last executing test programs: 1m31.389860524s ago: executing program 3 (id=487): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = dup(r1) write$cgroup_devices(r2, &(0x7f0000000140)={'c', ' *:* ', 'w\x00'}, 0x8) 1m29.233310917s ago: executing program 3 (id=494): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m29.160960458s ago: executing program 3 (id=495): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1m29.159903578s ago: executing program 3 (id=496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030024bd7000ffdbdf2503000000180001801400020073797a5f74756e00000000000000000005000500000000000500"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x0) 1m29.116873539s ago: executing program 3 (id=497): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$video4linux(&(0x7f0000001540), 0x6, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() socket(0x6, 0x1, 0x0) syz_open_dev$loop(0x0, 0x81, 0x2a82) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000004b80)) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)) shutdown(r5, 0x1) 1m28.137006754s ago: executing program 3 (id=503): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x5}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 1m12.421798256s ago: executing program 32 (id=503): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x5}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 20.551388684s ago: executing program 2 (id=812): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111840000000000850000171a00000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) 19.609506768s ago: executing program 2 (id=814): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000880) 19.206488394s ago: executing program 2 (id=818): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000200)="fc") ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080)) 19.115496206s ago: executing program 5 (id=819): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000007800)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0x80184132, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 18.805252561s ago: executing program 1 (id=822): socket$inet6_udplite(0xa, 0x2, 0x88) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xfffffffffffffffe, 0x0) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c7902, 0x0) sendfile(r0, r0, 0x0, 0x7fffffffffffffff) 18.128069641s ago: executing program 5 (id=825): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(0x4) 18.000946743s ago: executing program 1 (id=826): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, 0x0, 0x0) 17.999012123s ago: executing program 5 (id=829): socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="99f8ee40de143dd62dc7cf8951bd537eb95f29353b0e655a501fa595b474eb130c4caa8d31c1958f8c876e44e4d16a7a38c4f52e98dfd11ccf54c2e26cfff46bc27e0947e391847f604765a38dddda3600abb8aa5bed85ed170c14c9f864cd5f303c0f5768013e1f24a8579e3ddfbfa84c0773ee95be4910d8b476f68dc005e5", 0x80}, {&(0x7f00000007c0)="a6643c5a8d917ff4438f8b93b5bd73d1b3871afea241d79bc7d9ccd930fbf81d3b2b270ca358839d2cf3712108bed062b412eb799e681a6cde9bdcac5648ec9f4b0808e303d8ee189f22bd10afd8042c36b79dbe4270d22ac53a819a4d965ab776b4500ed7e9d18a936ac4423b6823aed7a2e822acf883af66a80887f153ea80eb289406cf63ff44e1d48d1a37244edf", 0x90}], 0x2}}], 0x2, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x318, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x304, 0x1, [@m_csum={0xbc, 0x14, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x2, 0x1000, 0x8}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x8, 0x1, 0xa}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x80, 0xffffffffffffffff, 0x48fe, 0x2}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfffffffa, 0xffffffffffffffff, 0xd49, 0x100}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3e5, 0x4, 0x3, 0x1}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x30, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x214, 0x1b, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4, 0x0, 0x87}, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0xffffffffffffffff, 0x6, 0x7}, @loopback, @broadcast, 0x80, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x5, 0xa7, 0xffff0001}, @broadcast, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x40, 0x4, 0x0, 0x3, 0x9711}, @multicast1, @multicast1, 0x95c5050eeb275cf0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0xfffffffb, 0x736fe187decc650e, 0x101, 0x30000}, @remote, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd, 0xb111, 0x8, 0x838, 0x2a}, @private=0xa010101, @rand_addr=0x64010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x18, 0x5af3, 0x8, 0x9, 0xcd}, @private=0xa010100, @multicast1, 0xff}}]}, {0xd1, 0x6, "00dbe2375389f4c61bb80b5c04766adf4c4041ab3363ca93e40c5281d6bb7035fa3fb2838101ae15e668e34175f78ce7df4b1c48d956acfb10ab481c7729eedfcdef8b67015dd90447d814cbb37713b8e2a37054e99152bbb3f0c77e56a1f6ab9da61c7f00958a0aa5108d67f277272c411cba11ef13007927c9c52984e903960081484a463aa2d388d77984fa7968102f600b0936201c9964cff6e228e131439b5dd84f37bb377965a4af38c2020711a2fad2ba4e11f442caf2f22b704bf9fa89dbd5667b8e65de106000f9f4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 17.931393964s ago: executing program 0 (id=830): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180020000000000000000000000000009500000000000000d2c32160e2328d24f50527fa7cb8d3a2a0ceef3ddc53c0f835d8da67d7e416bb632e3df2a03ce116b17cda4ec074f9553821699b1566e32b367151ec1b49ea03aba95e7415598d1ea123563d25c66d3d2f77f3cda916889682bd0343f0bec31fabb1972a6198173228ab2923e4022ee0ae3946f387e26c80e0a98d17"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x14) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$SIOCAX25GETINFOOLD(r5, 0x89e9, &(0x7f0000000cc0)) 17.784925967s ago: executing program 5 (id=831): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000181194b1", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x7}) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc000, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) close(r2) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x0, 0x4, 0x8, 0x8001, 0x15, @mcast1, @private1, 0x7, 0x7800, 0x4, 0xae02}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 17.391839462s ago: executing program 5 (id=834): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="05"], 0x1c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a090914"], 0x44}, 0x1, 0x1000000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 17.220359425s ago: executing program 5 (id=835): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 17.040829818s ago: executing program 1 (id=837): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @netrom}, [@bcast, @default, @netrom, @null, @remote, @rose, @remote, @netrom]}, &(0x7f00000002c0)=0x48) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000f00)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000440)=0xe8) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000480)={0x3, @bcast, r2}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000540)={0x3, @default, r2}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="4fa3176756113b69df8bea4cbc913f2c215bc12e941d0a01", 0x18}, {&(0x7f0000000180)="55c0cc0ba6f3b908ecb5c6e93e4dc70ed9c875dd444569fab05e32a08e71d1c480fa1ada9e6f952dea418e2eb2dd8dcdd18f82c2be42e92405d2eccae94e713594f13ebfe37be3cb7ce0eb237d63f25744e42baf027055a65359c121788ba610f7df23b902755c5771d93efedd8252aca1dda5efe1493ec0a5a9e965666d1afe33b384953a9102b3f1e446aea391ccff253fccc951d4091f1d6b69faee7e7d4b669c48b70ef01c3879af3f35e0682a4925ddf3dd14992612d22032093742f07fd8d9723bed7707077473de16c3f5820b5dc6f1c37dbaaba20cb5a7", 0xdb}, {&(0x7f0000000300)}, {&(0x7f0000000400)="5c9272a54353b9022ec5342f", 0xc}], 0x4}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)="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", 0x65d}], 0x1}}], 0x2, 0xc0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) sendto$inet(r0, &(0x7f0000000580)="17", 0x1, 0x10048095, 0x0, 0x0) 16.821168241s ago: executing program 4 (id=839): connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900"], 0x16) 16.762663382s ago: executing program 4 (id=840): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) 16.653075534s ago: executing program 4 (id=841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff5, 0x6, 0x7, 0x3}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.530178076s ago: executing program 4 (id=842): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, 0x0}, 0x200c00ca) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0xc03}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2) 16.384067268s ago: executing program 2 (id=843): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x16]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x8800) 16.300306649s ago: executing program 2 (id=844): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000181194b1", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x7}) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc000, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) close(r2) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x0, 0x4, 0x8, 0x8001, 0x15, @mcast1, @private1, 0x7, 0x7800, 0x4, 0xae02}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 16.072190123s ago: executing program 4 (id=845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x30, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x9}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xf8}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.051844213s ago: executing program 1 (id=846): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x7e3c, 0x4, 0x9, 0xfffffff9, 0xfffc, 0x6, 0x7, 0x1, 0xfefffffd}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 15.897554616s ago: executing program 2 (id=847): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, 0x0, 0x0) 15.862562376s ago: executing program 1 (id=848): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/245, 0xf5}], 0x1, &(0x7f0000000380)=""/196, 0xc4}, 0x3}], 0x1, 0x20, 0x0) sendmmsg$inet(r0, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)='#', 0x1}], 0x1}}], 0x2, 0x40480dc) 15.734259458s ago: executing program 1 (id=849): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000028c0)=ANY=[@ANYBLOB="30000000120009162dbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20a004001000000008001f000200008008001d0061"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) write(r1, &(0x7f00000002c0)="23000000010006", 0x7) socket$inet6(0xa, 0x4, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x4c) socket$netlink(0x10, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x8000000}, 0xffffffffffffffa4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff0000000042d2c987acbfa30407010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) socket$inet6(0xa, 0x3, 0x2c) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) 15.663119829s ago: executing program 0 (id=850): connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900"], 0x16) 15.59964078s ago: executing program 0 (id=851): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) 15.440231872s ago: executing program 0 (id=852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff5, 0x6, 0x7, 0x3}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15.439808132s ago: executing program 4 (id=853): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000200)="fc") ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080)) 15.419388443s ago: executing program 0 (id=854): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa8) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x20, 0x1, 0x5, 0x6, 0x1000, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x1, 0x7fff, 0x7, 0x4000, 0xe, r3, 0x0, 0x4, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x200008, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 0s ago: executing program 0 (id=855): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, 0x0}, 0x200c00ca) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0xc03}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. syzkaller login: [ 35.142663][ T4296] cgroup: Unknown subsys name 'net' [ 35.411826][ T4296] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.764620][ T4296] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 36.922452][ T4310] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.925013][ T4310] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.936946][ T4312] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.939326][ T4312] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.942230][ T4312] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.945256][ T4313] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.949219][ T4312] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.952821][ T4312] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.954837][ T4317] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.955037][ T4312] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.959533][ T4312] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.962005][ T4312] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.964417][ T4312] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.966888][ T4312] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.969164][ T4312] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.971315][ T4312] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.973604][ T4312] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.974924][ T4319] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.978668][ T4312] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.978867][ T4321] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.980649][ T4312] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.996946][ T4321] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.999236][ T4321] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.007077][ T4310] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.015130][ T4321] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 37.018790][ T4321] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 37.021002][ T4321] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 37.029544][ T4321] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.031957][ T4321] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.034140][ T4321] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.246044][ T4314] chnl_net:caif_netlink_parms(): no params data found [ 37.266740][ T4307] chnl_net:caif_netlink_parms(): no params data found [ 37.310896][ T4306] chnl_net:caif_netlink_parms(): no params data found [ 37.372790][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.374803][ T4307] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.378106][ T4307] device bridge_slave_0 entered promiscuous mode [ 37.394898][ T4316] chnl_net:caif_netlink_parms(): no params data found [ 37.400412][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.402460][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.405090][ T4314] device bridge_slave_0 entered promiscuous mode [ 37.408496][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.411058][ T4307] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.413609][ T4307] device bridge_slave_1 entered promiscuous mode [ 37.433139][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.435326][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.438062][ T4314] device bridge_slave_1 entered promiscuous mode [ 37.476880][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.478822][ T4306] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.481545][ T4306] device bridge_slave_0 entered promiscuous mode [ 37.493490][ T4307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.497951][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 37.502618][ T4307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.505334][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.507374][ T4306] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.509980][ T4306] device bridge_slave_1 entered promiscuous mode [ 37.522049][ T4314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.546767][ T4314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.562411][ T4306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.565086][ T4316] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.567233][ T4316] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.569802][ T4316] device bridge_slave_0 entered promiscuous mode [ 37.584356][ T4306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.588739][ T4307] team0: Port device team_slave_0 added [ 37.591683][ T4307] team0: Port device team_slave_1 added [ 37.593478][ T4316] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.595470][ T4316] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.598538][ T4316] device bridge_slave_1 entered promiscuous mode [ 37.609001][ T4314] team0: Port device team_slave_0 added [ 37.625210][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.627742][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.634761][ T4307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.651570][ T4316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.655059][ T4314] team0: Port device team_slave_1 added [ 37.661641][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.663537][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.670812][ T4307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.682750][ T4316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.690903][ T4306] team0: Port device team_slave_0 added [ 37.714424][ T4306] team0: Port device team_slave_1 added [ 37.723142][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.725167][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.728207][ T4320] device bridge_slave_0 entered promiscuous mode [ 37.737043][ T4314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.738988][ T4314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.747440][ T4314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.763654][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.765623][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.768673][ T4320] device bridge_slave_1 entered promiscuous mode [ 37.772558][ T4316] team0: Port device team_slave_0 added [ 37.774696][ T4314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.776645][ T4314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.783545][ T4314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.827942][ T4307] device hsr_slave_0 entered promiscuous mode [ 37.876358][ T4307] device hsr_slave_1 entered promiscuous mode [ 37.921878][ T4306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.923820][ T4306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.930918][ T4306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.939820][ T4316] team0: Port device team_slave_1 added [ 37.955321][ T4306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.957352][ T4306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.964396][ T4306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.992912][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.995825][ T4316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.997838][ T4316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.004770][ T4316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.047649][ T4314] device hsr_slave_0 entered promiscuous mode [ 38.096460][ T4314] device hsr_slave_1 entered promiscuous mode [ 38.136280][ T4314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.138459][ T4314] Cannot create hsr debugfs directory [ 38.149597][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.152621][ T4316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.154596][ T4316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.161697][ T4316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.232417][ T4320] team0: Port device team_slave_0 added [ 38.287842][ T4306] device hsr_slave_0 entered promiscuous mode [ 38.336559][ T4306] device hsr_slave_1 entered promiscuous mode [ 38.376337][ T4306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.378397][ T4306] Cannot create hsr debugfs directory [ 38.390513][ T4320] team0: Port device team_slave_1 added [ 38.437671][ T4316] device hsr_slave_0 entered promiscuous mode [ 38.486643][ T4316] device hsr_slave_1 entered promiscuous mode [ 38.526382][ T4316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.528408][ T4316] Cannot create hsr debugfs directory [ 38.562858][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.564781][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.572101][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.600370][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.602251][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.609721][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.748386][ T4320] device hsr_slave_0 entered promiscuous mode [ 38.786426][ T4320] device hsr_slave_1 entered promiscuous mode [ 38.826294][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.828426][ T4320] Cannot create hsr debugfs directory [ 38.865707][ T4307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.897870][ T4307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.940334][ T4307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.986776][ T4321] Bluetooth: hci1: command 0x0409 tx timeout [ 38.998214][ T4307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.066264][ T4321] Bluetooth: hci3: command 0x0409 tx timeout [ 39.066383][ T4313] Bluetooth: hci0: command 0x0409 tx timeout [ 39.074488][ T4316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.076494][ T4313] Bluetooth: hci4: command 0x0409 tx timeout [ 39.076509][ T4321] Bluetooth: hci2: command 0x0409 tx timeout [ 39.130370][ T4316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.177982][ T4316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.219869][ T4316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.310770][ T4314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.366016][ T4314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.418454][ T4314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.468197][ T4314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.554291][ T4320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.591467][ T4306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.633044][ T4320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.682150][ T4306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.721474][ T4307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.723545][ T4306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.759341][ T4320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.802024][ T4320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.844609][ T4306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.903752][ T4316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.928318][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.931816][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.934171][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.937095][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.942078][ T4307] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.957958][ T4316] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.964002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.968756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.971673][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.973693][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.982461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.994851][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.001712][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.004256][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.006274][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.009003][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.012050][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.014603][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.016674][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.021524][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.025831][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.035376][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.039430][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.042041][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.044002][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.063721][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.068328][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.082075][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.085264][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.088209][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.091839][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.094593][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.109075][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.111771][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.114665][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.124126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.127071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.129523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.132293][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.142389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.145017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.158150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.161680][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.179641][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.188558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.191179][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.199742][ T4314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.211923][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.214491][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.220059][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.231979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.234449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.237759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.240240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.253120][ T4306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.258428][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.265833][ T4314] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.289576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.292452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.295718][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.297946][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.302250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.305685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.310146][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.312116][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.314669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.324077][ T4306] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.333130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.335767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.343710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.348529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.352192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.354809][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.356802][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.360912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.363729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.367434][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.369433][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.371771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.395317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.398438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.402105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.405725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.409380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.412279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.414962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.425606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.430356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.433078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.435697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.457988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.460508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.463291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.469057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.471847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.474451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.477772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.480331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.482943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.485443][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.487464][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.491006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.493683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.496546][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.498504][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.500825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.503701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.511164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.513844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.517423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.519830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.528672][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.534615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.538167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.540895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.544665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.550084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.552737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.555315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.569051][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.577148][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.579865][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.583892][ T4307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.600646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.602794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.604898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.608628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.617784][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.654601][ T4316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.693756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.697655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.701573][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.704289][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.739277][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.741975][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.755031][ T4316] device veth0_vlan entered promiscuous mode [ 40.761469][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.763870][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.785887][ T4307] device veth0_vlan entered promiscuous mode [ 40.794228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.797522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.801542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.804178][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.820145][ T4316] device veth1_vlan entered promiscuous mode [ 40.833756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.836839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.838928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.844003][ T4307] device veth1_vlan entered promiscuous mode [ 40.858969][ T4314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.890715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.893326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.895854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.899415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.901500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.903595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.905747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.915273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.918149][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.925978][ T4306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.935642][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.939124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.949656][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.958685][ T4316] device veth0_macvtap entered promiscuous mode [ 40.961441][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.964098][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.973325][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.996039][ T4307] device veth0_macvtap entered promiscuous mode [ 41.001728][ T4316] device veth1_macvtap entered promiscuous mode [ 41.014740][ T4314] device veth0_vlan entered promiscuous mode [ 41.019056][ T4307] device veth1_macvtap entered promiscuous mode [ 41.021652][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.024276][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.027408][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.029948][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.032589][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.042834][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.045362][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.052752][ T4314] device veth1_vlan entered promiscuous mode [ 41.062041][ T4316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.066440][ T4313] Bluetooth: hci1: command 0x041b tx timeout [ 41.072227][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.074866][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.081341][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.089044][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.092060][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.095848][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.100850][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.103754][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.108992][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.111723][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.128127][ T4316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.130280][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.132986][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.140848][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.146655][ T4313] Bluetooth: hci2: command 0x041b tx timeout [ 41.147325][ T4310] Bluetooth: hci3: command 0x041b tx timeout [ 41.148280][ T4313] Bluetooth: hci4: command 0x041b tx timeout [ 41.149960][ T4310] Bluetooth: hci0: command 0x041b tx timeout [ 41.159875][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.162701][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.167206][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.171370][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.174121][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.177687][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.180780][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.191689][ T4314] device veth0_macvtap entered promiscuous mode [ 41.198017][ T4316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.200524][ T4316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.202902][ T4316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.205199][ T4316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.211794][ T4307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.214171][ T4307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.216917][ T4307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.219301][ T4307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.222818][ T4306] device veth0_vlan entered promiscuous mode [ 41.225058][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.235767][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.239555][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.242379][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.245803][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.280064][ T4314] device veth1_macvtap entered promiscuous mode [ 41.302528][ T4306] device veth1_vlan entered promiscuous mode [ 41.318676][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.321180][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.323778][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.328150][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.365731][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.369201][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.371938][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.374790][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.379105][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.390523][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.393418][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.411508][ T1574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.413696][ T1574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.420099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.423002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.425877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.429048][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.438774][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.441652][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.444347][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.448374][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.452110][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.454726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.458076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.460532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.462988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.465725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.476152][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.478389][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.482412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.489838][ T4320] device veth0_vlan entered promiscuous mode [ 41.511906][ T4306] device veth0_macvtap entered promiscuous mode [ 41.517300][ T4306] device veth1_macvtap entered promiscuous mode [ 41.523341][ T4314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.525717][ T4314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.528529][ T4314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.530856][ T4314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.537799][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.540059][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.543496][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.548139][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.550895][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.554748][ T4320] device veth1_vlan entered promiscuous mode [ 41.574808][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.577819][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.593609][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.596559][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.599131][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.615625][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.619721][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.622351][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.625160][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.628802][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.631731][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.636822][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.653912][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.658682][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.661375][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.664085][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.697664][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.700507][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.703436][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.714472][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.718495][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.721725][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.725480][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.729891][ T4306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.732188][ T4306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.734793][ T4306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.737586][ T4306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.755848][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.758868][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.876972][ T4320] device veth0_macvtap entered promiscuous mode [ 41.881838][ T4320] device veth1_macvtap entered promiscuous mode [ 41.910793][ T1638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.913020][ T1638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.924383][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.927450][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.930027][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.024563][ T4420] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4'. [ 42.735403][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.743940][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.748124][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.751030][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.754003][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.761174][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.765049][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.768420][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.772635][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.796124][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.800784][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.823723][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.825977][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.848694][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.856475][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.859309][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.875012][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.894990][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.901138][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.904043][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.910508][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.920062][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.923386][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.929454][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.936861][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.959855][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.961376][ T4430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6'. [ 42.962101][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.972322][ T1638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.973444][ T4320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.974483][ T1638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.981975][ T4320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.984378][ T4320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.987316][ T4320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.998763][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.001423][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.064320][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.070566][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.074973][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.084223][ T1574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.090027][ T1574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.093480][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.156457][ T4321] Bluetooth: hci1: command 0x040f tx timeout [ 43.161467][ T4425] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 43.226484][ T4310] Bluetooth: hci4: command 0x040f tx timeout [ 43.228253][ T4310] Bluetooth: hci0: command 0x040f tx timeout [ 43.229951][ T4310] Bluetooth: hci3: command 0x040f tx timeout [ 43.231597][ T4310] Bluetooth: hci2: command 0x040f tx timeout [ 43.336171][ T4425] usb 1-1: Using ep0 maxpacket: 16 [ 43.343706][ T4425] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 43.346585][ T4425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.348941][ T4425] usb 1-1: Product: syz [ 43.350414][ T4425] usb 1-1: Manufacturer: syz [ 43.352939][ T4425] usb 1-1: SerialNumber: syz [ 43.395694][ T4425] usb 1-1: config 0 descriptor?? [ 43.571358][ T4434] ubi31: attaching mtd0 [ 43.573555][ T4434] ubi31: scanning is finished [ 43.574979][ T4434] ubi31: empty MTD device detected [ 43.608481][ T4434] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 43.610736][ T4434] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 43.612782][ T4434] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 43.614739][ T4434] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 43.617065][ T4434] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 43.618979][ T4434] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 43.621231][ T4434] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1142118630 [ 43.624139][ T4434] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 43.628693][ T4443] ubi31: background thread "ubi_bgt31d" started, PID 4443 [ 43.842641][ T4425] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 43.851677][ T4425] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 43.857125][ T4425] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 43.861249][ T4425] usb 1-1: media controller created [ 43.868622][ T4425] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 44.407873][ T4425] zl10353_read_register: readreg error (reg=127, ret==0) [ 44.410449][ T4425] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 44.412739][ T4425] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 44.817310][ T4429] dtv5100: wlen = 0, aborting. [ 44.826544][ T7] usb 1-1: USB disconnect, device number 2 [ 45.256336][ T4321] Bluetooth: hci1: command 0x0419 tx timeout [ 45.306864][ T4310] Bluetooth: hci2: command 0x0419 tx timeout [ 45.309178][ T4310] Bluetooth: hci3: command 0x0419 tx timeout [ 45.311411][ T4313] Bluetooth: hci4: command 0x0419 tx timeout [ 45.314062][ T4321] Bluetooth: hci0: command 0x0419 tx timeout [ 45.603939][ T7] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 46.257946][ T3885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.267873][ T3885] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 48.452100][ T4493] mmap: syz.1.18 (4493) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.496793][ T4498] capability: warning: `syz.3.19' uses deprecated v2 capabilities in a way that may be insecure [ 50.753228][ T4530] loop2: detected capacity change from 0 to 7 [ 50.761562][ T4530] Dev loop2: unable to read RDB block 7 [ 50.763224][ T4530] loop2: unable to read partition table [ 50.764932][ T4530] loop2: partition table beyond EOD, truncated [ 50.766949][ T4530] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 52.084329][ T4548] syz.0.34 uses obsolete (PF_INET,SOCK_PACKET) [ 52.867694][ T4554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.870390][ T4554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.067526][ T4560] netlink: 'syz.4.37': attribute type 9 has an invalid length. [ 53.072772][ T4560] netlink: 'syz.4.37': attribute type 7 has an invalid length. [ 53.074916][ T4560] netlink: 'syz.4.37': attribute type 8 has an invalid length. [ 53.084460][ T4562] tipc: Started in network mode [ 53.088071][ T4560] Zero length message leads to an empty skb [ 53.090923][ T4562] tipc: Node identity c6b7a5c2078e, cluster identity 4711 [ 53.092966][ T4562] tipc: Enabled bearer , priority 0 [ 53.096796][ T4562] device syzkaller0 entered promiscuous mode [ 53.112577][ T4562] tipc: Resetting bearer [ 53.117415][ T4561] tipc: Resetting bearer [ 53.167246][ T4561] tipc: Disabling bearer [ 53.900460][ T4588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.904901][ T4588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.359740][ T4633] sp0: Synchronizing with TNC [ 58.475198][ T4637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.478207][ T4637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.666074][ C0] sched: RT throttling activated [ 63.892166][ T4686] device syzkaller0 entered promiscuous mode [ 64.857941][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.861762][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 68.247164][ T4734] tipc: Started in network mode [ 68.259946][ T4734] tipc: Node identity 4a69e10ae90d, cluster identity 4711 [ 68.277453][ T4734] tipc: Enabled bearer , priority 0 [ 68.295208][ T4734] device syzkaller0 entered promiscuous mode [ 69.404395][ T4367] tipc: Node number set to 2741297418 [ 69.483363][ T4732] tipc: Resetting bearer [ 69.628808][ T1963] cfg80211: failed to load regulatory.db [ 69.785393][ T4732] tipc: Disabling bearer [ 70.581236][ T4759] 9pnet: Could not find request transport: fd0x0000000000000003 [ 70.696796][ T4762] tmpfs: Unknown parameter 'quota' [ 72.932535][ T4779] random: crng reseeded on system resumption [ 73.923639][ T4785] netlink: 'syz.4.110': attribute type 1 has an invalid length. [ 73.925979][ T4785] netlink: 'syz.4.110': attribute type 2 has an invalid length. [ 75.115454][ T4796] Bluetooth: MGMT ver 1.22 [ 75.232315][ T4799] can0: slcan on ttyS3. [ 75.383746][ T4801] 9pnet: Could not find request transport: fd0x0000000000000003 [ 75.503838][ T4799] can0 (unregistered): slcan off ttyS3. [ 76.663498][ T4824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.698140][ T4824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.768809][ T4826] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.771331][ T4826] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.773784][ T4826] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.776328][ T4826] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.840428][ T4826] team0: Port device vxlan0 added [ 76.923184][ T4828] Bluetooth: MGMT ver 1.22 [ 77.526491][ T4849] syz.0.125 uses old SIOCAX25GETINFO [ 78.249467][ T4853] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 78.251381][ T4853] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.288675][ T4853] vhci_hcd vhci_hcd.0: Device attached [ 78.316219][ T4862] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 78.318094][ T4862] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.320427][ T4862] vhci_hcd vhci_hcd.0: Device attached [ 78.476234][ T112] vhci_hcd: vhci_device speed not set [ 78.482721][ T4853] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(11) [ 78.484573][ T4853] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.486574][ T4860] 9pnet: Could not find request transport: fd0x0000000000000003 [ 78.509107][ T4870] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(18) [ 78.510890][ T4870] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 78.526095][ T4853] vhci_hcd vhci_hcd.0: Device attached [ 78.536404][ T4862] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15) [ 78.538298][ T4862] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 78.546446][ T112] usb 10-1: new full-speed USB device number 2 using vhci_hcd [ 78.635758][ T4862] vhci_hcd vhci_hcd.0: Device attached [ 79.044728][ T4870] vhci_hcd vhci_hcd.0: Device attached [ 79.194143][ T4853] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 79.336321][ T4875] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 79.338329][ T4875] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 79.361812][ T4875] vhci_hcd vhci_hcd.0: Device attached [ 79.376699][ T4862] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 79.383053][ T4853] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 79.422742][ T4877] vhci_hcd: connection closed [ 79.423192][ T4863] vhci_hcd: connection closed [ 79.423731][ T4871] vhci_hcd: connection closed [ 79.426171][ T4869] vhci_hcd: connection closed [ 79.427577][ T4868] vhci_hcd: connection closed [ 79.429389][ T4685] vhci_hcd: stop threads [ 79.432768][ T4685] vhci_hcd: release socket [ 79.434129][ T4685] vhci_hcd: disconnect device [ 79.445764][ T4685] vhci_hcd: stop threads [ 79.454096][ T4685] vhci_hcd: release socket [ 79.457191][ T4685] vhci_hcd: disconnect device [ 79.468065][ T4855] vhci_hcd: connection reset by peer [ 79.559887][ T4685] vhci_hcd: stop threads [ 79.579221][ T4685] vhci_hcd: release socket [ 79.605047][ T4685] vhci_hcd: disconnect device [ 79.666972][ T4685] vhci_hcd: stop threads [ 79.704088][ T4685] vhci_hcd: release socket [ 79.760915][ T4685] vhci_hcd: disconnect device [ 79.856850][ T4685] vhci_hcd: stop threads [ 79.879376][ T4685] vhci_hcd: release socket [ 79.935004][ T4685] vhci_hcd: disconnect device [ 80.046669][ T4685] vhci_hcd: stop threads [ 80.047981][ T4685] vhci_hcd: release socket [ 80.071216][ T4685] vhci_hcd: disconnect device [ 80.275812][ T4896] device syzkaller0 entered promiscuous mode [ 82.981560][ T4935] 9pnet_fd: Insufficient options for proto=fd [ 83.706218][ T112] vhci_hcd: vhci_device speed not set [ 83.813647][ T4944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.864092][ T4944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.285395][ T4983] 9pnet_fd: Insufficient options for proto=fd [ 93.220943][ T5028] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 93.223875][ T5028] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 94.023511][ T5037] 9pnet_fd: Insufficient options for proto=fd [ 98.104122][ T5063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.120706][ T5063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.107444][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.112605][ T5072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.124851][ T5072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.125510][ T5077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.135405][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.138136][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.199767][ T5077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.308455][ T5080] binder: 5079:5080 tried to acquire reference to desc 0, got 1 instead [ 99.312851][ T5080] binder: 5079:5080 got transaction with invalid data ptr [ 99.314926][ T5080] binder: 5079:5080 transaction call to 5079:0 failed 6/29201/-14, size 0-24 line 3342 [ 99.318857][ T4419] binder: undelivered TRANSACTION_COMPLETE [ 99.320575][ T4419] binder: undelivered TRANSACTION_ERROR: 29201 [ 99.338690][ T4352] binder: undelivered transaction 5, process died. [ 99.476178][ T112] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.656737][ T112] usb 1-1: Using ep0 maxpacket: 32 [ 99.664150][ T112] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 99.668704][ T112] usb 1-1: config 0 has no interface number 0 [ 99.670933][ T112] usb 1-1: config 0 interface 2 has no altsetting 0 [ 99.675408][ T112] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 99.680319][ T112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.682822][ T112] usb 1-1: Product: syz [ 99.684249][ T112] usb 1-1: Manufacturer: syz [ 99.685691][ T112] usb 1-1: SerialNumber: syz [ 99.693976][ T112] usb 1-1: config 0 descriptor?? [ 101.724948][ T112] usb 1-1: USB disconnect, device number 3 [ 103.759901][ T4451] udevd[4451]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.645565][ T5183] binder: 5180:5183 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 110.638501][ T5181] binder: 5180:5181 got transaction to invalid handle, 1 [ 110.653511][ T5181] binder: 5181:5180 cannot find target node [ 110.655079][ T5181] binder: 5180:5181 transaction async to 0:0 failed 8/29201/-22, size 72-24 line 3054 [ 110.674411][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 110.866443][ T5193] loop2: detected capacity change from 0 to 7 [ 110.870722][ T4300] Dev loop2: unable to read RDB block 7 [ 110.872239][ T4300] loop2: AHDI p1 p2 p3 [ 110.873462][ T4300] loop2: partition table partially beyond EOD, truncated [ 110.878523][ T4300] loop2: p1 start 1601398130 is beyond EOD, truncated [ 110.880338][ T4300] loop2: p2 start 1702059890 is beyond EOD, truncated [ 110.887972][ T5193] Dev loop2: unable to read RDB block 7 [ 110.899838][ T5193] loop2: AHDI p1 p2 p3 [ 110.900972][ T5193] loop2: partition table partially beyond EOD, truncated [ 110.903093][ T5193] loop2: p1 start 1601398130 is beyond EOD, truncated [ 110.904892][ T5193] loop2: p2 start 1702059890 is beyond EOD, truncated [ 115.217362][ T5233] loop2: detected capacity change from 0 to 7 [ 115.239527][ T5233] Dev loop2: unable to read RDB block 7 [ 115.247844][ T5233] loop2: unable to read partition table [ 115.255168][ T5233] loop2: partition table beyond EOD, truncated [ 115.275002][ T5233] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 115.744682][ T5245] tmpfs: Bad value for 'mpol' [ 119.244044][ T5260] xt_cgroup: invalid path, errno=-2 [ 120.240556][ T5269] netlink: 'syz.0.243': attribute type 25 has an invalid length. [ 122.007118][ T5288] loop2: detected capacity change from 0 to 7 [ 122.009901][ T5288] Dev loop2: unable to read RDB block 7 [ 122.011473][ T5288] loop2: AHDI p1 p2 p3 [ 122.012603][ T5288] loop2: partition table partially beyond EOD, truncated [ 122.014646][ T5288] loop2: p1 start 1601398130 is beyond EOD, truncated [ 122.022596][ T5288] loop2: p2 start 1702059890 is beyond EOD, truncated [ 124.418102][ T5313] netlink: 'syz.3.258': attribute type 1 has an invalid length. [ 126.262681][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.265397][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.921190][ T5340] binder: 5338:5340 ioctl 4018620d 0 returned -22 [ 127.052969][ T5344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.266'. [ 127.449071][ T5352] kAFS: unable to lookup cell '/,' [ 131.331526][ T5386] binder: 5385:5386 ioctl 4018620d 0 returned -22 [ 131.362402][ T5390] device dummy0 entered promiscuous mode [ 131.390426][ T5387] device dummy0 left promiscuous mode [ 134.774856][ T5430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'. [ 135.392055][ T5444] binder: 5442:5444 ioctl 4018620d 0 returned -22 [ 137.571853][ T5465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 137.582263][ T5465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 139.462478][ T5483] netlink: 'syz.1.315': attribute type 11 has an invalid length. [ 142.959158][ T4360] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 142.963873][ T4360] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 144.934442][ T5561] loop2: detected capacity change from 0 to 7 [ 144.937442][ T5561] Dev loop2: unable to read RDB block 7 [ 144.938959][ T5561] loop2: AHDI p1 p2 p3 [ 144.940104][ T5561] loop2: partition table partially beyond EOD, truncated [ 144.942027][ T5562] binder: 5560:5562 ioctl 4018620d 0 returned -22 [ 144.942121][ T5561] loop2: p1 start 1601398130 is beyond EOD, truncated [ 144.966370][ T5561] loop2: p2 start 1702059890 is beyond EOD, truncated [ 145.008426][ T4310] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 145.011461][ T4310] CPU: 1 PID: 4310 Comm: kworker/u5:2 Not tainted 6.1.146-syzkaller #0 [ 145.013838][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.016559][ T4310] Workqueue: hci3 hci_rx_work [ 145.017886][ T4310] Call trace: [ 145.018767][ T4310] dump_backtrace+0x1c8/0x1f4 [ 145.020188][ T4310] show_stack+0x2c/0x3c [ 145.021411][ T4310] __dump_stack+0x30/0x40 [ 145.022621][ T4310] dump_stack_lvl+0xf8/0x160 [ 145.023920][ T4310] dump_stack+0x1c/0x5c [ 145.025139][ T4310] sysfs_create_dir_ns+0x22c/0x24c [ 145.026634][ T4310] kobject_add_internal+0x5a8/0xb30 [ 145.028120][ T4310] kobject_add+0x134/0x1f8 [ 145.029336][ T4310] device_add+0x3f0/0xf94 [ 145.030565][ T4310] hci_conn_add_sysfs+0xbc/0x1cc [ 145.031934][ T4310] le_conn_complete_evt+0xa24/0xf8c [ 145.033429][ T4310] hci_le_conn_complete_evt+0x114/0x3f8 [ 145.035009][ T4310] hci_le_meta_evt+0x2c0/0x4a4 [ 145.036394][ T4310] hci_event_packet+0x6ac/0xf08 [ 145.037787][ T4310] hci_rx_work+0x324/0xaa0 [ 145.039029][ T4310] process_one_work+0x7f4/0x13a8 [ 145.040404][ T4310] worker_thread+0x8c8/0xfbc [ 145.041727][ T4310] kthread+0x250/0x2d8 [ 145.042848][ T4310] ret_from_fork+0x10/0x20 [ 145.044864][ T4310] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 145.048681][ T4310] Bluetooth: hci3: failed to register connection device [ 146.173294][ T5583] netlink: 52 bytes leftover after parsing attributes in process `syz.0.350'. [ 148.435059][ T5602] loop2: detected capacity change from 0 to 7 [ 148.447400][ T5602] Dev loop2: unable to read RDB block 7 [ 148.465238][ T5602] loop2: AHDI p1 p2 p3 [ 148.471219][ T5602] loop2: partition table partially beyond EOD, truncated [ 148.480110][ T5602] loop2: p1 start 1601398130 is beyond EOD, truncated [ 148.487622][ T5602] loop2: p2 start 1702059890 is beyond EOD, truncated [ 148.522578][ T5604] binder: 5603:5604 ioctl 4018620d 0 returned -22 [ 148.548027][ T4310] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 148.550866][ T4310] CPU: 1 PID: 4310 Comm: kworker/u5:2 Not tainted 6.1.146-syzkaller #0 [ 148.553095][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.555718][ T4310] Workqueue: hci4 hci_rx_work [ 148.556993][ T4310] Call trace: [ 148.557851][ T4310] dump_backtrace+0x1c8/0x1f4 [ 148.559119][ T4310] show_stack+0x2c/0x3c [ 148.560231][ T4310] __dump_stack+0x30/0x40 [ 148.561402][ T4310] dump_stack_lvl+0xf8/0x160 [ 148.562696][ T4310] dump_stack+0x1c/0x5c [ 148.563854][ T4310] sysfs_create_dir_ns+0x22c/0x24c [ 148.565266][ T4310] kobject_add_internal+0x5a8/0xb30 [ 148.566699][ T4310] kobject_add+0x134/0x1f8 [ 148.567864][ T4310] device_add+0x3f0/0xf94 [ 148.569030][ T4310] hci_conn_add_sysfs+0xbc/0x1cc [ 148.570331][ T4310] le_conn_complete_evt+0xa24/0xf8c [ 148.571820][ T4310] hci_le_conn_complete_evt+0x114/0x3f8 [ 148.573364][ T4310] hci_le_meta_evt+0x2c0/0x4a4 [ 148.574628][ T4310] hci_event_packet+0x6ac/0xf08 [ 148.575992][ T4310] hci_rx_work+0x324/0xaa0 [ 148.577158][ T4310] process_one_work+0x7f4/0x13a8 [ 148.578543][ T4310] worker_thread+0x8c8/0xfbc [ 148.579789][ T4310] kthread+0x250/0x2d8 [ 148.580928][ T4310] ret_from_fork+0x10/0x20 [ 148.583822][ T4310] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 148.587386][ T4310] Bluetooth: hci4: failed to register connection device [ 152.167902][ T5645] netlink: 'syz.0.370': attribute type 1 has an invalid length. [ 152.237201][ T5647] loop2: detected capacity change from 0 to 7 [ 152.244102][ T5647] Dev loop2: unable to read RDB block 7 [ 152.245598][ T5647] loop2: AHDI p1 p2 p3 [ 152.247281][ T5647] loop2: partition table partially beyond EOD, truncated [ 152.259219][ T5647] loop2: p1 start 1601398130 is beyond EOD, truncated [ 152.261133][ T5647] loop2: p2 start 1702059890 is beyond EOD, truncated [ 152.266915][ T4321] Bluetooth: hci3: command 0x0406 tx timeout [ 153.506470][ T5661] Illegal XDP return value 254787961 on prog (id 7) dev N/A, expect packet loss! [ 155.397057][ T4321] Bluetooth: hci4: command 0x0406 tx timeout [ 155.788308][ T1963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 155.816451][ T1963] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 155.848464][ T5685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.384'. [ 157.278959][ T5713] device batadv_slave_1 entered promiscuous mode [ 157.284153][ T5712] device batadv_slave_1 left promiscuous mode [ 157.424650][ T5715] netlink: 'syz.0.395': attribute type 3 has an invalid length. [ 157.426899][ T5715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'. [ 162.216913][ T5774] netlink: 28 bytes leftover after parsing attributes in process `syz.3.417'. [ 162.421929][ T5783] loop2: detected capacity change from 0 to 7 [ 162.438062][ T5783] Dev loop2: unable to read RDB block 7 [ 162.444021][ T5783] loop2: unable to read partition table [ 162.453401][ T5783] loop2: partition table beyond EOD, truncated [ 162.455308][ T5783] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 164.053255][ T4321] Bluetooth: hci1: command 0x0406 tx timeout [ 164.055124][ T4321] Bluetooth: hci0: command 0x0406 tx timeout [ 164.057033][ T4321] Bluetooth: hci2: command 0x0406 tx timeout [ 164.058870][ T4321] Bluetooth: hci3: command 0x0406 tx timeout [ 164.574972][ T5820] binder: 5819:5820 ioctl 4018620d 0 returned -22 [ 164.591536][ T4310] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 164.594605][ T4310] CPU: 0 PID: 4310 Comm: kworker/u5:2 Not tainted 6.1.146-syzkaller #0 [ 164.596902][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.599872][ T4310] Workqueue: hci0 hci_rx_work [ 164.601179][ T4310] Call trace: [ 164.602150][ T4310] dump_backtrace+0x1c8/0x1f4 [ 164.603563][ T4310] show_stack+0x2c/0x3c [ 164.604817][ T4310] __dump_stack+0x30/0x40 [ 164.606119][ T4310] dump_stack_lvl+0xf8/0x160 [ 164.607557][ T4310] dump_stack+0x1c/0x5c [ 164.608857][ T4310] sysfs_create_dir_ns+0x22c/0x24c [ 164.610363][ T4310] kobject_add_internal+0x5a8/0xb30 [ 164.612036][ T4310] kobject_add+0x134/0x1f8 [ 164.613291][ T4310] device_add+0x3f0/0xf94 [ 164.614570][ T4310] hci_conn_add_sysfs+0xbc/0x1cc [ 164.616023][ T4310] le_conn_complete_evt+0xa24/0xf8c [ 164.617529][ T4310] hci_le_conn_complete_evt+0x114/0x3f8 [ 164.619256][ T4310] hci_le_meta_evt+0x2c0/0x4a4 [ 164.620795][ T4310] hci_event_packet+0x6ac/0xf08 [ 164.622276][ T4310] hci_rx_work+0x324/0xaa0 [ 164.623698][ T4310] process_one_work+0x7f4/0x13a8 [ 164.625122][ T4310] worker_thread+0x8c8/0xfbc [ 164.626483][ T4310] kthread+0x250/0x2d8 [ 164.627680][ T4310] ret_from_fork+0x10/0x20 [ 164.635292][ T4310] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 164.640022][ T4310] Bluetooth: hci0: failed to register connection device [ 164.763871][ T5828] netlink: 'syz.2.438': attribute type 1 has an invalid length. [ 164.799423][ T5828] netlink: 'syz.2.438': attribute type 2 has an invalid length. [ 164.981171][ T5828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.438'. [ 165.513768][ T5848] device dummy0 entered promiscuous mode [ 165.526194][ T5848] device vlan2 entered promiscuous mode [ 165.739393][ T5852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 165.754243][ T5852] IPVS: Error joining to the multicast group [ 166.630390][ T5866] binder: 5861:5866 ioctl 4018620d 0 returned -22 [ 166.657058][ T4310] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 167.865657][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 167.887927][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.890599][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.994942][ T5905] binder: 5902:5905 ioctl 4018620d 0 returned -22 [ 169.006972][ T4310] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 169.009616][ T4310] CPU: 0 PID: 4310 Comm: kworker/u5:2 Not tainted 6.1.146-syzkaller #0 [ 169.011875][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.014831][ T4310] Workqueue: hci2 hci_rx_work [ 169.016135][ T4310] Call trace: [ 169.017115][ T4310] dump_backtrace+0x1c8/0x1f4 [ 169.018406][ T4310] show_stack+0x2c/0x3c [ 169.019648][ T4310] __dump_stack+0x30/0x40 [ 169.020927][ T4310] dump_stack_lvl+0xf8/0x160 [ 169.022207][ T4310] dump_stack+0x1c/0x5c [ 169.022246][ T5907] netlink: 284 bytes leftover after parsing attributes in process `syz.1.467'. [ 169.023345][ T4310] sysfs_create_dir_ns+0x22c/0x24c [ 169.027384][ T4310] kobject_add_internal+0x5a8/0xb30 [ 169.028992][ T4310] kobject_add+0x134/0x1f8 [ 169.030229][ T4310] device_add+0x3f0/0xf94 [ 169.031415][ T4310] hci_conn_add_sysfs+0xbc/0x1cc [ 169.032727][ T4310] le_conn_complete_evt+0xa24/0xf8c [ 169.034118][ T4310] hci_le_conn_complete_evt+0x114/0x3f8 [ 169.035748][ T4310] hci_le_meta_evt+0x2c0/0x4a4 [ 169.037153][ T4310] hci_event_packet+0x6ac/0xf08 [ 169.038535][ T4310] hci_rx_work+0x324/0xaa0 [ 169.039893][ T4310] process_one_work+0x7f4/0x13a8 [ 169.041335][ T4310] worker_thread+0x8c8/0xfbc [ 169.042886][ T4310] kthread+0x250/0x2d8 [ 169.044094][ T4310] ret_from_fork+0x10/0x20 [ 169.046237][ T4310] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 169.051522][ T4310] Bluetooth: hci2: failed to register connection device [ 170.523423][ T5922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.526016][ T5922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.549618][ T5916] netlink: 32 bytes leftover after parsing attributes in process `syz.1.471'. [ 172.056924][ T5952] netlink: 'syz.4.483': attribute type 1 has an invalid length. [ 172.064089][ T5952] netlink: 'syz.4.483': attribute type 2 has an invalid length. [ 172.171282][ T5952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.483'. [ 174.318848][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.321322][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.568810][ T5982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.575531][ T6013] device syzkaller0 entered promiscuous mode [ 183.899131][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.529'. [ 187.400838][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.402663][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 191.247120][ T4321] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 191.250311][ T4321] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 191.252992][ T4321] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 191.255815][ T4321] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 191.259719][ T4321] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 191.261888][ T4321] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 193.316204][ T4310] Bluetooth: hci5: command 0x0409 tx timeout [ 195.386160][ T4310] Bluetooth: hci5: command 0x041b tx timeout [ 195.552634][ T6105] chnl_net:caif_netlink_parms(): no params data found [ 196.650899][ T6105] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.653159][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.655947][ T6105] device bridge_slave_0 entered promiscuous mode [ 197.756239][ T4321] Bluetooth: hci5: command 0x040f tx timeout [ 198.091985][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.093942][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.105702][ T6105] device bridge_slave_1 entered promiscuous mode [ 199.021059][ T4658] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.039583][ T6105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.044219][ T6105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.156810][ T4658] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.189243][ T6105] team0: Port device team_slave_0 added [ 199.193676][ T6105] team0: Port device team_slave_1 added [ 199.228011][ T6205] tipc: Failed to remove unknown binding: 66,1,1/0:703479403/703479405 [ 199.289760][ T6205] tipc: Failed to remove unknown binding: 66,1,1/0:703479403/703479405 [ 199.292492][ T6205] tipc: Failed to remove unknown binding: 66,1,1/0:703479403/703479405 [ 199.314352][ T4658] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.329766][ T6105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.331812][ T6105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.339773][ T6105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.344937][ T6105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.353205][ T6105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.367318][ T6105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.428044][ T4658] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.505102][ T6105] device hsr_slave_0 entered promiscuous mode [ 199.549821][ T6105] device hsr_slave_1 entered promiscuous mode [ 199.587057][ T6105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.589666][ T6105] Cannot create hsr debugfs directory [ 199.786142][ T4310] Bluetooth: hci5: command 0x0419 tx timeout [ 199.854399][ T6105] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.918849][ T4658] tipc: Left network mode [ 199.919346][ T6105] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 199.958460][ T6105] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 200.084001][ T6238] tipc: Failed to remove unknown binding: 66,1,1/0:2976438906/2976438908 [ 200.088815][ T6238] tipc: Failed to remove unknown binding: 66,1,1/0:2976438906/2976438908 [ 200.091146][ T6238] tipc: Failed to remove unknown binding: 66,1,1/0:2976438906/2976438908 [ 200.209691][ T6105] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 200.681538][ T6105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.861172][ T6105] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.863444][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.865850][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.880408][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.883145][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.895798][ T5022] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.897815][ T5022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.047554][ T6292] binder: 6291:6292 ioctl 4018620d 0 returned -22 [ 201.061380][ T4321] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 201.093109][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.095764][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.100553][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.108770][ T5022] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.110790][ T5022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.113242][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.117539][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.929801][ T6302] netlink: 'syz.2.594': attribute type 1 has an invalid length. [ 201.935567][ T6302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.594'. [ 201.945615][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.951021][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.957294][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.967817][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.991003][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.279522][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.283347][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.290236][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.301084][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.324387][ T6105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.986718][ T4658] device hsr_slave_0 left promiscuous mode [ 204.028400][ T4658] device hsr_slave_1 left promiscuous mode [ 204.161431][ T4310] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 204.167370][ T4658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.169479][ T4658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.184198][ T4658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.206273][ T4658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.209954][ T4658] device bridge_slave_1 left promiscuous mode [ 204.212853][ T4658] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.336287][ T4321] Bluetooth: hci5: command 0x0405 tx timeout [ 204.450401][ T4658] device bridge_slave_0 left promiscuous mode [ 204.501246][ T4658] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.112973][ T4658] device veth1_macvtap left promiscuous mode [ 205.114940][ T4658] device veth0_macvtap left promiscuous mode [ 205.132872][ T4658] device veth1_vlan left promiscuous mode [ 205.143162][ T4658] device veth0_vlan left promiscuous mode [ 206.228862][ T6376] netlink: 84 bytes leftover after parsing attributes in process `syz.1.609'. [ 207.900478][ T4658] team0 (unregistering): Port device team_slave_1 removed [ 208.088146][ T4658] team0 (unregistering): Port device team_slave_0 removed [ 208.287759][ T4658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.527227][ T4658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.022669][ T4658] bond0 (unregistering): Released all slaves [ 211.256423][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.258639][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.262845][ T6105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.443111][ T6385] netlink: 128 bytes leftover after parsing attributes in process `syz.0.611'. [ 211.653261][ T6385] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 211.659005][ T6385] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 212.476225][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.478959][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.544327][ T6408] 9pnet_fd: Insufficient options for proto=fd [ 212.555156][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.561040][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.564540][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.575491][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.595227][ T6105] device veth0_vlan entered promiscuous mode [ 212.660591][ T6105] device veth1_vlan entered promiscuous mode [ 212.756902][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 212.759675][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 212.762990][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.771311][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.777550][ T6105] device veth0_macvtap entered promiscuous mode [ 212.782030][ T6105] device veth1_macvtap entered promiscuous mode [ 212.843395][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.876358][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.895966][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.900969][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.913421][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.927534][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.940352][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.954672][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.973487][ T6105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.072202][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.075018][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.081738][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.087230][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.135920][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.139185][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.141770][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.144646][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.179827][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.182901][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.185935][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.190295][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.202829][ T6105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.210539][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.213425][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.247122][ T6105] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.249434][ T6105] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.251680][ T6105] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.263694][ T6105] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.716550][ T4404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.718871][ T4404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.771421][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 214.837375][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.839648][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.843677][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 214.913186][ T6459] 9pnet_fd: Insufficient options for proto=fd [ 215.146949][ T6471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.629'. [ 216.503658][ T6492] tipc: Enabled bearer , priority 0 [ 216.521882][ T6492] device syzkaller0 entered promiscuous mode [ 216.799434][ T6496] tipc: Resetting bearer [ 217.497028][ T4425] tipc: Node number set to 3241780674 [ 218.438387][ T6579] 9pnet_fd: Insufficient options for proto=fd [ 221.650461][ T6700] netlink: 56 bytes leftover after parsing attributes in process `syz.0.695'. [ 222.255370][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 222.372673][ T6724] netlink: 'syz.5.700': attribute type 1 has an invalid length. [ 225.162789][ T6765] netlink: 36 bytes leftover after parsing attributes in process `syz.5.712'. [ 229.050604][ T6816] netlink: 36 bytes leftover after parsing attributes in process `syz.2.725'. [ 232.868446][ T4321] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 234.128419][ T6938] tipc: Started in network mode [ 234.133790][ T6938] tipc: Node identity 226e5c1a9cdd, cluster identity 4711 [ 234.140452][ T6938] tipc: Enabled bearer , priority 0 [ 234.148236][ T6938] device syzkaller0 entered promiscuous mode [ 234.170850][ T6938] tipc: Resetting bearer [ 234.207417][ T6936] tipc: Resetting bearer [ 234.278676][ T6936] tipc: Disabling bearer [ 235.878908][ T6994] tipc: Started in network mode [ 235.880353][ T6994] tipc: Node identity d28bb24486dd, cluster identity 4711 [ 235.888290][ T6994] tipc: Enabled bearer , priority 0 [ 235.909387][ T6994] device syzkaller0 entered promiscuous mode [ 235.935523][ T6994] tipc: Resetting bearer [ 235.947633][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.771'. [ 236.039249][ T6993] tipc: Resetting bearer [ 236.099176][ T6993] tipc: Disabling bearer [ 237.613777][ T4321] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 239.177018][ C0] Unknown status report in ack skb [ 239.262630][ T7067] tipc: Enabled bearer , priority 0 [ 239.272255][ T7067] device syzkaller0 entered promiscuous mode [ 239.317332][ T7067] device syzkaller0 left promiscuous mode [ 239.354563][ T7067] tipc: Resetting bearer [ 239.432530][ T7065] tipc: Resetting bearer [ 239.620798][ T7065] tipc: Disabling bearer [ 239.842717][ T4321] Bluetooth: hci5: link tx timeout [ 239.844629][ T4321] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 239.991151][ T4321] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 240.008875][ T7094] 9pnet_fd: Insufficient options for proto=fd [ 241.866861][ T4321] Bluetooth: hci5: command 0x0406 tx timeout [ 241.969668][ T7118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.784409][ T7186] 9pnet_fd: Insufficient options for proto=fd [ 242.986191][ T4310] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 242.989032][ T4310] CPU: 0 PID: 4310 Comm: kworker/u5:2 Not tainted 6.1.146-syzkaller #0 [ 242.991312][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 242.994022][ T4310] Workqueue: hci5 hci_rx_work [ 242.995344][ T4310] Call trace: [ 242.996269][ T4310] dump_backtrace+0x1c8/0x1f4 [ 242.997607][ T4310] show_stack+0x2c/0x3c [ 242.998785][ T4310] __dump_stack+0x30/0x40 [ 243.000002][ T4310] dump_stack_lvl+0xf8/0x160 [ 243.001337][ T4310] dump_stack+0x1c/0x5c [ 243.002465][ T4310] sysfs_create_dir_ns+0x22c/0x24c [ 243.003956][ T4310] kobject_add_internal+0x5a8/0xb30 [ 243.005421][ T4310] kobject_add+0x134/0x1f8 [ 243.006693][ T4310] device_add+0x3f0/0xf94 [ 243.007912][ T4310] hci_conn_add_sysfs+0xbc/0x1cc [ 243.009314][ T4310] le_conn_complete_evt+0xa24/0xf8c [ 243.010758][ T4310] hci_le_conn_complete_evt+0x114/0x3f8 [ 243.012264][ T4310] hci_le_meta_evt+0x2c0/0x4a4 [ 243.013573][ T4310] hci_event_packet+0x6ac/0xf08 [ 243.014903][ T4310] hci_rx_work+0x324/0xaa0 [ 243.016174][ T4310] process_one_work+0x7f4/0x13a8 [ 243.017622][ T4310] worker_thread+0x8c8/0xfbc [ 243.018928][ T4310] kthread+0x250/0x2d8 [ 243.020058][ T4310] ret_from_fork+0x10/0x20 [ 243.021370][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.026602][ T4310] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 243.030166][ T4310] Bluetooth: hci5: failed to register connection device [ 244.166572][ T4321] Bluetooth: hci5: command 0x0405 tx timeout [ 244.388187][ T7215] netlink: 24 bytes leftover after parsing attributes in process `syz.5.817'. [ 244.695402][ T7224] device netdevsim0 entered promiscuous mode [ 244.703844][ T7224] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 245.530563][ T4310] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 246.155547][ T7260] device pim6reg1 entered promiscuous mode [ 246.186150][ T4321] Bluetooth: hci5: command 0x2016 tx timeout [ 246.290137][ T7263] netlink: 56 bytes leftover after parsing attributes in process `syz.5.834'. [ 246.766632][ T4310] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 246.983482][ T7279] tipc: Started in network mode [ 246.984861][ T7279] tipc: Node identity 080211000001, cluster identity 4711 [ 246.996477][ T7279] tipc: Enabled bearer , priority 0 [ 246.999276][ T7279] device syzkaller0 entered promiscuous mode [ 247.008505][ T7279] tipc: Resetting bearer [ 247.607860][ T7297] tipc: Enabling of bearer rejected, already enabled [ 247.953401][ T4310] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 248.082031][ T7317] tipc: Enabling of bearer rejected, already enabled [ 248.827043][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.828881][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.842536][ T4313] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 263.846463][ T4313] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 263.849286][ T4313] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 263.851806][ T4313] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 263.854147][ T4313] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 263.859661][ T4313] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 263.974733][ T4310] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 263.983546][ T4310] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 263.986322][ T4310] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 263.988874][ T4310] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 263.991693][ T4310] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 263.993796][ T4310] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 264.015409][ T4313] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 264.021900][ T4313] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 264.024398][ T4313] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 264.027262][ T4313] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 264.029483][ T4313] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 264.031582][ T4313] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 264.500477][ T7341] chnl_net:caif_netlink_parms(): no params data found [ 265.866197][ T4321] Bluetooth: hci6: command 0x0409 tx timeout [ 266.026236][ T4321] Bluetooth: hci7: command 0x0409 tx timeout [ 266.106588][ T4321] Bluetooth: hci1: command 0x0409 tx timeout [ 266.266656][ T4321] Bluetooth: hci4: command 0x0406 tx timeout [ 267.947260][ T4313] Bluetooth: hci6: command 0x041b tx timeout [ 268.106327][ T4321] Bluetooth: hci7: command 0x041b tx timeout [ 268.146058][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [kworker/0:5:4360] [ 268.148463][ C0] Modules linked in: [ 268.149530][ C0] irq event stamp: 620413 [ 268.150721][ C0] hardirqs last enabled at (620412): [] timekeeping_get_ns+0x124/0x3b8 [ 268.153380][ C0] hardirqs last disabled at (620413): [] el1_interrupt+0x24/0x54 [ 268.155859][ C0] softirqs last enabled at (265560): [] local_bh_enable+0xc/0x2c [ 268.158344][ C0] softirqs last disabled at (265719): [] __do_softirq+0x14/0x20 [ 268.160758][ C0] CPU: 0 PID: 4360 Comm: kworker/0:5 Not tainted 6.1.146-syzkaller #0 [ 268.162875][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.165715][ C0] Workqueue: rcu_gp process_srcu [ 268.167053][ C0] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 268.169217][ C0] pc : __sanitizer_cov_trace_pc+0x88/0x94 [ 268.170781][ C0] lr : cake_heapify+0x4c4/0x530 [ 268.172082][ C0] sp : ffff8000080070c0 [ 268.173208][ C0] x29: ffff8000080070e0 x28: 1fffe0001bb2f85b x27: 00000000000198d0 [ 268.175350][ C0] x26: 0000000000001c14 x25: 0000000000000e09 x24: 0000000000000e09 [ 268.177481][ C0] x23: dfff800000000000 x22: 0000000000000e09 x21: 0000000000000000 [ 268.179721][ C0] x20: ffff0000dd9782d0 x19: 0000000000000e09 x18: 0000000094ca7d75 [ 268.181953][ C0] x17: 0000000000000000 x16: ffff8000082d2400 x15: 0000000000000000 [ 268.184105][ C0] x14: 0000000000000004 x13: 1ffff00002a160b1 x12: 0000000000ff0100 [ 268.186299][ C0] x11: ff0080000ffb95b4 x10: 0000000000000000 x9 : ffff80000ffb95b4 [ 268.186408][ T4313] Bluetooth: hci1: command 0x041b tx timeout [ 268.188520][ C0] x8 : ffff0000c85c3780 x7 : ffff8000083b9900 x6 : 0000000000000000 [ 268.192462][ C0] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 268.194670][ C0] x2 : 0000000000000002 x1 : 0000000000000e09 x0 : 0000000000000e09 [ 268.196853][ C0] Call trace: [ 268.197715][ C0] __sanitizer_cov_trace_pc+0x88/0x94 [ 268.199212][ C0] cake_enqueue+0x333c/0x6880 [ 268.200519][ C0] sfb_enqueue+0x794/0x1294 [ 268.201758][ C0] dev_qdisc_enqueue+0x5c/0x38c [ 268.203084][ C0] __dev_queue_xmit+0xad0/0x309c [ 268.204449][ C0] tipc_l2_send_msg+0x29c/0x35c [ 268.205793][ C0] tipc_bearer_xmit_skb+0x244/0x384 [ 268.207324][ C0] tipc_disc_timeout+0x4c8/0x608 [ 268.208745][ C0] call_timer_fn+0x1b8/0x964 [ 268.210047][ C0] __run_timers+0x460/0x6bc [ 268.211374][ C0] run_timer_softirq+0x7c/0x114 [ 268.212863][ C0] handle_softirqs+0x318/0xc6c [ 268.214195][ C0] __do_softirq+0x14/0x20 [ 268.215377][ C0] ____do_softirq+0x14/0x20 [ 268.216725][ C0] call_on_irq_stack+0x24/0x30 [ 268.218158][ C0] do_softirq_own_stack+0x20/0x2c [ 268.219529][ C0] __irq_exit_rcu+0x23c/0x43c [ 268.220957][ C0] irq_exit_rcu+0x14/0x84 [ 268.222226][ C0] el1_interrupt+0x38/0x54 [ 268.223441][ C0] el1h_64_irq_handler+0x18/0x24 [ 268.224776][ C0] el1h_64_irq+0x64/0x68 [ 268.225883][ C0] __sanitizer_cov_trace_pc+0x14/0x94 [ 268.227334][ C0] __delay+0x1c8/0x280 [ 268.228430][ C0] __udelay+0x60/0x70 [ 268.229518][ C0] try_check_zero+0x388/0x3b8 [ 268.230761][ C0] process_srcu+0x16c/0xffc [ 268.231914][ C0] process_one_work+0x7f4/0x13a8 [ 268.233234][ C0] worker_thread+0x8c8/0xfbc [ 268.234511][ C0] kthread+0x250/0x2d8 [ 268.235622][ C0] ret_from_fork+0x10/0x20 [ 268.236842][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 268.238698][ C0] CPU: 0 PID: 4360 Comm: kworker/0:5 Tainted: G L 6.1.146-syzkaller #0 [ 268.241296][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.244185][ C0] Workqueue: rcu_gp process_srcu [ 268.245538][ C0] Call trace: [ 268.246409][ C0] dump_backtrace+0x1c8/0x1f4 [ 268.247669][ C0] show_stack+0x2c/0x3c [ 268.248806][ C0] __dump_stack+0x30/0x40 [ 268.249978][ C0] dump_stack_lvl+0xf8/0x160 [ 268.251278][ C0] dump_stack+0x1c/0x5c [ 268.252410][ C0] panic+0x2e0/0x79c [ 268.253489][ C0] softlockup_fn+0x0/0x120 [ 268.254630][ C0] __hrtimer_run_queues+0x420/0xc64 [ 268.256094][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 268.257433][ C0] arch_timer_handler_virt+0x74/0x88 [ 268.258847][ C0] handle_percpu_devid_irq+0x174/0x34c [ 268.260372][ C0] generic_handle_domain_irq+0xe0/0x140 [ 268.261824][ C0] gic_handle_irq+0x70/0x1e4 [ 268.263075][ C0] do_interrupt_handler+0xe0/0x138 [ 268.264514][ C0] el1_interrupt+0x34/0x54 [ 268.265728][ C0] el1h_64_irq_handler+0x18/0x24 [ 268.267078][ C0] el1h_64_irq+0x64/0x68 [ 268.268294][ C0] __sanitizer_cov_trace_pc+0x88/0x94 [ 268.269769][ C0] cake_enqueue+0x333c/0x6880 [ 268.271125][ C0] sfb_enqueue+0x794/0x1294 [ 268.272392][ C0] dev_qdisc_enqueue+0x5c/0x38c [ 268.273694][ C0] __dev_queue_xmit+0xad0/0x309c [ 268.275053][ C0] tipc_l2_send_msg+0x29c/0x35c [ 268.276433][ C0] tipc_bearer_xmit_skb+0x244/0x384 [ 268.277865][ C0] tipc_disc_timeout+0x4c8/0x608 [ 268.279202][ C0] call_timer_fn+0x1b8/0x964 [ 268.280401][ C0] __run_timers+0x460/0x6bc [ 268.281750][ C0] run_timer_softirq+0x7c/0x114 [ 268.283090][ C0] handle_softirqs+0x318/0xc6c [ 268.284392][ C0] __do_softirq+0x14/0x20 [ 268.285567][ C0] ____do_softirq+0x14/0x20 [ 268.286828][ C0] call_on_irq_stack+0x24/0x30 [ 268.288066][ C0] do_softirq_own_stack+0x20/0x2c [ 268.289398][ C0] __irq_exit_rcu+0x23c/0x43c [ 268.290643][ C0] irq_exit_rcu+0x14/0x84 [ 268.291856][ C0] el1_interrupt+0x38/0x54 [ 268.293045][ C0] el1h_64_irq_handler+0x18/0x24 [ 268.294367][ C0] el1h_64_irq+0x64/0x68 [ 268.295498][ C0] __sanitizer_cov_trace_pc+0x14/0x94 [ 268.296956][ C0] __delay+0x1c8/0x280 [ 268.298084][ C0] __udelay+0x60/0x70 [ 268.299244][ C0] try_check_zero+0x388/0x3b8 [ 268.300638][ C0] process_srcu+0x16c/0xffc [ 268.301813][ C0] process_one_work+0x7f4/0x13a8 [ 268.303146][ C0] worker_thread+0x8c8/0xfbc [ 268.304347][ C0] kthread+0x250/0x2d8 [ 268.305556][ C0] ret_from_fork+0x10/0x20 [ 268.306809][ C0] SMP: stopping secondary CPUs [ 268.308083][ C0] Kernel Offset: disabled [ 268.309240][ C0] CPU features: 0x080000,02070084,26017203 [ 268.310804][ C0] Memory Limit: none [ 268.334051][ C0] [ 268.334713][ C0] ================================ [ 268.336168][ C0] WARNING: inconsistent lock state [ 268.337608][ C0] 6.1.146-syzkaller #0 Tainted: G L [ 268.339373][ C0] -------------------------------- [ 268.340743][ C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 268.342552][ C0] kworker/0:5/4360 [HC1[1]:SC1[3]:HE0:SE0] takes: [ 268.344360][ C0] ffff8000150f13d8 (efi_rt_lock){?...}-{2:2}, at: virt_efi_set_variable_nonblocking+0x74/0x16c [ 268.347474][ C0] {HARDIRQ-ON-W} state was registered at: [ 268.349114][ C0] lock_acquire+0x20c/0x644 [ 268.350405][ C0] _raw_spin_lock+0x54/0x6c [ 268.351808][ C0] efi_call_rts+0x260/0x9f4 [ 268.353071][ C0] process_one_work+0x7f4/0x13a8 [ 268.354500][ C0] worker_thread+0x8c8/0xfbc [ 268.355782][ C0] kthread+0x250/0x2d8 [ 268.357009][ C0] ret_from_fork+0x10/0x20 [ 268.358221][ C0] irq event stamp: 620413 [ 268.359375][ C0] hardirqs last enabled at (620412): [] timekeeping_get_ns+0x124/0x3b8 [ 268.362141][ C0] hardirqs last disabled at (620413): [] el1_interrupt+0x24/0x54 [ 268.364722][ C0] softirqs last enabled at (265560): [] local_bh_enable+0xc/0x2c [ 268.367258][ C0] softirqs last disabled at (265719): [] __do_softirq+0x14/0x20 [ 268.369730][ C0] [ 268.369730][ C0] other info that might help us debug this: [ 268.371944][ C0] Possible unsafe locking scenario: [ 268.371944][ C0] [ 268.374074][ C0] CPU0 [ 268.375001][ C0] ---- [ 268.375900][ C0] lock(efi_rt_lock); [ 268.377118][ C0] [ 268.378097][ C0] lock(efi_rt_lock); [ 268.379317][ C0] [ 268.379317][ C0] *** DEADLOCK *** [ 268.379317][ C0] [ 268.381652][ C0] 9 locks held by kworker/0:5/4360: [ 268.383159][ C0] #0: ffff0000c0021938 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 [ 268.386036][ C0] #1: ffff800020c17c20 ((work_completion)(&(&ssp->work)->work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 [ 268.389322][ C0] #2: ffff80001c383ff8 (&ssp->srcu_gp_mutex){+.+.}-{3:3}, at: process_srcu+0x44/0xffc [ 268.392051][ C0] #3: ffff800008007c40 ((&d->timer)){+.-.}-{0:0}, at: call_timer_fn+0xd0/0x964 [ 268.394492][ C0] #4: ffff800015286e00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 268.397146][ C0] #5: ffff800015286e60 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 268.399910][ C0] #6: ffff0000d574c108 (&sch->root_lock_key#224){+.-.}-{2:2}, at: __dev_queue_xmit+0x974/0x309c [ 268.402683][ C0] #7: ffff800015286e00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 268.405313][ C0] #8: ffff800017152588 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x180/0x728 [ 268.407984][ C0] [ 268.407984][ C0] stack backtrace: [ 268.409693][ C0] CPU: 0 PID: 4360 Comm: kworker/0:5 Tainted: G L 6.1.146-syzkaller #0 [ 268.412326][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.415011][ C0] Workqueue: rcu_gp process_srcu [ 268.416381][ C0] Call trace: [ 268.417296][ C0] dump_backtrace+0x1c8/0x1f4 [ 268.418591][ C0] show_stack+0x2c/0x3c [ 268.419752][ C0] __dump_stack+0x30/0x40 [ 268.420949][ C0] dump_stack_lvl+0xf8/0x160 [ 268.422224][ C0] dump_stack+0x1c/0x5c [ 268.423335][ C0] print_usage_bug+0x4c0/0x6d8 [ 268.424716][ C0] mark_lock_irq+0x788/0x9e4 [ 268.425942][ C0] mark_lock+0x224/0x320 [ 268.427141][ C0] __lock_acquire+0xd2c/0x6544 [ 268.428410][ C0] lock_acquire+0x20c/0x644 [ 268.429662][ C0] _raw_spin_lock+0x54/0x6c [ 268.430914][ C0] virt_efi_set_variable_nonblocking+0x74/0x16c [ 268.432610][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 268.434175][ C0] efi_pstore_write+0x26c/0x358 [ 268.435516][ C0] pstore_dump+0x504/0x728 [ 268.436698][ C0] kmsg_dump+0x170/0x260 [ 268.437865][ C0] panic+0x36c/0x79c [ 268.438963][ C0] softlockup_fn+0x0/0x120 [ 268.440144][ C0] __hrtimer_run_queues+0x420/0xc64 [ 268.441626][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 268.443064][ C0] arch_timer_handler_virt+0x74/0x88 [ 268.444483][ C0] handle_percpu_devid_irq+0x174/0x34c [ 268.445958][ C0] generic_handle_domain_irq+0xe0/0x140 [ 268.447554][ C0] gic_handle_irq+0x70/0x1e4 [ 268.448828][ C0] do_interrupt_handler+0xe0/0x138 [ 268.450248][ C0] el1_interrupt+0x34/0x54 [ 268.451471][ C0] el1h_64_irq_handler+0x18/0x24 [ 268.452917][ C0] el1h_64_irq+0x64/0x68 [ 268.454073][ C0] __sanitizer_cov_trace_pc+0x88/0x94 [ 268.455584][ C0] cake_enqueue+0x333c/0x6880 [ 268.456943][ C0] sfb_enqueue+0x794/0x1294 [ 268.458158][ C0] dev_qdisc_enqueue+0x5c/0x38c [ 268.459473][ C0] __dev_queue_xmit+0xad0/0x309c [ 268.460839][ C0] tipc_l2_send_msg+0x29c/0x35c [ 268.462207][ C0] tipc_bearer_xmit_skb+0x244/0x384 [ 268.463719][ C0] tipc_disc_timeout+0x4c8/0x608 [ 268.465034][ C0] call_timer_fn+0x1b8/0x964 [ 268.466398][ C0] __run_timers+0x460/0x6bc [ 268.467694][ C0] run_timer_softirq+0x7c/0x114 [ 268.469078][ C0] handle_softirqs+0x318/0xc6c [ 268.470348][ C0] __do_softirq+0x14/0x20 [ 268.471566][ C0] ____do_softirq+0x14/0x20 [ 268.472812][ C0] call_on_irq_stack+0x24/0x30 [ 268.474220][ C0] do_softirq_own_stack+0x20/0x2c [ 268.475715][ C0] __irq_exit_rcu+0x23c/0x43c [ 268.477025][ C0] irq_exit_rcu+0x14/0x84 [ 268.478236][ C0] el1_interrupt+0x38/0x54 [ 268.479474][ C0] el1h_64_irq_handler+0x18/0x24 [ 268.480869][ C0] el1h_64_irq+0x64/0x68 [ 268.482010][ C0] __sanitizer_cov_trace_pc+0x14/0x94 [ 268.483474][ C0] __delay+0x1c8/0x280 [ 268.484612][ C0] __udelay+0x60/0x70 [ 268.485683][ C0] try_check_zero+0x388/0x3b8 [ 268.486973][ C0] process_srcu+0x16c/0xffc [ 268.488181][ C0] process_one_work+0x7f4/0x13a8 [ 268.489519][ C0] worker_thread+0x8c8/0xfbc [ 268.490765][ C0] kthread+0x250/0x2d8 [ 268.491888][ C0] ret_from_fork+0x10/0x20 [ 268.914764][ C0] Rebooting in 86400 seconds..