last executing test programs: 786.915305ms ago: executing program 0 (id=1): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$6lowpan_enable(r2, 0x0, 0x0) syz_io_uring_setup(0x275c, &(0x7f0000001280)={0x0, 0x5bce, 0x80, 0xffffffff, 0x40001c8, 0x0, r2}, &(0x7f0000002840), &(0x7f0000002880)) 629.232328ms ago: executing program 1 (id=2): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x5e00, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r4, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 244.787655ms ago: executing program 3 (id=4): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x3f3f, 0x2, 0x0, 0xffbfbffd}, &(0x7f0000000140)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r2, 0x1e76, 0xf728, 0xd, 0x0, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040), 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x40000) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.29' (ED25519) to the list of known hosts. [ 72.301086][ T5774] cgroup: Unknown subsys name 'net' [ 72.464431][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.011252][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.139634][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.148579][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.148877][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.156308][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.171226][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.179026][ T5799] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.186482][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.186863][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.205159][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.213961][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.221882][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.229101][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.237405][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.244697][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.247079][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.260074][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.260674][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.268268][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.275986][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.282640][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.289655][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.304295][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.315037][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.332041][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.789400][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 76.840090][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 76.923417][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 76.933545][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 77.010137][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.018726][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.025988][ T5787] bridge_slave_0: entered allmulticast mode [ 77.033086][ T5787] bridge_slave_0: entered promiscuous mode [ 77.047921][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.055059][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.062357][ T5787] bridge_slave_1: entered allmulticast mode [ 77.069349][ T5787] bridge_slave_1: entered promiscuous mode [ 77.115118][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.122536][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.130477][ T5784] bridge_slave_0: entered allmulticast mode [ 77.138248][ T5784] bridge_slave_0: entered promiscuous mode [ 77.165362][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.172589][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.180017][ T5784] bridge_slave_1: entered allmulticast mode [ 77.187304][ T5784] bridge_slave_1: entered promiscuous mode [ 77.216333][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.242240][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.269549][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.293291][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.347725][ T5787] team0: Port device team_slave_0 added [ 77.353865][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.361663][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.368951][ T5786] bridge_slave_0: entered allmulticast mode [ 77.375781][ T5786] bridge_slave_0: entered promiscuous mode [ 77.384319][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.391625][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.398875][ T5786] bridge_slave_1: entered allmulticast mode [ 77.405686][ T5786] bridge_slave_1: entered promiscuous mode [ 77.435524][ T5787] team0: Port device team_slave_1 added [ 77.463664][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.471374][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.479056][ T5785] bridge_slave_0: entered allmulticast mode [ 77.485902][ T5785] bridge_slave_0: entered promiscuous mode [ 77.497548][ T5784] team0: Port device team_slave_0 added [ 77.523203][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.530799][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.538294][ T5785] bridge_slave_1: entered allmulticast mode [ 77.545206][ T5785] bridge_slave_1: entered promiscuous mode [ 77.555156][ T5784] team0: Port device team_slave_1 added [ 77.561894][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.569465][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.595498][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.608620][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.615603][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.642008][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.655249][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.667595][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.755103][ T5786] team0: Port device team_slave_0 added [ 77.764537][ T5786] team0: Port device team_slave_1 added [ 77.772706][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.786191][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.796032][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.803078][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.829015][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.871945][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.879453][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.906001][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.959965][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.967051][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.993280][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.011204][ T5787] hsr_slave_0: entered promiscuous mode [ 78.017921][ T5787] hsr_slave_1: entered promiscuous mode [ 78.028158][ T5785] team0: Port device team_slave_0 added [ 78.034738][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.041906][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.067896][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.109466][ T5785] team0: Port device team_slave_1 added [ 78.119408][ T5784] hsr_slave_0: entered promiscuous mode [ 78.125755][ T5784] hsr_slave_1: entered promiscuous mode [ 78.134546][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.142572][ T5784] Cannot create hsr debugfs directory [ 78.246579][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.253564][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.279938][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.285194][ T5788] Bluetooth: hci3: command tx timeout [ 78.293162][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.303216][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.329767][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.336742][ T5788] Bluetooth: hci0: command tx timeout [ 78.361696][ T5786] hsr_slave_0: entered promiscuous mode [ 78.368259][ T5786] hsr_slave_1: entered promiscuous mode [ 78.374445][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.382067][ T5786] Cannot create hsr debugfs directory [ 78.416523][ T5797] Bluetooth: hci2: command tx timeout [ 78.422615][ T5788] Bluetooth: hci1: command tx timeout [ 78.498016][ T5785] hsr_slave_0: entered promiscuous mode [ 78.504392][ T5785] hsr_slave_1: entered promiscuous mode [ 78.511196][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.519467][ T5785] Cannot create hsr debugfs directory [ 78.755411][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.772562][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.783483][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.817805][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.920835][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.931048][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.941441][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.952846][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.038592][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.048704][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.060303][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.072543][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.153428][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.163776][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.174476][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.185849][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.224864][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.280879][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.306508][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.314082][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.324074][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.331288][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.416790][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.454338][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.464384][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.494100][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.501299][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.518485][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.531796][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.538989][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.565734][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.572944][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.602580][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.609754][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.649973][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.688830][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.705125][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.712443][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.742192][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.749402][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.136860][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.231189][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.259246][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.301178][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.321150][ T5784] veth0_vlan: entered promiscuous mode [ 80.346782][ T5788] Bluetooth: hci3: command tx timeout [ 80.368180][ T5784] veth1_vlan: entered promiscuous mode [ 80.409582][ T5786] veth0_vlan: entered promiscuous mode [ 80.418484][ T5788] Bluetooth: hci0: command tx timeout [ 80.429932][ T5785] veth0_vlan: entered promiscuous mode [ 80.467169][ T5787] veth0_vlan: entered promiscuous mode [ 80.476195][ T5785] veth1_vlan: entered promiscuous mode [ 80.493933][ T5784] veth0_macvtap: entered promiscuous mode [ 80.500038][ T5788] Bluetooth: hci1: command tx timeout [ 80.500462][ T5797] Bluetooth: hci2: command tx timeout [ 80.514906][ T5786] veth1_vlan: entered promiscuous mode [ 80.532040][ T5787] veth1_vlan: entered promiscuous mode [ 80.548856][ T5784] veth1_macvtap: entered promiscuous mode [ 80.608105][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.626663][ T5787] veth0_macvtap: entered promiscuous mode [ 80.634908][ T5786] veth0_macvtap: entered promiscuous mode [ 80.645644][ T5786] veth1_macvtap: entered promiscuous mode [ 80.659391][ T5787] veth1_macvtap: entered promiscuous mode [ 80.669776][ T5785] veth0_macvtap: entered promiscuous mode [ 80.689347][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.703767][ T5785] veth1_macvtap: entered promiscuous mode [ 80.725048][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.739479][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.751346][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.763221][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.772369][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.781143][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.789911][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.804224][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.814817][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.824983][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.836102][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.850159][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.867932][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.878757][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.888969][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.901193][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.911092][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.921579][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.932935][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.945849][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.958918][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.971773][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.983373][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.994212][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.004731][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.015263][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.027153][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.038091][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.048663][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.062758][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.073701][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.084817][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.095775][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.107733][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.131038][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.140621][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.149968][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.158907][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.170545][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.180100][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.190194][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.199637][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.214010][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.225690][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.235062][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.244077][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.383721][ T3483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.392978][ T3483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.457075][ T3483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.464959][ T3483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.493693][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.511477][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.552225][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.562278][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.624945][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.652894][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.674860][ T3483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.698579][ T3483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.762851][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.791912][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.834430][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.891448][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.097080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.106854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 82.276853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.419709][ T5797] Bluetooth: hci3: command tx timeout [ 82.496934][ T5797] Bluetooth: hci0: command tx timeout [ 82.576732][ T5797] Bluetooth: hci1: command tx timeout [ 82.578807][ T5788] Bluetooth: hci2: command tx timeout [ 84.496576][ T5788] Bluetooth: hci3: command tx timeout [ 84.576583][ T5788] Bluetooth: hci0: command tx timeout [ 84.656535][ T5788] Bluetooth: hci1: command tx timeout [ 84.666724][ T5788] Bluetooth: hci2: command tx timeout [ 132.980142][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.866377][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 187.873465][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5836/1:b..l [ 187.881713][ C0] rcu: (detected by 0, t=10502 jiffies, g=9333, q=429136 ncpus=2) [ 187.889649][ C0] task:kworker/0:5 state:R running task stack:23376 pid:5836 ppid:2 flags:0x00004000 [ 187.901258][ C0] Workqueue: events_power_efficient gc_worker [ 187.907401][ C0] Call Trace: [ 187.910713][ C0] [ 187.913672][ C0] __schedule+0x14d2/0x44d0 [ 187.918237][ C0] ? asan.module_dtor+0x20/0x20 [ 187.923123][ C0] ? mark_lock+0x94/0x320 [ 187.927497][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 187.933520][ C0] ? preempt_schedule_irq+0xaa/0x140 [ 187.938842][ C0] preempt_schedule_irq+0xb5/0x140 [ 187.943992][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 187.949751][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 187.955597][ C0] irqentry_exit+0x67/0x70 [ 187.960053][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 187.966061][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x17f/0x1c0 [ 187.972944][ C0] Code: f8 4d 85 e4 75 16 e8 40 f5 d9 f8 eb 15 e8 39 f5 d9 f8 e8 a4 6e c2 01 4d 85 e4 74 ea e8 2a f5 d9 f8 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00 [ 187.992595][ C0] RSP: 0018:ffffc900047cf9a0 EFLAGS: 00000293 [ 187.998706][ C0] RAX: ffffffff88ab9a76 RBX: 0000000000000000 RCX: ffff88802b173c00 [ 188.006733][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.014732][ C0] RBP: ffffc900047cfa50 R08: ffffffff90da5597 R09: 1ffffffff21b4ab2 [ 188.022739][ C0] R10: dffffc0000000000 R11: fffffbfff21b4ab3 R12: 0000000000000200 [ 188.030786][ C0] R13: dffffc0000000000 R14: 1ffff920008f9f34 R15: dffffc0000000000 [ 188.038813][ C0] ? seqcount_lockdep_reader_access+0x176/0x1c0 [ 188.045114][ C0] ? nf_conntrack_hash_check_insert+0x9c0/0x9c0 [ 188.051420][ C0] gc_worker+0x317/0x14b0 [ 188.055813][ C0] ? gc_worker+0x269/0x14b0 [ 188.060362][ C0] ? init_conntrack+0xee0/0xee0 [ 188.065260][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 188.070498][ C0] ? process_scheduled_works+0x957/0x15b0 [ 188.076275][ C0] ? process_scheduled_works+0x957/0x15b0 [ 188.082033][ C0] process_scheduled_works+0xa45/0x15b0 [ 188.087656][ C0] ? assign_work+0x400/0x400 [ 188.092297][ C0] ? assign_work+0x39e/0x400 [ 188.096937][ C0] worker_thread+0xa55/0xfc0 [ 188.101569][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 188.107499][ C0] ? _raw_spin_unlock+0x40/0x40 [ 188.112407][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 188.118373][ C0] kthread+0x2fa/0x390 [ 188.122483][ C0] ? pr_cont_work+0x560/0x560 [ 188.127209][ C0] ? kthread_blkcg+0xd0/0xd0 [ 188.131838][ C0] ret_from_fork+0x48/0x80 [ 188.136295][ C0] ? kthread_blkcg+0xd0/0xd0 [ 188.140917][ C0] ret_from_fork_asm+0x11/0x20 [ 188.145734][ C0] [ 188.148797][ C0] rcu: rcu_preempt kthread starved for 10521 jiffies! g9333 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 188.159944][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 188.169957][ C0] rcu: RCU grace-period kthread stack dump: [ 188.175871][ C0] task:rcu_preempt state:R running task stack:27752 pid:17 ppid:2 flags:0x00004000 [ 188.186693][ C0] Call Trace: [ 188.190007][ C0] [ 188.192985][ C0] __schedule+0x14d2/0x44d0 [ 188.197546][ C0] ? _raw_spin_unlock_irqrestore+0x60/0x110 [ 188.203469][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 188.209399][ C0] ? asan.module_dtor+0x20/0x20 [ 188.214303][ C0] ? enqueue_timer+0x225/0x530 [ 188.219112][ C0] ? __mod_timer+0x984/0xdb0 [ 188.223756][ C0] schedule+0xbd/0x170 [ 188.227870][ C0] schedule_timeout+0x160/0x280 [ 188.232760][ C0] ? console_conditional_schedule+0x40/0x40 [ 188.238696][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 188.244637][ C0] ? update_process_times+0x1b0/0x1b0 [ 188.246321][ C1] sched: RT throttling activated [ 188.254999][ C0] ? prepare_to_swait_event+0x339/0x360 [ 188.260582][ C0] rcu_gp_fqs_loop+0x302/0x1560 [ 188.265476][ C0] ? rcu_gp_init+0x110e/0x1510 [ 188.270297][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 188.276485][ C0] ? rcu_gp_init+0x1510/0x1510 [ 188.281277][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 188.286166][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 188.291387][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 188.296625][ C0] rcu_gp_kthread+0x99/0x380 [ 188.301251][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 188.306397][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 188.311368][ C0] ? __kthread_parkme+0x162/0x1c0 [ 188.316427][ C0] kthread+0x2fa/0x390 [ 188.320518][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 188.325658][ C0] ? kthread_blkcg+0xd0/0xd0 [ 188.330273][ C0] ret_from_fork+0x48/0x80 [ 188.334722][ C0] ? kthread_blkcg+0xd0/0xd0 [ 188.339343][ C0] ret_from_fork_asm+0x11/0x20 [ 188.344160][ C0] [ 188.347199][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 188.353551][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 188.360594][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.370667][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 188.376419][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 23 27 3a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 188.396038][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c6 [ 188.402202][ C0] RAX: d2817082607d7900 RBX: ffffffff8161923b RCX: d2817082607d7900 [ 188.410230][ C0] RDX: 0000000000000001 RSI: ffffffff8aaabaa0 RDI: ffffffff8afc70c0 [ 188.418221][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36d4b R09: 1ffff110171c6da9 [ 188.426217][ C0] R10: dffffc0000000000 R11: ffffed10171c6daa R12: ffffffff8e4a9128 [ 188.434223][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670 [ 188.442211][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 188.451159][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.457765][ C0] CR2: 000000110c4247c1 CR3: 000000002db43000 CR4: 00000000003506f0 [ 188.465793][ C0] Call Trace: [ 188.469094][ C0] [ 188.472048][ C0] default_idle+0x13/0x20 [ 188.476404][ C0] default_idle_call+0x6c/0xa0 [ 188.481194][ C0] do_idle+0x1eb/0x510 [ 188.485282][ C0] ? asan.module_dtor+0x20/0x20 [ 188.490171][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 188.495390][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 188.501320][ C0] ? _raw_spin_unlock+0x40/0x40 [ 188.506223][ C0] cpu_startup_entry+0x43/0x60 [ 188.511030][ C0] rest_init+0x2e2/0x300 [ 188.515310][ C0] ? time_init+0x40/0x40 [ 188.519589][ C0] arch_call_rest_init+0xe/0x10 [ 188.524470][ C0] start_kernel+0x459/0x4e0 [ 188.529003][ C0] x86_64_start_reservations+0x2a/0x30 [ 188.534507][ C0] x86_64_start_kernel+0x60/0x60 [ 188.539478][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 188.545626][ C0] [ 189.362563][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.432488][ T55] cfg80211: failed to load regulatory.db [ 189.726612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 190.137103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 190.518773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! SYZFAIL: failed to send rpc fd=3 want=24560 sent=0 n=-1 (errno 32: Broken pipe) [ 191.007178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 191.167761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 191.361088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 191.436553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 194.927104][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.990436][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.415877][ T72] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.590378][ T72] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.650271][ T72] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.713187][ T72] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0