last executing test programs: 2.756982893s ago: executing program 2 (id=3): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f0000001240)=[{&(0x7f0000001740)="9b5937", 0x3}], 0x1) 2.602556599s ago: executing program 3 (id=4): dup(0xffffffffffffffff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x8001, 0x2, 0x319, 0x1e, "0062ba7d820700000000000000000000096304"}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) recvmsg$unix(r5, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x2, @remote, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) 2.568331279s ago: executing program 2 (id=5): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x68}, 0x1, 0x7}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.323714267s ago: executing program 2 (id=6): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_triestat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000380)=""/90, 0x5a}], 0x1, 0x1f1, 0x1) bind$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000280)='^', 0x1, 0x40001, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) 1.103842096s ago: executing program 1 (id=2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000000000140000001100010000"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.039500348s ago: executing program 3 (id=7): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x62) 883.367512ms ago: executing program 1 (id=8): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) close(0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x12b000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000540)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8c4) 479.593805ms ago: executing program 3 (id=9): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014d6d600b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="b8914b3f677210a5befd00000500", 0x0, 0x10012000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 340.45118ms ago: executing program 2 (id=10): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x42, 0x0}}]}, &(0x7f0000000180)=0x10) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000000)=""/4102, 0x0) 235.398213ms ago: executing program 0 (id=1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x400, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 175.846005ms ago: executing program 3 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 123.281147ms ago: executing program 1 (id=12): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[], 0x16c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000100), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x5, 0x572, 0x8200, 0x9, "ff000d00009a468e0cd912098d00"}) r5 = syz_open_pts(r4, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xb3, 0xb, "6c06002004dc17a8"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x6) 0s ago: executing program 2 (id=13): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$setregs(0xf, r2, 0x80000000, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) inotify_init() socket(0x80000000000000a, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000340)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x4e23, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. [ 75.545830][ T5760] cgroup: Unknown subsys name 'net' [ 75.683295][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.120227][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.543549][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.545705][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.558157][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.566758][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.574236][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.577629][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.581987][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.590824][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.600368][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.605956][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.611203][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.617602][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.626222][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.630670][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.639158][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.647387][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.658885][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.666203][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.673318][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.675579][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.688254][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.691624][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.696282][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.706509][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.102587][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 80.189509][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 80.226646][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 80.253786][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.261829][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.269231][ T5771] bridge_slave_0: entered allmulticast mode [ 80.276563][ T5771] bridge_slave_0: entered promiscuous mode [ 80.291861][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.299166][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.306575][ T5771] bridge_slave_1: entered allmulticast mode [ 80.313410][ T5771] bridge_slave_1: entered promiscuous mode [ 80.334057][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 80.415921][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.446498][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.500562][ T5771] team0: Port device team_slave_0 added [ 80.516367][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.523539][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.530927][ T5772] bridge_slave_0: entered allmulticast mode [ 80.538135][ T5772] bridge_slave_0: entered promiscuous mode [ 80.549528][ T5771] team0: Port device team_slave_1 added [ 80.590862][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.598311][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.605566][ T5772] bridge_slave_1: entered allmulticast mode [ 80.612753][ T5772] bridge_slave_1: entered promiscuous mode [ 80.639062][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.646616][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.653754][ T5774] bridge_slave_0: entered allmulticast mode [ 80.660989][ T5774] bridge_slave_0: entered promiscuous mode [ 80.678805][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.686116][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.693282][ T5773] bridge_slave_0: entered allmulticast mode [ 80.700523][ T5773] bridge_slave_0: entered promiscuous mode [ 80.720875][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.733077][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.761691][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.773589][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.781038][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.788300][ T5774] bridge_slave_1: entered allmulticast mode [ 80.795254][ T5774] bridge_slave_1: entered promiscuous mode [ 80.802742][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.810784][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.818378][ T5773] bridge_slave_1: entered allmulticast mode [ 80.825193][ T5773] bridge_slave_1: entered promiscuous mode [ 80.850717][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.860213][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.887440][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.934819][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.947363][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.968331][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.979634][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.993876][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.014620][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.042788][ T5772] team0: Port device team_slave_0 added [ 81.081759][ T5771] hsr_slave_0: entered promiscuous mode [ 81.088306][ T5771] hsr_slave_1: entered promiscuous mode [ 81.106562][ T5772] team0: Port device team_slave_1 added [ 81.126716][ T5774] team0: Port device team_slave_0 added [ 81.134808][ T5773] team0: Port device team_slave_0 added [ 81.144196][ T5773] team0: Port device team_slave_1 added [ 81.185910][ T5774] team0: Port device team_slave_1 added [ 81.218919][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.225991][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.252004][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.265301][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.272392][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.298806][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.337887][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.344984][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.371914][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.385831][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.392799][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.419149][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.449102][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.456132][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.482166][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.520311][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.527437][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.553816][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.606578][ T5772] hsr_slave_0: entered promiscuous mode [ 81.612829][ T5772] hsr_slave_1: entered promiscuous mode [ 81.619525][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.627482][ T5772] Cannot create hsr debugfs directory [ 81.652484][ T5773] hsr_slave_0: entered promiscuous mode [ 81.658977][ T5773] hsr_slave_1: entered promiscuous mode [ 81.665064][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.672747][ T5773] Cannot create hsr debugfs directory [ 81.718492][ T5774] hsr_slave_0: entered promiscuous mode [ 81.725058][ T5774] hsr_slave_1: entered promiscuous mode [ 81.732274][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.740491][ T5774] Cannot create hsr debugfs directory [ 81.766009][ T5782] Bluetooth: hci3: command tx timeout [ 81.771677][ T5782] Bluetooth: hci1: command tx timeout [ 81.777799][ T5784] Bluetooth: hci0: command tx timeout [ 81.783697][ T51] Bluetooth: hci2: command tx timeout [ 82.048763][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.093275][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.103564][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.136271][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.234188][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.247007][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.263718][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.274118][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.357289][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.367568][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.377874][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.391018][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.462039][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.483440][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.491050][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.501386][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.523786][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.554911][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.571695][ T2883] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.579080][ T2883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.606840][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.634348][ T2883] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.641513][ T2883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.659744][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.684989][ T710] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.692138][ T710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.717304][ T2883] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.724430][ T2883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.849769][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.862744][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.942431][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.968816][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.997064][ T3458] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.004209][ T3458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.018031][ T3458] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.025190][ T3458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.074296][ T3458] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.081470][ T3458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.108145][ T3458] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.115296][ T3458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.291336][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.334473][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.422528][ T5771] veth0_vlan: entered promiscuous mode [ 83.461633][ T5771] veth1_vlan: entered promiscuous mode [ 83.479653][ T5774] veth0_vlan: entered promiscuous mode [ 83.522411][ T5774] veth1_vlan: entered promiscuous mode [ 83.574459][ T5771] veth0_macvtap: entered promiscuous mode [ 83.597430][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.616145][ T5771] veth1_macvtap: entered promiscuous mode [ 83.636730][ T5774] veth0_macvtap: entered promiscuous mode [ 83.653266][ T5774] veth1_macvtap: entered promiscuous mode [ 83.673267][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.686998][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.720327][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.729953][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.739960][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.749665][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.763670][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.777523][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.788561][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.799914][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.813392][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.823943][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.838821][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.846754][ T51] Bluetooth: hci2: command tx timeout [ 83.852511][ T5784] Bluetooth: hci0: command tx timeout [ 83.852523][ T5778] Bluetooth: hci3: command tx timeout [ 83.858840][ T5782] Bluetooth: hci1: command tx timeout [ 83.893317][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.902914][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.914256][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.923272][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.991850][ T5773] veth0_vlan: entered promiscuous mode [ 84.034967][ T5773] veth1_vlan: entered promiscuous mode [ 84.090268][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.103559][ T5772] veth0_vlan: entered promiscuous mode [ 84.113830][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.157411][ T5772] veth1_vlan: entered promiscuous mode [ 84.203445][ T5773] veth0_macvtap: entered promiscuous mode [ 84.212509][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.221291][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.230807][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.241793][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.273173][ T5772] veth0_macvtap: entered promiscuous mode [ 84.300260][ T5773] veth1_macvtap: entered promiscuous mode [ 84.308931][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.331904][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.343480][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.361711][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.371647][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.383243][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.395749][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.416394][ T5772] veth1_macvtap: entered promiscuous mode [ 84.444461][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.455263][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.475862][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.496929][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.529970][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.544114][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.554808][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.564076][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.574158][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.629899][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.654240][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.677814][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.691435][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.714388][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.725173][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.741532][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.753058][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.769408][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.779498][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.790247][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.800857][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.812194][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.836852][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.979677][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.020584][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.036924][ T5851] syz.2.6[5851]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.050488][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.059273][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.126268][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.134129][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.265190][ T5851] loop2: detected capacity change from 0 to 1024 [ 85.759399][ T5851] EXT4-fs: Ignoring removed bh option [ 85.846731][ T5851] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 85.870743][ T710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.881506][ T710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.925497][ T5782] Bluetooth: hci1: command tx timeout [ 85.930935][ T5782] Bluetooth: hci3: command tx timeout [ 85.936967][ T5784] Bluetooth: hci0: command tx timeout [ 85.942486][ T5784] Bluetooth: hci2: command tx timeout [ 85.993090][ T5851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.052599][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.061256][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.327288][ T710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.616274][ T710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.906002][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.195449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.755459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 95.315444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.875524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 100.435572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.995487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.555552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 108.115522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.675412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.235481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 192.255358][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 192.262397][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5823/1:b..l [ 192.270548][ C0] rcu: (detected by 0, t=10502 jiffies, g=9397, q=824 ncpus=2) [ 192.278177][ C0] task:kworker/0:5 state:R running task stack:23784 pid:5823 ppid:2 flags:0x00004000 [ 192.289409][ C0] Workqueue: events_power_efficient gc_worker [ 192.295505][ C0] Call Trace: [ 192.298784][ C0] [ 192.301715][ C0] __schedule+0x1553/0x45a0 [ 192.306235][ C0] ? asan.module_dtor+0x20/0x20 [ 192.311108][ C0] ? mark_lock+0x94/0x320 [ 192.315437][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 192.321448][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 192.326732][ C0] preempt_schedule_irq+0xbf/0x150 [ 192.331836][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 192.337557][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 192.343366][ C0] irqentry_exit+0x67/0x70 [ 192.347782][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 192.353760][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x19a/0x1d0 [ 192.360632][ C0] Code: f8 4d 85 e4 75 16 e8 b5 b2 c8 f8 eb 15 e8 ae b2 c8 f8 e8 99 e2 c9 01 4d 85 e4 74 ea e8 9f b2 c8 f8 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25 [ 192.380236][ C0] RSP: 0018:ffffc900048bf9a0 EFLAGS: 00000293 [ 192.386302][ C0] RAX: ffffffff88be78f1 RBX: 0000000000000000 RCX: ffff88807a605a00 [ 192.394287][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.402265][ C0] RBP: ffffc900048bfa50 R08: ffffffff911cd597 R09: 1ffffffff2239ab2 [ 192.410246][ C0] R10: dffffc0000000000 R11: fffffbfff2239ab3 R12: 0000000000000200 [ 192.418218][ C0] R13: dffffc0000000000 R14: 1ffff92000917f34 R15: dffffc0000000000 [ 192.426191][ C0] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 192.432437][ C0] ? nf_conntrack_hash_check_insert+0x9c0/0x9c0 [ 192.438682][ C0] gc_worker+0x317/0x1490 [ 192.443016][ C0] ? gc_worker+0x269/0x1490 [ 192.447519][ C0] ? init_conntrack+0xf10/0xf10 [ 192.452375][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 192.457577][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 192.463302][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 192.469051][ C0] process_scheduled_works+0xa5d/0x15d0 [ 192.474610][ C0] ? worker_attach_to_pool+0x380/0x380 [ 192.480080][ C0] ? assign_work+0x3d2/0x5d0 [ 192.484675][ C0] worker_thread+0xa55/0xfc0 [ 192.489280][ C0] kthread+0x2fa/0x390 [ 192.493384][ C0] ? pr_cont_work+0x560/0x560 [ 192.498093][ C0] ? kthread_blkcg+0xd0/0xd0 [ 192.502720][ C0] ret_from_fork+0x48/0x80 [ 192.507137][ C0] ? kthread_blkcg+0xd0/0xd0 [ 192.511727][ C0] ret_from_fork_asm+0x11/0x20 [ 192.516502][ C0] [ 192.519524][ C0] rcu: rcu_preempt kthread starved for 10436 jiffies! g9397 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 192.530633][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 192.540604][ C0] rcu: RCU grace-period kthread stack dump: [ 192.546484][ C0] task:rcu_preempt state:R running task stack:27656 pid:17 ppid:2 flags:0x00004000 [ 192.557253][ C0] Call Trace: [ 192.560523][ C0] [ 192.563451][ C0] __schedule+0x1553/0x45a0 [ 192.567971][ C0] ? asan.module_dtor+0x20/0x20 [ 192.572820][ C0] ? enqueue_timer+0x23d/0x550 [ 192.577579][ C0] ? __mod_timer+0x984/0xdb0 [ 192.582211][ C0] schedule+0xbd/0x170 [ 192.586315][ C0] schedule_timeout+0x188/0x2d0 [ 192.591165][ C0] ? console_conditional_schedule+0x40/0x40 [ 192.597064][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 192.602961][ C0] ? update_process_times+0x1b0/0x1b0 [ 192.608336][ C0] ? prepare_to_swait_event+0x339/0x360 [ 192.613891][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 192.618740][ C0] ? rcu_gp_init+0x1162/0x1560 [ 192.623502][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 192.628351][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 192.634504][ C0] ? rcu_gp_init+0x1560/0x1560 [ 192.639258][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 192.644107][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 192.649307][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 192.654505][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 192.659100][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 192.664205][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 192.669138][ C0] ? __kthread_parkme+0x162/0x1c0 [ 192.674190][ C0] kthread+0x2fa/0x390 [ 192.678258][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 192.683397][ C0] ? kthread_blkcg+0xd0/0xd0 [ 192.687994][ C0] ret_from_fork+0x48/0x80 [ 192.692407][ C0] ? kthread_blkcg+0xd0/0xd0 [ 192.696994][ C0] ret_from_fork_asm+0x11/0x20 [ 192.701772][ C0] [ 192.704791][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 192.711108][ C0] Sending NMI from CPU 0 to CPUs 1: [ 192.716314][ C1] NMI backtrace for cpu 1 [ 192.716332][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 192.716344][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 192.716352][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 192.716381][ C1] Code: 88 1f 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 43 e4 3f 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 192.716393][ C1] RSP: 0000:ffffc90000187de0 EFLAGS: 000002c2 [ 192.716404][ C1] RAX: 2e81e36fe4198b00 RBX: ffffffff8162ae21 RCX: 2e81e36fe4198b00 [ 192.716415][ C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9c20 [ 192.716424][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36bab R09: 1ffff110171e6d75 [ 192.716434][ C1] R10: dffffc0000000000 R11: ffffed10171e6d76 R12: 1ffff92000030fc8 [ 192.716443][ C1] R13: dffffc0000000000 R14: 1ffff1100384d780 R15: 0000000000000000 [ 192.716453][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 192.716463][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.716472][ C1] CR2: 00007fafe039ce59 CR3: 0000000022bd9000 CR4: 00000000003506e0 [ 192.716484][ C1] Call Trace: [ 192.716489][ C1] [ 192.716493][ C1] default_idle+0x13/0x20 [ 192.716514][ C1] default_idle_call+0x6c/0xa0 [ 192.716536][ C1] do_idle+0x221/0x590 [ 192.716555][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 192.716571][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 192.716592][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 192.716612][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 192.716632][ C1] ? _raw_spin_unlock+0x40/0x40 [ 192.716656][ C1] cpu_startup_entry+0x43/0x60 [ 192.716672][ C1] start_secondary+0xee/0xf0 [ 192.716687][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 192.716713][ C1]