last executing test programs: 2.815861196s ago: executing program 2 (id=88): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 2.576798092s ago: executing program 2 (id=90): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000580)="df12c9f7b9a60000000000000000", 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.762639594s ago: executing program 1 (id=100): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000200), 0x8) listen(0xffffffffffffffff, 0x1) 1.641962987s ago: executing program 2 (id=101): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}, @TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000440)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.412799812s ago: executing program 3 (id=104): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ip6gretap0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xffffffdd}}) 1.324608815s ago: executing program 0 (id=105): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000200000000000000000008500000036000000950000000000000049db185086ea6334aa453ec969352991eb38f162575a68c0e574b1758d28a5aa8e86720031a818d25477fc738a2157e500171427cceeb8adc298f40b9affaa9ceb28e1ac72f4d412696ddf196f7380423f5d1cff072e84bf03770a9bf0bede62157b45b5a2ef59cea5048ffb"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc5, &(0x7f00000001c0)=""/197}, 0x80) syz_emit_ethernet(0x5e, &(0x7f0000000c00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60c6dd0000283afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800fe000000000000000000003903669faeb9808aed37d12ec7a4a494b34ab0b263d63aa874b707327921b00db93a9259c87cc60d7790047982eb8d1999c84a3919fcfe932cda65e67ad97fb4b1f9c39a43187bdf043232b86dddae2488eaf6ccb53cfcc2da70a5164613667693fa613ab717c6e336b105f0a9118d3f"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xffff}, {0xfff2, 0x2}, {0x1, 0x9}}}, 0x24}}, 0x4000004) 1.324405755s ago: executing program 1 (id=106): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x8, @time={0x8, 0x1}, {0x0, 0xff}, {0x0, 0xfe}, @queue={0x1, {0x6, 0x4}}}], 0x1c) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000c00)) 1.14921671s ago: executing program 3 (id=107): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0020000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) 1.12347971s ago: executing program 1 (id=108): r0 = socket$inet_udp(0x2, 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/69, 0xe56}], 0x10000000000000b7) 839.322088ms ago: executing program 3 (id=109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/17, 0x11}, {&(0x7f0000000180)=""/62, 0x3e}], 0x2, 0x80000001, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) socket$inet6_tcp(0xa, 0x1, 0x0) 838.419928ms ago: executing program 2 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 698.496442ms ago: executing program 0 (id=110): mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000580)="df12c9f7b9a60000000000000000", 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 623.073904ms ago: executing program 0 (id=111): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n 1 [ 89.131131][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.140700][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.151696][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.160381][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.168179][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.176107][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.183565][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.194120][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.202344][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.210839][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.218171][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.283662][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.294847][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.304438][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.311658][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.319508][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.329561][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.339481][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.347209][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.352342][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.361693][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.369416][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.377355][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.882513][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 89.965736][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 90.056533][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 90.095302][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.103507][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.111252][ T5780] bridge_slave_0: entered allmulticast mode [ 90.119206][ T5780] bridge_slave_0: entered promiscuous mode [ 90.149542][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 90.175653][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.183681][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.191379][ T5780] bridge_slave_1: entered allmulticast mode [ 90.198809][ T5780] bridge_slave_1: entered promiscuous mode [ 90.273760][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.281676][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.292072][ T5775] bridge_slave_0: entered allmulticast mode [ 90.299304][ T5775] bridge_slave_0: entered promiscuous mode [ 90.308482][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.315653][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.323409][ T5775] bridge_slave_1: entered allmulticast mode [ 90.330562][ T5775] bridge_slave_1: entered promiscuous mode [ 90.349558][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.395806][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.478419][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.491281][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.509420][ T5780] team0: Port device team_slave_0 added [ 90.515727][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.523501][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.531035][ T5779] bridge_slave_0: entered allmulticast mode [ 90.541224][ T5779] bridge_slave_0: entered promiscuous mode [ 90.584141][ T5780] team0: Port device team_slave_1 added [ 90.590575][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.597871][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.605094][ T5779] bridge_slave_1: entered allmulticast mode [ 90.612749][ T5779] bridge_slave_1: entered promiscuous mode [ 90.622684][ T5775] team0: Port device team_slave_0 added [ 90.632463][ T5775] team0: Port device team_slave_1 added [ 90.650351][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.657586][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.664842][ T5776] bridge_slave_0: entered allmulticast mode [ 90.672886][ T5776] bridge_slave_0: entered promiscuous mode [ 90.723773][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.731276][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.738632][ T5776] bridge_slave_1: entered allmulticast mode [ 90.746199][ T5776] bridge_slave_1: entered promiscuous mode [ 90.754206][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.761446][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.787807][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.801456][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.808576][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.834746][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.879316][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.920522][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.927734][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.953874][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.970376][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.992164][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.024947][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.032414][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.065151][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.078963][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.093006][ T5779] team0: Port device team_slave_0 added [ 91.125399][ T5780] hsr_slave_0: entered promiscuous mode [ 91.133453][ T5780] hsr_slave_1: entered promiscuous mode [ 91.154488][ T5779] team0: Port device team_slave_1 added [ 91.184860][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.192181][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.219313][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.258743][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.265765][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.295054][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.320264][ T5776] team0: Port device team_slave_0 added [ 91.367930][ T5783] Bluetooth: hci2: command tx timeout [ 91.382255][ T5776] team0: Port device team_slave_1 added [ 91.405384][ T5775] hsr_slave_0: entered promiscuous mode [ 91.412834][ T5775] hsr_slave_1: entered promiscuous mode [ 91.419345][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.427695][ T5775] Cannot create hsr debugfs directory [ 91.448426][ T5783] Bluetooth: hci1: command tx timeout [ 91.454068][ T5783] Bluetooth: hci3: command tx timeout [ 91.461036][ T5791] Bluetooth: hci0: command tx timeout [ 91.520931][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.528106][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.554250][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.577728][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.584745][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.612348][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.656149][ T5779] hsr_slave_0: entered promiscuous mode [ 91.662737][ T5779] hsr_slave_1: entered promiscuous mode [ 91.669307][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.677505][ T5779] Cannot create hsr debugfs directory [ 91.810044][ T5776] hsr_slave_0: entered promiscuous mode [ 91.822625][ T5776] hsr_slave_1: entered promiscuous mode [ 91.829789][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.837855][ T5776] Cannot create hsr debugfs directory [ 92.056704][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.073083][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.120178][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.132011][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.268215][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.271414][ T9] cfg80211: failed to load regulatory.db [ 92.290688][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.302357][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.321480][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.427876][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.440956][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.452545][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.466460][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.581439][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.592443][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.622049][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.648576][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.688145][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.765562][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.786229][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.814436][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.821873][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.853023][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.860215][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.899760][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.936590][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.943851][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.988019][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.996318][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.054726][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.101339][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.159819][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.203342][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.210624][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.226460][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.246128][ T5775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.257985][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.320700][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.327934][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.371087][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.400512][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.407780][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.448024][ T5783] Bluetooth: hci2: command tx timeout [ 93.460139][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.467403][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.528370][ T5783] Bluetooth: hci3: command tx timeout [ 93.533857][ T5783] Bluetooth: hci0: command tx timeout [ 93.538863][ T5791] Bluetooth: hci1: command tx timeout [ 93.784078][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.863542][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.972297][ T5780] veth0_vlan: entered promiscuous mode [ 94.019682][ T5780] veth1_vlan: entered promiscuous mode [ 94.101885][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.121814][ T5775] veth0_vlan: entered promiscuous mode [ 94.141870][ T5775] veth1_vlan: entered promiscuous mode [ 94.190768][ T5780] veth0_macvtap: entered promiscuous mode [ 94.230223][ T5780] veth1_macvtap: entered promiscuous mode [ 94.251288][ T5775] veth0_macvtap: entered promiscuous mode [ 94.274769][ T5775] veth1_macvtap: entered promiscuous mode [ 94.289023][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.303767][ T5776] veth0_vlan: entered promiscuous mode [ 94.346478][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.364450][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.403065][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.415337][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.431298][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.440828][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.451441][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.461640][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.470787][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.482627][ T5776] veth1_vlan: entered promiscuous mode [ 94.512017][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.525923][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.542362][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.583102][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.594253][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.603607][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.615363][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.645065][ T5779] veth0_vlan: entered promiscuous mode [ 94.693638][ T5779] veth1_vlan: entered promiscuous mode [ 94.713679][ T5776] veth0_macvtap: entered promiscuous mode [ 94.753554][ T5776] veth1_macvtap: entered promiscuous mode [ 94.795021][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.824057][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.881950][ T5779] veth0_macvtap: entered promiscuous mode [ 94.904402][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.913457][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.924994][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.938595][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.948807][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.961038][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.973958][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.989391][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.004079][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.015452][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.026366][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.038232][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.059634][ T5779] veth1_macvtap: entered promiscuous mode [ 95.096481][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.111110][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.120023][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.129581][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.164741][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.180052][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.194035][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.204942][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.215391][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.232926][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.245748][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.268069][ T2929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.275986][ T2929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.373434][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.392926][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.404071][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.415089][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.433134][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.467760][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.485645][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.521236][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.537199][ T5783] Bluetooth: hci2: command tx timeout [ 95.562148][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.571960][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.581543][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.598541][ T2929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.607245][ T5783] Bluetooth: hci1: command tx timeout [ 95.612708][ T5783] Bluetooth: hci3: command tx timeout [ 95.618861][ T5788] Bluetooth: hci0: command tx timeout [ 95.635879][ T2929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.644127][ T5850] syz.1.4[5850]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.671127][ T5850] loop1: detected capacity change from 0 to 1024 [ 95.681131][ T5850] ======================================================= [ 95.681131][ T5850] WARNING: The mand mount option has been deprecated and [ 95.681131][ T5850] and is ignored by this kernel. Remove the mand [ 95.681131][ T5850] option from the mount to silence this warning. [ 95.681131][ T5850] ======================================================= [ 95.730848][ T5850] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a015c01c, mo2=0002] [ 95.794682][ T5850] System zones: 0-1, 3-36 [ 95.844446][ T5850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.886534][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.921653][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.115065][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.143683][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.157621][ T2929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.165518][ T2929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.177501][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.321575][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.352501][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.526099][ T5862] loop0: detected capacity change from 0 to 1024 [ 96.611118][ T5865] loop7: detected capacity change from 0 to 16384 [ 96.618340][ T5862] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a015c01c, mo2=0002] [ 96.626626][ T5862] System zones: 0-1, 3-36 [ 96.692454][ T5862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.874540][ T5868] syzkaller0: entered promiscuous mode [ 96.895998][ T5868] syzkaller0: entered allmulticast mode [ 96.971806][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.983208][ T5870] loop7: detected capacity change from 16384 to 0 [ 97.607659][ T5783] Bluetooth: hci2: command tx timeout [ 97.688370][ T5783] Bluetooth: hci3: command tx timeout [ 97.693881][ T5783] Bluetooth: hci0: command tx timeout [ 97.699453][ T5783] Bluetooth: hci1: command tx timeout [ 99.028066][ T5896] Illegal XDP return value 4294967294 on prog (id 4) dev N/A, expect packet loss! [ 99.165574][ T5899] loop0: detected capacity change from 0 to 1024 [ 99.262787][ T5899] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a015c01c, mo2=0002] [ 99.301120][ T5899] System zones: 0-1, 3-36 [ 99.335741][ T5899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.672735][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.387639][ T5920] syzkaller0: entered promiscuous mode [ 100.412747][ T5920] syzkaller0: entered allmulticast mode [ 100.801327][ T5930] loop0: detected capacity change from 0 to 1024 [ 100.841693][ T5930] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a015c01c, mo2=0002] [ 100.862781][ T5930] System zones: 0-1, 3-36 [ 100.952830][ T5930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.124836][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.356356][ T5985] loop1: detected capacity change from 0 to 512 [ 104.503428][ T6021] loop1: detected capacity change from 0 to 512 [ 105.515212][ T6031] loop2: detected capacity change from 0 to 1024 [ 105.559325][ T6031] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a015c01c, mo2=0002] [ 105.605742][ T6031] System zones: 0-1, 3-36 [ 105.654919][ T6031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.757676][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.469966][ T6059] loop2: detected capacity change from 0 to 1024 [ 106.540942][ T6059] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a015c01c, mo2=0002] [ 106.597580][ T6059] System zones: 0-1, 3-36 [ 106.634034][ T6065] loop0: detected capacity change from 0 to 512 [ 106.647093][ T6059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.776257][ T6067] syzkaller0: entered promiscuous mode [ 106.800182][ T6067] syzkaller0: entered allmulticast mode [ 106.831292][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 106.850750][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.664839][ T6094] loop0: detected capacity change from 0 to 512 [ 107.876590][ T6098] loop3: detected capacity change from 0 to 1024 [ 107.914721][ T6098] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a015c01c, mo2=0002] [ 107.955180][ T6098] System zones: 0-1, 3-36 [ 108.028418][ T6098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.280086][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.358103][ T6112] syzkaller0: entered promiscuous mode [ 108.363675][ T6112] syzkaller0: entered allmulticast mode [ 108.666189][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 214.726818][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 214.733978][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6138/1:b..l P6142/3:b..l [ 214.743726][ C0] rcu: (detected by 0, t=10503 jiffies, g=12137, q=581 ncpus=2) [ 214.751508][ C0] task:syz-executor state:R running task stack:29032 pid:6142 ppid:5779 flags:0x00004000 [ 214.770405][ C0] Call Trace: [ 214.773750][ C0] [ 214.776745][ C0] __schedule+0x15ae/0x4660 [ 214.781412][ C0] ? asan.module_dtor+0x20/0x20 [ 214.786376][ C0] ? preempt_schedule+0xc0/0xd0 [ 214.791297][ C0] preempt_schedule_common+0x82/0xc0 [ 214.796645][ C0] preempt_schedule+0xc0/0xd0 [ 214.801383][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 214.807176][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 214.812298][ C0] preempt_schedule_thunk+0x1a/0x30 [ 214.817574][ C0] _raw_spin_unlock+0x3a/0x40 [ 214.822308][ C0] filemap_map_pages+0x1279/0x19c0 [ 214.827498][ C0] ? filemap_map_pages+0x1d7/0x19c0 [ 214.832754][ C0] ? filemap_read_folio+0x790/0x790 [ 214.838057][ C0] handle_mm_fault+0x384b/0x4a50 [ 214.843090][ C0] ? handle_mm_fault+0xe6/0x4a50 [ 214.848102][ C0] ? lock_vma_under_rcu+0x52c/0x660 [ 214.853396][ C0] ? numa_migrate_prep+0x350/0x350 [ 214.858572][ C0] ? lock_vma_under_rcu+0xe5/0x660 [ 214.863766][ C0] ? do_user_addr_fault+0x1cb/0x12d0 [ 214.869113][ C0] do_user_addr_fault+0xad2/0x12d0 [ 214.874294][ C0] ? rcu_is_watching+0x15/0xb0 [ 214.879129][ C0] exc_page_fault+0x64/0x100 [ 214.883783][ C0] asm_exc_page_fault+0x26/0x30 [ 214.888717][ C0] RIP: 0033:0x7f6e7913f640 [ 214.893187][ C0] RSP: 002b:00007ffd36c3eeb8 EFLAGS: 00010206 [ 214.899312][ C0] RAX: 0000000000000000 RBX: 00007ffd36c3eec0 RCX: 00007f6e791c6acc [ 214.907336][ C0] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 00007ffd36c3eec0 [ 214.915428][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 214.923445][ C0] R10: 000055556c7dc7d0 R11: 0000000000000246 R12: 0000000000000001 [ 214.931464][ C0] R13: 00000000000927c0 R14: 000000000001ab49 R15: 00007ffd36c3f0a0 [ 214.939515][ C0] [ 214.942610][ C0] task:syz.1.114 state:R running task stack:25384 pid:6138 ppid:5775 flags:0x00004000 [ 214.953471][ C0] Call Trace: [ 214.956790][ C0] [ 214.959766][ C0] __schedule+0x15ae/0x4660 [ 214.964365][ C0] ? asan.module_dtor+0x20/0x20 [ 214.969375][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 214.975426][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 214.980774][ C0] preempt_schedule_irq+0xbf/0x150 [ 214.985986][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 214.991814][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 214.997686][ C0] irqentry_exit+0x67/0x70 [ 215.002178][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 215.008227][ C0] RIP: 0010:__task_pid_nr_ns+0x236/0x470 [ 215.013928][ C0] Code: 2d 00 4d 85 f6 74 5a 48 85 db 74 55 4d 8d be 80 00 00 00 4c 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 ba 01 00 00 45 8b 3f <4c> 8d 63 04 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 bd 01 [ 215.033623][ C0] RSP: 0018:ffffc90004e0fed8 EFLAGS: 00000246 [ 215.039758][ C0] RAX: 0000000000000000 RBX: ffff88805c6f9780 RCX: ffff88802adf3c00 [ 215.047779][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 215.055803][ C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff223d6a0 [ 215.063834][ C0] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 0000000000000001 [ 215.071868][ C0] R13: dffffc0000000000 R14: ffff888062274000 R15: 0000000000000001 [ 215.080006][ C0] ? __task_pid_nr_ns+0x207/0x470 [ 215.085104][ C0] ? __task_pid_nr_ns+0x28/0x470 [ 215.090112][ C0] __ia32_sys_getpid+0x1d/0x20 [ 215.094938][ C0] do_syscall_64+0x55/0xb0 [ 215.099419][ C0] ? clear_bhb_loop+0x40/0x90 [ 215.104154][ C0] ? clear_bhb_loop+0x40/0x90 [ 215.108883][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.114833][ C0] RIP: 0033:0x7fb364997d97 [ 215.119296][ C0] RSP: 002b:00007ffca5040f88 EFLAGS: 00000206 ORIG_RAX: 0000000000000027 [ 215.127776][ C0] RAX: ffffffffffffffda RBX: 00007ffca50410f0 RCX: 00007fb364997d97 [ 215.135800][ C0] RDX: 00007ffca5040fc0 RSI: 00007ffca50410f0 RDI: 0000000000000021 [ 215.143829][ C0] RBP: 0000000000000000 R08: 000000000000006d R09: 0000000000745d1e [ 215.151858][ C0] R10: 0000003c0c06f987 R11: 0000000000000206 R12: 000000000001af0f [ 215.159885][ C0] R13: 00007fb364c2618c R14: 000000000001ac82 R15: 00007fb364c26180 [ 215.167938][ C0] [ 215.171016][ C0] rcu: rcu_preempt kthread starved for 10546 jiffies! g12137 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 215.182529][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 215.192549][ C0] rcu: RCU grace-period kthread stack dump: [ 215.198565][ C0] task:rcu_preempt state:R running task stack:26824 pid:17 ppid:2 flags:0x00004000 [ 215.209411][ C0] Call Trace: [ 215.212737][ C0] [ 215.215719][ C0] __schedule+0x15ae/0x4660 [ 215.220303][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 215.225398][ C0] ? lock_chain_count+0x20/0x20 [ 215.230315][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 215.235578][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 215.241538][ C0] ? asan.module_dtor+0x20/0x20 [ 215.246441][ C0] ? rcu_is_watching+0x15/0xb0 [ 215.251296][ C0] schedule+0xbd/0x170 [ 215.255430][ C0] schedule_timeout+0x188/0x2d0 [ 215.260348][ C0] ? console_conditional_schedule+0x40/0x40 [ 215.266305][ C0] ? update_process_times+0x1b0/0x1b0 [ 215.271743][ C0] ? prepare_to_swait_event+0x344/0x360 [ 215.277359][ C0] rcu_gp_fqs_loop+0x30d/0x1590 [ 215.282276][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 215.287183][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 215.293251][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 215.298339][ C0] ? rcu_gp_init+0x1530/0x1530 [ 215.303161][ C0] ? rcu_gp_cleanup+0xade/0xc30 [ 215.308062][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.313324][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 215.318602][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 215.323244][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 215.328408][ C0] ? __kthread_parkme+0x71/0x1c0 [ 215.333405][ C0] ? __kthread_parkme+0x15b/0x1c0 [ 215.338492][ C0] kthread+0x2fa/0x390 [ 215.342607][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 215.347895][ C0] ? kthread_blkcg+0xd0/0xd0 [ 215.352540][ C0] ret_from_fork+0x48/0x80 [ 215.357025][ C0] ? kthread_blkcg+0xd0/0xd0 [ 215.361680][ C0] ret_from_fork_asm+0x11/0x20 [ 215.366527][ C0] [ 215.369606][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 215.375996][ C0] CPU: 0 PID: 6139 Comm: syz.1.114 Not tainted syzkaller #0 [ 215.383334][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.393448][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 215.398794][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 215.418462][ C0] RSP: 0018:ffffc90004ea7440 EFLAGS: 00000206 [ 215.424579][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: e0f7432984989900 [ 215.432600][ C0] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d0660 [ 215.440622][ C0] RBP: ffffc90004ea7550 R08: dffffc0000000000 R09: 1ffffffff223d6a0 [ 215.448648][ C0] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 1ffff920009d4e94 [ 215.456663][ C0] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 215.464680][ C0] FS: 00007fb3657e66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 215.473750][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.480382][ C0] CR2: 00007fb3649eb700 CR3: 0000000076184000 CR4: 00000000003506f0 [ 215.488415][ C0] Call Trace: [ 215.491743][ C0] [ 215.494722][ C0] ? deref_stack_reg+0x1ab/0x230 [ 215.499710][ C0] ? read_lock_is_recursive+0x20/0x20 [ 215.505138][ C0] ? __read_once_word_nocheck+0x9/0x10 [ 215.510696][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.516815][ C0] is_bpf_text_address+0x47/0x2a0 [ 215.521893][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 215.527143][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 215.532387][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.538516][ C0] kernel_text_address+0xa0/0xd0 [ 215.543540][ C0] __kernel_text_address+0xd/0x30 [ 215.548627][ C0] unwind_get_return_address+0x5d/0xc0 [ 215.554135][ C0] ? stack_trace_save+0x100/0x100 [ 215.559212][ C0] arch_stack_walk+0x11d/0x190 [ 215.564034][ C0] stack_trace_save+0xaa/0x100 [ 215.568857][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 215.574038][ C0] kasan_set_track+0x4e/0x70 [ 215.578678][ C0] ? kasan_set_track+0x4e/0x70 [ 215.583492][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 215.588567][ C0] ? slab_post_alloc_hook+0x6a/0x4d0 [ 215.593916][ C0] ? kmem_cache_alloc+0x17e/0x2c0 [ 215.598990][ C0] ? posix_lock_inode+0x369/0x3270 [ 215.604148][ C0] ? fcntl_setlk+0x9c0/0x1070 [ 215.608879][ C0] ? do_fcntl+0x88e/0x14a0 [ 215.613344][ C0] ? __se_sys_fcntl+0xc9/0x1a0 [ 215.618160][ C0] ? do_syscall_64+0x55/0xb0 [ 215.622795][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.628964][ C0] __kasan_slab_alloc+0x6c/0x80 [ 215.633870][ C0] slab_post_alloc_hook+0x6a/0x4d0 [ 215.639052][ C0] kmem_cache_alloc+0x17e/0x2c0 [ 215.643960][ C0] ? posix_lock_inode+0x369/0x3270 [ 215.649132][ C0] posix_lock_inode+0x369/0x3270 [ 215.654303][ C0] ? aa_path_link+0xf80/0xf80 [ 215.659044][ C0] ? lockdep_softirqs_off+0x440/0x440 [ 215.664474][ C0] ? slab_post_alloc_hook+0x86/0x4d0 [ 215.669818][ C0] ? end_current_label_crit_section+0x149/0x170 [ 215.676123][ C0] ? posix_lock_file+0x50/0x50 [ 215.681035][ C0] ? bpf_lsm_file_lock+0x9/0x10 [ 215.685941][ C0] fcntl_setlk+0x9c0/0x1070 [ 215.690521][ C0] ? vfs_lock_file+0x110/0x110 [ 215.695342][ C0] ? __might_fault+0xaa/0x120 [ 215.700072][ C0] ? __might_fault+0xc6/0x120 [ 215.704792][ C0] ? __might_fault+0xaa/0x120 [ 215.709545][ C0] do_fcntl+0x88e/0x14a0 [ 215.713953][ C0] ? kill_fasync+0x4b0/0x4b0 [ 215.718606][ C0] ? __fget_files+0x28/0x460 [ 215.723252][ C0] ? __fget_files+0x3fc/0x460 [ 215.727992][ C0] ? tomoyo_file_fcntl+0x7b/0x220 [ 215.733254][ C0] ? bpf_lsm_file_fcntl+0x9/0x10 [ 215.738238][ C0] ? security_file_fcntl+0x80/0xa0 [ 215.743419][ C0] __se_sys_fcntl+0xc9/0x1a0 [ 215.748095][ C0] do_syscall_64+0x55/0xb0 [ 215.752559][ C0] ? clear_bhb_loop+0x40/0x90 [ 215.757287][ C0] ? clear_bhb_loop+0x40/0x90 [ 215.762018][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.767958][ C0] RIP: 0033:0x7fb36499e019 [ 215.772426][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.792084][ C0] RSP: 002b:00007fb3657e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 215.800548][ C0] RAX: ffffffffffffffda RBX: 00007fb364c25fa0 RCX: 00007fb36499e019 [ 215.808561][ C0] RDX: 00002000000000c0 RSI: 0000000000000026 RDI: 0000000000000003 [ 215.816571][ C0] RBP: 00007fb364a3500c R08: 0000000000000000 R09: 0000000000000000 [ 215.824585][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.832601][ C0] R13: 00007fb364c26038 R14: 00007fb364c25fa0 R15: 00007ffca5041438 [ 215.840633][ C0] [ 215.844036][ C0] sched: RT throttling activated