last executing test programs: 10.413891082s ago: executing program 2 (id=3): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0xdffa, @none, 0x0, 0x2}, 0x17) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x6}) 10.344553866s ago: executing program 2 (id=6): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9) 10.189412123s ago: executing program 0 (id=1): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f"], 0x0, 0x8e}, 0x28) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000040)='|', 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 8.797295618s ago: executing program 0 (id=7): sched_setscheduler(0x0, 0x1, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 8.435864375s ago: executing program 4 (id=5): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0xc0844123, 0x0) 8.241487954s ago: executing program 4 (id=8): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socketpair(0x11, 0x2, 0x2, 0x0) 8.030987844s ago: executing program 3 (id=4): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) 7.47567354s ago: executing program 4 (id=9): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) write(r2, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x10000) sendfile(r2, r3, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 6.781416333s ago: executing program 3 (id=10): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 6.491997856s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x1, 0x0, 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) 6.330331424s ago: executing program 3 (id=11): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340), 0x1, 0x0, 0x0, 0x20000814}, 0x24004014) 4.171135195s ago: executing program 3 (id=12): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0xdffa, @none, 0x0, 0x2}, 0x17) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x6}) 3.959476555s ago: executing program 1 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) 3.511124446s ago: executing program 2 (id=14): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)={0x30, r1, 0x1, 0x70bd2e, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0x20008004) 3.294415556s ago: executing program 0 (id=15): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f"], 0x0, 0x8e}, 0x28) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000040)='|', 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.887461535s ago: executing program 1 (id=16): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0xc0844123, 0x0) 2.884664715s ago: executing program 2 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x5a, 0x0) ptrace(0x11, r0) 1.747092349s ago: executing program 0 (id=18): ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$vim2m(&(0x7f0000000080), 0xffffffff, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 1.601451636s ago: executing program 1 (id=19): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) 1.600924236s ago: executing program 4 (id=20): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x16d}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeefbf94850960c84825a918b0", 0xd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000f00)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b0c41689f2e0742c4d3282f151e6faf27deab0464cdf91d6a7b73cbec929aa85b3d4f5114785c23d6c325efab561ca5f90113281359edb7ccdea124d6ea38a34d046ed5a7fdfc137e465ae8b692cb06ce3d14da5dc3ba35cac41c2fb97fe2618ebdd4", 0x81}, {&(0x7f0000000fc0)="d638", 0x2}, {&(0x7f0000002240)="321f349be984b668f593bf16c2f60e4b01783ed59dcd6a4105711458d2cf86696caad21a4387232f7ae8dbda478307058ab2ffec546f49907b7d4c54fe1fa76d99f5c80956c6769c810b895a00ab69f114794c1e3ee671204a47d3153305395d1e523e504927505590c078bc1a7d6e82b332bf141f662f26ad9ba4c11b87d5abbc3340ef989b3a8e666f8f82ca82aab6d33c953938b30b61c91cbc926b2a58d67d8198e458ed8f10ad8975356af9dab25f718147ae2a3e81187adaa46d247e3a8c437053bb01b855c6fb0ee0e7024fa61bd2af5aa1d918fcc93b3ffadf3a982efefa3b47727caafee6246ee147d676a5e2879e351f5ac51e6b62aaedb5cd03d16cb4f8bfaac498397b3dc22c063fbd87b2912647948430488fb45ca42096e08a6760c831b06d4582b7440f9123f3711a87b71a4a3a4614b2bf8dcdb84d985777893889120fb820ffe525acbf530869895f2caf84922e5a8aee6a0f887145b0d961bfa9c8f71788ccb8d2ee73676c2f68427b776f537afb9a8c97e055e35204ec09fd3f2c9a0b9f8b33ef0343ef22c99a7fe463550d074b626c1173f34fc49f1431460881ccd35b679f186dd10ac84e2f9aa370443a75938812c1b1888e57b0a79001965832e7cd8c85865081a16938fc81e72c26e686078692dad56ca4a2371a6b370268da843aa7ba9e498a7ae8a6317907b2d5114acf3d35522e4c8cb4e014c7d3f5f60c57b1293ec9956bed6abb25b5e2f90cf3eba7adc060b00dcb50480282b649e9c601bf0a400290a337e46af9be19d489e8693750a0be63313307b51db7726d4c6643f6f8ab22ce41310043728ffd414567f6e514c5e88b5614195b9ba893c8980949974f1eae80d27f7f90b251a094469561598e3dcd2bc143edd69b131595bbf776aa7583687228d8ea578f9f08ea949be49c1b087f430262968f639047eeb91c84a4cc6df66c749fb9b5b38e7e6546683df3a6ae722ea0d644256d82d8f3ba6b8bca23498a7dcc06fcda64d94f15b6bf620e7b272a476b097715f430c1d7c4c221156df5225c9fee4e580a5600713a1ce6e503c37730b5b4d3be23b212eb0ac2a05a7dc6aa88984566664086491ba3214bd9c9a4196d028f6ba448682536b40eab416ea8cf4098101af663d53110ebc2dffd88457ffd70decf1269f3fa61460593671d750ea0ab08aaac98a555a78da62b62625b550f840f34d1b02788bceb09002f615187159295d1a10e2dcfda5c1d399226047a53a1695f0af8121ad144b4dbe411d34d5e4eb4b4075e522d60d0020b2969025021bfc03062e0c8281bfa4cbce38241b53e970acc20ee903fcc81e8770f93367d7eddb95093177337475d5ef009ab799de6950d06ad68e8f9474634672657ba29df601e0be9e362197bafc25fee416a2b6d378dd31294d99317e5cc0d83827f6916ac648d638a515f823d0d784d841c31483b7d030258c62256268055286d3e773316f0f50df6411da24d8aeed75f50f49b0f6cc8672630954c1c3a1632d3497e3be53a4734619bd79aea6ffd87b8278f09775884018c70a6cf7290d5d09c6fa35a2c5fe9be746c9a4cb3e45855a12bf0c0fdeecb5a86922094b0d7b1adf0c10295e0e2ded424c476b8a15ddc44d229951e8a86d359c911e6a4baaeeb2c84cf367e92566ad2bed0c079c614f903d48cd19252c004a2f1de096d83f032d1a86bcd0b53b16668c88258d7d5ca7fc72d41b74ffe5c4a02e5b7077eddbeb77e4678a45e2983e4a1c07e7eb53ebddedca9bf2c52b84b759a88ec4cad17935e7af6c1ae2dd0ce1d37a2dcc74c336a71daf179ebddb5651a41f209b6a5ea7a001efbf74bd21f7fa3708430baddc2b24a7871f7bb443913ca59e64556d361af986aff89975fa48682bd97e707590f3d508427f6a61e293393518b620c12b6d055014a2f5744be4a16a8b39e5cb19112eb529646f83ca092c52945bd873e6dffbd22f9ba99f350689313c2acc9d4a35c182056bf029aa5fbd942a955d5627b815b658a522605fc5a993c4cc3722da94d1509a1926fe2873c02027714784d20f2765c5f299c56a18791b4ca799bf477832093222f805fa125527495975cb5f50f5ca6cba89459b85d674214ff894c33b8a2c85193d7f312de8a42f4eede4fb84ae648dffae1ec13e8ad5663b10847f9d476e1bcacff45389dee0cc7e1a84834ab7904116ef8c89705f931b42a501303da83ac9799dde0df252d0b597e78001229d9a2339bd71c6244fdaebcffc10595c09ddad42bf7cfed789817962bffec261cc1d203910c5282b7971da3eae449202e1eda1d7c7793c2c24d6e6fd6f58331e63a59900e7a0e2c959fbc6b625fd4c95cd61d72ed56a96018d0b94358f9e50fb98eec69d4fae7d5ec303bde80f0bfd1790813", 0x6a7}], 0x3}}], 0x2, 0x0) 391.572802ms ago: executing program 2 (id=21): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0xe) syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 71.301177ms ago: executing program 1 (id=22): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 32.543869ms ago: executing program 4 (id=23): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x1, 0x0, 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) 0s ago: executing program 3 (id=24): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. [ 61.484544][ T4260] cgroup: Unknown subsys name 'net' [ 61.620469][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.864726][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.305714][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.305714][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.306729][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.314624][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.321932][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.330375][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.335869][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.342598][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.350283][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.356798][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.363475][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.370117][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.378249][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.384478][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.391195][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.399775][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.406260][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.412437][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.435044][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.435102][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.442335][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.449958][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.457266][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.464096][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.477807][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.510101][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.524502][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.524683][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.539153][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.553286][ T4278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.931930][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 64.960567][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 65.016210][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 65.058357][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 65.077322][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 65.176328][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.183493][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.191872][ T4277] device bridge_slave_0 entered promiscuous mode [ 65.200543][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.207953][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.216443][ T4275] device bridge_slave_0 entered promiscuous mode [ 65.227847][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.235349][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.243380][ T4275] device bridge_slave_1 entered promiscuous mode [ 65.263926][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.271034][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.281356][ T4277] device bridge_slave_1 entered promiscuous mode [ 65.310112][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.317449][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.325228][ T4276] device bridge_slave_0 entered promiscuous mode [ 65.363456][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.370759][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.381417][ T4276] device bridge_slave_1 entered promiscuous mode [ 65.388567][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.398135][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.406119][ T4273] device bridge_slave_0 entered promiscuous mode [ 65.413378][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.423229][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.431092][ T4274] device bridge_slave_0 entered promiscuous mode [ 65.442785][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.453579][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.465326][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.482673][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.489998][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.497979][ T4273] device bridge_slave_1 entered promiscuous mode [ 65.512262][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.519627][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.527809][ T4274] device bridge_slave_1 entered promiscuous mode [ 65.536749][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.576716][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.590940][ T4277] team0: Port device team_slave_0 added [ 65.598863][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.614434][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.631398][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.642303][ T4277] team0: Port device team_slave_1 added [ 65.649903][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.667841][ T4275] team0: Port device team_slave_0 added [ 65.685396][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.706557][ T4275] team0: Port device team_slave_1 added [ 65.732558][ T4273] team0: Port device team_slave_0 added [ 65.748205][ T4276] team0: Port device team_slave_0 added [ 65.758936][ T4274] team0: Port device team_slave_0 added [ 65.765664][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.772624][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.799048][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.814090][ T4273] team0: Port device team_slave_1 added [ 65.820188][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.827969][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.854954][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.872217][ T4276] team0: Port device team_slave_1 added [ 65.880093][ T4274] team0: Port device team_slave_1 added [ 65.896644][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.903645][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.932710][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.976108][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.983091][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.009305][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.027703][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.034964][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.061118][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.082906][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.091182][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.119242][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.131172][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.138391][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.164588][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.187207][ T4277] device hsr_slave_0 entered promiscuous mode [ 66.193971][ T4277] device hsr_slave_1 entered promiscuous mode [ 66.201072][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.208340][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.234675][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.246405][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.253359][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.279980][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.296702][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.303678][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.329985][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.361719][ T4275] device hsr_slave_0 entered promiscuous mode [ 66.368548][ T4275] device hsr_slave_1 entered promiscuous mode [ 66.375878][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.383817][ T4275] Cannot create hsr debugfs directory [ 66.444480][ T4273] device hsr_slave_0 entered promiscuous mode [ 66.451646][ T4273] device hsr_slave_1 entered promiscuous mode [ 66.458572][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.466699][ T4273] Cannot create hsr debugfs directory [ 66.500686][ T4274] device hsr_slave_0 entered promiscuous mode [ 66.508392][ T4274] device hsr_slave_1 entered promiscuous mode [ 66.514962][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.522512][ T4274] Cannot create hsr debugfs directory [ 66.571264][ T4276] device hsr_slave_0 entered promiscuous mode [ 66.579084][ T4276] device hsr_slave_1 entered promiscuous mode [ 66.585790][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.593353][ T4276] Cannot create hsr debugfs directory [ 66.599698][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 66.599706][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 66.606106][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 66.611949][ T4287] Bluetooth: hci1: command 0x0409 tx timeout [ 66.618047][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 66.888605][ T4275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.902269][ T4275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.915382][ T4275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.925955][ T4275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.954481][ T4273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.974106][ T4273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.998608][ T4273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.011864][ T4273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.037173][ T4277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.075863][ T4277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.085067][ T4277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.105339][ T4277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.159853][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.179124][ T4274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.201885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.211151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.232734][ T4274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.245265][ T4274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.259681][ T4274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.271692][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.318908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.330252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.339630][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.347147][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.358624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.371675][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.392730][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.405663][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.414108][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.426127][ T4276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.439037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.449533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.458613][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.465745][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.493643][ T4276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.502800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.513522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.522407][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.529820][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.537633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.546507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.555168][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.562263][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.570009][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.581534][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.609864][ T4276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.619483][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.628318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.637443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.649405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.659567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.668793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.677491][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.686471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.700818][ T4276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.714384][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.727990][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.738500][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.753483][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.769141][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.786634][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.797828][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.806898][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.815420][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.826650][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.839350][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.855570][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.869572][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.877974][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.888416][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.897230][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.905947][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.914395][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.922868][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.957333][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.991308][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.000797][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.009923][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.017354][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.034873][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.060612][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.069778][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.079593][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.090648][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.097798][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.107273][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.116701][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.125871][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.134910][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.143191][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.152476][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.181318][ T4277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.192392][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.225355][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.239194][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.248388][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.258191][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.268482][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.280649][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.292400][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.302654][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.317702][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.351521][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.370775][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.394378][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.401529][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.410868][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.435303][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.444329][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.464134][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.487411][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.494578][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.529618][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.562034][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.584293][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.596002][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.614819][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.635901][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.655840][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.662939][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.672416][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.680834][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 68.686885][ T4289] Bluetooth: hci3: command 0x041b tx timeout [ 68.692897][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 68.705122][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 68.711170][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 68.724519][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.733157][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.749046][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.760411][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.769964][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.779586][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.788193][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.796072][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.803461][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.811177][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.820696][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.860350][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.873325][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.895801][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.928158][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.947134][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.960973][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.970757][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.985011][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.992136][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.007935][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.031443][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.044610][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.053444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.063206][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.070325][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.091647][ T4275] device veth0_vlan entered promiscuous mode [ 69.116148][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.134996][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.169866][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.181924][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.193409][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.203022][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.263222][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.272712][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.283079][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.293785][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.302414][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.312028][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.321121][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.329433][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.338472][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.354885][ T4275] device veth1_vlan entered promiscuous mode [ 69.363237][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.379299][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.407033][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.416935][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.460337][ T4277] device veth0_vlan entered promiscuous mode [ 69.469335][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.479602][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.487926][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.496075][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.510458][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.519371][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.533393][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.551717][ T4275] device veth0_macvtap entered promiscuous mode [ 69.580554][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.591546][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.610860][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.636408][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.658458][ T4277] device veth1_vlan entered promiscuous mode [ 69.671051][ T4275] device veth1_macvtap entered promiscuous mode [ 69.681680][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.691068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.699618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.708862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.750004][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.760840][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.771217][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.801026][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.820476][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.830931][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.845716][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.858860][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.868945][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.880144][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.889589][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.898925][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.907792][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.916325][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.924457][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.932253][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.940915][ T4273] device veth0_vlan entered promiscuous mode [ 69.952101][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.972517][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.982398][ T4274] device veth0_vlan entered promiscuous mode [ 69.990776][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.002152][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.012871][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.020518][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.030942][ T4273] device veth1_vlan entered promiscuous mode [ 70.051306][ T4277] device veth0_macvtap entered promiscuous mode [ 70.061675][ T4277] device veth1_macvtap entered promiscuous mode [ 70.072044][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.081388][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.090973][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.100277][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.125823][ T4274] device veth1_vlan entered promiscuous mode [ 70.138167][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.146813][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.156074][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.164766][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.172746][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.191019][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.204282][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.219149][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.233677][ T4273] device veth0_macvtap entered promiscuous mode [ 70.242029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.251073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.260865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.269943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.284090][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.295773][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.307112][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.318196][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.346444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.355735][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.366068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.376216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.385985][ T4273] device veth1_macvtap entered promiscuous mode [ 70.401361][ T4277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.418278][ T4277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.427417][ T4277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.439731][ T4277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.474542][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.482562][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.494414][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.503091][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.514459][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.526161][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.534425][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.546571][ T4276] device veth0_vlan entered promiscuous mode [ 70.562967][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.576659][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.586923][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.602584][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.616906][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.627943][ T4274] device veth0_macvtap entered promiscuous mode [ 70.652082][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.661068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.670451][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.697435][ T4276] device veth1_vlan entered promiscuous mode [ 70.721620][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.732992][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.743354][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.754793][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 70.756571][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.760800][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 70.777382][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 70.783407][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 70.789679][ T4278] Bluetooth: hci1: command 0x040f tx timeout [ 70.797508][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.815145][ T4274] device veth1_macvtap entered promiscuous mode [ 70.834551][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.842532][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.850210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.860710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.869955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.878447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.887076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.896740][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.910669][ T4273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.920614][ T4273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.929857][ T4273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.939287][ T4273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.981623][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.992440][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.005586][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.016600][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.026515][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.037162][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.048347][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.062931][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.071956][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.095824][ T4276] device veth0_macvtap entered promiscuous mode [ 71.103096][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.112890][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.123344][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.131755][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.140895][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.152449][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.163971][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.174038][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.184765][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.194927][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.205607][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.218609][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.241643][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.248159][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.266583][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.268181][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.279486][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.282877][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.299044][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.308105][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.327765][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.342978][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.352457][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.361696][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.378475][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.386899][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.395356][ T4276] device veth1_macvtap entered promiscuous mode [ 71.462818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.496570][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.531848][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.549581][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.562985][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.574076][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.584999][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.595914][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.606132][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.617019][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.626900][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.639036][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.650927][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.674738][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.683510][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.708502][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.720895][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.779956][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.791812][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.808015][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.819231][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.834235][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.849464][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.869319][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.889625][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.905999][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.988837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.007935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.483442][ T4361] process 'syz.0.1' launched './file0' with NULL argv: empty string added [ 72.483757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 72.823756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 72.833757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 72.843754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 72.853760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 72.863762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 72.873761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 72.883759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 72.893754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 72.903757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 73.306590][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 73.312648][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 73.317848][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 73.319120][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 73.330692][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 73.364331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.417260][ T4276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.435484][ T4276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.458503][ T4276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.467463][ T4276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.527237][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.566440][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.606545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.693255][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.748709][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.799045][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.996558][ T4368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.079036][ T4368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.575161][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.718061][ T4378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.747543][ T4378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.499857][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.777283][ T4352] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.803726][ C1] sched: RT throttling activated [ 77.993808][ T4352] usb 5-1: Using ep0 maxpacket: 8 [ 78.005377][ T4352] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 78.023786][ T4352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.145855][ T4352] usb 5-1: config 0 descriptor?? [ 78.156808][ T4352] usb 5-1: probing VID:PID(0424:012C) [ 78.175412][ T4352] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 78.181967][ T4352] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 78.213385][ T4352] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 78.223744][ T4352] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 78.230209][ T4352] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 78.267027][ T4398] jffs2: notice: (4398) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 78.573228][ T4352] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 78.790856][ T4352] usb 5-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 81.629511][ T4352] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 81.886271][ T4352] usb 5-1: USB disconnect, device number 2 [ 82.053547][ T4352] USB vub300 remote SDIO host controller[0] now disconnected [ 82.758910][ C0] [ 82.768652][ C0] ================================ [ 82.773755][ C0] WARNING: inconsistent lock state [ 82.778875][ C0] syzkaller #0 Not tainted [ 82.783287][ C0] -------------------------------- [ 82.788563][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 82.795403][ C0] syz.4.23/4435 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 82.801556][ C0] ffff888028dfc648 ((work_completion)(&(&host->detect)->work)){+.?.}-{0:0}, at: __flush_work+0x109/0xac0 [ 82.812811][ C0] {SOFTIRQ-ON-W} state was registered at: [ 82.818612][ C0] lock_acquire+0x1bb/0x4a0 [ 82.823220][ C0] __flush_work+0x122/0xac0 [ 82.827813][ C0] __cancel_work_timer+0x3f4/0x560 [ 82.833011][ C0] mmc_stop_host+0xd5/0x460 [ 82.837607][ C0] mmc_remove_host+0x11/0x60 [ 82.842288][ C0] vub300_disconnect+0x14b/0x2e0 [ 82.847322][ C0] usb_unbind_interface+0x200/0x870 [ 82.852611][ C0] device_release_driver_internal+0x4cf/0x7c0 [ 82.858767][ C0] bus_remove_device+0x2dd/0x400 [ 82.863798][ C0] device_del+0x63f/0xa80 [ 82.868220][ C0] usb_disable_device+0x3e7/0x8a0 [ 82.873336][ C0] usb_disconnect+0x33c/0x8a0 [ 82.878123][ C0] hub_event+0x1d27/0x5200 [ 82.882748][ C0] process_one_work+0x8ab/0x1160 [ 82.887795][ C0] worker_thread+0xd6e/0x12a0 [ 82.892661][ C0] kthread+0x29d/0x330 [ 82.896835][ C0] ret_from_fork+0x1f/0x30 [ 82.901372][ C0] irq event stamp: 74916 [ 82.905622][ C0] hardirqs last enabled at (74916): [] __cancel_work_timer+0x36a/0x560 [ 82.915529][ C0] hardirqs last disabled at (74915): [] try_to_grab_pending+0xfa/0x890 [ 82.925325][ C0] softirqs last enabled at (71994): [] __irq_exit_rcu+0x13b/0x230 [ 82.934771][ C0] softirqs last disabled at (73571): [] __irq_exit_rcu+0x13b/0x230 [ 82.944479][ C0] [ 82.944479][ C0] other info that might help us debug this: [ 82.952694][ C0] Possible unsafe locking scenario: [ 82.952694][ C0] [ 82.960214][ C0] CPU0 [ 82.963507][ C0] ---- [ 82.966783][ C0] lock((work_completion)(&(&host->detect)->work)); [ 82.973445][ C0] [ 82.976883][ C0] lock((work_completion)(&(&host->detect)->work)); [ 82.983717][ C0] [ 82.983717][ C0] *** DEADLOCK *** [ 82.983717][ C0] [ 82.991843][ C0] 1 lock held by syz.4.23/4435: [ 82.996676][ C0] #0: ffffc90000007bc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xcf/0x670 [ 83.007109][ C0] [ 83.007109][ C0] stack backtrace: [ 83.012993][ C0] CPU: 0 PID: 4435 Comm: syz.4.23 Not tainted syzkaller #0 [ 83.020186][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.030239][ C0] Call Trace: [ 83.033523][ C0] [ 83.036356][ C0] dump_stack_lvl+0x188/0x24e [ 83.041026][ C0] ? show_regs_print_info+0x12/0x12 [ 83.046217][ C0] ? unwind_get_return_address+0x49/0x80 [ 83.051841][ C0] valid_state+0x13b/0x1d0 [ 83.056261][ C0] mark_lock_irq+0xa9/0x900 [ 83.060758][ C0] ? stack_trace_save+0xa6/0xf0 [ 83.065598][ C0] ? save_trace+0xbb0/0xbb0 [ 83.070099][ C0] ? save_trace+0x5a/0xbb0 [ 83.074524][ C0] mark_lock+0x208/0x320 [ 83.078763][ C0] __lock_acquire+0xce0/0x7c40 [ 83.083522][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 83.088543][ C0] ? verify_lock_unused+0x140/0x140 [ 83.093734][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 83.098753][ C0] ? debug_object_assert_init+0x1ed/0x300 [ 83.104461][ C0] lock_acquire+0x1bb/0x4a0 [ 83.108969][ C0] ? __flush_work+0x109/0xac0 [ 83.113649][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 83.118834][ C0] ? read_lock_is_recursive+0x10/0x10 [ 83.124205][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 83.130091][ C0] ? _raw_spin_unlock+0x40/0x40 [ 83.134933][ C0] ? slab_free_freelist_hook+0x133/0x1b0 [ 83.140556][ C0] ? kobject_put+0x25c/0x450 [ 83.145142][ C0] ? vub300_inactivity_timer_expired+0x190/0x3e0 [ 83.151463][ C0] ? call_timer_fn+0x1ac/0x670 [ 83.156678][ C0] ? __flush_work+0x109/0xac0 [ 83.161342][ C0] __flush_work+0x122/0xac0 [ 83.165840][ C0] ? __flush_work+0x109/0xac0 [ 83.170516][ C0] ? flush_work+0x20/0x20 [ 83.174832][ C0] ? __timer_delete+0x6c/0x220 [ 83.179582][ C0] ? mark_lock+0x94/0x320 [ 83.183906][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 83.189879][ C0] ? mod_delayed_work_on+0x1b0/0x1b0 [ 83.195160][ C0] ? lock_chain_count+0x20/0x20 [ 83.200000][ C0] ? kasan_quarantine_put+0xd4/0x210 [ 83.205274][ C0] ? __cancel_work_timer+0x36a/0x560 [ 83.210543][ C0] __cancel_work_timer+0x3f4/0x560 [ 83.215645][ C0] ? cancel_work_sync+0x20/0x20 [ 83.220485][ C0] ? kobject_put+0x25c/0x450 [ 83.225079][ C0] ? __kmem_cache_free+0xb6/0x200 [ 83.230092][ C0] ? kobject_put+0x41d/0x450 [ 83.234674][ C0] mmc_free_host+0x15/0x30 [ 83.239083][ C0] call_timer_fn+0x1ac/0x670 [ 83.243761][ C0] ? kref_get+0x70/0x70 [ 83.247923][ C0] ? call_timer_fn+0xcf/0x670 [ 83.252615][ C0] ? __run_timers+0x810/0x810 [ 83.257288][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 83.262504][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 83.267702][ C0] ? kref_get+0x70/0x70 [ 83.271852][ C0] __run_timers+0x56c/0x810 [ 83.276350][ C0] ? detach_timer+0x350/0x350 [ 83.281108][ C0] ? lock_chain_count+0x20/0x20 [ 83.286040][ C0] run_timer_softirq+0x63/0xf0 [ 83.290814][ C0] handle_softirqs+0x291/0x910 [ 83.295570][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 83.300408][ C0] ? do_softirq+0x210/0x210 [ 83.304903][ C0] ? hrtimer_interrupt+0x775/0x980 [ 83.310019][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 83.315209][ C0] __irq_exit_rcu+0x13b/0x230 [ 83.319874][ C0] ? irq_exit_rcu+0x20/0x20 [ 83.324366][ C0] irq_exit_rcu+0x5/0x20 [ 83.328594][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 83.334320][ C0] [ 83.337247][ C0] [ 83.340169][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 83.346167][ C0] RIP: 0010:finish_task_switch+0x267/0x8e0 [ 83.351979][ C0] Code: d9 08 85 c0 0f 84 38 01 00 00 48 85 db 0f 85 57 01 00 00 e9 e7 04 00 00 4c 89 e7 e8 93 20 e3 08 e8 1e 18 2f 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 83.371578][ C0] RSP: 0018:ffffc90004c1f320 EFLAGS: 00000282 [ 83.377637][ C0] RAX: a3ec66b62d6b1400 RBX: 0000000000000000 RCX: a3ec66b62d6b1400 [ 83.385690][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 83.393738][ C0] RBP: ffffc90004c1f370 R08: ffff8880b8e3acc3 R09: 1ffff110171c7598 [ 83.401697][ C0] R10: dffffc0000000000 R11: ffffed10171c7599 R12: ffff888024f91e00 [ 83.409656][ C0] R13: ffff8880b8e3ba08 R14: dffffc0000000000 R15: ffff8880b8e3b790 [ 83.417709][ C0] __schedule+0x1087/0x4030 [ 83.422209][ C0] ? release_firmware_map_entry+0x187/0x187 [ 83.428090][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 83.434070][ C0] schedule+0xb9/0x180 [ 83.438125][ C0] schedule_timeout+0xbd/0x2d0 [ 83.442879][ C0] ? console_conditional_schedule+0x40/0x40 [ 83.448764][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 83.453808][ C0] ? sk_filter_trim_cap+0x143/0x830 [ 83.458995][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 83.464194][ C0] unix_wait_for_peer+0x1f2/0x2e0 [ 83.469421][ C0] ? unix_find_other+0x810/0x810 [ 83.474348][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 83.479356][ C0] ? wake_bit_function+0x200/0x200 [ 83.484457][ C0] ? __rwlock_init+0x140/0x140 [ 83.489256][ C0] ? sk_filter_trim_cap+0x143/0x830 [ 83.494441][ C0] ? unix_dgram_sendmsg+0xae5/0x16f0 [ 83.499725][ C0] ? bpf_lsm_unix_may_send+0x5/0x10 [ 83.504913][ C0] unix_dgram_sendmsg+0xeba/0x16f0 [ 83.510039][ C0] ? unix_dgram_poll+0x680/0x680 [ 83.514969][ C0] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 83.521373][ C0] ? apparmor_socket_sendmsg+0x8a/0x330 [ 83.526912][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 83.532295][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 83.537745][ C0] ? unix_dgram_poll+0x680/0x680 [ 83.542675][ C0] ____sys_sendmsg+0x5ed/0x9a0 [ 83.547689][ C0] ? __might_fault+0xa6/0x120 [ 83.552355][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 83.557365][ C0] ? __import_iovec+0x306/0x510 [ 83.562221][ C0] ? import_iovec+0x6f/0xa0 [ 83.566726][ C0] ___sys_sendmsg+0x2a2/0x360 [ 83.571390][ C0] ? release_firmware_map_entry+0x187/0x187 [ 83.577271][ C0] ? __sys_sendmsg+0x2a0/0x2a0 [ 83.582030][ C0] ? __might_fault+0xc2/0x120 [ 83.586694][ C0] ? __might_fault+0xa6/0x120 [ 83.591358][ C0] __sys_sendmmsg+0x2c3/0x510 [ 83.596023][ C0] ? __ia32_sys_sendmsg+0x80/0x80 [ 83.601037][ C0] ? __ia32_sys_get_robust_list+0x100/0x100 [ 83.606925][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 83.612900][ C0] ? lock_chain_count+0x20/0x20 [ 83.617746][ C0] __x64_sys_sendmmsg+0x9c/0xb0 [ 83.622582][ C0] do_syscall_64+0x4c/0xa0 [ 83.626996][ C0] ? clear_bhb_loop+0x60/0xb0 [ 83.631659][ C0] ? clear_bhb_loop+0x60/0xb0 [ 83.636320][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.642206][ C0] RIP: 0033:0x7f22e639e159 [ 83.646616][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.666204][ C0] RSP: 002b:00007f22e7204028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 83.674604][ C0] RAX: ffffffffffffffda RBX: 00007f22e6625fa0 RCX: 00007f22e639e159 [ 83.682559][ C0] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000004 [ 83.690514][ C0] RBP: 00007f22e643506b R08: 0000000000000000 R09: 0000000000000000 [ 83.698472][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.706430][ C0] R13: 00007f22e6626038 R14: 00007f22e6625fa0 R15: 00007fff3a147e88 [ 83.714395][ C0] [ 83.717517][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:3013 [ 83.726651][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4435, name: syz.4.23 [ 83.735530][ C0] preempt_count: 101, expected: 0 [ 83.740569][ C0] RCU nest depth: 0, expected: 0 [ 83.745531][ C0] INFO: lockdep is turned off. [ 83.750292][ C0] Preemption disabled at: [ 83.750301][ C0] [] schedule+0xb2/0x180 [ 83.755039][ T4430] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 83.760450][ C0] CPU: 0 PID: 4435 Comm: syz.4.23 Not tainted syzkaller #0 [ 83.760468][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.760478][ C0] Call Trace: [ 83.787016][ C0] [ 83.789874][ C0] dump_stack_lvl+0x188/0x24e [ 83.794572][ C0] ? show_regs_print_info+0x12/0x12 [ 83.797004][ T4430] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 83.799781][ C0] ? load_image+0x410/0x410 [ 83.799810][ C0] ? schedule+0xb2/0x180 [ 83.814452][ C0] __might_resched+0x489/0x5f0 [ 83.819234][ C0] ? schedule+0xb2/0x180 [ 83.823491][ C0] ? __might_sleep+0xd0/0xd0 [ 83.828090][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 83.833131][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 83.839046][ C0] ? _raw_spin_unlock+0x40/0x40 [ 83.843919][ C0] ? slab_free_freelist_hook+0x133/0x1b0 [ 83.849573][ C0] ? kobject_put+0x25c/0x450 [ 83.854184][ C0] ? vub300_inactivity_timer_expired+0x190/0x3e0 [ 83.860532][ C0] ? call_timer_fn+0x1ac/0x670 [ 83.865310][ C0] ? __flush_work+0x109/0xac0 [ 83.869993][ C0] __flush_work+0x142/0xac0 [ 83.874508][ C0] ? flush_work+0x20/0x20 [ 83.878848][ C0] ? __timer_delete+0x6c/0x220 [ 83.883625][ C0] ? mark_lock+0x94/0x320 [ 83.887998][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 83.893997][ C0] ? mod_delayed_work_on+0x1b0/0x1b0 [ 83.899295][ C0] ? lock_chain_count+0x20/0x20 [ 83.904167][ C0] ? kasan_quarantine_put+0xd4/0x210 [ 83.909465][ C0] ? __cancel_work_timer+0x36a/0x560 [ 83.914772][ C0] __cancel_work_timer+0x3f4/0x560 [ 83.920073][ C0] ? cancel_work_sync+0x20/0x20 [ 83.924941][ C0] ? kobject_put+0x25c/0x450 [ 83.929549][ C0] ? __kmem_cache_free+0xb6/0x200 [ 83.934593][ C0] ? kobject_put+0x41d/0x450 [ 83.939208][ C0] mmc_free_host+0x15/0x30 [ 83.943733][ C0] call_timer_fn+0x1ac/0x670 [ 83.948334][ C0] ? kref_get+0x70/0x70 [ 83.952509][ C0] ? call_timer_fn+0xcf/0x670 [ 83.957201][ C0] ? __run_timers+0x810/0x810 [ 83.961894][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 83.967162][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 83.972375][ C0] ? kref_get+0x70/0x70 [ 83.976558][ C0] __run_timers+0x56c/0x810 [ 83.981078][ C0] ? detach_timer+0x350/0x350 [ 83.985771][ C0] ? lock_chain_count+0x20/0x20 [ 83.990641][ C0] run_timer_softirq+0x63/0xf0 [ 83.995421][ C0] handle_softirqs+0x291/0x910 [ 84.000198][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 84.005057][ C0] ? do_softirq+0x210/0x210 [ 84.009566][ C0] ? hrtimer_interrupt+0x775/0x980 [ 84.014685][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 84.019892][ C0] __irq_exit_rcu+0x13b/0x230 [ 84.024580][ C0] ? irq_exit_rcu+0x20/0x20 [ 84.029093][ C0] irq_exit_rcu+0x5/0x20 [ 84.033349][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 84.039035][ C0] [ 84.041978][ C0] [ 84.044925][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 84.050927][ C0] RIP: 0010:finish_task_switch+0x267/0x8e0 [ 84.056759][ C0] Code: d9 08 85 c0 0f 84 38 01 00 00 48 85 db 0f 85 57 01 00 00 e9 e7 04 00 00 4c 89 e7 e8 93 20 e3 08 e8 1e 18 2f 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 84.076393][ C0] RSP: 0018:ffffc90004c1f320 EFLAGS: 00000282 [ 84.082569][ C0] RAX: a3ec66b62d6b1400 RBX: 0000000000000000 RCX: a3ec66b62d6b1400 [ 84.090557][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 84.098553][ C0] RBP: ffffc90004c1f370 R08: ffff8880b8e3acc3 R09: 1ffff110171c7598 [ 84.106546][ C0] R10: dffffc0000000000 R11: ffffed10171c7599 R12: ffff888024f91e00 [ 84.114547][ C0] R13: ffff8880b8e3ba08 R14: dffffc0000000000 R15: ffff8880b8e3b790 [ 84.122534][ C0] __schedule+0x1087/0x4030 [ 84.127050][ C0] ? release_firmware_map_entry+0x187/0x187 [ 84.133026][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 84.139007][ C0] schedule+0xb9/0x180 [ 84.143095][ C0] schedule_timeout+0xbd/0x2d0 [ 84.147846][ C0] ? console_conditional_schedule+0x40/0x40 [ 84.153742][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 84.158792][ C0] ? sk_filter_trim_cap+0x143/0x830 [ 84.164023][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 84.169235][ C0] unix_wait_for_peer+0x1f2/0x2e0 [ 84.174266][ C0] ? unix_find_other+0x810/0x810 [ 84.179259][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 84.184277][ C0] ? wake_bit_function+0x200/0x200 [ 84.189383][ C0] ? __rwlock_init+0x140/0x140 [ 84.194144][ C0] ? sk_filter_trim_cap+0x143/0x830 [ 84.199502][ C0] ? unix_dgram_sendmsg+0xae5/0x16f0 [ 84.204886][ C0] ? bpf_lsm_unix_may_send+0x5/0x10 [ 84.210179][ C0] unix_dgram_sendmsg+0xeba/0x16f0 [ 84.215290][ C0] ? unix_dgram_poll+0x680/0x680 [ 84.220226][ C0] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 84.226744][ C0] ? apparmor_socket_sendmsg+0x8a/0x330 [ 84.232384][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 84.237673][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 84.243155][ C0] ? unix_dgram_poll+0x680/0x680 [ 84.248116][ C0] ____sys_sendmsg+0x5ed/0x9a0 [ 84.252880][ C0] ? __might_fault+0xa6/0x120 [ 84.257588][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 84.262598][ C0] ? __import_iovec+0x306/0x510 [ 84.267455][ C0] ? import_iovec+0x6f/0xa0 [ 84.272142][ C0] ___sys_sendmsg+0x2a2/0x360 [ 84.273837][ T4289] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.276896][ C0] ? release_firmware_map_entry+0x187/0x187 [ 84.276922][ C0] ? __sys_sendmsg+0x2a0/0x2a0 [ 84.282896][ T4289] Bluetooth: hci1: command 0x2016 tx timeout [ 84.288761][ C0] ? __might_fault+0xc2/0x120 [ 84.288782][ C0] ? __might_fault+0xa6/0x120 [ 84.288798][ C0] __sys_sendmmsg+0x2c3/0x510 [ 84.288816][ C0] ? __ia32_sys_sendmsg+0x80/0x80 [ 84.288833][ C0] ? __ia32_sys_get_robust_list+0x100/0x100 [ 84.288855][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 84.330522][ C0] ? lock_chain_count+0x20/0x20 [ 84.335378][ C0] __x64_sys_sendmmsg+0x9c/0xb0 [ 84.340244][ C0] do_syscall_64+0x4c/0xa0 [ 84.344670][ C0] ? clear_bhb_loop+0x60/0xb0 [ 84.349353][ C0] ? clear_bhb_loop+0x60/0xb0 [ 84.354043][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.359957][ C0] RIP: 0033:0x7f22e639e159 [ 84.364359][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.383959][ C0] RSP: 002b:00007f22e7204028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 84.392361][ C0] RAX: ffffffffffffffda RBX: 00007f22e6625fa0 RCX: 00007f22e639e159 [ 84.400322][ C0] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000004 [ 84.408304][ C0] RBP: 00007f22e643506b R08: 0000000000000000 R09: 0000000000000000 [ 84.416348][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.424300][ C0] R13: 00007f22e6626038 R14: 00007f22e6625fa0 R15: 00007fff3a147e88 [ 84.432260][ C0] [ 84.435318][ C0] ODEBUG: object ffffc900000079a0 is NOT on stack ffffc90004c18000, but annotated. [ 84.444828][ C0] ------------[ cut here ]------------ [ 84.450293][ C0] WARNING: CPU: 0 PID: 4435 at lib/debugobjects.c:558 __debug_object_init+0x18e/0x440 [ 84.459863][ C0] Modules linked in: [ 84.463753][ C0] CPU: 0 PID: 4435 Comm: syz.4.23 Tainted: G W syzkaller #0 [ 84.472407][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.482446][ C0] RIP: 0010:__debug_object_init+0x18e/0x440 [ 84.488335][ C0] Code: 24 04 74 2f 41 ff c6 44 89 35 7e 6a dd 12 48 c7 c1 40 71 df 8a 48 c7 c7 a0 71 df 8a 84 c0 48 0f 45 f9 48 89 de e8 f2 b9 0c 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 84.508015][ C0] RSP: 0018:ffffc90000007908 EFLAGS: 00010046 [ 84.514072][ C0] RAX: 0000000000000050 RBX: ffffc900000079a0 RCX: a3ec66b62d6b1400 [ 84.522023][ C0] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 84.529969][ C0] RBP: dffffc0000000000 R08: ffffc90000007587 R09: 1ffff92000000eb0 [ 84.538027][ C0] R10: dffffc0000000000 R11: fffff52000000eb1 R12: ffff888024f91e20 [ 84.545976][ C0] R13: ffff88802bc8b150 R14: 0000000000000001 R15: ffffffff8a8d3120 [ 84.553932][ C0] FS: 00007f22e72046c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 84.562931][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.569491][ C0] CR2: 00007f22e63eb840 CR3: 0000000058653000 CR4: 00000000003506f0 [ 84.577531][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.585497][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.593444][ C0] Call Trace: [ 84.596707][ C0] [ 84.599531][ C0] __synchronize_srcu+0x227/0x350 [ 84.604553][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 84.610251][ C0] ? _raw_spin_unlock+0x40/0x40 [ 84.615100][ C0] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 84.620646][ C0] ? synchronize_srcu+0x18f/0x1b0 [ 84.625667][ C0] wakeup_source_unregister+0x112/0x190 [ 84.631195][ C0] mmc_host_classdev_release+0x43/0xf0 [ 84.636636][ C0] ? mmc_free_host+0x30/0x30 [ 84.641224][ C0] device_release+0x92/0x1c0 [ 84.645794][ C0] kobject_put+0x217/0x450 [ 84.650193][ C0] call_timer_fn+0x1ac/0x670 [ 84.654762][ C0] ? kref_get+0x70/0x70 [ 84.658900][ C0] ? call_timer_fn+0xcf/0x670 [ 84.663557][ C0] ? __run_timers+0x810/0x810 [ 84.668321][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 84.673520][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 84.678708][ C0] ? kref_get+0x70/0x70 [ 84.682850][ C0] __run_timers+0x56c/0x810 [ 84.687338][ C0] ? detach_timer+0x350/0x350 [ 84.691996][ C0] ? lock_chain_count+0x20/0x20 [ 84.696846][ C0] run_timer_softirq+0x63/0xf0 [ 84.701589][ C0] handle_softirqs+0x291/0x910 [ 84.706336][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 84.711164][ C0] ? do_softirq+0x210/0x210 [ 84.715662][ C0] ? hrtimer_interrupt+0x775/0x980 [ 84.720752][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 84.725925][ C0] __irq_exit_rcu+0x13b/0x230 [ 84.730578][ C0] ? irq_exit_rcu+0x20/0x20 [ 84.735061][ C0] irq_exit_rcu+0x5/0x20 [ 84.739279][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 84.744921][ C0] [ 84.747843][ C0] [ 84.750755][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 84.756720][ C0] RIP: 0010:finish_task_switch+0x267/0x8e0 [ 84.762509][ C0] Code: d9 08 85 c0 0f 84 38 01 00 00 48 85 db 0f 85 57 01 00 00 e9 e7 04 00 00 4c 89 e7 e8 93 20 e3 08 e8 1e 18 2f 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 84.782182][ C0] RSP: 0018:ffffc90004c1f320 EFLAGS: 00000282 [ 84.788230][ C0] RAX: a3ec66b62d6b1400 RBX: 0000000000000000 RCX: a3ec66b62d6b1400 [ 84.796188][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 84.804212][ C0] RBP: ffffc90004c1f370 R08: ffff8880b8e3acc3 R09: 1ffff110171c7598 [ 84.812182][ C0] R10: dffffc0000000000 R11: ffffed10171c7599 R12: ffff888024f91e00 [ 84.820140][ C0] R13: ffff8880b8e3ba08 R14: dffffc0000000000 R15: ffff8880b8e3b790 [ 84.828111][ C0] __schedule+0x1087/0x4030 [ 84.832605][ C0] ? release_firmware_map_entry+0x187/0x187 [ 84.838507][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 84.844475][ C0] schedule+0xb9/0x180 [ 84.848525][ C0] schedule_timeout+0xbd/0x2d0 [ 84.853288][ C0] ? console_conditional_schedule+0x40/0x40 [ 84.859169][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 84.864182][ C0] ? sk_filter_trim_cap+0x143/0x830 [ 84.869366][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 84.874572][ C0] unix_wait_for_peer+0x1f2/0x2e0 [ 84.879689][ C0] ? unix_find_other+0x810/0x810 [ 84.884632][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 84.889652][ C0] ? wake_bit_function+0x200/0x200 [ 84.894758][ C0] ? __rwlock_init+0x140/0x140 [ 84.899529][ C0] ? sk_filter_trim_cap+0x143/0x830 [ 84.904714][ C0] ? unix_dgram_sendmsg+0xae5/0x16f0 [ 84.910005][ C0] ? bpf_lsm_unix_may_send+0x5/0x10 [ 84.915186][ C0] unix_dgram_sendmsg+0xeba/0x16f0 [ 84.920288][ C0] ? unix_dgram_poll+0x680/0x680 [ 84.925209][ C0] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 84.931614][ C0] ? apparmor_socket_sendmsg+0x8a/0x330 [ 84.937156][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 84.942614][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 84.948070][ C0] ? unix_dgram_poll+0x680/0x680 [ 84.952991][ C0] ____sys_sendmsg+0x5ed/0x9a0 [ 84.957747][ C0] ? __might_fault+0xa6/0x120 [ 84.962404][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 84.967418][ C0] ? __import_iovec+0x306/0x510 [ 84.972251][ C0] ? import_iovec+0x6f/0xa0 [ 84.976734][ C0] ___sys_sendmsg+0x2a2/0x360 [ 84.981389][ C0] ? release_firmware_map_entry+0x187/0x187 [ 84.987270][ C0] ? __sys_sendmsg+0x2a0/0x2a0 [ 84.992016][ C0] ? __might_fault+0xc2/0x120 [ 84.996673][ C0] ? __might_fault+0xa6/0x120 [ 85.001425][ C0] __sys_sendmmsg+0x2c3/0x510 [ 85.006086][ C0] ? __ia32_sys_sendmsg+0x80/0x80 [ 85.011089][ C0] ? __ia32_sys_get_robust_list+0x100/0x100 [ 85.016962][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 85.023110][ C0] ? lock_chain_count+0x20/0x20 [ 85.027942][ C0] __x64_sys_sendmmsg+0x9c/0xb0 [ 85.032858][ C0] do_syscall_64+0x4c/0xa0 [ 85.037251][ C0] ? clear_bhb_loop+0x60/0xb0 [ 85.041907][ C0] ? clear_bhb_loop+0x60/0xb0 [ 85.046559][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.052607][ C0] RIP: 0033:0x7f22e639e159 [ 85.057003][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.076584][ C0] RSP: 002b:00007f22e7204028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 85.084976][ C0] RAX: ffffffffffffffda RBX: 00007f22e6625fa0 RCX: 00007f22e639e159 [ 85.092928][ C0] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000004 [ 85.100891][ C0] RBP: 00007f22e643506b R08: 0000000000000000 R09: 0000000000000000 [ 85.108844][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.116792][ C0] R13: 00007f22e6626038 R14: 00007f22e6625fa0 R15: 00007fff3a147e88 [ 85.124770][ C0] [ 85.127782][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.135039][ C0] CPU: 0 PID: 4435 Comm: syz.4.23 Tainted: G W syzkaller #0 [ 85.143691][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.153722][ C0] Call Trace: [ 85.156984][ C0] [ 85.159818][ C0] dump_stack_lvl+0x188/0x24e [ 85.164500][ C0] ? memcpy+0x3c/0x60 [ 85.168469][ C0] ? show_regs_print_info+0x12/0x12 [ 85.173658][ C0] ? load_image+0x410/0x410 [ 85.178149][ C0] panic+0x2d3/0x710 [ 85.182022][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 85.186539][ C0] __warn+0x2f8/0x4f0 [ 85.190529][ C0] ? __debug_object_init+0x18e/0x440 [ 85.195799][ C0] ? __debug_object_init+0x18e/0x440 [ 85.201091][ C0] report_bug+0x2ba/0x4f0 [ 85.205403][ C0] ? __debug_object_init+0x18e/0x440 [ 85.210683][ C0] handle_bug+0x3a/0x70 [ 85.214838][ C0] exc_invalid_op+0x16/0x40 [ 85.219333][ C0] asm_exc_invalid_op+0x16/0x20 [ 85.224168][ C0] RIP: 0010:__debug_object_init+0x18e/0x440 [ 85.230044][ C0] Code: 24 04 74 2f 41 ff c6 44 89 35 7e 6a dd 12 48 c7 c1 40 71 df 8a 48 c7 c7 a0 71 df 8a 84 c0 48 0f 45 f9 48 89 de e8 f2 b9 0c 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 85.249633][ C0] RSP: 0018:ffffc90000007908 EFLAGS: 00010046 [ 85.255678][ C0] RAX: 0000000000000050 RBX: ffffc900000079a0 RCX: a3ec66b62d6b1400 [ 85.263627][ C0] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 85.271575][ C0] RBP: dffffc0000000000 R08: ffffc90000007587 R09: 1ffff92000000eb0 [ 85.279542][ C0] R10: dffffc0000000000 R11: fffff52000000eb1 R12: ffff888024f91e20 [ 85.287504][ C0] R13: ffff88802bc8b150 R14: 0000000000000001 R15: ffffffff8a8d3120 [ 85.295582][ C0] ? __debug_object_init+0x18e/0x440 [ 85.300874][ C0] __synchronize_srcu+0x227/0x350 [ 85.305907][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 85.311613][ C0] ? _raw_spin_unlock+0x40/0x40 [ 85.316542][ C0] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 85.322102][ C0] ? synchronize_srcu+0x18f/0x1b0 [ 85.327123][ C0] wakeup_source_unregister+0x112/0x190 [ 85.332658][ C0] mmc_host_classdev_release+0x43/0xf0 [ 85.338102][ C0] ? mmc_free_host+0x30/0x30 [ 85.342687][ C0] device_release+0x92/0x1c0 [ 85.347272][ C0] kobject_put+0x217/0x450 [ 85.351681][ C0] call_timer_fn+0x1ac/0x670 [ 85.356252][ C0] ? kref_get+0x70/0x70 [ 85.360389][ C0] ? call_timer_fn+0xcf/0x670 [ 85.365042][ C0] ? __run_timers+0x810/0x810 [ 85.369842][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 85.375047][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 85.380250][ C0] ? kref_get+0x70/0x70 [ 85.384399][ C0] __run_timers+0x56c/0x810 [ 85.388892][ C0] ? detach_timer+0x350/0x350 [ 85.393988][ C0] ? lock_chain_count+0x20/0x20 [ 85.398858][ C0] run_timer_softirq+0x63/0xf0 [ 85.403606][ C0] handle_softirqs+0x291/0x910 [ 85.408354][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 85.413294][ C0] ? do_softirq+0x210/0x210 [ 85.417774][ C0] ? hrtimer_interrupt+0x775/0x980 [ 85.422863][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 85.428037][ C0] __irq_exit_rcu+0x13b/0x230 [ 85.432694][ C0] ? irq_exit_rcu+0x20/0x20 [ 85.437189][ C0] irq_exit_rcu+0x5/0x20 [ 85.441416][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 85.447040][ C0] [ 85.449950][ C0] [ 85.452862][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 85.458826][ C0] RIP: 0010:finish_task_switch+0x267/0x8e0 [ 85.464613][ C0] Code: d9 08 85 c0 0f 84 38 01 00 00 48 85 db 0f 85 57 01 00 00 e9 e7 04 00 00 4c 89 e7 e8 93 20 e3 08 e8 1e 18 2f 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 85.484203][ C0] RSP: 0018:ffffc90004c1f320 EFLAGS: 00000282 [ 85.490249][ C0] RAX: a3ec66b62d6b1400 RBX: 0000000000000000 RCX: a3ec66b62d6b1400 [ 85.498197][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 85.506145][ C0] RBP: ffffc90004c1f370 R08: ffff8880b8e3acc3 R09: 1ffff110171c7598 [ 85.514100][ C0] R10: dffffc0000000000 R11: ffffed10171c7599 R12: ffff888024f91e00 [ 85.522227][ C0] R13: ffff8880b8e3ba08 R14: dffffc0000000000 R15: ffff8880b8e3b790 [ 85.530188][ C0] __schedule+0x1087/0x4030 [ 85.534693][ C0] ? release_firmware_map_entry+0x187/0x187 [ 85.540656][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 85.546676][ C0] schedule+0xb9/0x180 [ 85.550739][ C0] schedule_timeout+0xbd/0x2d0 [ 85.555484][ C0] ? console_conditional_schedule+0x40/0x40 [ 85.561533][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 85.566544][ C0] ? sk_filter_trim_cap+0x143/0x830 [ 85.571722][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 85.576897][ C0] unix_wait_for_peer+0x1f2/0x2e0 [ 85.581929][ C0] ? unix_find_other+0x810/0x810 [ 85.586943][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 85.591963][ C0] ? wake_bit_function+0x200/0x200 [ 85.597141][ C0] ? __rwlock_init+0x140/0x140 [ 85.601940][ C0] ? sk_filter_trim_cap+0x143/0x830 [ 85.607175][ C0] ? unix_dgram_sendmsg+0xae5/0x16f0 [ 85.612479][ C0] ? bpf_lsm_unix_may_send+0x5/0x10 [ 85.617669][ C0] unix_dgram_sendmsg+0xeba/0x16f0 [ 85.622772][ C0] ? unix_dgram_poll+0x680/0x680 [ 85.627694][ C0] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 85.634094][ C0] ? apparmor_socket_sendmsg+0x8a/0x330 [ 85.639670][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 85.644977][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 85.650458][ C0] ? unix_dgram_poll+0x680/0x680 [ 85.655414][ C0] ____sys_sendmsg+0x5ed/0x9a0 [ 85.660257][ C0] ? __might_fault+0xa6/0x120 [ 85.664935][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 85.669943][ C0] ? __import_iovec+0x306/0x510 [ 85.674808][ C0] ? import_iovec+0x6f/0xa0 [ 85.679301][ C0] ___sys_sendmsg+0x2a2/0x360 [ 85.684150][ C0] ? release_firmware_map_entry+0x187/0x187 [ 85.690040][ C0] ? __sys_sendmsg+0x2a0/0x2a0 [ 85.694803][ C0] ? __might_fault+0xc2/0x120 [ 85.699473][ C0] ? __might_fault+0xa6/0x120 [ 85.704127][ C0] __sys_sendmmsg+0x2c3/0x510 [ 85.708883][ C0] ? __ia32_sys_sendmsg+0x80/0x80 [ 85.713994][ C0] ? __ia32_sys_get_robust_list+0x100/0x100 [ 85.719901][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 85.725906][ C0] ? lock_chain_count+0x20/0x20 [ 85.730753][ C0] __x64_sys_sendmmsg+0x9c/0xb0 [ 85.735590][ C0] do_syscall_64+0x4c/0xa0 [ 85.740004][ C0] ? clear_bhb_loop+0x60/0xb0 [ 85.744671][ C0] ? clear_bhb_loop+0x60/0xb0 [ 85.749333][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.755214][ C0] RIP: 0033:0x7f22e639e159 [ 85.759607][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.779195][ C0] RSP: 002b:00007f22e7204028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 85.787590][ C0] RAX: ffffffffffffffda RBX: 00007f22e6625fa0 RCX: 00007f22e639e159 [ 85.795549][ C0] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000004 [ 85.803518][ C0] RBP: 00007f22e643506b R08: 0000000000000000 R09: 0000000000000000 [ 85.811505][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.819563][ C0] R13: 00007f22e6626038 R14: 00007f22e6625fa0 R15: 00007fff3a147e88 [ 85.827520][ C0] [ 86.935638][ C0] Shutting down cpus with NMI [ 86.940627][ C0] Kernel Offset: disabled [ 86.945029][ C0] Rebooting in 86400 seconds..