last executing test programs: 934.309178ms ago: executing program 3 (id=6): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 822.982704ms ago: executing program 0 (id=1): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000060000000000000080000000850000003900000095"], &(0x7f0000000540)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @cgroup_sock_addr=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 739.851867ms ago: executing program 3 (id=7): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="611549000000000061136c0000000000bfa000000000000007000000ee0016055e03010000000000160500000000000069163e0000000000bf0700000000000026050700fcffffff6706000020000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 675.102969ms ago: executing program 0 (id=8): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x84}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x94) 674.167487ms ago: executing program 3 (id=9): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='c *:2', @ANYRESOCT=0x0], 0xa) 517.816473ms ago: executing program 3 (id=10): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5}, 0x94) 504.806335ms ago: executing program 2 (id=3): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) 423.97959ms ago: executing program 0 (id=11): socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x100d, &(0x7f00000038c0)=""/4109, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 354.625976ms ago: executing program 4 (id=5): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) 293.562271ms ago: executing program 3 (id=12): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x6}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x4d}, 0x94) 219.873399ms ago: executing program 2 (id=13): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 159.414241ms ago: executing program 0 (id=14): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 69.524436ms ago: executing program 2 (id=15): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x10, 0x0, &(0x7f0000000280)="f180822dc431325314de78e52290bbfb", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 0s ago: executing program 3 (id=16): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xa, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40ff}, [@generic={0x9, 0x7, 0x7, 0xa2, 0x2e4}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffb}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. [ 71.674495][ T5848] cgroup: Unknown subsys name 'net' [ 71.848418][ T5848] cgroup: Unknown subsys name 'cpuset' [ 71.856694][ T5848] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.247947][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.623981][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.646954][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.661979][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.669996][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.678380][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.688716][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.697139][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.705114][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.715756][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.724736][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.725252][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.732316][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.740455][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.748481][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.755507][ T5877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.768770][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.772118][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.784118][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.792452][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.799928][ T5877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.808966][ T5877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.818521][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.828242][ T5878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.829810][ T5182] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.845258][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.390480][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 76.408060][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 76.712677][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.720713][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.728260][ T5858] bridge_slave_0: entered allmulticast mode [ 76.736277][ T5858] bridge_slave_0: entered promiscuous mode [ 76.750072][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.761911][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.769496][ T5858] bridge_slave_1: entered allmulticast mode [ 76.777422][ T5858] bridge_slave_1: entered promiscuous mode [ 76.784890][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.792021][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.799940][ T5871] bridge_slave_0: entered allmulticast mode [ 76.807567][ T5871] bridge_slave_0: entered promiscuous mode [ 76.821586][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.829440][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.837276][ T5871] bridge_slave_1: entered allmulticast mode [ 76.844478][ T5871] bridge_slave_1: entered promiscuous mode [ 76.856535][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 76.878973][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 76.986734][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.013344][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.031580][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.058835][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.156534][ T5858] team0: Port device team_slave_0 added [ 77.162779][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 77.179809][ T5871] team0: Port device team_slave_0 added [ 77.191754][ T5858] team0: Port device team_slave_1 added [ 77.225421][ T5871] team0: Port device team_slave_1 added [ 77.293613][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.301107][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.309087][ T5867] bridge_slave_0: entered allmulticast mode [ 77.316214][ T5867] bridge_slave_0: entered promiscuous mode [ 77.335443][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.342666][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.350063][ T5859] bridge_slave_0: entered allmulticast mode [ 77.357909][ T5859] bridge_slave_0: entered promiscuous mode [ 77.393322][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.400815][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.408377][ T5867] bridge_slave_1: entered allmulticast mode [ 77.416954][ T5867] bridge_slave_1: entered promiscuous mode [ 77.424656][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.432144][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.439823][ T5859] bridge_slave_1: entered allmulticast mode [ 77.447282][ T5859] bridge_slave_1: entered promiscuous mode [ 77.467571][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.474673][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.502835][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.521757][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.529205][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.555628][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.610938][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.620395][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.647018][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.663913][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.670889][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.697093][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.718543][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.731765][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.743664][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.762757][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.800194][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.807543][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.814949][ T5874] bridge_slave_0: entered allmulticast mode [ 77.822563][ T5874] bridge_slave_0: entered promiscuous mode [ 77.884924][ T5863] Bluetooth: hci0: command tx timeout [ 77.889205][ T5182] Bluetooth: hci4: command tx timeout [ 77.890764][ T5870] Bluetooth: hci1: command tx timeout [ 77.896454][ T5873] Bluetooth: hci2: command tx timeout [ 77.910448][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.917760][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.925581][ T5874] bridge_slave_1: entered allmulticast mode [ 77.932529][ T5874] bridge_slave_1: entered promiscuous mode [ 77.964685][ T5873] Bluetooth: hci3: command tx timeout [ 77.980182][ T5859] team0: Port device team_slave_0 added [ 78.000437][ T5867] team0: Port device team_slave_0 added [ 78.009549][ T5867] team0: Port device team_slave_1 added [ 78.022097][ T5858] hsr_slave_0: entered promiscuous mode [ 78.029236][ T5858] hsr_slave_1: entered promiscuous mode [ 78.050214][ T5859] team0: Port device team_slave_1 added [ 78.102073][ T5871] hsr_slave_0: entered promiscuous mode [ 78.109117][ T5871] hsr_slave_1: entered promiscuous mode [ 78.115555][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 78.121350][ T5871] Cannot create hsr debugfs directory [ 78.141566][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.155644][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.165982][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.172951][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.199144][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.264141][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.271112][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.297959][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.317977][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.325878][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.352503][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.365048][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.372015][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.398021][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.482272][ T5874] team0: Port device team_slave_0 added [ 78.491503][ T5874] team0: Port device team_slave_1 added [ 78.613481][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.620951][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.648413][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.665457][ T5867] hsr_slave_0: entered promiscuous mode [ 78.671934][ T5867] hsr_slave_1: entered promiscuous mode [ 78.678186][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 78.684018][ T5867] Cannot create hsr debugfs directory [ 78.729612][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.736868][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.763357][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.803192][ T5859] hsr_slave_0: entered promiscuous mode [ 78.809579][ T5859] hsr_slave_1: entered promiscuous mode [ 78.816759][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 78.822602][ T5859] Cannot create hsr debugfs directory [ 78.871135][ T5874] hsr_slave_0: entered promiscuous mode [ 78.877908][ T5874] hsr_slave_1: entered promiscuous mode [ 78.884181][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 78.889915][ T5874] Cannot create hsr debugfs directory [ 79.237043][ T5871] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.251897][ T5871] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.291048][ T5871] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.323150][ T5871] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.415570][ T5858] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.433253][ T5858] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.445449][ T5858] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.459700][ T5858] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.552824][ T5867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.569708][ T5867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.584816][ T5867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.601803][ T5867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.726328][ T5874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.749526][ T5874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.780737][ T5874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.791436][ T5874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.870979][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.920458][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.933745][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.952649][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.964122][ T5873] Bluetooth: hci4: command tx timeout [ 79.964160][ T5870] Bluetooth: hci0: command tx timeout [ 79.970094][ T5873] Bluetooth: hci2: command tx timeout [ 79.977787][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.981024][ T5182] Bluetooth: hci1: command tx timeout [ 80.008533][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.035193][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.044988][ T5182] Bluetooth: hci3: command tx timeout [ 80.058296][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.071273][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.123126][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.130326][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.143416][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.150559][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.170463][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.192251][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.199458][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.229323][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.236522][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.250472][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.257843][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.290243][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.297733][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.390762][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.473300][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.507090][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.514701][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.551994][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.559212][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.620331][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.782505][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.846462][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.853716][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.891226][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.898662][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.061301][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.160885][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.281435][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.408921][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.522849][ T5858] veth0_vlan: entered promiscuous mode [ 81.543135][ T5867] veth0_vlan: entered promiscuous mode [ 81.585806][ T5858] veth1_vlan: entered promiscuous mode [ 81.620518][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.629836][ T5867] veth1_vlan: entered promiscuous mode [ 81.680266][ T5874] veth0_vlan: entered promiscuous mode [ 81.729135][ T5874] veth1_vlan: entered promiscuous mode [ 81.742269][ T5867] veth0_macvtap: entered promiscuous mode [ 81.751231][ T5858] veth0_macvtap: entered promiscuous mode [ 81.767439][ T5867] veth1_macvtap: entered promiscuous mode [ 81.818792][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.832568][ T5858] veth1_macvtap: entered promiscuous mode [ 81.848982][ T5871] veth0_vlan: entered promiscuous mode [ 81.873135][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.900854][ T5859] veth0_vlan: entered promiscuous mode [ 81.928100][ T5871] veth1_vlan: entered promiscuous mode [ 81.941769][ T5874] veth0_macvtap: entered promiscuous mode [ 81.962273][ T5859] veth1_vlan: entered promiscuous mode [ 81.978752][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.991475][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.026296][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.047734][ T5182] Bluetooth: hci1: command tx timeout [ 82.053182][ T5182] Bluetooth: hci2: command tx timeout [ 82.055547][ T5873] Bluetooth: hci0: command tx timeout [ 82.059252][ T5182] Bluetooth: hci4: command tx timeout [ 82.088836][ T5874] veth1_macvtap: entered promiscuous mode [ 82.100486][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.124065][ T5863] Bluetooth: hci3: command tx timeout [ 82.125624][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.182276][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.232624][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.262433][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.271749][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.282472][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.307366][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.318637][ T5859] veth0_macvtap: entered promiscuous mode [ 82.338580][ T5871] veth0_macvtap: entered promiscuous mode [ 82.352106][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.376093][ T5859] veth1_macvtap: entered promiscuous mode [ 82.386297][ T5871] veth1_macvtap: entered promiscuous mode [ 82.429127][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.446348][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.456183][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.467381][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.481241][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.490583][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.547929][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.573514][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.586967][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.605024][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.607366][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.620472][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.653569][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.675266][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.686051][ T1093] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.697266][ T1093] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.713292][ T1093] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.748222][ T5867] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.784723][ T1093] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.837280][ T1093] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.862053][ T1093] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.884640][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.893711][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.915780][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.925046][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.947092][ T1093] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.972643][ T1093] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.079925][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.108300][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.143779][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.155688][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.302491][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.346299][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.377836][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.428631][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.573753][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.574409][ T5996] netlink: 'syz.0.11': attribute type 3 has an invalid length. [ 83.575174][ T5996] netlink: 'syz.0.11': attribute type 3 has an invalid length. [ 83.644628][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.777398][ T5999] tun0: tun_chr_ioctl cmd 2147767521 [ 83.807758][ T5999] tun0: tun_chr_ioctl cmd 1074025675 [ 83.846908][ T5999] tun0: persist disabled [ 83.859761][ T6005] ------------[ cut here ]------------ [ 83.865462][ T6005] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0x0, 0x0] s64=[0x0, 0x0] u32=[0xa80ab13a, 0x0] s32=[0x0, 0x0] var_off=(0x0, 0x0) [ 83.900446][ T6005] WARNING: CPU: 0 PID: 6005 at kernel/bpf/verifier.c:2733 reg_bounds_sanity_check+0x6e6/0xc20 [ 83.911189][ T6005] Modules linked in: [ 83.915224][ T6005] CPU: 0 UID: 0 PID: 6005 Comm: syz.0.14 Not tainted syzkaller #0 PREEMPT(full) [ 83.924478][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.934632][ T6005] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 83.941164][ T6005] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 1f 31 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 83.961512][ T6005] RSP: 0018:ffffc90004dcef08 EFLAGS: 00010282 [ 83.968362][ T6005] RAX: 183e4c9140d33800 RBX: 0000000000000000 RCX: 0000000000080000 [ 83.976942][ T6005] RDX: ffffc900049b2000 RSI: 000000000001fabe RDI: 000000000001fabf [ 83.985049][ T6005] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 83.993306][ T6005] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88807a1532d0 [ 84.001450][ T6005] R13: ffff88807a1532f0 R14: ffff88807a153308 R15: 0000000000000000 [ 84.009802][ T6005] FS: 00007f04e86196c0(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 84.019101][ T6005] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.025922][ T6005] CR2: 00007fc3ae6cdf98 CR3: 0000000074d08000 CR4: 00000000003526f0 [ 84.033987][ T6005] Call Trace: [ 84.037288][ T6005] [ 84.040258][ T6005] reg_set_min_max+0x214/0x300 [ 84.045298][ T6005] check_cond_jmp_op+0x1625/0x2910 [ 84.050758][ T6005] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 84.056750][ T6005] ? do_check+0x4531/0xe520 [ 84.061854][ T6005] ? kfree+0x18e/0x440 [ 84.066457][ T6005] do_check+0x6751/0xe520 [ 84.070890][ T6005] ? __pfx_do_check+0x10/0x10 [ 84.075715][ T6005] ? init_func_state+0x1ddf/0x2d20 [ 84.080863][ T6005] do_check_common+0x1949/0x24f0 [ 84.085912][ T6005] bpf_check+0x1746a/0x1d2e0 [ 84.090524][ T6005] ? is_bpf_text_address+0x26/0x2b0 [ 84.095866][ T6005] ? kernel_text_address+0xa5/0xe0 [ 84.100998][ T6005] ? __kernel_text_address+0xd/0x40 [ 84.106276][ T6005] ? __lock_acquire+0xab9/0xd20 [ 84.111154][ T6005] ? __mutex_trylock_common+0x153/0x260 [ 84.116796][ T6005] ? __pfx___mutex_trylock_common+0x10/0x10 [ 84.122714][ T6005] ? css_rstat_updated+0x23a/0x4f0 [ 84.128022][ T6005] ? __lock_acquire+0xab9/0xd20 [ 84.132897][ T6005] ? __pfx_bpf_check+0x10/0x10 [ 84.133899][ T5863] Bluetooth: hci0: command tx timeout [ 84.137715][ T6005] ? ktime_get_with_offset+0x8c/0x2a0 [ 84.143657][ T5863] Bluetooth: hci2: command tx timeout [ 84.148605][ T6005] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 84.154145][ T5863] Bluetooth: hci1: command tx timeout [ 84.160193][ T6005] ? lockdep_hardirqs_on+0x9c/0x150 [ 84.167509][ T5863] Bluetooth: hci4: command tx timeout [ 84.171308][ T6005] ? ktime_get_with_offset+0x8c/0x2a0 [ 84.182616][ T6005] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 84.188978][ T6005] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 84.195672][ T6005] ? __asan_memset+0x22/0x50 [ 84.200294][ T6005] ? bpf_obj_name_cpy+0x194/0x1e0 [ 84.205857][ T6005] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 84.206209][ T5182] Bluetooth: hci3: command tx timeout [ 84.211072][ T6005] ? security_bpf_prog_load+0x7f/0x310 [ 84.211105][ T6005] bpf_prog_load+0x1318/0x1930 [ 84.211140][ T6005] ? __pfx_bpf_prog_load+0x10/0x10 [ 84.231894][ T6005] ? bpf_lsm_bpf+0x9/0x20 [ 84.236353][ T6005] ? security_bpf+0x7e/0x300 [ 84.240963][ T6005] __sys_bpf+0x528/0x870 [ 84.245313][ T6005] ? __pfx___sys_bpf+0x10/0x10 [ 84.250175][ T6005] ? exc_page_fault+0x76/0xf0 [ 84.254951][ T6005] __x64_sys_bpf+0x7c/0x90 [ 84.259398][ T6005] do_syscall_64+0xfa/0x3b0 [ 84.263983][ T6005] ? lockdep_hardirqs_on+0x9c/0x150 [ 84.269617][ T6005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.276583][ T6005] ? clear_bhb_loop+0x60/0xb0 [ 84.281293][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.287412][ T6005] RIP: 0033:0x7f04e778ebe9 [ 84.291859][ T6005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.311662][ T6005] RSP: 002b:00007f04e8619038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.320116][ T6005] RAX: ffffffffffffffda RBX: 00007f04e79c5fa0 RCX: 00007f04e778ebe9 [ 84.328277][ T6005] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 84.336324][ T6005] RBP: 00007f04e7811e19 R08: 0000000000000000 R09: 0000000000000000 [ 84.344366][ T6005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.352376][ T6005] R13: 00007f04e79c6038 R14: 00007f04e79c5fa0 R15: 00007ffec59e2e78 [ 84.360424][ T6005] [ 84.363463][ T6005] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 84.370750][ T6005] CPU: 0 UID: 0 PID: 6005 Comm: syz.0.14 Not tainted syzkaller #0 PREEMPT(full) [ 84.379845][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.389896][ T6005] Call Trace: [ 84.393167][ T6005] [ 84.396096][ T6005] dump_stack_lvl+0x99/0x250 [ 84.400702][ T6005] ? __asan_memcpy+0x40/0x70 [ 84.405304][ T6005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.410495][ T6005] ? __pfx__printk+0x10/0x10 [ 84.415095][ T6005] vpanic+0x281/0x750 [ 84.419085][ T6005] ? __pfx__printk+0x10/0x10 [ 84.423676][ T6005] ? __pfx_vpanic+0x10/0x10 [ 84.428218][ T6005] ? is_bpf_text_address+0x26/0x2b0 [ 84.433444][ T6005] panic+0xb9/0xc0 [ 84.437173][ T6005] ? __pfx_panic+0x10/0x10 [ 84.441597][ T6005] __warn+0x31b/0x4b0 [ 84.445578][ T6005] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 84.451251][ T6005] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 84.456884][ T6005] report_bug+0x2be/0x4f0 [ 84.461212][ T6005] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 84.466868][ T6005] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 84.472521][ T6005] ? reg_bounds_sanity_check+0x6e8/0xc20 [ 84.478155][ T6005] handle_bug+0x84/0x160 [ 84.482400][ T6005] exc_invalid_op+0x1a/0x50 [ 84.486906][ T6005] asm_exc_invalid_op+0x1a/0x20 [ 84.491751][ T6005] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 84.497992][ T6005] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 1f 31 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 84.517675][ T6005] RSP: 0018:ffffc90004dcef08 EFLAGS: 00010282 [ 84.523740][ T6005] RAX: 183e4c9140d33800 RBX: 0000000000000000 RCX: 0000000000080000 [ 84.531698][ T6005] RDX: ffffc900049b2000 RSI: 000000000001fabe RDI: 000000000001fabf [ 84.539657][ T6005] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 84.547616][ T6005] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88807a1532d0 [ 84.556281][ T6005] R13: ffff88807a1532f0 R14: ffff88807a153308 R15: 0000000000000000 [ 84.564301][ T6005] reg_set_min_max+0x214/0x300 [ 84.569163][ T6005] check_cond_jmp_op+0x1625/0x2910 [ 84.574307][ T6005] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 84.579902][ T6005] ? do_check+0x4531/0xe520 [ 84.584601][ T6005] ? kfree+0x18e/0x440 [ 84.588691][ T6005] do_check+0x6751/0xe520 [ 84.593060][ T6005] ? __pfx_do_check+0x10/0x10 [ 84.597730][ T6005] ? init_func_state+0x1ddf/0x2d20 [ 84.602928][ T6005] do_check_common+0x1949/0x24f0 [ 84.607869][ T6005] bpf_check+0x1746a/0x1d2e0 [ 84.612457][ T6005] ? is_bpf_text_address+0x26/0x2b0 [ 84.617758][ T6005] ? kernel_text_address+0xa5/0xe0 [ 84.622963][ T6005] ? __kernel_text_address+0xd/0x40 [ 84.628786][ T6005] ? __lock_acquire+0xab9/0xd20 [ 84.633681][ T6005] ? __mutex_trylock_common+0x153/0x260 [ 84.639254][ T6005] ? __pfx___mutex_trylock_common+0x10/0x10 [ 84.645159][ T6005] ? css_rstat_updated+0x23a/0x4f0 [ 84.650270][ T6005] ? __lock_acquire+0xab9/0xd20 [ 84.655124][ T6005] ? __pfx_bpf_check+0x10/0x10 [ 84.660073][ T6005] ? ktime_get_with_offset+0x8c/0x2a0 [ 84.665527][ T6005] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 84.671760][ T6005] ? lockdep_hardirqs_on+0x9c/0x150 [ 84.677049][ T6005] ? ktime_get_with_offset+0x8c/0x2a0 [ 84.682432][ T6005] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 84.688680][ T6005] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 84.695307][ T6005] ? __asan_memset+0x22/0x50 [ 84.699910][ T6005] ? bpf_obj_name_cpy+0x194/0x1e0 [ 84.705377][ T6005] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 84.710586][ T6005] ? security_bpf_prog_load+0x7f/0x310 [ 84.716073][ T6005] bpf_prog_load+0x1318/0x1930 [ 84.720851][ T6005] ? __pfx_bpf_prog_load+0x10/0x10 [ 84.726269][ T6005] ? bpf_lsm_bpf+0x9/0x20 [ 84.730627][ T6005] ? security_bpf+0x7e/0x300 [ 84.735242][ T6005] __sys_bpf+0x528/0x870 [ 84.739484][ T6005] ? __pfx___sys_bpf+0x10/0x10 [ 84.744334][ T6005] ? exc_page_fault+0x76/0xf0 [ 84.749028][ T6005] __x64_sys_bpf+0x7c/0x90 [ 84.753474][ T6005] do_syscall_64+0xfa/0x3b0 [ 84.757972][ T6005] ? lockdep_hardirqs_on+0x9c/0x150 [ 84.763165][ T6005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.769242][ T6005] ? clear_bhb_loop+0x60/0xb0 [ 84.773932][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.779901][ T6005] RIP: 0033:0x7f04e778ebe9 [ 84.784322][ T6005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.804104][ T6005] RSP: 002b:00007f04e8619038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.812518][ T6005] RAX: ffffffffffffffda RBX: 00007f04e79c5fa0 RCX: 00007f04e778ebe9 [ 84.820497][ T6005] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 84.828458][ T6005] RBP: 00007f04e7811e19 R08: 0000000000000000 R09: 0000000000000000 [ 84.836852][ T6005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.844814][ T6005] R13: 00007f04e79c6038 R14: 00007f04e79c5fa0 R15: 00007ffec59e2e78 [ 84.852790][ T6005] [ 84.855931][ T6005] Kernel Offset: disabled [ 84.860284][ T6005] Rebooting in 86400 seconds..