552.576578][T10564] bridge_slave_1: entered promiscuous mode [ 552.771099][T10549] hsr_slave_0: entered promiscuous mode [ 552.788731][T10549] hsr_slave_1: entered promiscuous mode [ 552.979214][T10564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.172727][ C0] net_ratelimit: 5087 callbacks suppressed [ 553.172751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.174432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.175078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.176199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.177394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.179025][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.180146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.181286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.181926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.183038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.363738][T10564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.177150][ C0] net_ratelimit: 4934 callbacks suppressed [ 558.177173][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.178821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.179502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.180660][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.181900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.183528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.184668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.185831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.186475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.187686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.689927][T10564] team0: Port device team_slave_0 added [ 558.879301][T10564] team0: Port device team_slave_1 added [ 559.229785][T10564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.229805][T10564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.229857][T10564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.387681][T10564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.387701][T10564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.387732][T10564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.680201][T10557] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.680671][T10557] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.681648][T10557] bridge_slave_0: entered allmulticast mode [ 560.685592][T10557] bridge_slave_0: entered promiscuous mode [ 560.828381][T10557] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.828771][T10557] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.829137][T10557] bridge_slave_1: entered allmulticast mode [ 560.833157][T10557] bridge_slave_1: entered promiscuous mode [ 561.050318][T10589] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.051081][T10589] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.051416][T10589] bridge_slave_0: entered allmulticast mode [ 561.065699][T10589] bridge_slave_0: entered promiscuous mode [ 561.215455][T10564] hsr_slave_0: entered promiscuous mode [ 561.269692][T10564] hsr_slave_1: entered promiscuous mode [ 561.271998][T10564] debugfs: 'hsr0' already exists in 'hsr' [ 561.272028][T10564] Cannot create hsr debugfs directory [ 561.394359][T10589] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.394779][T10589] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.395191][T10589] bridge_slave_1: entered allmulticast mode [ 561.421302][T10589] bridge_slave_1: entered promiscuous mode [ 561.475903][T10557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.622877][T10557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.940531][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.940645][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.187070][ C0] net_ratelimit: 3785 callbacks suppressed [ 563.187093][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.188623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.190381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.191520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.192617][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.193074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.193896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.194672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.195476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.196620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.373708][T10589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.557548][T10589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.583948][T10557] team0: Port device team_slave_0 added [ 564.663709][T10557] team0: Port device team_slave_1 added [ 565.134801][T10589] team0: Port device team_slave_0 added [ 565.453222][T10589] team0: Port device team_slave_1 added [ 565.465009][T10557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.465028][T10557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.465058][T10557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.655817][T10557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.655847][T10557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.655876][T10557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.173196][T10589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.173216][T10589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.173258][T10589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.196818][ C0] net_ratelimit: 4435 callbacks suppressed [ 568.196839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.199021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.201782][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.204583][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.207556][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.208203][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.210683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.211417][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.215390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.216816][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.461930][T10589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.461966][T10589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.461999][T10589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.464939][T10549] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 569.864861][T10549] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 570.014284][T10549] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 571.022703][T10549] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 571.091494][T10549] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 572.122203][T10549] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 572.209762][T10557] hsr_slave_0: entered promiscuous mode [ 572.212254][T10557] hsr_slave_1: entered promiscuous mode [ 572.214253][T10557] debugfs: 'hsr0' already exists in 'hsr' [ 572.214280][T10557] Cannot create hsr debugfs directory [ 572.246947][T10549] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 573.252730][ C0] net_ratelimit: 4689 callbacks suppressed [ 573.252749][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.253966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.255126][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.255949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.261756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.265251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.366034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.369247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.370424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.372099][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.488953][T10549] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 573.933984][T10589] hsr_slave_0: entered promiscuous mode [ 573.944294][T10589] hsr_slave_1: entered promiscuous mode [ 573.956162][T10589] debugfs: 'hsr0' already exists in 'hsr' [ 573.956197][T10589] Cannot create hsr debugfs directory [ 578.259129][ C0] net_ratelimit: 4585 callbacks suppressed [ 578.259153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.259858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.261076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.261550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.262894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.263668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.264466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.265417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.265858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.267109][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.267761][ C0] net_ratelimit: 5078 callbacks suppressed [ 583.267778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.268223][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.269349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.269779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.271065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.271887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.272663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.273448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.273876][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.275023][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.097323][T10549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.166346][T10549] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.207367][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.227988][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.274511][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.274844][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.277134][ C0] net_ratelimit: 4772 callbacks suppressed [ 588.277179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.280014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.281580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.285390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.287928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.291727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.293195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.296022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.298676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.302738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.522508][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 589.582207][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 589.597410][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 589.691941][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 589.696198][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 590.892006][T10747] virt_wifi0 speed is unknown, defaulting to 1000 [ 591.649101][T10747] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.649701][T10747] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.650428][T10747] bridge_slave_0: entered allmulticast mode [ 591.654493][T10747] bridge_slave_0: entered promiscuous mode [ 591.688684][T10747] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.689164][T10747] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.689880][T10747] bridge_slave_1: entered allmulticast mode [ 591.725399][T10747] bridge_slave_1: entered promiscuous mode [ 591.816631][T10747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.848115][T10747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.897367][ T61] Bluetooth: hci2: command tx timeout [ 591.956551][T10747] team0: Port device team_slave_0 added [ 591.972983][T10747] team0: Port device team_slave_1 added [ 592.043756][T10747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.043787][T10747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.043817][T10747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.099349][T10747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.099369][T10747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.099401][T10747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.270018][T10747] hsr_slave_0: entered promiscuous mode [ 592.272781][T10747] hsr_slave_1: entered promiscuous mode [ 592.275144][T10747] debugfs: 'hsr0' already exists in 'hsr' [ 592.275174][T10747] Cannot create hsr debugfs directory [ 593.286999][ C0] net_ratelimit: 3900 callbacks suppressed [ 593.287021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.287868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.288873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.289678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.290137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.291430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.291897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.293073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.293536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.294318][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.979271][ T61] Bluetooth: hci2: command tx timeout [ 595.404796][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 595.464007][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 595.465885][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 595.482556][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 595.504872][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 596.057347][T10551] Bluetooth: hci2: command tx timeout [ 597.405139][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 597.464748][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 597.485757][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 597.495728][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 597.523827][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 598.181621][T10551] Bluetooth: hci2: command tx timeout [ 598.302353][ C0] net_ratelimit: 4334 callbacks suppressed [ 598.302369][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.303231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.304050][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.304913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.305361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.306528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.307197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.308705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.309155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.311087][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.537015][T10551] Bluetooth: hci3: command tx timeout [ 599.515300][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 599.567759][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 599.597459][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 599.599243][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 599.604800][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 599.737818][ T61] Bluetooth: hci5: command tx timeout [ 600.616900][T10551] Bluetooth: hci3: command tx timeout [ 601.817290][ T61] Bluetooth: hci5: command tx timeout [ 601.817436][T10551] Bluetooth: hci0: command tx timeout [ 602.697002][T10551] Bluetooth: hci3: command tx timeout [ 603.307955][ C0] net_ratelimit: 4797 callbacks suppressed [ 603.307978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.308590][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.309401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.310198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.311322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.312095][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.312949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.313397][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.314178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.314948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.900672][ T61] Bluetooth: hci5: command tx timeout [ 603.917368][T10551] Bluetooth: hci0: command tx timeout [ 604.777020][T10551] Bluetooth: hci3: command tx timeout [ 605.977008][T10551] Bluetooth: hci0: command tx timeout [ 605.977045][T10551] Bluetooth: hci5: command tx timeout [ 608.067059][ T61] Bluetooth: hci0: command tx timeout [ 608.317175][ C0] net_ratelimit: 4960 callbacks suppressed [ 608.317196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.318699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.320369][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.321540][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.322705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.323354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.324486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.325640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.326796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.328412][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.465801][T10768] virt_wifi0 speed is unknown, defaulting to 1000 [ 609.522807][T10774] virt_wifi0 speed is unknown, defaulting to 1000 [ 610.221613][T10780] virt_wifi0 speed is unknown, defaulting to 1000 [ 613.326924][ C0] net_ratelimit: 9918 callbacks suppressed [ 613.326947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.326952][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 613.327372][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 613.327615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.327749][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 613.328139][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 613.328518][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 613.329215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.329250][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 613.329716][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 618.337756][ C0] net_ratelimit: 12676 callbacks suppressed [ 618.337778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.337947][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 618.338357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 618.338753][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 618.340398][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.341388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.342237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.342740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.343845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.344885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.347223][ C0] net_ratelimit: 11398 callbacks suppressed [ 623.347251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.347711][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.348536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.348637][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 623.349078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 623.349475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 623.349673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.350186][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 623.350620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 623.350868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.392640][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.392754][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.393268][T10774] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.393747][T10774] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.394133][T10774] bridge_slave_0: entered allmulticast mode [ 626.430232][T10774] bridge_slave_0: entered promiscuous mode [ 626.765941][T10780] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.766377][T10780] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.768011][T10780] bridge_slave_0: entered allmulticast mode [ 626.798565][T10780] bridge_slave_0: entered promiscuous mode [ 626.813549][T10774] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.813917][T10774] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.814340][T10774] bridge_slave_1: entered allmulticast mode [ 626.846386][T10774] bridge_slave_1: entered promiscuous mode [ 627.018508][T10780] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.018924][T10780] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.022167][T10780] bridge_slave_1: entered allmulticast mode [ 627.056040][T10780] bridge_slave_1: entered promiscuous mode [ 627.181260][T10768] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.181696][T10768] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.182072][T10768] bridge_slave_0: entered allmulticast mode [ 627.213204][T10768] bridge_slave_0: entered promiscuous mode [ 628.363257][ C1] net_ratelimit: 12291 callbacks suppressed [ 628.363281][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 628.366234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.401536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 628.401952][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.402767][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 628.403144][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.403683][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 628.404034][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.404525][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 628.404872][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.686351][T10768] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.705138][T10768] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.705629][T10768] bridge_slave_1: entered allmulticast mode [ 628.735291][T10768] bridge_slave_1: entered promiscuous mode [ 628.851745][T10774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.100777][T10780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.148578][T10774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.479759][T10780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.876594][T10768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.090496][T10768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.424291][T10774] team0: Port device team_slave_0 added [ 631.833652][T10780] team0: Port device team_slave_0 added [ 631.870898][T10774] team0: Port device team_slave_1 added [ 633.366955][ C1] net_ratelimit: 11625 callbacks suppressed [ 633.366980][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.367117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.367457][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 633.367876][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.368413][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 633.368755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.368774][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.369276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 633.369637][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.369916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.587845][T10780] team0: Port device team_slave_1 added [ 635.802778][T10768] team0: Port device team_slave_0 added [ 636.988455][T10768] team0: Port device team_slave_1 added [ 637.752207][T10774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.752226][T10774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.752257][T10774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.377221][ C0] net_ratelimit: 12865 callbacks suppressed [ 638.377251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.377453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.378010][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 638.378396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.378401][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.378913][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 638.379302][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.379546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.379868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 638.380230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.046337][T10780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.046357][T10780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.046396][T10780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.097532][T10774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.097552][T10774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.097583][T10774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.718884][T10768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.718904][T10768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.718935][T10768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.779299][T10768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.779317][T10768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.779347][T10768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.951314][T10774] hsr_slave_0: entered promiscuous mode [ 641.954117][T10774] hsr_slave_1: entered promiscuous mode [ 641.956350][T10774] debugfs: 'hsr0' already exists in 'hsr' [ 641.956377][T10774] Cannot create hsr debugfs directory [ 642.210590][T10780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.210610][T10780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.210641][T10780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.386821][ C1] net_ratelimit: 12610 callbacks suppressed [ 643.386847][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 643.387310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 643.387651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 643.388105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 643.388464][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 643.388922][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 643.389249][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 643.389761][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 643.390087][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 643.390542][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 648.396673][ C0] net_ratelimit: 13360 callbacks suppressed [ 648.396697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.396941][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 648.397283][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.397730][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 648.398067][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.398329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.398515][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 648.398843][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.398967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.399296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 651.152319][T10551] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 651.297175][T10551] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 651.299091][T10551] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 651.309676][T10551] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 651.333289][T10551] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 651.544543][T10768] hsr_slave_0: entered promiscuous mode [ 651.591867][T10768] hsr_slave_1: entered promiscuous mode [ 651.607039][T10768] debugfs: 'hsr0' already exists in 'hsr' [ 651.607070][T10768] Cannot create hsr debugfs directory [ 653.407044][ C1] net_ratelimit: 11301 callbacks suppressed [ 653.407068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 653.407279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.407431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.407884][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 653.407922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.408224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.408701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 653.409046][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.409051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.409497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 653.501196][ T61] Bluetooth: hci6: command tx timeout [ 654.580261][T10780] hsr_slave_0: entered promiscuous mode [ 654.613140][T10780] hsr_slave_1: entered promiscuous mode [ 654.633758][T10780] debugfs: 'hsr0' already exists in 'hsr' [ 654.633789][T10780] Cannot create hsr debugfs directory [ 655.604268][ T61] Bluetooth: hci6: command tx timeout [ 657.657383][ T61] Bluetooth: hci6: command tx timeout [ 658.416865][ C0] net_ratelimit: 9006 callbacks suppressed [ 658.416887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.418848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.419494][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.421134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.421756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.422929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.423110][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 658.423417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.423501][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.424276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.788336][ T61] Bluetooth: hci6: command tx timeout [ 660.696196][T10551] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 660.829862][T10551] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 660.916070][T10551] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 660.935138][T10551] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 660.936448][T10551] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 662.257690][T10551] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 662.314869][T10551] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 662.365795][T10551] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 662.385585][T10551] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 662.400387][T10551] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 663.080405][T10854] Bluetooth: hci8: command tx timeout [ 663.427043][ C0] net_ratelimit: 6960 callbacks suppressed [ 663.427067][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.427725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.428842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.429968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.431103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.432719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.433362][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.434979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.435629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.437340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.467076][T10854] Bluetooth: hci9: command tx timeout [ 665.018568][T10854] Bluetooth: hci1: command 0x0406 tx timeout [ 665.022658][T10854] Bluetooth: hci4: command 0x0406 tx timeout [ 665.226885][ T5623] Bluetooth: hci8: command tx timeout [ 665.840325][T10854] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 665.912549][T10854] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 665.963564][T10854] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 665.990073][T10854] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 665.993295][T10854] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 667.218491][T10864] Bluetooth: hci9: command tx timeout [ 667.455759][ T61] Bluetooth: hci8: command tx timeout [ 667.659727][T10864] Bluetooth: hci7: command 0x0406 tx timeout [ 668.437053][ C1] net_ratelimit: 6416 callbacks suppressed [ 668.437077][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 668.437420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.437949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.438581][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.438830][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 668.439228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.439717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.440722][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 668.440848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.441040][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.390789][ T61] Bluetooth: hci9: command tx timeout [ 670.390826][ T61] Bluetooth: hci8: command tx timeout [ 670.390894][ T61] Bluetooth: hci10: command tx timeout [ 671.128605][T10831] virt_wifi0 speed is unknown, defaulting to 1000 [ 672.509303][ T61] Bluetooth: hci10: command tx timeout [ 673.183311][ T5623] Bluetooth: hci9: command tx timeout [ 673.447337][ C0] net_ratelimit: 7842 callbacks suppressed [ 673.447361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.447505][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 673.447842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.448506][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.449273][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 673.449603][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.449640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.450283][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.451075][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 673.451407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 674.556859][ T61] Bluetooth: hci10: command tx timeout [ 676.619507][ T61] Bluetooth: hci10: command tx timeout [ 676.741566][T10843] virt_wifi0 speed is unknown, defaulting to 1000 [ 678.469352][ C1] net_ratelimit: 7559 callbacks suppressed [ 678.469379][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 678.470493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.471976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 678.472325][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.473769][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 678.474114][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.475504][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 678.475836][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.609491][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:5d:4a:e3:b1:8b, vlan:0) [ 678.609849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 683.476711][ C0] net_ratelimit: 7972 callbacks suppressed [ 683.476732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.477246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.478182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.478589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.479257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.480342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.481455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.482596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.483217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.484864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.321340][ T39] INFO: task syz-executor:5619 blocked for more than 143 seconds. [ 685.321373][ T39] Tainted: G L syzkaller #0 [ 685.321386][ T39] Blocked by coredump. [ 685.321394][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 685.321406][ T39] task:syz-executor state:D stack:21048 pid:5619 tgid:5619 ppid:1 task_flags:0x40054c flags:0x00080003 [ 685.321471][ T39] Call Trace: [ 685.321480][ T39] [ 685.321496][ T39] __schedule+0x16f9/0x5500 [ 685.321568][ T39] ? __pfx___schedule+0x10/0x10 [ 685.321618][ T39] rt_mutex_schedule+0x76/0xf0 [ 685.321650][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 685.321698][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 685.321728][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 685.321757][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 685.321797][ T39] ? rcu_barrier+0x4c/0x580 [ 685.321837][ T39] ? rcu_barrier+0x4c/0x580 [ 685.321877][ T39] ? rcu_barrier+0x4c/0x580 [ 685.321909][ T39] mutex_lock_nested+0x168/0x1d0 [ 685.321935][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 685.321968][ T39] rcu_barrier+0x4c/0x580 [ 685.322014][ T39] netdev_run_todo+0x2fc/0x12b0 [ 685.322042][ T39] ? rtnl_is_locked+0x9/0x20 [ 685.322069][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 685.322095][ T39] ? kasan_quarantine_put+0xbb/0x1f0 [ 685.322121][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 685.322165][ T39] ? netdev_state_change+0x1ca/0x220 [ 685.322200][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 685.322245][ T39] tun_chr_close+0x13f/0x1c0 [ 685.322283][ T39] __fput+0x461/0xa70 [ 685.322322][ T39] task_work_run+0x1d9/0x270 [ 685.322354][ T39] ? __pfx_task_work_run+0x10/0x10 [ 685.322382][ T39] ? do_exit+0x70a/0x22c0 [ 685.322407][ T39] ? kmem_cache_free+0x187/0x6c0 [ 685.322436][ T39] ? put_net+0x191/0x260 [ 685.322466][ T39] ? do_exit+0x70a/0x22c0 [ 685.322497][ T39] do_exit+0x70f/0x22c0 [ 685.322526][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 685.322566][ T39] ? __pfx_do_exit+0x10/0x10 [ 685.322590][ T39] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 685.322619][ T39] ? reacquire_held_locks+0x104/0x190 [ 685.322651][ T39] ? rt_spin_lock+0x1e0/0x400 [ 685.322691][ T39] do_group_exit+0x21b/0x2d0 [ 685.322719][ T39] ? rt_spin_unlock+0x160/0x200 [ 685.322752][ T39] get_signal+0x1284/0x1330 [ 685.322814][ T39] arch_do_signal_or_restart+0xbc/0x840 [ 685.322840][ T39] ? __pfx___x64_sys_wait4+0x10/0x10 [ 685.322871][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 685.322917][ T39] exit_to_user_mode_loop+0xa9/0x680 [ 685.322944][ T39] ? rcu_is_watching+0x15/0xb0 [ 685.322978][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.323004][ T39] do_syscall_64+0x353/0x580 [ 685.323039][ T39] ? trace_irq_disable+0x3b/0x140 [ 685.323065][ T39] ? clear_bhb_loop+0x40/0x90 [ 685.323095][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.323119][ T39] RIP: 0033:0x7f090582d68e [ 685.323140][ T39] RSP: 002b:00007ffe627404e8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 685.323164][ T39] RAX: fffffffffffffe00 RBX: 0000555594945500 RCX: 00007f090582d68e [ 685.323182][ T39] RDX: 0000000040000000 RSI: 00007ffe6274058c RDI: ffffffffffffffff [ 685.323199][ T39] RBP: 00007ffe6274058c R08: 0000000000000000 R09: 0000000000000000 [ 685.323214][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000119 [ 685.323228][ T39] R13: 0000555594958a00 R14: 0000000000070cdb R15: 00007ffe627405e0 [ 685.323274][ T39] [ 685.323317][ T39] INFO: task syz.4.1468:10480 blocked for more than 143 seconds. [ 685.323337][ T39] Tainted: G L syzkaller #0 [ 685.323350][ T39] Blocked by coredump. [ 685.323357][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 685.323369][ T39] task:syz.4.1468 state:D stack:24440 pid:10480 tgid:10479 ppid:8762 task_flags:0x40054c flags:0x00080001 [ 685.323431][ T39] Call Trace: [ 685.323439][ T39] [ 685.323453][ T39] __schedule+0x16f9/0x5500 [ 685.323484][ T39] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 685.323525][ T39] ? __pfx_clockevents_program_event+0x10/0x10 [ 685.323577][ T39] ? __pfx___schedule+0x10/0x10 [ 685.323625][ T39] rt_mutex_schedule+0x76/0xf0 [ 685.323657][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 685.323705][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 685.323735][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 685.323765][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 685.323805][ T39] ? rcu_barrier+0x4c/0x580 [ 685.323844][ T39] ? rcu_barrier+0x4c/0x580 [ 685.323886][ T39] ? rcu_barrier+0x4c/0x580 [ 685.323940][ T39] mutex_lock_nested+0x168/0x1d0 [ 685.323966][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 685.323999][ T39] rcu_barrier+0x4c/0x580 [ 685.324044][ T39] netdev_run_todo+0x2fc/0x12b0 [ 685.324072][ T39] ? rtnl_is_locked+0x9/0x20 [ 685.324099][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 685.324126][ T39] ? kasan_quarantine_put+0xbb/0x1f0 [ 685.324151][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 685.324205][ T39] ? netdev_state_change+0x1ca/0x220 [ 685.324247][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 685.324284][ T39] tun_chr_close+0x13f/0x1c0 [ 685.324320][ T39] __fput+0x461/0xa70 [ 685.324359][ T39] task_work_run+0x1d9/0x270 [ 685.324390][ T39] ? __pfx_task_work_run+0x10/0x10 [ 685.324419][ T39] ? do_exit+0x70a/0x22c0 [ 685.324442][ T39] ? kmem_cache_free+0x187/0x6c0 [ 685.324471][ T39] ? put_net+0x191/0x260 [ 685.324503][ T39] ? do_exit+0x70a/0x22c0 [ 685.324534][ T39] do_exit+0x70f/0x22c0 [ 685.324563][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 685.324603][ T39] ? __pfx_do_exit+0x10/0x10 [ 685.324627][ T39] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 685.324656][ T39] ? reacquire_held_locks+0x104/0x190 [ 685.324688][ T39] ? rt_spin_lock+0x1e0/0x400 [ 685.324728][ T39] do_group_exit+0x21b/0x2d0 [ 685.324755][ T39] ? rt_spin_unlock+0x160/0x200 [ 685.324786][ T39] get_signal+0x1284/0x1330 [ 685.324842][ T39] arch_do_signal_or_restart+0xbc/0x840 [ 685.324868][ T39] ? __pfx_task_work_add+0x10/0x10 [ 685.324896][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 685.324929][ T39] ? __fput_deferred+0x253/0x3e0 [ 685.324967][ T39] exit_to_user_mode_loop+0xa9/0x680 [ 685.324994][ T39] ? rcu_is_watching+0x15/0xb0 [ 685.325026][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.325052][ T39] do_syscall_64+0x353/0x580 [ 685.325088][ T39] ? clear_bhb_loop+0x40/0x90 [ 685.325116][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.325141][ T39] RIP: 0033:0x7f6f3357ce59 [ 685.325160][ T39] RSP: 002b:00007f6f317ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 685.325184][ T39] RAX: 0000000000000000 RBX: 00007f6f337f5fa0 RCX: 00007f6f3357ce59 [ 685.325200][ T39] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000003 [ 685.325216][ T39] RBP: 00007f6f33612d6f R08: 0000000000000000 R09: 0000000000000000 [ 685.325232][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.325257][ T39] R13: 00007f6f337f6038 R14: 00007f6f337f5fa0 R15: 00007ffd30b50ac8 [ 685.325294][ T39] [ 685.325357][ T39] [ 685.325357][ T39] Showing all locks held in the system: [ 685.325369][ T39] 2 locks held by kworker/u8:0/12: [ 685.325383][ T39] #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 685.325451][ T39] #1: ffffc90000117c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 685.325518][ T39] 3 locks held by kworker/u8:1/13: [ 685.325531][ T39] #0: ffff888033680938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 685.325595][ T39] #1: ffffc90000127c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 685.325661][ T39] #2: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 685.325726][ T39] 2 locks held by ksoftirqd/0/15: [ 685.325739][ T39] #0: ffffffff8e0613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 685.325804][ T39] #1: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 685.325871][ T39] 3 locks held by ksoftirqd/1/31: [ 685.325884][ T39] #0: ffffffff8e0613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 685.325948][ T39] #1: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 685.326013][ T39] #2: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 685.326074][ T39] 1 lock held by khungtaskd/39: [ 685.326087][ T39] #0: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 685.326159][ T39] 5 locks held by kworker/u8:5/69: [ 685.326171][ T39] #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 685.326245][ T39] #1: ffffc9000155fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 685.326312][ T39] #2: ffff888065348310 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 685.326378][ T39] #3: ffff888057e59920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 685.326439][ T39] #4: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 685.326521][ T39] 2 locks held by getty/5369: [ 685.326534][ T39] #0: ffff8880331910a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 685.326592][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 685.337430][ T39] 1 lock held by syz-executor/5619: [ 685.337445][ T39] #0: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 685.337518][ T39] 3 locks held by kworker/u8:33/8163: [ 685.337532][ T39] #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 685.337597][ T39] #1: ffffc9000632fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 685.337660][ T39] #2: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 685.337718][ T39] 5 locks held by kworker/u8:45/8218: [ 685.337731][ T39] #0: ffff88801bae6138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 685.337794][ T39] #1: ffffc90006257c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 685.337858][ T39] #2: ffffffff8f59d4e0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 685.337922][ T39] #3: ffff8880356718b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310 [ 685.337986][ T39] #4: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 685.338054][ T39] 1 lock held by syz-executor/9934: [ 685.338067][ T39] #0: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 685.338135][ T39] 1 lock held by syz.4.1468/10480: [ 685.338148][ T39] #0: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 685.338214][ T39] 1 lock held by syz-executor/10549: [ 685.338227][ T39] #0: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 685.338304][ T39] 4 locks held by syz-executor/10557: [ 685.338318][ T39] #0: ffff888011c44480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 685.338384][ T39] #1: ffff88805ce24c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 685.338451][ T39] #2: ffff88802a3b83c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 685.338531][ T39] #3: ffffffff8ee21ab8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 685.338598][ T39] 7 locks held by syz-executor/10564: [ 685.338611][ T39] #0: ffff888011c44480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 685.338678][ T39] #1: ffff88805dc5a478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 685.338741][ T39] #2: ffff88802a3b83c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 685.338812][ T39] #3: ffffffff8ee21ab8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 685.338879][ T39] #4: ffff888065a1b160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 685.338943][ T39] #5: ffff888022720310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 685.339013][ T39] #6: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 685.339078][ T39] 4 locks held by syz-executor/10589: [ 685.339091][ T39] #0: ffff888011c44480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 685.339159][ T39] #1: ffff888032e35878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 685.339223][ T39] #2: ffff88802a3b83c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 685.339302][ T39] #3: ffffffff8ee21ab8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 685.339374][ T39] 4 locks held by syz-executor/10747: [ 685.339387][ T39] #0: ffff888011c44480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 685.339453][ T39] #1: ffff88803b686c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 685.339516][ T39] #2: ffff88802a3b83c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 685.339586][ T39] #3: ffffffff8ee21ab8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 685.339652][ T39] 1 lock held by syz-executor/10768: [ 685.339665][ T39] #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 685.339730][ T39] 1 lock held by syz-executor/10774: [ 685.339744][ T39] #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 685.339809][ T39] 3 locks held by syz-executor/10780: [ 685.339822][ T39] #0: ffff8880602b80b0 (&hdev->lock){+.+.}-{4:4}, at: hci_unregister_dev+0x2e7/0x5a0 [ 685.339886][ T39] #1: ffffffff8e311470 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 685.339940][ T39] #2: ffff88801f2b6b58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0 [ 685.340022][ T39] 1 lock held by syz-executor/10831: [ 685.340035][ T39] #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bf/0x1e30 [ 685.340089][ T39] 2 locks held by syz-executor/10843: [ 685.340102][ T39] #0: ffffffff8f59d4e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 685.340162][ T39] #1: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x850 [ 685.340223][ T39] 1 lock held by syz-executor/10848: [ 685.340243][ T39] #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 685.340308][ T39] 1 lock held by syz-executor/10863: [ 685.340321][ T39] #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 685.340387][ T39] [ 685.340392][ T39] ============================================= [ 685.340392][ T39] [ 685.340419][ T39] NMI backtrace for cpu 1 [ 685.340439][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 685.340469][ T39] Tainted: [L]=SOFTLOCKUP [ 685.340482][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 685.340495][ T39] Call Trace: [ 685.340505][ T39] [ 685.340514][ T39] dump_stack_lvl+0xe8/0x150 [ 685.340543][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 685.340571][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 685.340599][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 685.340633][ T39] sys_info+0x135/0x170 [ 685.340656][ T39] watchdog+0xfd3/0x1030 [ 685.340687][ T39] ? watchdog+0x1c9/0x1030 [ 685.340716][ T39] kthread+0x388/0x470 [ 685.340740][ T39] ? __pfx_watchdog+0x10/0x10 [ 685.340762][ T39] ? __pfx_kthread+0x10/0x10 [ 685.340786][ T39] ret_from_fork+0x514/0xb70 [ 685.340817][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 685.340844][ T39] ? __switch_to+0xc79/0x1410 [ 685.340870][ T39] ? __pfx_kthread+0x10/0x10 [ 685.340896][ T39] ret_from_fork_asm+0x1a/0x30 [ 685.340941][ T39] [ 685.340972][ T39] Sending NMI from CPU 1 to CPUs 0: [ 685.341008][ C0] NMI backtrace for cpu 0 [ 685.341025][ C0] CPU: 0 UID: 0 PID: 21 Comm: rcuc/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 685.341051][ C0] Tainted: [L]=SOFTLOCKUP [ 685.341057][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 685.341069][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x0/0x40 [ 685.341101][ C0] Code: 48 8d 3d 53 9e 77 04 48 c7 c6 79 22 75 8d 67 48 0f b9 3a 90 eb ca cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 31 c0 83 3d d3 62 74 04 00 74 1d 83 3d ea 74 74 04 00 [ 685.341117][ C0] RSP: 0018:ffffc900001a7550 EFLAGS: 00000206 [ 685.341133][ C0] RAX: ffffc900001a8000 RBX: ffffffff904b1101 RCX: ffffc900001a7a48 [ 685.341147][ C0] RDX: ffffc900001a7601 RSI: dffffc0000000000 RDI: ffffc900001a7630 [ 685.341161][ C0] RBP: dffffc0000000000 R08: ffffc900001a7a30 R09: 0000000000000000 [ 685.341174][ C0] R10: ffffc900001a7678 R11: fffff52000034ed1 R12: ffffc900001a7a40 [ 685.341188][ C0] R13: ffffc900001a0000 R14: ffffc900001a7628 R15: ffffffff81771406 [ 685.341202][ C0] FS: 0000000000000000(0000) GS:ffff888125c7e000(0000) knlGS:0000000000000000 [ 685.341218][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 685.341230][ C0] CR2: 0000556bf2229660 CR3: 0000000037950000 CR4: 00000000003526f0 [ 685.341248][ C0] Call Trace: [ 685.341255][ C0] [ 685.341262][ C0] unwind_next_frame+0x1b6d/0x2550 [ 685.341291][ C0] ? unwind_next_frame+0xa6/0x2550 [ 685.341317][ C0] ? kfree+0x1c5/0x6c0 [ 685.341337][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 685.341357][ C0] arch_stack_walk+0x11b/0x150 [ 685.341385][ C0] ? ref_tracker_free+0x509/0x820 [ 685.341416][ C0] stack_trace_save+0xa9/0x100 [ 685.341434][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 685.341456][ C0] ? __lock_acquire+0x6b5/0x2d10 [ 685.341480][ C0] kasan_save_track+0x3e/0x80 [ 685.341500][ C0] ? kasan_save_track+0x3e/0x80 [ 685.341518][ C0] ? kasan_save_free_info+0x46/0x50 [ 685.341544][ C0] ? __kasan_slab_free+0x5c/0x80 [ 685.341565][ C0] ? kfree+0x1c5/0x6c0 [ 685.341609][ C0] kasan_save_free_info+0x46/0x50 [ 685.341636][ C0] __kasan_slab_free+0x5c/0x80 [ 685.341658][ C0] kfree+0x1c5/0x6c0 [ 685.341675][ C0] ? ref_tracker_free+0x509/0x820 [ 685.341705][ C0] ref_tracker_free+0x509/0x820 [ 685.341740][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 685.341768][ C0] ? dst_destroy+0x12a/0x570 [ 685.341787][ C0] ? rcu_cpu_kthread+0x99e/0x1470 [ 685.341809][ C0] ? smpboot_thread_fn+0x541/0xa50 [ 685.341825][ C0] ? kthread+0x388/0x470 [ 685.341843][ C0] ? ret_from_fork+0x514/0xb70 [ 685.341863][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 685.341890][ C0] ? rcu_cpu_kthread+0x205/0x1470 [ 685.341913][ C0] ? rcu_cpu_kthread+0x205/0x1470 [ 685.341934][ C0] ? ipv4_dst_destroy+0x1a8/0x230 [ 685.341961][ C0] dst_destroy+0x12a/0x570 [ 685.341980][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 685.342001][ C0] rcu_cpu_kthread+0x99e/0x1470 [ 685.342028][ C0] ? rcu_cpu_kthread+0x205/0x1470 [ 685.342055][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 685.342085][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 685.342102][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 685.342128][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 685.342144][ C0] smpboot_thread_fn+0x541/0xa50 [ 685.342161][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 685.342182][ C0] kthread+0x388/0x470 [ 685.342201][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 685.342217][ C0] ? __pfx_kthread+0x10/0x10 [ 685.342237][ C0] ret_from_fork+0x514/0xb70 [ 685.342260][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 685.342281][ C0] ? __switch_to+0xc79/0x1410 [ 685.342299][ C0] ? __pfx_kthread+0x10/0x10 [ 685.342319][ C0] ret_from_fork_asm+0x1a/0x30 [ 685.342351][ C0] [ 685.344408][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 685.344431][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 685.344464][ T39] Tainted: [L]=SOFTLOCKUP [ 685.344472][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 685.344486][ T39] Call Trace: [ 685.344495][ T39] [ 685.344504][ T39] vpanic+0x56c/0xa60 [ 685.344541][ T39] ? __pfx___schedule+0x10/0x10 [ 685.344573][ T39] ? __pfx_vpanic+0x10/0x10 [ 685.344615][ T39] panic+0xc5/0xd0 [ 685.344646][ T39] ? __pfx_panic+0x10/0x10 [ 685.344679][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 685.344718][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 685.344753][ T39] watchdog+0x102c/0x1030 [ 685.344784][ T39] ? watchdog+0x1c9/0x1030 [ 685.344815][ T39] kthread+0x388/0x470 [ 685.344840][ T39] ? __pfx_watchdog+0x10/0x10 [ 685.344861][ T39] ? __pfx_kthread+0x10/0x10 [ 685.344887][ T39] ret_from_fork+0x514/0xb70 [ 685.344916][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 685.344943][ T39] ? __switch_to+0xc79/0x1410 [ 685.344967][ T39] ? __pfx_kthread+0x10/0x10 [ 685.344993][ T39] ret_from_fork_asm+0x1a/0x30 [ 685.345039][ T39] [ 685.345658][ T39] Kernel Offset: disabled