last executing test programs: 25.323727385s ago: executing program 2 (id=200): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea800000000001090224000100000000"], 0x0) openat$qrtrtun(0xffffff9c, &(0x7f0000000080), 0x208000) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4840, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x10, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 23.003736831s ago: executing program 0 (id=202): r0 = eventfd(0x5) read$eventfd(r0, &(0x7f0000000200), 0x8) r1 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r1, &(0x7f00000001c0)=@data_h2c={{0x6, 0xe}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r9, 0x8028640c, &(0x7f0000000080)={0x8000001, 0x0, 0x0, 0x0, 0x4}) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r10, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) ptrace$ARCH_SHSTK_LOCK(0x1e, r6, 0x0, 0x5003) setsockopt$inet_opts(r10, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x10601}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r3}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) 22.912749589s ago: executing program 1 (id=203): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8001}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r4}, &(0x7f0000001cc0)=""/194, 0xc2, 0x0) 21.536156811s ago: executing program 2 (id=206): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x81cbb78d) 18.458849064s ago: executing program 2 (id=208): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) dup(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000005880)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 18.412891848s ago: executing program 3 (id=209): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x18, 0x0, @fd, 0x6, {}, 0x5, 0x15}) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) 18.301054768s ago: executing program 1 (id=210): socket(0x2a, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) open_tree(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) close_range(r0, r1, 0x0) 17.879294065s ago: executing program 1 (id=211): fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r2, r2, 0x4, 0xffffffffffffffff, r3) creat(0x0, 0xecf86c37d53049ce) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) accept4(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x0, 0x0) 17.106114984s ago: executing program 0 (id=212): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x68}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="58010000", @ANYRES16=r9, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="0600cd000000000031013300000000000802110000010802110000005050505050505f00ffffffffffffff"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r10 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r10, &(0x7f0000000d40)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000200)="a905000400007464f4019e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb00000000000000", 0xf}], 0x2}}], 0x1, 0x4004040) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 17.105454544s ago: executing program 3 (id=213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) close(r0) 15.620612096s ago: executing program 1 (id=214): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x64000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x2e4a, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) landlock_restrict_self(r4, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20008014}, 0x20000040) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) 14.629007484s ago: executing program 0 (id=215): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040903"], 0x6) 14.628699203s ago: executing program 3 (id=216): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040), 0x10) 14.483055386s ago: executing program 0 (id=217): fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r2, r2, 0x4, 0xffffffffffffffff, r3) creat(0x0, 0xecf86c37d53049ce) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) accept4(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x0, 0x0) 12.610210303s ago: executing program 0 (id=218): fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r2, r2, 0x4, 0xffffffffffffffff, r3) creat(0x0, 0xecf86c37d53049ce) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) accept4(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x0, 0x0) 12.453805447s ago: executing program 3 (id=219): fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r2, r2, 0x4, 0xffffffffffffffff, r3) creat(0x0, 0xecf86c37d53049ce) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xda90) accept4(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x0, 0x0) 12.387065042s ago: executing program 2 (id=220): fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r2, r2, 0x4, 0xffffffffffffffff, r3) creat(0x0, 0xecf86c37d53049ce) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xda90) accept4(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x0, 0x0) 10.640304297s ago: executing program 3 (id=221): fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r1, r1, 0x4, 0xffffffffffffffff, r2) creat(0x0, 0xecf86c37d53049ce) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xda90) accept4(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x0, 0x0) 8.750022844s ago: executing program 2 (id=222): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8001}) keyctl$dh_compute(0x17, &(0x7f0000000040), &(0x7f0000001cc0)=""/194, 0xc2, 0x0) 7.520911214s ago: executing program 1 (id=223): fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0xecf86c37d53049ce) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) accept4(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x0, 0x0) 5.699585055s ago: executing program 1 (id=224): fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r2, r2, 0x4, 0xffffffffffffffff, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) accept4(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x0, 0x0) 3.856363389s ago: executing program 2 (id=225): fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r2, r2, 0x4, 0xffffffffffffffff, r3) creat(0x0, 0xecf86c37d53049ce) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) accept4(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x0, 0x0) 1.979621095s ago: executing program 0 (id=226): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 0s ago: executing program 3 (id=227): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040), 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts. [ 81.767101][ T5757] cgroup: Unknown subsys name 'net' [ 81.875572][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.596473][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.199806][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.207347][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.212409][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.223717][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.226289][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.239117][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.247223][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.248261][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.262532][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.270521][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.278214][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.286216][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.287448][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.299572][ T5083] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.308686][ T5083] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.320755][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.338605][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.346270][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.353687][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.364110][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.377621][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.387195][ T5083] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.387567][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.401777][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.929102][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 87.049552][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 87.130149][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 87.141061][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 87.206601][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.215006][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.223576][ T5766] bridge_slave_0: entered allmulticast mode [ 87.232189][ T5766] bridge_slave_0: entered promiscuous mode [ 87.242502][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.250003][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.257394][ T5766] bridge_slave_1: entered allmulticast mode [ 87.265045][ T5766] bridge_slave_1: entered promiscuous mode [ 87.288751][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.295937][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.303491][ T5767] bridge_slave_0: entered allmulticast mode [ 87.311309][ T5767] bridge_slave_0: entered promiscuous mode [ 87.408578][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.415857][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.429430][ T5767] bridge_slave_1: entered allmulticast mode [ 87.437513][ T5767] bridge_slave_1: entered promiscuous mode [ 87.498022][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.526420][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.549150][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.572881][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.682476][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.690446][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.699924][ T5769] bridge_slave_0: entered allmulticast mode [ 87.707710][ T5769] bridge_slave_0: entered promiscuous mode [ 87.716488][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.736047][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.754680][ T5769] bridge_slave_1: entered allmulticast mode [ 87.762811][ T5769] bridge_slave_1: entered promiscuous mode [ 87.819885][ T5766] team0: Port device team_slave_0 added [ 87.845894][ T5767] team0: Port device team_slave_0 added [ 87.881524][ T5766] team0: Port device team_slave_1 added [ 87.914884][ T5767] team0: Port device team_slave_1 added [ 87.934203][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.941548][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.949171][ T5768] bridge_slave_0: entered allmulticast mode [ 87.956218][ T5768] bridge_slave_0: entered promiscuous mode [ 87.979502][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.992922][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.014978][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.022284][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.030584][ T5768] bridge_slave_1: entered allmulticast mode [ 88.038148][ T5768] bridge_slave_1: entered promiscuous mode [ 88.056954][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.063960][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.090430][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.116751][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.124095][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.151000][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.164320][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.171650][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.198439][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.223875][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.231357][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.257635][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.291629][ T5769] team0: Port device team_slave_0 added [ 88.305694][ T5769] team0: Port device team_slave_1 added [ 88.315112][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.328726][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.367832][ T5083] Bluetooth: hci2: command tx timeout [ 88.373667][ T5083] Bluetooth: hci3: command tx timeout [ 88.419472][ T5768] team0: Port device team_slave_0 added [ 88.426155][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.433742][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.447333][ T5083] Bluetooth: hci1: command tx timeout [ 88.460023][ T5782] Bluetooth: hci0: command tx timeout [ 88.467039][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.484431][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.491609][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.522351][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.555533][ T5766] hsr_slave_0: entered promiscuous mode [ 88.562341][ T5766] hsr_slave_1: entered promiscuous mode [ 88.586419][ T5768] team0: Port device team_slave_1 added [ 88.671488][ T5767] hsr_slave_0: entered promiscuous mode [ 88.678671][ T5767] hsr_slave_1: entered promiscuous mode [ 88.685067][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.694459][ T5767] Cannot create hsr debugfs directory [ 88.701944][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.709347][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.735510][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.748523][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.755544][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.781891][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.811168][ T5769] hsr_slave_0: entered promiscuous mode [ 88.818236][ T5769] hsr_slave_1: entered promiscuous mode [ 88.824755][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.832478][ T5769] Cannot create hsr debugfs directory [ 89.009211][ T5768] hsr_slave_0: entered promiscuous mode [ 89.015946][ T5768] hsr_slave_1: entered promiscuous mode [ 89.023159][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.038043][ T5768] Cannot create hsr debugfs directory [ 89.362861][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.387431][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.399775][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.437651][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.491635][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.518062][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.550653][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.561578][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.606128][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.625677][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.638763][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.650488][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.743658][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.759672][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.788183][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.801934][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.914471][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.974269][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.997192][ T1298] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.004630][ T1298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.033207][ T1298] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.040464][ T1298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.060332][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.104798][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.136328][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.159649][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.166790][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.191243][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.198501][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.214059][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.273505][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.310698][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.343045][ T1298] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.350304][ T1298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.402661][ T1298] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.409935][ T1298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.429775][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.437008][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.450670][ T5083] Bluetooth: hci2: command tx timeout [ 90.450687][ T5782] Bluetooth: hci3: command tx timeout [ 90.489343][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.496576][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.529166][ T5782] Bluetooth: hci1: command tx timeout [ 90.534699][ T5782] Bluetooth: hci0: command tx timeout [ 90.869682][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.926807][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.069026][ T5769] veth0_vlan: entered promiscuous mode [ 91.092494][ T5769] veth1_vlan: entered promiscuous mode [ 91.131806][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.151252][ T5766] veth0_vlan: entered promiscuous mode [ 91.204450][ T5766] veth1_vlan: entered promiscuous mode [ 91.231619][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.274040][ T5769] veth0_macvtap: entered promiscuous mode [ 91.289194][ T5769] veth1_macvtap: entered promiscuous mode [ 91.306377][ T5767] veth0_vlan: entered promiscuous mode [ 91.353598][ T5766] veth0_macvtap: entered promiscuous mode [ 91.374507][ T5767] veth1_vlan: entered promiscuous mode [ 91.390592][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.407181][ T5766] veth1_macvtap: entered promiscuous mode [ 91.430483][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.463887][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.475115][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.491843][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.503489][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.514800][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.527743][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.542441][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.552281][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.561207][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.572205][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.584738][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.595681][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.605260][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.614091][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.631424][ T5768] veth0_vlan: entered promiscuous mode [ 91.671840][ T5768] veth1_vlan: entered promiscuous mode [ 91.706783][ T5767] veth0_macvtap: entered promiscuous mode [ 91.746371][ T5767] veth1_macvtap: entered promiscuous mode [ 91.839397][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.853670][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.864242][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.875068][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.889706][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.901161][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.912463][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.913343][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.922923][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.943367][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.948234][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.962864][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.008748][ T5768] veth0_macvtap: entered promiscuous mode [ 92.030687][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.040566][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.051634][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.060925][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.082549][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.090952][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.099253][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.110866][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.123475][ T5768] veth1_macvtap: entered promiscuous mode [ 92.182337][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.202253][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.242771][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.263723][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.273951][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.284701][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.300852][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.311915][ T788] cfg80211: failed to load regulatory.db [ 92.321620][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.335092][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.396026][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.412292][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.423093][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.434459][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.444780][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.456619][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.468533][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.490687][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.513341][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.528481][ T5782] Bluetooth: hci2: command tx timeout [ 92.528492][ T5083] Bluetooth: hci3: command tx timeout [ 92.548598][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.572170][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.588804][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.598234][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.607741][ T5782] Bluetooth: hci1: command tx timeout [ 92.607831][ T5083] Bluetooth: hci0: command tx timeout [ 92.926373][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.966130][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.853260][ T5872] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 93.871503][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.877900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.882090][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.971930][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.979900][ T5872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.988219][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.995506][ T5872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.008117][ T5872] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 94.031576][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.239594][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.257415][ T968] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.437057][ T5772] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.675294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.697440][ T5773] Bluetooth: hci0: command tx timeout [ 94.703041][ T5782] Bluetooth: hci2: command tx timeout [ 94.708782][ T5773] Bluetooth: hci1: command tx timeout [ 94.715167][ T5083] Bluetooth: hci3: command tx timeout [ 95.038159][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.046057][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.087249][ T968] usb 1-1: Using ep0 maxpacket: 16 [ 95.118892][ T5772] usb 4-1: Using ep0 maxpacket: 8 [ 95.132249][ T968] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 95.144673][ T5772] usb 4-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 95.159026][ T5772] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 95.177078][ T968] usb 1-1: config 1 has no interface number 0 [ 95.183603][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.199145][ T968] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 95.233206][ T968] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.247221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.289619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.402019][ T968] usb 1-1: config 1 interface 105 has no altsetting 0 [ 95.482380][ T968] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 95.497892][ T968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.506095][ T968] usb 1-1: Product: syz [ 95.527735][ T968] usb 1-1: Manufacturer: syz [ 95.558028][ T968] usb 1-1: SerialNumber: syz [ 95.633008][ T5874] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.674737][ T5884] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 95.681632][ T5884] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 95.690952][ T5885] vhci_hcd: connection closed [ 95.698944][ T5884] vhci_hcd vhci_hcd.0: Device attached [ 95.801689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.904126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.977810][ T12] vhci_hcd: stop threads [ 95.982920][ T12] vhci_hcd: release socket [ 96.077420][ T12] vhci_hcd: disconnect device [ 96.104859][ T968] aqc111: probe of 1-1:1.105 failed with error -22 [ 96.542435][ T5895] Bluetooth: MGMT ver 1.22 [ 96.621362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.723638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.826071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.928496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.654238][ T5898] ntfs3: nullb0: Primary boot signature is not NTFS. [ 97.664638][ T5898] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 97.846166][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 98.406099][ T8] usb 4-1: USB disconnect, device number 2 [ 98.513848][ T5902] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.462349][ T5806] usb 1-1: USB disconnect, device number 2 [ 103.500785][ T5938] netlink: 188 bytes leftover after parsing attributes in process `syz.3.28'. [ 104.469340][ T5948] syz.0.30: attempt to access beyond end of device [ 104.469340][ T5948] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 104.483915][ T5948] syz.0.30: attempt to access beyond end of device [ 104.483915][ T5948] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 104.500314][ T5948] Mount JFS Failure: -5 [ 107.018500][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.813781][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 107.822565][ T8] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 107.841629][ T8] usb 2-1: config 1 has no interface number 0 [ 107.847883][ T8] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 107.857978][ T8] usb 2-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.871161][ T8] usb 2-1: config 1 interface 105 has no altsetting 0 [ 107.883581][ T8] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 107.906976][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.915189][ T8] usb 2-1: Product: syz [ 107.935644][ T8] usb 2-1: Manufacturer: syz [ 107.943199][ T8] usb 2-1: SerialNumber: syz [ 107.960984][ T5960] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 108.209097][ T8] aqc111: probe of 2-1:1.105 failed with error -22 [ 108.427483][ T5969] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.765016][ T5981] ntfs3: nullb0: Primary boot signature is not NTFS. [ 109.774269][ T5981] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 109.816106][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 111.820457][ T28] audit: type=1804 audit(1767615783.543:2): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.32" name="file0" dev="hugetlbfs" ino=8291 res=1 errno=0 [ 111.937753][ T5861] usb 2-1: USB disconnect, device number 2 [ 112.009906][ T28] audit: type=1804 audit(1767615783.543:3): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.32" name="file0" dev="hugetlbfs" ino=8291 res=1 errno=0 [ 112.275869][ T5987] sctp: failed to load transform for md5: -2 [ 113.967429][ T5083] Bluetooth: hci0: command tx timeout [ 116.181295][ T6013] rdma_op ffff8880440dc9f0 conn xmit_rdma 0000000000000000 [ 116.245612][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.589582][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 118.712526][ T6019] sched: RT throttling activated [ 118.729394][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 119.433628][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 119.456467][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 119.476968][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 119.486093][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.751920][ T8] usb 4-1: config 0 descriptor?? [ 119.769563][ T8] usb 4-1: can't set config #0, error -71 [ 120.687271][ T8] usb 4-1: USB disconnect, device number 3 [ 120.699262][ T6033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.42'. [ 120.740615][ T6033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.42'. [ 120.765695][ T6034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.42'. [ 120.775207][ T6034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.42'. [ 121.825674][ T6050] 9pnet_virtio: no channels available for device 127.0.0.1 [ 124.047079][ T6064] sctp: failed to load transform for md5: -4 [ 126.294770][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 126.627202][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 126.849086][ T5875] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.928129][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 126.996327][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.007478][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.044630][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 127.062305][ T27] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 127.074081][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.104503][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.130474][ T27] usb 1-1: config 0 descriptor?? [ 127.160566][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.176652][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.195781][ T5875] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.209097][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.260797][ T5875] usb 4-1: config 0 descriptor?? [ 127.757853][ T5875] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 127.817282][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 127.850478][ T5875] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 127.877052][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 127.884451][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 127.936566][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 127.970026][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 127.990106][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.043710][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.105403][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.116966][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.137295][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.154892][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.174244][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.214827][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.267029][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.302347][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.330235][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.358579][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.394712][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.436509][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.471384][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.526499][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.548292][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.564323][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.575095][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.582860][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.591727][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.602683][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.621939][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.713320][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.753194][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.797965][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.819448][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.833753][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 128.842866][ T27] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 129.077847][ C0] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 129.078716][ T27] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 129.118095][ T27] microsoft 0003:045E:07DA.0002: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 129.137421][ T27] microsoft 0003:045E:07DA.0002: no inputs found [ 129.158950][ T27] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 129.608950][ T27] usb 1-1: USB disconnect, device number 3 [ 129.670188][ T6107] fido_id[6107]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 130.321717][ T5861] usb 4-1: USB disconnect, device number 4 [ 133.687569][ T6123] kthread_run failed with err -4 [ 134.234334][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.240963][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.871110][ T6133] program syz.3.73 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.880907][ T6133] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 138.566701][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 139.757064][ T5862] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 139.998849][ T5862] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 140.064259][ T5862] usb 1-1: config 0 has no interface number 0 [ 140.105854][ T5862] usb 1-1: config 0 interface 41 has no altsetting 0 [ 140.126309][ T5862] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 140.151645][ T6157] syz.2.77 uses obsolete (PF_INET,SOCK_PACKET) [ 140.199129][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.238985][ T5862] usb 1-1: Product: syz [ 140.252649][ T5862] usb 1-1: Manufacturer: syz [ 140.272322][ T5862] usb 1-1: SerialNumber: syz [ 140.302169][ T5862] usb 1-1: config 0 descriptor?? [ 141.344899][ T5862] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 141.589860][ T5862] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 141.627133][ T5862] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 141.656002][ T5862] CoreChips: probe of 1-1:0.41 failed with error -71 [ 141.694268][ T5862] usb 1-1: USB disconnect, device number 4 [ 141.998258][ T6162] warning: `syz.1.78' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 144.759532][ T5862] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 145.098078][ T5862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.167314][ T5862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 145.168802][ T6182] fuse: Invalid rootmode [ 145.176284][ T5862] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 145.252950][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.287579][ T5862] usb 4-1: config 0 descriptor?? [ 145.309202][ T5862] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 145.316204][ T5862] dvb-usb: bulk message failed: -22 (3/0) [ 145.368782][ T5862] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 145.445386][ T5862] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 145.457125][ T5862] usb 4-1: media controller created [ 145.482669][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.512804][ T6175] dvb-usb: bulk message failed: -22 (2/0) [ 145.563322][ T5862] dvb-usb: bulk message failed: -22 (6/0) [ 145.613453][ T5862] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 145.684669][ T5862] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 146.857574][ T5862] dvb-usb: schedule remote query interval to 150 msecs. [ 146.887056][ T5862] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 146.987346][ T5862] usb 4-1: USB disconnect, device number 5 [ 147.198868][ T5862] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 152.497797][ T5825] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 152.567999][ T5825] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.698236][ T6280] program syz.0.110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.847763][ T9] libceph: connect (1)[c::]:6789 error -101 [ 160.968948][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 161.159338][ T6279] ceph: No mds server is up or the cluster is laggy [ 161.253455][ T9] libceph: connect (1)[c::]:6789 error -101 [ 161.387152][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 163.021239][ T9] libceph: connect (1)[c::]:6789 error -101 [ 163.485057][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 170.752126][ T6374] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.490523][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 180.033102][ T6427] erofs: (device nbd2): erofs_read_superblock: cannot find valid erofs superblock [ 182.867035][ T5825] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 183.048728][ T5825] usb 3-1: config 3 has an invalid interface number: 173 but max is 0 [ 183.067038][ T5825] usb 3-1: config 3 has no interface number 0 [ 183.077676][ T5825] usb 3-1: config 3 interface 173 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 183.111092][ T5825] usb 3-1: config 3 interface 173 has no altsetting 0 [ 183.191211][ T5825] usb 3-1: New USB device found, idVendor=03f0, idProduct=0f9b, bcdDevice=d2.cf [ 183.217135][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.225425][ T5825] usb 3-1: Product: syz [ 183.235491][ T5825] usb 3-1: Manufacturer: syz [ 183.248961][ T5825] usb 3-1: SerialNumber: syz [ 183.272342][ T6432] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 183.285968][ T5825] pl2303 3-1:3.173: required interrupt-in endpoint missing [ 184.357379][ T5772] usb 3-1: USB disconnect, device number 2 [ 185.906578][ T6464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.149'. [ 192.671357][ T6517] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 194.719016][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.725998][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.267139][ T6548] fuse: Bad value for 'fd' [ 201.773711][ T6548] pim6reg: entered allmulticast mode [ 202.097135][ T5862] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 203.236870][ T5862] usb 1-1: Using ep0 maxpacket: 32 [ 203.381993][ T5862] usb 1-1: device descriptor read/all, error -71 [ 203.636438][ T6566] input: syz1 as /devices/virtual/input/input6 [ 203.779878][ T6566] random: crng reseeded on system resumption [ 211.883479][ T6600] hsr0: entered allmulticast mode [ 211.912793][ T6600] hsr_slave_0: entered allmulticast mode [ 211.918724][ T6600] hsr_slave_1: entered allmulticast mode [ 213.697698][ T6603] hsr_slave_0: left promiscuous mode [ 213.807314][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 213.813479][ T5773] Bluetooth: hci1: command 0x0406 tx timeout [ 213.819601][ T5083] Bluetooth: hci0: command 0x0406 tx timeout [ 213.825677][ T5083] Bluetooth: hci2: command 0x0406 tx timeout [ 214.007135][ T6603] hsr_slave_1: left promiscuous mode [ 214.511940][ T6610] netlink: 48 bytes leftover after parsing attributes in process `syz.0.183'. [ 215.493749][ T6603] hsr0 (unregistering): left allmulticast mode [ 223.817034][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 223.897219][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 223.937040][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 224.039065][ T8] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 224.073882][ T8] usb 4-1: config 1 has no interface number 0 [ 224.096076][ T8] usb 4-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 224.346625][ T8] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x7 has an invalid bInterval 251, changing to 11 [ 224.357983][ T8] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 224.761979][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 224.856321][ T27] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.874504][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 224.881793][ T27] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 224.896290][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.913925][ T27] usb 2-1: config 0 descriptor?? [ 224.998475][ T8] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 225.016881][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.035240][ T8] usb 4-1: Product: syz [ 225.039532][ T8] usb 4-1: Manufacturer: syz [ 225.044172][ T8] usb 4-1: SerialNumber: syz [ 225.093569][ T6654] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 225.131168][ T8] usb 4-1: Expected 3 endpoints, found: 2 [ 227.378013][ T27] usbhid 2-1:0.0: can't add hid device: -71 [ 227.399046][ T27] usbhid: probe of 2-1:0.0 failed with error -71 [ 227.427078][ T5772] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 227.446314][ T8] usb 4-1: USB disconnect, device number 6 [ 227.456613][ T27] usb 2-1: USB disconnect, device number 3 [ 227.760122][ T5772] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.878033][ T27] IPVS: starting estimator thread 0... [ 228.068282][ T6684] IPVS: using max 16 ests per chain, 38400 per kthread [ 228.518372][ T5772] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 228.535974][ T5772] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 228.547714][ T5772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.572671][ T5772] usb 3-1: config 0 descriptor?? [ 228.750866][ T5772] usb 3-1: can't set config #0, error -71 [ 228.769026][ T5772] usb 3-1: USB disconnect, device number 3 [ 234.908441][ T6717] tipc: Started in network mode [ 234.932899][ T6717] tipc: Node identity 6eca3b75cedc, cluster identity 4711 [ 234.953425][ T6717] tipc: Enabled bearer , priority 0 [ 235.130342][ T6717] tipc: Disabling bearer [ 235.463740][ C1] Unknown status report in ack skb [ 251.040652][ C1] ------------[ cut here ]------------ [ 251.046235][ C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 251.056146][ C1] Modules linked in: [ 251.060136][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 251.067210][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.077362][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 251.083749][ C1] Code: 24 4c 89 e7 e8 0e 25 db f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 59 f6 9d f7 0f 0b e9 f6 f7 ff ff e8 4d f6 9d f7 <0f> 0b e9 48 fb ff ff e8 41 f6 9d f7 48 c7 c7 e0 96 23 8e 4c 89 e6 [ 251.103400][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 251.109505][ C1] RAX: ffffffff89e79a73 RBX: ffffffff89e78876 RCX: ffff88801be53c00 [ 251.117514][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 251.125507][ C1] RBP: 0000000000000000 R08: ffff88801be53c00 R09: 0000000000000003 [ 251.133512][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805de063c0 [ 251.141526][ C1] R13: dffffc0000000000 R14: ffff88805de068b0 R15: ffff88802fa95824 [ 251.149540][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 251.158545][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.165149][ C1] CR2: 00007f0603972a60 CR3: 00000000797e4000 CR4: 00000000003506e0 [ 251.173162][ C1] Call Trace: [ 251.176457][ C1] [ 251.179371][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 251.184970][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 251.190538][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 251.197408][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 251.203028][ C1] __iterate_interfaces+0x243/0x500 [ 251.208326][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 251.214627][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 251.221934][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 251.228272][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 251.235386][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 251.240700][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 251.245975][ C1] ? hw_scan_work+0xf40/0xf40 [ 251.250780][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 251.255944][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 251.262128][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 251.267344][ C1] handle_softirqs+0x280/0x820 [ 251.272164][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 251.277020][ C1] ? do_softirq+0x180/0x180 [ 251.281583][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 251.286885][ C1] __irq_exit_rcu+0xc7/0x190 [ 251.291511][ C1] ? irq_exit_rcu+0x20/0x20 [ 251.296028][ C1] irq_exit_rcu+0x9/0x20 [ 251.300346][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 251.306006][ C1] [ 251.308972][ C1] [ 251.311918][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 251.317940][ C1] RIP: 0010:sched_core_balance+0x150/0xff0 [ 251.323767][ C1] Code: 14 03 00 00 48 c7 c2 c0 6e aa 8a e8 da e4 09 00 e9 29 0e 00 00 48 8b 7c 24 38 e8 ab 52 13 09 e8 76 2c 2e 00 fb 4c 8b 74 24 50 <41> 83 fe 08 0f 83 f1 0d 00 00 48 89 5c 24 78 4c 8d 3c dd 30 8a 7c [ 251.343415][ C1] RSP: 0018:ffffc900001879e0 EFLAGS: 00000282 [ 251.349519][ C1] RAX: 37d1699cec3f5900 RBX: 0000000000000001 RCX: 37d1699cec3f5900 [ 251.357531][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6f80 [ 251.365513][ C1] RBP: ffffc90000187b68 R08: ffffffff8e4a212f R09: 1ffffffff1c94425 [ 251.373519][ C1] R10: dffffc0000000000 R11: fffffbfff1c94426 R12: ffff8880b8f3c000 [ 251.381565][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 251.389609][ C1] ? sched_core_balance+0xcb/0xff0 [ 251.394751][ C1] ? read_lock_is_recursive+0x20/0x20 [ 251.400192][ C1] ? put_prev_task_balance+0x120/0x120 [ 251.405692][ C1] ? put_prev_task_balance+0x120/0x120 [ 251.411203][ C1] finish_task_switch+0x399/0x920 [ 251.416252][ C1] __schedule+0x14da/0x44d0 [ 251.420867][ C1] ? asan.module_dtor+0x20/0x20 [ 251.425735][ C1] ? tick_nohz_idle_exit+0x2b2/0x3d0 [ 251.431105][ C1] ? flush_smp_call_function_queue+0x117/0x240 [ 251.437324][ C1] ? tick_nohz_restart_sched_tick+0x200/0x200 [ 251.443440][ C1] schedule_idle+0x4e/0x80 [ 251.447908][ C1] do_idle+0x4ac/0x510 [ 251.452004][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 251.457248][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 251.463423][ C1] cpu_startup_entry+0x43/0x60 [ 251.468213][ C1] start_secondary+0xee/0xf0 [ 251.472816][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 251.479116][ C1] [ 251.482197][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 251.489497][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 251.496531][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.506595][ C1] Call Trace: [ 251.509885][ C1] [ 251.512769][ C1] dump_stack_lvl+0x16c/0x230 [ 251.517484][ C1] ? show_regs_print_info+0x20/0x20 [ 251.522699][ C1] ? load_image+0x3b0/0x3b0 [ 251.527232][ C1] panic+0x2c0/0x710 [ 251.531145][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 251.535660][ C1] ? secondary_startup_64_no_verify+0x179/0x17b [ 251.541934][ C1] __warn+0x2e0/0x470 [ 251.546014][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 251.551777][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 251.557532][ C1] report_bug+0x2be/0x4f0 [ 251.561872][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 251.567604][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 251.573333][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 251.579062][ C1] handle_bug+0xcf/0x120 [ 251.583308][ C1] exc_invalid_op+0x1a/0x50 [ 251.587813][ C1] asm_exc_invalid_op+0x1a/0x20 [ 251.592674][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 251.599028][ C1] Code: 24 4c 89 e7 e8 0e 25 db f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 59 f6 9d f7 0f 0b e9 f6 f7 ff ff e8 4d f6 9d f7 <0f> 0b e9 48 fb ff ff e8 41 f6 9d f7 48 c7 c7 e0 96 23 8e 4c 89 e6 [ 251.618646][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 251.624726][ C1] RAX: ffffffff89e79a73 RBX: ffffffff89e78876 RCX: ffff88801be53c00 [ 251.632713][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 251.640720][ C1] RBP: 0000000000000000 R08: ffff88801be53c00 R09: 0000000000000003 [ 251.648702][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805de063c0 [ 251.656720][ C1] R13: dffffc0000000000 R14: ffff88805de068b0 R15: ffff88802fa95824 [ 251.664777][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 251.670339][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 251.676078][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 251.681808][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 251.687370][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 251.692847][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 251.699630][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 251.705222][ C1] __iterate_interfaces+0x243/0x500 [ 251.710441][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 251.716697][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 251.723912][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 251.730179][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 251.737220][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 251.742431][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 251.747660][ C1] ? hw_scan_work+0xf40/0xf40 [ 251.752362][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 251.757491][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 251.763603][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 251.768746][ C1] handle_softirqs+0x280/0x820 [ 251.773521][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 251.778294][ C1] ? do_softirq+0x180/0x180 [ 251.782807][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 251.788016][ C1] __irq_exit_rcu+0xc7/0x190 [ 251.792612][ C1] ? irq_exit_rcu+0x20/0x20 [ 251.797129][ C1] irq_exit_rcu+0x9/0x20 [ 251.801372][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 251.807031][ C1] [ 251.809969][ C1] [ 251.812904][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 251.818949][ C1] RIP: 0010:sched_core_balance+0x150/0xff0 [ 251.824782][ C1] Code: 14 03 00 00 48 c7 c2 c0 6e aa 8a e8 da e4 09 00 e9 29 0e 00 00 48 8b 7c 24 38 e8 ab 52 13 09 e8 76 2c 2e 00 fb 4c 8b 74 24 50 <41> 83 fe 08 0f 83 f1 0d 00 00 48 89 5c 24 78 4c 8d 3c dd 30 8a 7c [ 251.844419][ C1] RSP: 0018:ffffc900001879e0 EFLAGS: 00000282 [ 251.850508][ C1] RAX: 37d1699cec3f5900 RBX: 0000000000000001 RCX: 37d1699cec3f5900 [ 251.858487][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6f80 [ 251.866496][ C1] RBP: ffffc90000187b68 R08: ffffffff8e4a212f R09: 1ffffffff1c94425 [ 251.874483][ C1] R10: dffffc0000000000 R11: fffffbfff1c94426 R12: ffff8880b8f3c000 [ 251.882501][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 251.890515][ C1] ? sched_core_balance+0xcb/0xff0 [ 251.895641][ C1] ? read_lock_is_recursive+0x20/0x20 [ 251.901034][ C1] ? put_prev_task_balance+0x120/0x120 [ 251.906524][ C1] ? put_prev_task_balance+0x120/0x120 [ 251.911995][ C1] finish_task_switch+0x399/0x920 [ 251.917035][ C1] __schedule+0x14da/0x44d0 [ 251.921572][ C1] ? asan.module_dtor+0x20/0x20 [ 251.926442][ C1] ? tick_nohz_idle_exit+0x2b2/0x3d0 [ 251.931755][ C1] ? flush_smp_call_function_queue+0x117/0x240 [ 251.937923][ C1] ? tick_nohz_restart_sched_tick+0x200/0x200 [ 251.944024][ C1] schedule_idle+0x4e/0x80 [ 251.948461][ C1] do_idle+0x4ac/0x510 [ 251.952573][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 251.957780][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 251.963955][ C1] cpu_startup_entry+0x43/0x60 [ 251.968734][ C1] start_secondary+0xee/0xf0 [ 251.973330][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 251.979417][ C1] [ 251.983038][ C1] Kernel Offset: disabled [ 251.987431][ C1] Rebooting in 86400 seconds..