last executing test programs: 5.657959505s ago: executing program 4 (id=718): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0x29, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000100)=r2, 0x8) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000100)=r0, 0x4) 5.599084306s ago: executing program 4 (id=720): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) 5.254991258s ago: executing program 4 (id=735): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x7fe2, 0x3}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x6, 0x9, 0x0, r1, 0x100}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2688c10d0000a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 4.91459822s ago: executing program 4 (id=727): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.562809522s ago: executing program 4 (id=736): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000480), 0x4) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903", 0x11}, {0x0}, {&(0x7f0000000440)="e166186d6cb0b5b1d6ffadb2be01b82402ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d625837900000000004616524a332c303f32cfdc3c8086d46d48a1d79cd875a9d2c0f1982c81243d593f36f955810ceb1cde2bb7134344012556b0fbf32121c68ce706a33636b35a089b17c0a6f5cc5a3115ce1f894acb323dd0554accb100f9fb14e0b522b876568345fdb0c5b85f3fd67be37ce83f399f1571f2b8f302ff583c7343e5b3d2b3342d3bf6e464e681515ca725628195ab28a7", 0xc2}], 0x3}, 0x0) 4.034682385s ago: executing program 4 (id=741): perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x5, 0x8, 0x1, 0x0, 0xb, 0x802, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x5, 0xe}, 0x400, 0x8, 0x1ff, 0x1, 0x6f6, 0x7, 0x80, 0x0, 0x1a2, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0xfffffffffffffea7}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 3.200074691s ago: executing program 2 (id=745): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='!--}\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.704461853s ago: executing program 1 (id=748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) 2.584093584s ago: executing program 2 (id=749): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.571993844s ago: executing program 3 (id=750): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe, @perf_config_ext={0x7fffffff, 0x7f}, 0x1148c6, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="ff00"}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x100004, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000000, 0xfffffffe}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.340855135s ago: executing program 2 (id=751): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)="914781cba1", 0xffe3}], 0x2}, 0x48800) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4000002) 1.384839771s ago: executing program 2 (id=755): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x0, 0x0}, 0x10) 1.384674821s ago: executing program 3 (id=756): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc70}, @alu={0x7, 0x1, 0xb, 0x8, 0x5, 0xffffffffffffffff, 0xffffffffffffffff}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 1.337537232s ago: executing program 1 (id=757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) 1.104526333s ago: executing program 0 (id=758): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x38, 0x1}, 0x28) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000008c0), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="deaa00000000000071101000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 994.415144ms ago: executing program 0 (id=760): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x6, 0x5004, 0x7, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f5c4e59f8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 927.695414ms ago: executing program 1 (id=761): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x9000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000c63f1de100000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xa4}, {0x6}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) 918.988304ms ago: executing program 3 (id=762): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x58) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 872.886314ms ago: executing program 0 (id=763): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) close(r2) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) 750.946755ms ago: executing program 0 (id=764): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='!--}\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 691.212965ms ago: executing program 1 (id=765): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 423.855617ms ago: executing program 0 (id=766): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)="914781cba1", 0xffe3}], 0x2}, 0x48800) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4000002) 423.651237ms ago: executing program 3 (id=767): r0 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$inet(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x2f8}, 0x20000081) close(r3) 268.807588ms ago: executing program 2 (id=768): socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, 0x0, 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f91c24fc60", 0x14}], 0x1}, 0x0) 213.027098ms ago: executing program 0 (id=769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) 212.800858ms ago: executing program 1 (id=770): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) 77.747259ms ago: executing program 2 (id=771): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe, @perf_config_ext={0x7fffffff, 0x7f}, 0x1148c6, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="ff00"}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x100004, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000000, 0xfffffffe}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 77.557989ms ago: executing program 3 (id=772): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6d01, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x8810) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) 30.080889ms ago: executing program 1 (id=773): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5) openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) 0s ago: executing program 3 (id=774): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x6, 0x5004, 0x7, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f5c4e59f8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.84' (ED25519) to the list of known hosts. syzkaller login: [ 55.473879][ T4174] cgroup: Unknown subsys name 'net' [ 55.616914][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.089651][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.371939][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 58.503155][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 58.527602][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 58.556750][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.564712][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.573294][ T4184] device bridge_slave_0 entered promiscuous mode [ 58.602831][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.610037][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.618837][ T4184] device bridge_slave_1 entered promiscuous mode [ 58.677198][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 58.698686][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.736482][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.765483][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.772829][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.781394][ T4191] device bridge_slave_0 entered promiscuous mode [ 58.801206][ T4184] team0: Port device team_slave_0 added [ 58.815895][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.823254][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.831765][ T4191] device bridge_slave_1 entered promiscuous mode [ 58.839819][ T4184] team0: Port device team_slave_1 added [ 58.881537][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 58.891426][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.898494][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.906559][ T4194] device bridge_slave_0 entered promiscuous mode [ 58.935393][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.942762][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.950753][ T4194] device bridge_slave_1 entered promiscuous mode [ 58.962224][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.972683][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.979635][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.005865][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.019172][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.026233][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.052302][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.086512][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.144437][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.153735][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.161048][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.168856][ T4185] device bridge_slave_0 entered promiscuous mode [ 59.189016][ T4184] device hsr_slave_0 entered promiscuous mode [ 59.196268][ T4184] device hsr_slave_1 entered promiscuous mode [ 59.204476][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.213917][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.221560][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.229472][ T4185] device bridge_slave_1 entered promiscuous mode [ 59.239087][ T4191] team0: Port device team_slave_0 added [ 59.271326][ T4191] team0: Port device team_slave_1 added [ 59.311690][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.333141][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.340394][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.348171][ T4186] device bridge_slave_0 entered promiscuous mode [ 59.357743][ T4194] team0: Port device team_slave_0 added [ 59.373179][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.392874][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.400059][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.408346][ T4186] device bridge_slave_1 entered promiscuous mode [ 59.417089][ T4194] team0: Port device team_slave_1 added [ 59.423641][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.431125][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.457308][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.504963][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.512185][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.538124][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.551955][ T4185] team0: Port device team_slave_0 added [ 59.580677][ T4185] team0: Port device team_slave_1 added [ 59.586857][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.594019][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.620111][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.635387][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.642410][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.668489][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.681109][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.707516][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.757797][ T4186] team0: Port device team_slave_0 added [ 59.764482][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.771545][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.797825][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.826687][ T4191] device hsr_slave_0 entered promiscuous mode [ 59.833658][ T4191] device hsr_slave_1 entered promiscuous mode [ 59.840231][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.848180][ T4191] Cannot create hsr debugfs directory [ 59.855485][ T4186] team0: Port device team_slave_1 added [ 59.861725][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.868983][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.895596][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.927487][ T4194] device hsr_slave_0 entered promiscuous mode [ 59.934957][ T4194] device hsr_slave_1 entered promiscuous mode [ 59.941624][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.949198][ T4194] Cannot create hsr debugfs directory [ 59.990617][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.997666][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.023701][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.059985][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.067366][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.094427][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.111123][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 60.117807][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 60.118990][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 60.157644][ T4185] device hsr_slave_0 entered promiscuous mode [ 60.164848][ T4185] device hsr_slave_1 entered promiscuous mode [ 60.171673][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.179240][ T4185] Cannot create hsr debugfs directory [ 60.190463][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 60.197696][ T1111] Bluetooth: hci2: command 0x0409 tx timeout [ 60.238579][ T4186] device hsr_slave_0 entered promiscuous mode [ 60.245399][ T4186] device hsr_slave_1 entered promiscuous mode [ 60.252286][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.259846][ T4186] Cannot create hsr debugfs directory [ 60.377536][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.405468][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.427596][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.439958][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.541814][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.553299][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.576446][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.586886][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.641004][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.669467][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.692229][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.709833][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.742887][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.757144][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.773856][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.782959][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.792257][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.816037][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.831053][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.840241][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.859597][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.877966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.887526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.898399][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.905725][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.915073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.927218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.935950][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.943042][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.951517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.960161][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.001134][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.013613][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.023873][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.033610][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.043374][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.052143][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.062229][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.075935][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.084656][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.093716][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.103559][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.112210][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.124898][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.144459][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.157409][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.206295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.216390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.231676][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.278018][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.298168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.308022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.320904][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.328084][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.336193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.355502][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.385654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.398982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.408361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.417753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.426889][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.434015][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.442879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.451913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.464434][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.481686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.492076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.502286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.523729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.534706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.543632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.558486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.567287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.576160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.584710][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.591829][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.600053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.615615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.623339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.635927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.645382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.654446][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.661581][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.669889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.693373][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.701390][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.713711][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.732743][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.740689][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.748544][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.759139][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.767846][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.782061][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.791033][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.812936][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.822681][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.834198][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.841342][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.853886][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.864898][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.875939][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.889641][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.898702][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.905792][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.913615][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.922755][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.931465][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.940132][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.948465][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.985785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.997252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.009754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.024809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.037025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.045899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.054756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.066995][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.081873][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.092287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.103121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.134728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.148689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.165593][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.172773][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.187547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.196928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.205389][ T4266] Bluetooth: hci3: command 0x041b tx timeout [ 62.211689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.211767][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 62.226420][ T4266] Bluetooth: hci0: command 0x041b tx timeout [ 62.227431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.241917][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.248984][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.256926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.266963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.275581][ T4256] Bluetooth: hci2: command 0x041b tx timeout [ 62.276251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.287456][ T4256] Bluetooth: hci4: command 0x041b tx timeout [ 62.318273][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.334076][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.345482][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.366146][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.376426][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.386861][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.396707][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.406489][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.415365][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.424286][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.434494][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.443132][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.452492][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.463210][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.472249][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.481070][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.489509][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.498029][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.509281][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.517513][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.525815][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.536185][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.544596][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.553357][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.570250][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.579300][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.630515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.638019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.646969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.661077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.673510][ T4184] device veth0_vlan entered promiscuous mode [ 62.686193][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.696580][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.713966][ T4191] device veth0_vlan entered promiscuous mode [ 62.727453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.737507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.759122][ T4184] device veth1_vlan entered promiscuous mode [ 62.787202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.796003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.804930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.814488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.846509][ T4191] device veth1_vlan entered promiscuous mode [ 62.868527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.883056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.891054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.912463][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.922718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.931568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.946391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.959854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.989976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.008289][ T4191] device veth0_macvtap entered promiscuous mode [ 63.029197][ T4185] device veth0_vlan entered promiscuous mode [ 63.044817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.052763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.061295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.069748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.079045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.089275][ T4184] device veth0_macvtap entered promiscuous mode [ 63.112007][ T4191] device veth1_macvtap entered promiscuous mode [ 63.119061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.127634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.136132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.144756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.162634][ T4184] device veth1_macvtap entered promiscuous mode [ 63.173678][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.193855][ T4185] device veth1_vlan entered promiscuous mode [ 63.209328][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.222003][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.231673][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.252758][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.270943][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.279305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.290235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.298469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.307385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.318390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.327405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.336379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.345544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.364089][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.374594][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.383658][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.393523][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.415791][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.428610][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.439997][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.475776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.484513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.493498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.504564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.513933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.522597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.533350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.544641][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.554708][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.563690][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.572995][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.584065][ T4185] device veth0_macvtap entered promiscuous mode [ 63.596027][ T4185] device veth1_macvtap entered promiscuous mode [ 63.609324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.617936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.626226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.644097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.652606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.660429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.675764][ T4194] device veth0_vlan entered promiscuous mode [ 63.692091][ T3061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.702065][ T3061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.737086][ T3061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.745925][ T3061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.777769][ T4186] device veth0_vlan entered promiscuous mode [ 63.801897][ T3061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.809759][ T3061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.818713][ T4194] device veth1_vlan entered promiscuous mode [ 63.834395][ T4186] device veth1_vlan entered promiscuous mode [ 63.875729][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.890598][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.901429][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.912668][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.924535][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.942929][ T3061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.951250][ T3061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.958095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.967671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.976656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.984618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.994355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.003382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.012013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.026945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.035714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.046375][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.057532][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.068042][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.078788][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.090115][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.106636][ T4194] device veth0_macvtap entered promiscuous mode [ 64.123024][ T3061] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.131534][ T3061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.140080][ T3061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.151219][ T4186] device veth0_macvtap entered promiscuous mode [ 64.161477][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.170189][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.180152][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.189242][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.208737][ T4194] device veth1_macvtap entered promiscuous mode [ 64.219428][ T4186] device veth1_macvtap entered promiscuous mode [ 64.243274][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.251535][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.271074][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 64.271156][ T4243] Bluetooth: hci0: command 0x040f tx timeout [ 64.277132][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 64.297049][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.312311][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.322357][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.333053][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.343534][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.354730][ T1111] Bluetooth: hci4: command 0x040f tx timeout [ 64.360242][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.372911][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.376930][ T1111] Bluetooth: hci2: command 0x040f tx timeout [ 64.388354][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.396660][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.407163][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.415519][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.423461][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.432409][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.463566][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.474557][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.486043][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.498676][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.508756][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.520426][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.532908][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.551377][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.562759][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.573936][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.584631][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.595330][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.606203][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.616055][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.626725][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.638122][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.647300][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.656197][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.666676][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.681856][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.691923][ T914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.693745][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.710773][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.719584][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.720890][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.731239][ T914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.743730][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.756163][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.769922][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.782062][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.795272][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.807453][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.817575][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.828291][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.838890][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.849582][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.862927][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.873082][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.881421][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.889216][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.898044][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.935838][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.945377][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.954297][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.963225][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.054172][ T1262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.097600][ T1262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.149849][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.202881][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.240612][ T1262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.255155][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.260550][ T1262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.278552][ T914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.283792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.303216][ T914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.311883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.325655][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.374028][ T914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.431854][ T914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.452205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.462832][ T4299] sock: sock_timestamping_bind_phc: sock not bind to device [ 65.515440][ T914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.523899][ T4303] netlink: 'syz.3.6': attribute type 33 has an invalid length. [ 65.525254][ T4303] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6'. [ 65.545921][ T914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.563026][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.922689][ C0] hrtimer: interrupt took 71981 ns [ 66.073281][ T4317] device syzkaller0 entered promiscuous mode [ 66.361501][ T4266] Bluetooth: hci3: command 0x0419 tx timeout [ 66.367651][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 66.390390][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 66.442284][ T4266] Bluetooth: hci2: command 0x0419 tx timeout [ 66.448352][ T4266] Bluetooth: hci4: command 0x0419 tx timeout [ 69.206527][ T4342] sock: sock_timestamping_bind_phc: sock not bind to device [ 69.243834][ T4345] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.28'. [ 69.415774][ T4350] netlink: 'syz.4.20': attribute type 33 has an invalid length. [ 69.457562][ T4350] netlink: 152 bytes leftover after parsing attributes in process `syz.4.20'. [ 71.245103][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.252121][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.377605][ T4387] netlink: 'syz.0.35': attribute type 33 has an invalid length. [ 73.400542][ T4387] netlink: 152 bytes leftover after parsing attributes in process `syz.0.35'. [ 73.481064][ T4391] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.36'. [ 74.972551][ T4423] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.54'. [ 75.455026][ T4433] netlink: 'syz.1.66': attribute type 33 has an invalid length. [ 75.472760][ T4433] netlink: 152 bytes leftover after parsing attributes in process `syz.1.66'. [ 75.648657][ T4443] netlink: 'syz.1.71': attribute type 33 has an invalid length. [ 75.670611][ T4443] netlink: 152 bytes leftover after parsing attributes in process `syz.1.71'. [ 79.294263][ T4480] netlink: 'syz.2.76': attribute type 2 has an invalid length. [ 79.368776][ T4480] netlink: 'syz.2.76': attribute type 8 has an invalid length. [ 79.428879][ T4480] netlink: 132 bytes leftover after parsing attributes in process `syz.2.76'. [ 79.468880][ T4485] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.80'. [ 79.684513][ T4487] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.83'. [ 79.705004][ T4487] openvswitch: netlink: IP tunnel dst address not specified [ 79.949949][ T4505] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.89'. [ 80.001502][ T4508] netlink: 'syz.3.90': attribute type 33 has an invalid length. [ 80.020539][ T4508] netlink: 152 bytes leftover after parsing attributes in process `syz.3.90'. [ 80.053236][ T4510] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.91'. [ 80.265472][ T4518] netlink: 'syz.3.95': attribute type 2 has an invalid length. [ 80.332131][ T4518] netlink: 'syz.3.95': attribute type 8 has an invalid length. [ 80.339959][ T4518] netlink: 132 bytes leftover after parsing attributes in process `syz.3.95'. [ 80.454674][ T4523] netlink: 'syz.1.106': attribute type 33 has an invalid length. [ 80.469132][ T4525] netlink: 'syz.4.96': attribute type 9 has an invalid length. [ 80.493118][ T4523] netlink: 152 bytes leftover after parsing attributes in process `syz.1.106'. [ 80.508789][ T4525] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.96'. [ 80.781754][ T4539] netlink: 'syz.0.114': attribute type 33 has an invalid length. [ 80.821897][ T4539] netlink: 152 bytes leftover after parsing attributes in process `syz.0.114'. [ 81.094786][ T4552] netlink: 'syz.0.119': attribute type 33 has an invalid length. [ 81.472748][ T1332] cfg80211: failed to load regulatory.db [ 81.655888][ T4575] netlink: 'syz.3.117': attribute type 9 has an invalid length. [ 82.049679][ T4587] openvswitch: netlink: IP tunnel dst address not specified [ 83.478031][ T4629] openvswitch: netlink: IP tunnel dst address not specified [ 85.082775][ T4672] __nla_validate_parse: 13 callbacks suppressed [ 85.082827][ T4672] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.163'. [ 85.101071][ T4668] syz.2.164 (4668) used greatest stack depth: 20840 bytes left [ 85.114439][ T4674] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.165'. [ 85.143154][ T4672] openvswitch: netlink: IP tunnel dst address not specified [ 85.172860][ T4678] netlink: 132 bytes leftover after parsing attributes in process `syz.4.168'. [ 85.269507][ T4680] netlink: 72 bytes leftover after parsing attributes in process `syz.2.167'. [ 85.366942][ T4686] sctp: [Deprecated]: syz.3.169 (pid 4686) Use of struct sctp_assoc_value in delayed_ack socket option. [ 85.366942][ T4686] Use struct sctp_sack_info instead [ 85.539994][ T4693] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.173'. [ 85.648460][ T4695] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.184'. [ 85.964746][ T4710] netlink: 207508 bytes leftover after parsing attributes in process `syz.4.180'. [ 85.984717][ T4714] netlink: 132 bytes leftover after parsing attributes in process `syz.1.182'. [ 86.222798][ T4723] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.185'. [ 86.294097][ T4730] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.189'. [ 86.306718][ T4728] sock: sock_timestamping_bind_phc: sock not bind to device [ 86.570173][ T4746] syz.2.206 uses obsolete (PF_INET,SOCK_PACKET) [ 87.478621][ T4761] sctp: [Deprecated]: syz.4.200 (pid 4761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.478621][ T4761] Use struct sctp_sack_info instead [ 87.886971][ T4780] netlink: 'syz.2.212': attribute type 1 has an invalid length. [ 90.148338][ T4854] __nla_validate_parse: 8 callbacks suppressed [ 90.148377][ T4854] netlink: 132 bytes leftover after parsing attributes in process `syz.1.242'. [ 91.009661][ T4884] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.256'. [ 91.450764][ T4894] device syzkaller0 entered promiscuous mode [ 91.782527][ T4914] delete_channel: no stack [ 92.062457][ T4926] device syzkaller0 entered promiscuous mode [ 92.464332][ T4936] device syzkaller0 entered promiscuous mode [ 92.745870][ T4944] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 92.752035][ T4944] syzkaller0: Linktype set failed because interface is up [ 93.499191][ T4972] device syzkaller0 entered promiscuous mode [ 94.075209][ T5000] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 94.092681][ T5000] syzkaller0: Linktype set failed because interface is up [ 94.105652][ T4998] netlink: 132 bytes leftover after parsing attributes in process `syz.1.316'. [ 94.121010][ T4304] syzkaller0: tun_net_xmit 76 [ 94.126314][ T4304] syzkaller0: tun_net_xmit 48 [ 94.163848][ T4297] syzkaller0: tun_net_xmit 76 [ 94.842663][ T5014] netlink: 'syz.2.311': attribute type 10 has an invalid length. [ 95.002183][ T5014] team0: Device veth1_vlan failed to register rx_handler [ 95.104198][ T5018] netlink: 184 bytes leftover after parsing attributes in process `syz.4.314'. [ 95.158465][ T5014] syz.2.311 (5014) used greatest stack depth: 19560 bytes left [ 95.382201][ T5028] netlink: 184 bytes leftover after parsing attributes in process `syz.2.330'. [ 95.654865][ T5033] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 95.671225][ T5033] syzkaller0: Linktype set failed because interface is up [ 95.720300][ T4297] syzkaller0: tun_net_xmit 76 [ 95.726529][ T4297] syzkaller0: tun_net_xmit 48 [ 96.964182][ T5068] device syzkaller0 entered promiscuous mode [ 97.473820][ T5077] netlink: 'syz.4.337': attribute type 4 has an invalid length. [ 97.504537][ T5077] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.337'. [ 97.799497][ T5086] netlink: 2 bytes leftover after parsing attributes in process `syz.4.342'. [ 97.851598][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.876760][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.905638][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.917450][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.938592][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.949903][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.983939][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.011117][ T5088] netlink: 'syz.2.354': attribute type 4 has an invalid length. [ 98.019280][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.030343][ T5088] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.354'. [ 98.045026][ T5086] device batadv_slave_1 entered promiscuous mode [ 98.061682][ T5090] netlink: 184 bytes leftover after parsing attributes in process `syz.3.343'. [ 98.575892][ T5104] device syzkaller0 entered promiscuous mode [ 99.200123][ T5127] netlink: 'syz.1.356': attribute type 4 has an invalid length. [ 99.232586][ T5127] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.356'. [ 99.538873][ T5134] netlink: 'syz.3.359': attribute type 4 has an invalid length. [ 99.550639][ T5134] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.359'. [ 100.139166][ T5154] netlink: 'syz.3.370': attribute type 3 has an invalid length. [ 100.188423][ T5154] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.370'. [ 100.274659][ T5162] netlink: 'syz.4.371': attribute type 4 has an invalid length. [ 100.324999][ T5162] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.371'. [ 100.466281][ T5167] device syzkaller0 entered promiscuous mode [ 100.869456][ T5177] netlink: 'syz.0.375': attribute type 4 has an invalid length. [ 100.910752][ T5177] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.375'. [ 100.968723][ T5183] netlink: 'syz.3.390': attribute type 2 has an invalid length. [ 101.002893][ T5183] netlink: 'syz.3.390': attribute type 8 has an invalid length. [ 101.033086][ T5183] netlink: 132 bytes leftover after parsing attributes in process `syz.3.390'. [ 101.157667][ T5192] netlink: 'syz.2.393': attribute type 4 has an invalid length. [ 101.179916][ T5192] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.393'. [ 101.273535][ T5198] netlink: 72 bytes leftover after parsing attributes in process `syz.3.387'. [ 101.421087][ T5196] netlink: 'syz.4.384': attribute type 3 has an invalid length. [ 101.429209][ T5196] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.384'. [ 101.611771][ T5210] delete_channel: no stack [ 101.948093][ T5220] netlink: 'syz.1.398': attribute type 2 has an invalid length. [ 102.001279][ T5220] netlink: 'syz.1.398': attribute type 8 has an invalid length. [ 102.040687][ T5220] netlink: 132 bytes leftover after parsing attributes in process `syz.1.398'. [ 103.190842][ T5252] delete_channel: no stack [ 103.456509][ T5259] syz.0.409 (5259) used greatest stack depth: 16512 bytes left [ 103.910774][ T5285] delete_channel: no stack [ 104.403297][ T5310] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.433'. [ 104.488343][ T5312] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.434'. [ 105.202709][ T5330] delete_channel: no stack [ 105.487284][ T5346] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.449'. [ 105.540787][ T5349] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.451'. [ 106.908286][ T5389] __nla_validate_parse: 1 callbacks suppressed [ 106.908467][ T5389] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.470'. [ 107.985186][ T5430] netlink: 11834 bytes leftover after parsing attributes in process `syz.1.487'. [ 108.031151][ T5434] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.491'. [ 108.449594][ T5456] device syzkaller0 entered promiscuous mode [ 108.975108][ T5467] device syzkaller0 entered promiscuous mode [ 109.265481][ T5478] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.508'. [ 109.399921][ T5488] netlink: 14078 bytes leftover after parsing attributes in process `syz.2.507'. [ 109.731618][ T5497] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.516'. [ 109.775435][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 109.823141][ T5499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.004481][ T5513] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.533'. [ 110.723787][ T5542] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 110.781519][ T5542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.912707][ T5550] netlink: 'syz.4.538': attribute type 21 has an invalid length. [ 110.955143][ T5550] IPv6: NLM_F_CREATE should be specified when creating new route [ 111.889506][ T5596] netlink: 'syz.1.555': attribute type 21 has an invalid length. [ 111.941781][ T5596] IPv6: NLM_F_CREATE should be specified when creating new route [ 116.412971][ T5672] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.600'. [ 116.548451][ T5678] netlink: 'syz.4.592': attribute type 13 has an invalid length. [ 116.713311][ T5685] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 119.918997][ T5720] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.607'. [ 119.975828][ T5722] netlink: 'syz.1.610': attribute type 13 has an invalid length. [ 120.098104][ T5732] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 120.736586][ T5757] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 120.792963][ T5763] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.629'. [ 120.835299][ T5759] netlink: 'syz.3.632': attribute type 10 has an invalid length. [ 121.009809][ T5759] team0: Device hsr_slave_0 failed to register rx_handler [ 121.808449][ T5778] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 121.825164][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.972459][ T5787] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.640'. [ 122.209298][ T5794] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 122.304923][ T5802] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.648'. [ 122.838759][ T5815] netlink: 'syz.0.663': attribute type 10 has an invalid length. [ 123.035312][ T5815] team0: Device hsr_slave_0 failed to register rx_handler [ 123.138525][ T5824] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.657'. [ 123.164641][ T5828] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.658'. [ 123.349369][ T5834] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 123.382210][ T5836] netlink: 'syz.2.673': attribute type 10 has an invalid length. [ 123.448169][ T5836] team0: Device hsr_slave_0 failed to register rx_handler [ 123.522942][ T5840] netlink: 'syz.1.675': attribute type 9 has an invalid length. [ 123.537423][ T5840] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.675'. [ 124.054194][ T5861] netlink: 'syz.3.671': attribute type 1 has an invalid length. [ 124.101861][ T5861] netlink: 'syz.3.671': attribute type 4 has an invalid length. [ 124.140592][ T5861] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.671'. [ 124.154316][ T5865] netlink: 'syz.1.674': attribute type 6 has an invalid length. [ 124.760690][ T144] wlan1: Trigger new scan to find an IBSS to join [ 124.889584][ T5893] netlink: 'syz.0.686': attribute type 9 has an invalid length. [ 124.907728][ T5893] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.686'. [ 125.721472][ T144] wlan1: Trigger new scan to find an IBSS to join [ 127.115139][ T5911] netlink: 'syz.4.690': attribute type 1 has an invalid length. [ 127.124383][ T5911] netlink: 'syz.4.690': attribute type 4 has an invalid length. [ 127.139405][ T5911] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.690'. [ 127.809423][ T5916] netlink: 'syz.0.692': attribute type 6 has an invalid length. [ 127.892463][ T5921] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.694'. [ 129.227203][ T5961] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.715'. [ 129.376687][ T5967] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.720'. [ 129.722915][ T9] wlan1: Trigger new scan to find an IBSS to join [ 129.729557][ T914] wlan1: Trigger new scan to find an IBSS to join [ 129.771903][ T5978] netlink: 'syz.2.723': attribute type 25 has an invalid length. [ 129.779986][ T5978] netlink: 'syz.2.723': attribute type 28 has an invalid length. [ 130.065425][ T5984] cgroup: fork rejected by pids controller in /syz4 [ 130.198613][ T5991] netlink: 'syz.1.729': attribute type 3 has an invalid length. [ 130.227700][ T5991] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.729'. [ 130.513832][ T6002] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.734'. [ 130.678993][ T9] wlan1: Creating new IBSS network, BSSID 96:45:bf:d1:82:3b [ 130.718240][ T6004] netlink: 'syz.3.738': attribute type 25 has an invalid length. [ 130.756519][ T6004] netlink: 'syz.3.738': attribute type 28 has an invalid length. [ 130.770517][ T154] wlan1: Creating new IBSS network, BSSID 9e:15:d4:66:c1:bc [ 130.930732][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.071420][ T6012] netlink: set zone limit has 8 unknown bytes [ 131.193450][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.278706][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.439603][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.078411][ T6017] chnl_net:caif_netlink_parms(): no params data found [ 132.111214][ T6031] __sock_release: fasync list not empty! [ 132.165948][ T6029] netlink: 'syz.2.745': attribute type 3 has an invalid length. [ 132.190754][ T6029] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.745'. [ 133.009527][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.015947][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.095386][ T6060] Zero length message leads to an empty skb [ 133.395472][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.405819][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.417748][ T6017] device bridge_slave_0 entered promiscuous mode [ 133.483530][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.496361][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.508522][ T6017] device bridge_slave_1 entered promiscuous mode [ 133.550591][ T4297] Bluetooth: hci4: command 0x0409 tx timeout [ 133.712984][ T6068] device syzkaller0 entered promiscuous mode [ 133.732509][ T6070] netlink: 'syz.0.752': attribute type 25 has an invalid length. [ 133.741484][ T6070] netlink: 'syz.0.752': attribute type 28 has an invalid length. [ 133.769219][ T6017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.789489][ T6017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.977523][ T6017] team0: Port device team_slave_0 added [ 134.058638][ T6017] team0: Port device team_slave_1 added [ 134.203031][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.210040][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.233848][ T6089] netlink: 'syz.0.764': attribute type 3 has an invalid length. [ 134.256201][ T6089] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.764'. [ 134.336646][ T6017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.420591][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.427591][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.549223][ T6017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.568618][ T6099] __sock_release: fasync list not empty! [ 134.842830][ T6017] device hsr_slave_0 entered promiscuous mode [ 134.878547][ T6017] device hsr_slave_1 entered promiscuous mode [ 134.916907][ T6017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.944057][ T6017] Cannot create hsr debugfs directory [ 135.095222][ T154] device hsr_slave_0 left promiscuous mode [ 135.105012][ T154] device hsr_slave_1 left promiscuous mode [ 135.112922][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.121135][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.129338][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.136876][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.144872][ T154] device bridge_slave_1 left promiscuous mode [ 135.152723][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.167755][ T154] device bridge_slave_0 left promiscuous mode [ 135.175478][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.192066][ T154] device veth1_macvtap left promiscuous mode [ 135.198440][ T154] device veth0_macvtap left promiscuous mode [ 135.204661][ T154] device veth1_vlan left promiscuous mode [ 135.210949][ T154] device veth0_vlan left promiscuous mode [ 135.393726][ T154] team0 (unregistering): Port device team_slave_1 removed [ 135.408921][ T154] team0 (unregistering): Port device team_slave_0 removed [ 135.423108][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.437819][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.511909][ T154] bond0 (unregistering): Released all slaves [ 135.644069][ T4297] Bluetooth: hci4: command 0x041b tx timeout [ 135.818361][ T6017] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.841674][ T6017] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.851878][ T6017] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.861349][ T6017] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 135.949806][ T6017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.966347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.975267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.987128][ T6017] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.002287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.011757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.020278][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.027377][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.038769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.049646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.058601][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.065776][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.084764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.092969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.102838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.125453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.135854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.146675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.156569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.166857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.176445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.189520][ T6017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.201790][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.210860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.219498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.228519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.394189][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.403970][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.421204][ T6017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.615054][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.624938][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.650131][ T6017] device veth0_vlan entered promiscuous mode [ 136.661291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.669687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.678583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.688954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.709876][ T6017] device veth1_vlan entered promiscuous mode [ 136.734731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.743729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.757643][ T6017] device veth0_macvtap entered promiscuous mode [ 136.769827][ T6017] device veth1_macvtap entered promiscuous mode [ 136.796050][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.806758][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.818058][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.828843][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.841786][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.849209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.863437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.875198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.887919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.902425][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.920549][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.937354][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.948117][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.963748][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.975643][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.990475][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.002794][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.014210][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.025739][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.037807][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.053221][ T6017] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.062929][ T6017] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.072564][ T6017] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.081679][ T6017] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.176261][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.195930][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.215828][ T3061] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.236196][ T3061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.245173][ T3061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.255646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.721025][ T1332] Bluetooth: hci4: command 0x040f tx timeout [ 139.791383][ T4297] Bluetooth: hci4: command 0x0419 tx timeout [ 160.749632][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 160.851660][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 180.830958][ T4315] Bluetooth: hci1: command 0x0406 tx timeout [ 180.842686][ T4243] Bluetooth: hci2: command 0x0406 tx timeout [ 180.848764][ T4243] Bluetooth: hci3: command 0x0406 tx timeout [ 180.858549][ T4243] Bluetooth: hci0: command 0x0406 tx timeout [ 191.776993][ T3061] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 191.879302][ T3061] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 194.122475][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.128816][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 222.803930][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 222.804011][ T3061] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 253.831285][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 253.832037][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.562360][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.568946][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.630430][ T4243] Bluetooth: hci4: command 0x0406 tx timeout [ 284.755879][ T914] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 284.858226][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 300.990510][ T27] INFO: task udevd:4176 blocked for more than 143 seconds. [ 300.997765][ T27] Not tainted syzkaller #0 [ 301.005743][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 301.014564][ T27] task:udevd state:D stack:26496 pid: 4176 ppid: 3563 flags:0x00004002 [ 301.023940][ T27] Call Trace: [ 301.027255][ T27] [ 301.030332][ T27] __schedule+0x11bb/0x4390 [ 301.034893][ T27] ? release_firmware_map_entry+0x190/0x190 [ 301.041813][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 301.047989][ T27] ? lock_chain_count+0x20/0x20 [ 301.052922][ T27] schedule+0x11b/0x1e0 [ 301.057101][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 301.062101][ T27] ? __percpu_down_read+0x100/0x100 [ 301.067321][ T27] ? percpu_up_write+0x90/0x90 [ 301.072233][ T27] __percpu_down_read+0xc9/0x100 [ 301.077212][ T27] exit_signals+0x3e5/0x510 [ 301.081836][ T27] do_exit+0x256/0x20a0 [ 301.086019][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 301.091295][ T27] ? put_task_struct+0x80/0x80 [ 301.096143][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 301.102207][ T27] ? lock_chain_count+0x20/0x20 [ 301.107081][ T27] do_group_exit+0x12e/0x300 [ 301.111796][ T27] __x64_sys_exit_group+0x3b/0x40 [ 301.116841][ T27] do_syscall_64+0x4c/0xa0 [ 301.121386][ T27] ? clear_bhb_loop+0x30/0x80 [ 301.126084][ T27] ? clear_bhb_loop+0x30/0x80 [ 301.130840][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 301.136751][ T27] RIP: 0033:0x7fe5025a46c5 [ 301.141513][ T27] RSP: 002b:00007ffcb68a80c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 301.149950][ T27] RAX: ffffffffffffffda RBX: 000055d2dd7cf530 RCX: 00007fe5025a46c5 [ 301.158229][ T27] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 301.166561][ T27] RBP: 000055d2dd79d910 R08: 0000000000000000 R09: 0000000000000000 [ 301.175436][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.183694][ T27] R13: 00007ffcb68a8110 R14: 0000000000000000 R15: 0000000000000000 [ 301.191980][ T27] [ 301.195026][ T27] INFO: task udevd:4178 blocked for more than 143 seconds. [ 301.202583][ T27] Not tainted syzkaller #0 [ 301.207527][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 301.216262][ T27] task:udevd state:D stack:27040 pid: 4178 ppid: 3563 flags:0x00004002 [ 301.225542][ T27] Call Trace: [ 301.228835][ T27] [ 301.231832][ T27] __schedule+0x11bb/0x4390 [ 301.236377][ T27] ? release_firmware_map_entry+0x190/0x190 [ 301.242695][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 301.248712][ T27] ? lock_chain_count+0x20/0x20 [ 301.253791][ T27] schedule+0x11b/0x1e0 [ 301.257969][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 301.263235][ T27] ? __percpu_down_read+0x100/0x100 [ 301.268635][ T27] ? percpu_up_write+0x90/0x90 [ 301.274019][ T27] __percpu_down_read+0xc9/0x100 [ 301.278999][ T27] exit_signals+0x3e5/0x510 [ 301.284428][ T27] do_exit+0x256/0x20a0 [ 301.288615][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 301.293906][ T27] ? put_task_struct+0x80/0x80 [ 301.298703][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 301.305054][ T27] ? lock_chain_count+0x20/0x20 [ 301.309945][ T27] do_group_exit+0x12e/0x300 [ 301.314623][ T27] __x64_sys_exit_group+0x3b/0x40 [ 301.319667][ T27] do_syscall_64+0x4c/0xa0 [ 301.324125][ T27] ? clear_bhb_loop+0x30/0x80 [ 301.328821][ T27] ? clear_bhb_loop+0x30/0x80 [ 301.333568][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 301.339479][ T27] RIP: 0033:0x7fe5025a46c5 [ 301.343927][ T27] RSP: 002b:00007ffcb68a80c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 301.352782][ T27] RAX: ffffffffffffffda RBX: 000055d2dd7c1f80 RCX: 00007fe5025a46c5 [ 301.360830][ T27] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 301.368819][ T27] RBP: 000055d2dd79d910 R08: 0000000000000000 R09: 0000000000000000 [ 301.377094][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.385406][ T27] R13: 00007ffcb68a8110 R14: 0000000000000000 R15: 0000000000000000 [ 301.393739][ T27] [ 301.396798][ T27] INFO: task syz-executor:4179 blocked for more than 143 seconds. [ 301.404684][ T27] Not tainted syzkaller #0 [ 301.409629][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 301.418337][ T27] task:syz-executor state:D stack:26784 pid: 4179 ppid: 4174 flags:0x00004004 [ 301.427611][ T27] Call Trace: [ 301.430958][ T27] [ 301.433910][ T27] __schedule+0x11bb/0x4390 [ 301.438452][ T27] ? release_firmware_map_entry+0x190/0x190 [ 301.444403][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 301.450890][ T27] ? lock_chain_count+0x20/0x20 [ 301.455782][ T27] schedule+0x11b/0x1e0 [ 301.459958][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 301.464971][ T27] ? __percpu_down_read+0x100/0x100 [ 301.470274][ T27] ? percpu_up_write+0x90/0x90 [ 301.475189][ T27] __percpu_down_read+0xc9/0x100 [ 301.480130][ T27] exit_signals+0x3e5/0x510 [ 301.485147][ T27] do_exit+0x256/0x20a0 [ 301.489357][ T27] ? put_task_struct+0x80/0x80 [ 301.494531][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 301.500894][ T27] ? lock_chain_count+0x20/0x20 [ 301.505787][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 301.511946][ T27] do_group_exit+0x12e/0x300 [ 301.516580][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 301.522220][ T27] get_signal+0x6ca/0x12c0 [ 301.526683][ T27] arch_do_signal_or_restart+0xc1/0x1300 [ 301.532934][ T27] ? kernel_waitid+0x370/0x370 [ 301.537864][ T27] ? get_sigframe_size+0x10/0x10 [ 301.543054][ T27] ? __x64_sys_wait4+0x181/0x1e0 [ 301.548134][ T27] ? exit_to_user_mode_loop+0x3b/0x130 [ 301.554310][ T27] exit_to_user_mode_loop+0x9e/0x130 [ 301.559645][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 301.565396][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 301.571203][ T27] do_syscall_64+0x58/0xa0 [ 301.575654][ T27] ? clear_bhb_loop+0x30/0x80 [ 301.580381][ T27] ? clear_bhb_loop+0x30/0x80 [ 301.585080][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 301.591705][ T27] RIP: 0033:0x7ff4e70d80d3 [ 301.596148][ T27] RSP: 002b:00007ffd03e51168 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 301.604611][ T27] RAX: fffffffffffffe00 RBX: 000000000000105a RCX: 00007ff4e70d80d3 [ 301.612654][ T27] RDX: 0000000040000000 RSI: 00007ffd03e5117c RDI: 00000000ffffffff [ 301.620700][ T27] RBP: 00007ffd03e5117c R08: 0000000000000000 R09: 0000000000000000 [ 301.628689][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 301.638114][ T27] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 301.646487][ T27] [ 301.649562][ T27] INFO: task udevd:4202 blocked for more than 144 seconds. [ 301.657130][ T27] Not tainted syzkaller #0 [ 301.662245][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 301.670962][ T27] task:udevd state:D stack:26272 pid: 4202 ppid: 3563 flags:0x00004002 [ 301.680250][ T27] Call Trace: [ 301.683546][ T27] [ 301.686478][ T27] __schedule+0x11bb/0x4390 [ 301.691061][ T27] ? release_firmware_map_entry+0x190/0x190 [ 301.696978][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 301.703251][ T27] ? lock_chain_count+0x20/0x20 [ 301.708152][ T27] schedule+0x11b/0x1e0 [ 301.713401][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 301.718379][ T27] ? __percpu_down_read+0x100/0x100 [ 301.724477][ T27] ? percpu_up_write+0x90/0x90 [ 301.729281][ T27] __percpu_down_read+0xc9/0x100 [ 301.734281][ T27] exit_signals+0x3e5/0x510 [ 301.738803][ T27] do_exit+0x256/0x20a0 [ 301.743175][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 301.748213][ T27] ? put_task_struct+0x80/0x80 [ 301.753035][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 301.759274][ T27] ? lock_chain_count+0x20/0x20 [ 301.764212][ T27] do_group_exit+0x12e/0x300 [ 301.768832][ T27] __x64_sys_exit_group+0x3b/0x40 [ 301.773927][ T27] do_syscall_64+0x4c/0xa0 [ 301.778356][ T27] ? clear_bhb_loop+0x30/0x80 [ 301.783100][ T27] ? clear_bhb_loop+0x30/0x80 [ 301.787797][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 301.794060][ T27] RIP: 0033:0x7fe5025a46c5 [ 301.798510][ T27] RSP: 002b:00007ffcb68a80c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 301.806964][ T27] RAX: ffffffffffffffda RBX: 000055d2dd7afb20 RCX: 00007fe5025a46c5 [ 301.815435][ T27] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 301.823451][ T27] RBP: 000055d2dd79d910 R08: 0000000000000000 R09: 0000000000000000 [ 301.831491][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.839481][ T27] R13: 00007ffcb68a8110 R14: 0000000000000000 R15: 0000000000000000 [ 301.847511][ T27] [ 301.850633][ T27] INFO: task udevd:4840 blocked for more than 144 seconds. [ 301.858075][ T27] Not tainted syzkaller #0 [ 301.863103][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 301.873764][ T27] task:udevd state:D stack:25856 pid: 4840 ppid: 3563 flags:0x00004002 [ 301.883387][ T27] Call Trace: [ 301.886697][ T27] [ 301.889627][ T27] __schedule+0x11bb/0x4390 [ 301.894254][ T27] ? release_firmware_map_entry+0x190/0x190 [ 301.900222][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 301.906230][ T27] ? lock_chain_count+0x20/0x20 [ 301.911167][ T27] schedule+0x11b/0x1e0 [ 301.915358][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 301.921036][ T27] ? __percpu_down_read+0x100/0x100 [ 301.926263][ T27] ? percpu_up_write+0x90/0x90 [ 301.931102][ T27] __percpu_down_read+0xc9/0x100 [ 301.936077][ T27] exit_signals+0x3e5/0x510 [ 301.940644][ T27] do_exit+0x256/0x20a0 [ 301.944828][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 301.949872][ T27] ? put_task_struct+0x80/0x80 [ 301.954815][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 301.961155][ T27] ? lock_chain_count+0x20/0x20 [ 301.966044][ T27] do_group_exit+0x12e/0x300 [ 301.970715][ T27] __x64_sys_exit_group+0x3b/0x40 [ 301.975795][ T27] do_syscall_64+0x4c/0xa0 [ 301.980271][ T27] ? clear_bhb_loop+0x30/0x80 [ 301.984970][ T27] ? clear_bhb_loop+0x30/0x80 [ 301.989670][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 301.995628][ T27] RIP: 0033:0x7fe5025a46c5 [ 302.000117][ T27] RSP: 002b:00007ffcb68a80c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 302.008589][ T27] RAX: ffffffffffffffda RBX: 000055d2dd7a4de0 RCX: 00007fe5025a46c5 [ 302.016624][ T27] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 302.024634][ T27] RBP: 000055d2dd79d910 R08: 0000000000000000 R09: 0000000000000000 [ 302.033446][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.041527][ T27] R13: 00007ffcb68a8110 R14: 0000000000000000 R15: 0000000000000000 [ 302.049523][ T27] [ 302.052608][ T27] INFO: task syz-executor:6017 blocked for more than 144 seconds. [ 302.060663][ T27] Not tainted syzkaller #0 [ 302.065814][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 302.074548][ T27] task:syz-executor state:D stack:20264 pid: 6017 ppid: 6016 flags:0x00004000 [ 302.083895][ T27] Call Trace: [ 302.087176][ T27] [ 302.090107][ T27] __schedule+0x11bb/0x4390 [ 302.094727][ T27] ? release_firmware_map_entry+0x190/0x190 [ 302.100704][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 302.106835][ T27] ? lock_chain_count+0x20/0x20 [ 302.111772][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 302.116821][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 302.122275][ T27] schedule+0x11b/0x1e0 [ 302.126539][ T27] rwsem_down_write_slowpath+0xc46/0x11f0 [ 302.133938][ T27] ? rwsem_write_trylock+0x1b0/0x1b0 [ 302.139263][ T27] ? rwsem_write_trylock+0x12f/0x1b0 [ 302.144893][ T27] ? __rwlock_init+0x140/0x140 [ 302.149705][ T27] mpol_rebind_mm+0x33/0x2c0 [ 302.154730][ T27] ? _raw_spin_unlock+0x24/0x40 [ 302.159614][ T27] cpuset_attach+0x330/0x5f0 [ 302.164907][ T27] ? cpuset_cancel_attach+0x290/0x290 [ 302.170580][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 302.175806][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 302.181328][ T27] cgroup_migrate_execute+0x7eb/0x1010 [ 302.186814][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 302.192381][ T27] ? _raw_spin_unlock_irq+0x2a/0x40 [ 302.197604][ T27] cgroup_attach_task+0x562/0x7e0 [ 302.202715][ T27] ? cgroup_migrate_execute+0x1010/0x1010 [ 302.208465][ T27] ? get_task_cred+0x2b6/0x330 [ 302.213287][ T27] __cgroup1_procs_write+0x2e5/0x3f0 [ 302.218734][ T27] ? cgroup_pidlist_destroy_work_fn+0x210/0x210 [ 302.225033][ T27] ? cgroup_pidlist_stop+0xf0/0xf0 [ 302.230218][ T27] cgroup_file_write+0x2f7/0x630 [ 302.235291][ T27] ? read_lock_is_recursive+0x10/0x10 [ 302.240743][ T27] ? cgroup_seqfile_stop+0xd0/0xd0 [ 302.245893][ T27] ? cgroup_seqfile_stop+0xd0/0xd0 [ 302.251936][ T27] kernfs_fop_write_iter+0x379/0x4c0 [ 302.257249][ T27] vfs_write+0x712/0xd00 [ 302.261571][ T27] ? file_end_write+0x250/0x250 [ 302.266762][ T27] ? __context_tracking_exit+0x4c/0x80 [ 302.272334][ T27] ? __fdget_pos+0x2c6/0x370 [ 302.276953][ T27] ksys_write+0x14d/0x250 [ 302.281358][ T27] ? __ia32_sys_read+0x80/0x80 [ 302.286138][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 302.291500][ T27] do_syscall_64+0x4c/0xa0 [ 302.295934][ T27] ? clear_bhb_loop+0x30/0x80 [ 302.300676][ T27] ? clear_bhb_loop+0x30/0x80 [ 302.305371][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.311319][ T27] RIP: 0033:0x7f659695ca7f [ 302.315749][ T27] RSP: 002b:00007ffd79b09ae0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 302.324208][ T27] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f659695ca7f [ 302.332237][ T27] RDX: 0000000000000001 RSI: 00007ffd79b09b30 RDI: 0000000000000003 [ 302.340275][ T27] RBP: 00007ffd79b0a0a0 R08: 0000000000000000 R09: 00007ffd79b09937 [ 302.348260][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 302.356376][ T27] R13: 00007ffd79b09b30 R14: 00007ffd79b0a060 R15: 00007ffd79b0a0a0 [ 302.364839][ T27] [ 302.367894][ T27] INFO: task syz.0.769:6112 blocked for more than 144 seconds. [ 302.375804][ T27] Not tainted syzkaller #0 [ 302.380805][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 302.389492][ T27] task:syz.0.769 state:D stack:25344 pid: 6112 ppid: 4186 flags:0x00004004 [ 302.398746][ T27] Call Trace: [ 302.402085][ T27] [ 302.405032][ T27] __schedule+0x11bb/0x4390 [ 302.409555][ T27] ? release_firmware_map_entry+0x190/0x190 [ 302.415482][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 302.421550][ T27] ? lock_chain_count+0x20/0x20 [ 302.426434][ T27] schedule+0x11b/0x1e0 [ 302.430823][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 302.435938][ T27] ? __percpu_down_read+0x100/0x100 [ 302.441247][ T27] ? percpu_up_write+0x90/0x90 [ 302.446124][ T27] __percpu_down_read+0xc9/0x100 [ 302.451126][ T27] exit_signals+0x3e5/0x510 [ 302.455653][ T27] do_exit+0x256/0x20a0 [ 302.459847][ T27] ? put_task_struct+0x80/0x80 [ 302.464665][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 302.471715][ T27] ? lock_chain_count+0x20/0x20 [ 302.476607][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 302.481686][ T27] do_group_exit+0x12e/0x300 [ 302.486300][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 302.491556][ T27] get_signal+0x6ca/0x12c0 [ 302.496030][ T27] arch_do_signal_or_restart+0xc1/0x1300 [ 302.501818][ T27] ? vm_mmap_pgoff+0x15d/0x2b0 [ 302.506612][ T27] ? down_write_killable+0x80/0x90 [ 302.512086][ T27] ? vm_mmap_pgoff+0x17e/0x2b0 [ 302.516944][ T27] ? get_sigframe_size+0x10/0x10 [ 302.522632][ T27] ? __fget_files+0x40f/0x480 [ 302.527409][ T27] ? ksys_mmap_pgoff+0x54d/0x780 [ 302.532527][ T27] ? exit_to_user_mode_loop+0x3b/0x130 [ 302.538013][ T27] exit_to_user_mode_loop+0x9e/0x130 [ 302.543355][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 302.548921][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 302.554425][ T27] do_syscall_64+0x58/0xa0 [ 302.558853][ T27] ? clear_bhb_loop+0x30/0x80 [ 302.563563][ T27] ? clear_bhb_loop+0x30/0x80 [ 302.568263][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.574542][ T27] RIP: 0033:0x7ff4e70e2003 [ 302.578983][ T27] RSP: 002b:00007ffd03e50d48 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 302.587744][ T27] RAX: fffffffffffffffc RBX: 0000001b31f64000 RCX: 00007ff4e70e2003 [ 302.596080][ T27] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b31f64000 [ 302.604970][ T27] RBP: 0000000000600000 R08: 0000000000000004 R09: 0000000000040000 [ 302.613020][ T27] R10: 0000000000100001 R11: 0000000000000246 R12: 0000000000000099 [ 302.621038][ T27] R13: 00000000000927c0 R14: 0000000000020de6 R15: 00007ffd03e51030 [ 302.629056][ T27] [ 302.632144][ T27] [ 302.632144][ T27] Showing all locks held in the system: [ 302.639864][ T27] 1 lock held by khungtaskd/27: [ 302.644777][ T27] #0: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 302.654226][ T27] 2 locks held by getty/3951: [ 302.658916][ T27] #0: ffff88807f610098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 302.668702][ T27] #1: ffffc900026562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 302.679081][ T27] 1 lock held by udevd/4176: [ 302.683750][ T27] #0: ffffffff8c1421f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 302.694096][ T27] 1 lock held by udevd/4178: [ 302.698682][ T27] #0: ffffffff8c1421f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 302.708565][ T27] 1 lock held by syz-executor/4179: [ 302.713876][ T27] #0: ffffffff8c1421f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 302.723810][ T27] 2 locks held by syz-executor/4184: [ 302.729097][ T27] #0: ffffffff8c1a68f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x21f/0x1380 [ 302.737934][ T27] #1: ffff88807ae1ce28 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 302.746978][ T27] 2 locks held by syz-executor/4185: [ 302.752449][ T27] #0: ffffffff8c1a68f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x21f/0x1380 [ 302.761329][ T27] #1: ffff88807ae1c028 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 302.770383][ T27] 1 lock held by udevd/4202: [ 302.774998][ T27] #0: ffffffff8c1421f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 302.785382][ T27] 1 lock held by udevd/4479: [ 302.789999][ T27] #0: ffff88801eff8828 (&mm->mmap_lock){++++}-{3:3}, at: __vm_munmap+0xf3/0x230 [ 302.799244][ T27] 1 lock held by udevd/4840: [ 302.804543][ T27] #0: ffffffff8c1421f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 302.814472][ T27] 7 locks held by syz-executor/6017: [ 302.819768][ T27] #0: ffff888079b62460 (sb_writers#11){.+.+}-{0:0}, at: vfs_write+0x28a/0xd00 [ 302.828823][ T27] #1: ffff8880794de088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e5/0x4c0 [ 302.838640][ T27] #2: ffffffff8c142008 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_kn_lock_live+0xee/0x230 [ 302.848347][ T27] #3: ffffffff8bfbaed0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x17c/0x580 [ 302.858947][ T27] #4: ffffffff8c1421f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_procs_write_start+0x192/0x580 [ 302.870227][ T27] #5: ffffffff8c14fb48 (cpuset_mutex){+.+.}-{3:3}, at: cpuset_attach+0xac/0x5f0 [ 302.879404][ T27] #6: ffff88802b91ea28 (&mm->mmap_lock){++++}-{3:3}, at: mpol_rebind_mm+0x33/0x2c0 [ 302.889192][ T27] 1 lock held by cmp/6110: [ 302.893670][ T27] #0: ffff88802be74e28 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x15d/0x2b0 [ 302.903143][ T27] 1 lock held by syz.0.769/6112: [ 302.908088][ T27] #0: ffffffff8c1421f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 302.918402][ T27] [ 302.925575][ T27] ============================================= [ 302.925575][ T27] [ 302.934415][ T27] NMI backtrace for cpu 0 [ 302.938770][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 302.945980][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 302.956041][ T27] Call Trace: [ 302.959320][ T27] [ 302.962256][ T27] dump_stack_lvl+0x168/0x230 [ 302.966959][ T27] ? show_regs_print_info+0x20/0x20 [ 302.972202][ T27] ? load_image+0x3b0/0x3b0 [ 302.976705][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 302.982082][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 302.987218][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 302.992171][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 302.998340][ T27] ? _printk+0xcc/0x110 [ 303.002501][ T27] ? load_image+0x3b0/0x3b0 [ 303.007022][ T27] ? load_image+0x3b0/0x3b0 [ 303.011529][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 303.017606][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 303.023585][ T27] watchdog+0xe0f/0xe50 [ 303.027756][ T27] kthread+0x436/0x520 [ 303.031823][ T27] ? hungtask_pm_notify+0x40/0x40 [ 303.036846][ T27] ? kthread_blkcg+0xd0/0xd0 [ 303.041441][ T27] ret_from_fork+0x1f/0x30 [ 303.045892][ T27] [ 303.049332][ T27] Sending NMI from CPU 0 to CPUs 1: [ 303.054705][ C1] NMI backtrace for cpu 1 [ 303.054715][ C1] CPU: 1 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 303.054732][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 303.054742][ C1] Workqueue: phy7 ieee80211_iface_work [ 303.054765][ C1] RIP: 0010:__lock_acquire+0x16d8/0x7c60 [ 303.054788][ C1] Code: 00 48 8b 7c 24 38 48 8b 74 24 10 48 ba 00 00 00 00 00 fc ff df e9 65 ff ff ff 4c 8d 73 18 4c 89 f0 48 c1 e8 03 42 80 3c 00 00 <74> 12 4c 89 f7 e8 2e 1e 60 00 49 b8 00 00 00 00 00 fc ff df 49 8b [ 303.054801][ C1] RSP: 0018:ffffc9000128ee80 EFLAGS: 00000046 [ 303.054814][ C1] RAX: 1ffffffff200e977 RBX: ffffffff90074ba0 RCX: ffffffff815c1200 [ 303.054827][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8ffbe0c0 [ 303.054838][ C1] RBP: ffffc9000128f0d0 R08: dffffc0000000000 R09: fffffbfff1ff7c19 [ 303.054850][ C1] R10: fffffbfff1ff7c19 R11: 1ffffffff1ff7c18 R12: 09381d8bcded76b8 [ 303.054862][ C1] R13: ffff888017df1dc0 R14: ffffffff90074bb8 R15: ffff888017df2970 [ 303.054875][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 303.054889][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 303.054900][ C1] CR2: 000055d2dd7a6a38 CR3: 000000007e289000 CR4: 00000000003506e0 [ 303.054915][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 303.054924][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 303.054933][ C1] Call Trace: [ 303.054938][ C1] [ 303.054943][ C1] ? unwind_next_frame+0x1296/0x1d90 [ 303.054964][ C1] ? deref_stack_reg+0xd0/0x120 [ 303.054987][ C1] ? __lock_acquire+0x13ad/0x7c60 [ 303.055006][ C1] ? stack_trace_save+0xe0/0xe0 [ 303.055021][ C1] ? verify_lock_unused+0x140/0x140 [ 303.055044][ C1] ? stack_trace_save+0x98/0xe0 [ 303.055059][ C1] ? mark_lock+0x94/0x320 [ 303.055077][ C1] ? __lock_acquire+0x13ad/0x7c60 [ 303.055096][ C1] lock_acquire+0x197/0x3f0 [ 303.055113][ C1] ? debug_object_activate+0x65/0x480 [ 303.055135][ C1] ? preempt_count_add+0x8d/0x190 [ 303.055152][ C1] ? ret_from_fork+0x1e/0x30 [ 303.055169][ C1] ? read_lock_is_recursive+0x10/0x10 [ 303.055189][ C1] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 303.055205][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 303.055231][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 303.055246][ C1] ? debug_object_activate+0x65/0x480 [ 303.055264][ C1] ? _raw_spin_lock+0x40/0x40 [ 303.055280][ C1] ? ret_from_fork+0x1f/0x30 [ 303.055298][ C1] debug_object_activate+0x65/0x480 [ 303.055319][ C1] kvfree_call_rcu+0xb5/0x7c0 [ 303.055337][ C1] ? call_rcu+0x930/0x930 [ 303.055351][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 303.055366][ C1] ? cmp_bss+0x27a/0xe00 [ 303.055385][ C1] cfg80211_update_known_bss+0x178/0xa20 [ 303.055404][ C1] cfg80211_bss_update+0x15f/0x2250 [ 303.055432][ C1] cfg80211_inform_bss_frame_data+0x873/0x1f30 [ 303.055461][ C1] ? cfg80211_parse_mbssid_data+0x3140/0x3140 [ 303.055487][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 303.055504][ C1] ? ieee802_11_parse_elems_crc+0xc42/0x10c0 [ 303.055526][ C1] ieee80211_bss_info_update+0x6c2/0xaa0 [ 303.055550][ C1] ? ieee80211_rx_bss_put+0x60/0x60 [ 303.055570][ C1] ? ieee80211_queue_delayed_work+0x150/0x150 [ 303.055589][ C1] ? ieee80211_get_channel_khz+0x157/0x730 [ 303.055609][ C1] ieee80211_ibss_rx_queued_mgmt+0x16d0/0x29c0 [ 303.055637][ C1] ? ieee80211_ibss_rx_no_sta+0x730/0x730 [ 303.055653][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 303.055669][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 303.055686][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 303.055702][ C1] ? _raw_spin_unlock+0x40/0x40 [ 303.055715][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 303.055735][ C1] ? kcov_remote_start+0xea/0x4a0 [ 303.055753][ C1] ieee80211_iface_work+0x70e/0xc60 [ 303.055773][ C1] process_one_work+0x863/0x1000 [ 303.055796][ C1] ? worker_detach_from_pool+0x240/0x240 [ 303.055812][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 303.055830][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 303.055845][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 303.055861][ C1] ? wq_worker_running+0x97/0x170 [ 303.055877][ C1] worker_thread+0xaa8/0x12a0 [ 303.055906][ C1] kthread+0x436/0x520 [ 303.055920][ C1] ? rcu_lock_release+0x20/0x20 [ 303.055934][ C1] ? kthread_blkcg+0xd0/0xd0 [ 303.055950][ C1] ret_from_fork+0x1f/0x30 [ 303.056000][ C1] [ 303.056993][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 303.488419][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 303.495611][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 303.505663][ T27] Call Trace: [ 303.508941][ T27] [ 303.511866][ T27] dump_stack_lvl+0x168/0x230 [ 303.516545][ T27] ? show_regs_print_info+0x20/0x20 [ 303.521736][ T27] ? load_image+0x3b0/0x3b0 [ 303.526245][ T27] panic+0x2c9/0x7f0 [ 303.530134][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 303.535775][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 303.540274][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 303.546442][ T27] watchdog+0xe4e/0xe50 [ 303.550695][ T27] kthread+0x436/0x520 [ 303.554776][ T27] ? hungtask_pm_notify+0x40/0x40 [ 303.559796][ T27] ? kthread_blkcg+0xd0/0xd0 [ 303.564377][ T27] ret_from_fork+0x1f/0x30 [ 303.568793][ T27] [ 303.572159][ T27] Kernel Offset: disabled [ 303.576502][ T27] Rebooting in 86400 seconds..