last executing test programs: 3.013586279s ago: executing program 0 (id=1): bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040), 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x8000004}, 0x48) setrlimit(0x0, &(0x7f0000000100)={0xffffffffffffffff}) r0 = open(0x0, 0xca942, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000480)={{}, {}, 0x0, 0x5}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) r3 = msgget$private(0x0, 0x0) msgrcv(r3, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r3, 0x0) mlockall(0x3) 2.751281162s ago: executing program 3 (id=7): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.639661866s ago: executing program 3 (id=8): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x10, 0x14}, [@FRA_DST={0x14, 0x1, @loopback}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x44}}, 0x0) 2.436476903s ago: executing program 3 (id=9): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x18}]}, 0x34}}, 0x0) 2.150673578s ago: executing program 3 (id=10): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x600, 0x358, 0x11, 0x148, 0x0, 0x10, 0x568, 0x2a8, 0x2a8, 0x568, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x358, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@CLUSTERIP={0x60}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x660) 1.976152052s ago: executing program 2 (id=3): unshare(0x2a020400) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 1.808204447s ago: executing program 2 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d06, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000040)={0x1ff, 0xa, 0x0, 0x59ca, 0x0, "3e61d4c558d1f956"}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000340)={0x3}) r4 = open$dir(&(0x7f0000000080)='.\x00', 0x501000, 0x0) fcntl$setownex(r4, 0x407, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000180)={0xf010003, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 1.799846706s ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000001500), 0x0) dup(r1) 1.728297653s ago: executing program 3 (id=12): r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 1.331988851s ago: executing program 3 (id=13): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$ITER_CREATE(0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000100)=0x6, 0x4) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f00002a3000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = io_uring_setup(0x65b, &(0x7f0000000080)={0x0, 0xfffffffe, 0x0, 0x800, 0x80}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f00000019c0)={0x1, 0x0, 0x0, &(0x7f0000001940)=[{0x0}], 0x0}, 0x20) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x0, 0x0, {0x0, @win={{0xffffffff, 0x4, 0x7}, 0x1, 0x6, 0x0, 0x0, &(0x7f0000000340)="e5816da28f6783b88c4b28b90d3c4a2de8766a1d0ddc3164494e3be232b25b49de053ea0145155eb995cd8f693abaacba569166e9e045c759a4dc04669784d4ea8d2300151c18300332e"}}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0xac, 0x1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sync() r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000002380)={0x7, 0x8, 0xfa00, {r4}}, 0x10) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @private}, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}}) pipe2(&(0x7f0000000200), 0x0) 928.776195ms ago: executing program 4 (id=5): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r0, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001880)="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", 0x7f3}, {0x0}, {&(0x7f0000000680)="61b0e85bf9388923dba82a0cba731251094c2571154ca9541e1dc57a6765fa3b799b69e534c7252b7c2170ff2f72247f6f8bfa1800dc6639796a9ed21dee26ce420cffff7f364d0768dbeb3b54ace78c351d750f", 0x54}], 0x3}}], 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 767.116791ms ago: executing program 0 (id=14): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x30, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "2bdd4b74a1f6aa675459bc4d77085aa8"}]}}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000000706010200000000000000000000000005000100070000000800064000000004"], 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x40801) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000e40)=ANY=[], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0xe, &(0x7f0000001600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x2}, 0x10}, 0x90) 766.883352ms ago: executing program 2 (id=15): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r0, 0x5113, 0x0, 0x0, 0x0, 0x0) 580.43697ms ago: executing program 1 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xfe37, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x841, 0x0) 567.724336ms ago: executing program 4 (id=17): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x1, 0x2, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x0) socket$kcm(0x10, 0x3, 0x10) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 0x6, 0x7, 0x0, 0x100000, r7}, 0x20) 530.581855ms ago: executing program 2 (id=18): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x48, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) fsopen(&(0x7f00000002c0)='rpc_pipefs\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @loopback}]}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500280008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0x27, 0x0, [{0x0, 0xb, "34a6caf58db76931cc"}, {0x0, 0xc, "e39335900f115624170e"}, {0x0, 0xa, "4f1347dfaaca82c2"}]}, @noop, @timestamp={0x44, 0x4}]}}}}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000"], 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 460.463604ms ago: executing program 1 (id=19): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x7b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mq_open(0x0, 0x0, 0x0, 0x0) 276.988393ms ago: executing program 1 (id=20): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1}, 0x58) 0s ago: executing program 1 (id=21): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r1, 0x25, 0x2, @val=@tracing}, 0x40) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x0, 0x0, @mcast1, @mcast1}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.66' (ED25519) to the list of known hosts. [ 49.697319][ T5075] cgroup: Unknown subsys name 'net' [ 49.827892][ T5075] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.119211][ T5075] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.324038][ T5091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.344357][ T5095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.352206][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.360181][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.367969][ T5095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.383838][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.391284][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.401599][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.409958][ T5102] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.409998][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.418060][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.426203][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.432280][ T5102] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.441189][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.446326][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.460475][ T5104] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.468229][ T5102] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.487730][ T5105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.490402][ T5102] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.507084][ T5105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.514939][ T5091] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.515429][ T4490] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.531259][ T4490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.534852][ T5102] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.538844][ T4490] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.545835][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.554501][ T4490] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.565977][ T5095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.568933][ T4490] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.583301][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.129583][ T5092] chnl_net:caif_netlink_parms(): no params data found [ 54.173136][ T5098] chnl_net:caif_netlink_parms(): no params data found [ 54.184768][ T5097] chnl_net:caif_netlink_parms(): no params data found [ 54.243410][ T5087] chnl_net:caif_netlink_parms(): no params data found [ 54.371730][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.378943][ T5092] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.386757][ T5092] bridge_slave_0: entered allmulticast mode [ 54.394570][ T5092] bridge_slave_0: entered promiscuous mode [ 54.407231][ T5103] chnl_net:caif_netlink_parms(): no params data found [ 54.440883][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.448033][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.455477][ T5092] bridge_slave_1: entered allmulticast mode [ 54.462365][ T5092] bridge_slave_1: entered promiscuous mode [ 54.503093][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.510711][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.517848][ T5098] bridge_slave_0: entered allmulticast mode [ 54.524897][ T5098] bridge_slave_0: entered promiscuous mode [ 54.555899][ T5092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.576828][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.584395][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.592182][ T5098] bridge_slave_1: entered allmulticast mode [ 54.598906][ T5098] bridge_slave_1: entered promiscuous mode [ 54.618785][ T5092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.679541][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.687147][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.694501][ T5097] bridge_slave_0: entered allmulticast mode [ 54.702157][ T5097] bridge_slave_0: entered promiscuous mode [ 54.709512][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.716857][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.724432][ T5097] bridge_slave_1: entered allmulticast mode [ 54.731820][ T5097] bridge_slave_1: entered promiscuous mode [ 54.759632][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.766887][ T5087] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.774167][ T5087] bridge_slave_0: entered allmulticast mode [ 54.781829][ T5087] bridge_slave_0: entered promiscuous mode [ 54.794986][ T5098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.809523][ T5098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.831704][ T5092] team0: Port device team_slave_0 added [ 54.837751][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.845283][ T5087] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.852625][ T5087] bridge_slave_1: entered allmulticast mode [ 54.859452][ T5087] bridge_slave_1: entered promiscuous mode [ 54.893249][ T5097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.905208][ T5092] team0: Port device team_slave_1 added [ 54.967469][ T5098] team0: Port device team_slave_0 added [ 54.976352][ T5097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.995464][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.002796][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.029090][ T5092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.068926][ T5098] team0: Port device team_slave_1 added [ 55.087570][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.094620][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.121656][ T5092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.135550][ T5087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.147682][ T5087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.157020][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.164592][ T5103] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.171925][ T5103] bridge_slave_0: entered allmulticast mode [ 55.179393][ T5103] bridge_slave_0: entered promiscuous mode [ 55.187167][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.194625][ T5103] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.202673][ T5103] bridge_slave_1: entered allmulticast mode [ 55.209372][ T5103] bridge_slave_1: entered promiscuous mode [ 55.227317][ T5097] team0: Port device team_slave_0 added [ 55.236087][ T5097] team0: Port device team_slave_1 added [ 55.322009][ T5087] team0: Port device team_slave_0 added [ 55.336488][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.344394][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.370967][ T5098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.384195][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.391472][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.417792][ T5098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.442652][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.449620][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.475630][ T5097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.499395][ T5087] team0: Port device team_slave_1 added [ 55.520721][ T5096] Bluetooth: hci0: command tx timeout [ 55.521477][ T5103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.538258][ T5103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.554424][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.561531][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.587962][ T5097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.601255][ T55] Bluetooth: hci4: command tx timeout [ 55.606524][ T5096] Bluetooth: hci3: command tx timeout [ 55.606829][ T4490] Bluetooth: hci1: command tx timeout [ 55.617063][ T5092] hsr_slave_0: entered promiscuous mode [ 55.625133][ T5092] hsr_slave_1: entered promiscuous mode [ 55.673880][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.680990][ T4490] Bluetooth: hci2: command tx timeout [ 55.686866][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.713217][ T5087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.725777][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.732819][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.758826][ T5087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.774364][ T5103] team0: Port device team_slave_0 added [ 55.809150][ T5103] team0: Port device team_slave_1 added [ 55.858027][ T5097] hsr_slave_0: entered promiscuous mode [ 55.864426][ T5097] hsr_slave_1: entered promiscuous mode [ 55.873048][ T5097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.881689][ T5097] Cannot create hsr debugfs directory [ 55.916399][ T5098] hsr_slave_0: entered promiscuous mode [ 55.922765][ T5098] hsr_slave_1: entered promiscuous mode [ 55.928893][ T5098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.938007][ T5098] Cannot create hsr debugfs directory [ 55.960263][ T5087] hsr_slave_0: entered promiscuous mode [ 55.966746][ T5087] hsr_slave_1: entered promiscuous mode [ 55.973666][ T5087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.981269][ T5087] Cannot create hsr debugfs directory [ 56.001848][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.008872][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.035540][ T5103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.101597][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.108564][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.138978][ T5103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.221125][ T5103] hsr_slave_0: entered promiscuous mode [ 56.228200][ T5103] hsr_slave_1: entered promiscuous mode [ 56.235141][ T5103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.243043][ T5103] Cannot create hsr debugfs directory [ 56.580510][ T5092] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.592976][ T5092] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.605246][ T5092] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.614633][ T5092] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.677434][ T5097] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.687152][ T5097] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.699099][ T5097] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.715374][ T5097] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.791108][ T5087] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.803519][ T5087] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.815207][ T5087] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.826615][ T5087] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.939385][ T5098] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.959464][ T5098] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.969538][ T5098] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.009527][ T5098] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.059215][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.081064][ T5103] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.107301][ T5103] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.117202][ T5103] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.143283][ T5103] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.168375][ T5092] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.216809][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.240194][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.247566][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.288507][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.295682][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.325573][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.335802][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.388351][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.395497][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.434045][ T2529] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.441292][ T2529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.502861][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.521445][ T5103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.578744][ T5103] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.610848][ T4490] Bluetooth: hci0: command tx timeout [ 57.657846][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.665094][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.682385][ T4490] Bluetooth: hci3: command tx timeout [ 57.687829][ T4490] Bluetooth: hci1: command tx timeout [ 57.694352][ T55] Bluetooth: hci4: command tx timeout [ 57.702761][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.709905][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.735035][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.742145][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.760399][ T4490] Bluetooth: hci2: command tx timeout [ 57.764682][ T5098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.795290][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.802462][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.835020][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.885445][ T5098] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.907613][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.914788][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.956156][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.963356][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.092095][ T5092] veth0_vlan: entered promiscuous mode [ 58.113376][ T5092] veth1_vlan: entered promiscuous mode [ 58.129469][ T5098] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.149214][ T5098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.261915][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.306023][ T5092] veth0_macvtap: entered promiscuous mode [ 58.384133][ T5092] veth1_macvtap: entered promiscuous mode [ 58.427680][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.492945][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.508770][ T5087] veth0_vlan: entered promiscuous mode [ 58.528382][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.548931][ T5087] veth1_vlan: entered promiscuous mode [ 58.564611][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.618094][ T5092] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.635696][ T5092] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.649400][ T5092] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.661883][ T5092] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.686062][ T5103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.826495][ T5098] veth0_vlan: entered promiscuous mode [ 58.845910][ T5087] veth0_macvtap: entered promiscuous mode [ 58.857139][ T5087] veth1_macvtap: entered promiscuous mode [ 58.892104][ T5098] veth1_vlan: entered promiscuous mode [ 58.927101][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.938535][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.949538][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.955103][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.970833][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.995072][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.007383][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.019784][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.029248][ T5103] veth0_vlan: entered promiscuous mode [ 59.057850][ T5087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.068496][ T5087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.077542][ T5087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.091524][ T5087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.139047][ T5103] veth1_vlan: entered promiscuous mode [ 59.148550][ T5097] veth0_vlan: entered promiscuous mode [ 59.154526][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.158030][ T5098] veth0_macvtap: entered promiscuous mode [ 59.163305][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.213260][ T5098] veth1_macvtap: entered promiscuous mode [ 59.268871][ T5097] veth1_vlan: entered promiscuous mode [ 59.288691][ T5103] veth0_macvtap: entered promiscuous mode [ 59.354310][ T5103] veth1_macvtap: entered promiscuous mode [ 59.374202][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.386359][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.405158][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.415918][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.431778][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.442629][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.454394][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.467333][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.478275][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.491764][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.533879][ T5098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.543592][ T5098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.554026][ T5098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.567660][ T5098] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.626510][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.635246][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.637507][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.657447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.666210][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.666216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.670440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.694916][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.708311][ T4490] Bluetooth: hci0: command tx timeout [ 59.714329][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.727656][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.738680][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.751953][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.762428][ T4490] Bluetooth: hci1: command tx timeout [ 59.767820][ T4490] Bluetooth: hci4: command tx timeout [ 59.773922][ T4490] Bluetooth: hci3: command tx timeout [ 59.818036][ T5097] veth0_macvtap: entered promiscuous mode [ 59.824908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.840867][ T55] Bluetooth: hci2: command tx timeout [ 59.855720][ T5097] veth1_macvtap: entered promiscuous mode [ 59.877837][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.897829][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.919735][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.937320][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.953948][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.970049][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.998279][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.051331][ T4106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.054750][ T5103] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.070977][ T4106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.077406][ T5103] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.092633][ T5103] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.108289][ T5103] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.249379][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.262892][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.274707][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.310337][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.336994][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.356920][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.368039][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.393667][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.418107][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.468097][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.470416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.497576][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.507983][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.519735][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.541581][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.569221][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.583809][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.595906][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.612644][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.681919][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.704801][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.705226][ T5097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.745418][ T5097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.754609][ T5097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.763573][ T5097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.809847][ T4106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.864066][ T4106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.960905][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.980734][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.080742][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.117324][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.254091][ T4106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.333089][ T4106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.492954][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.541850][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.630158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 61.715450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 61.724904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 61.810258][ T55] Bluetooth: hci0: command tx timeout [ 61.817912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 61.827745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 61.840680][ T55] Bluetooth: hci3: command tx timeout [ 61.846723][ T55] Bluetooth: hci4: command tx timeout [ 61.852712][ T4490] Bluetooth: hci1: command tx timeout [ 61.909800][ T5201] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.927410][ T5096] Bluetooth: hci2: command tx timeout [ 62.885949][ T5225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 63.343605][ T5232] Oops: stack segment: 0000 [#1] PREEMPT SMP KASAN PTI [ 63.343640][ T5232] CPU: 1 UID: 0 PID: 5232 Comm: syz.1.21 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 63.343661][ T5232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 63.343671][ T5232] RIP: 0010:bpf_xdp_redirect+0x59/0x1a0 [ 63.343709][ T5232] Code: 81 c3 00 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b5 18 90 f8 48 8b 1b 4c 8d 63 38 4c 89 e5 48 c1 ed 03 <42> 0f b6 44 2d 00 84 c0 0f 85 d0 00 00 00 45 8b 34 24 44 89 f6 83 [ 63.343725][ T5232] RSP: 0018:ffffc90004207098 EFLAGS: 00010202 [ 63.343740][ T5232] RAX: 1ffff110031506c0 RBX: 0000000000000000 RCX: 0000000000040000 [ 63.343753][ T5232] RDX: ffffc9000961a000 RSI: 00000000000004b5 RDI: 00000000000004b6 [ 63.343767][ T5232] RBP: 0000000000000007 R08: ffffffff895fff80 R09: 1ffff1100bfc225c [ 63.343779][ T5232] R10: dffffc0000000000 R11: ffffed100bfc225d R12: 0000000000000038 [ 63.343798][ T5232] R13: dffffc0000000000 R14: 1ffff92000840e55 R15: 0000000000000000 [ 63.343809][ T5232] FS: 00007f0dc0cac6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 63.343824][ T5232] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.343835][ T5232] CR2: 000000110c3ca591 CR3: 00000000151ea000 CR4: 00000000003506f0 [ 63.343849][ T5232] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.343858][ T5232] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.343868][ T5232] Call Trace: [ 63.343875][ T5232] [ 63.343882][ T5232] ? __die_body+0x88/0xe0 [ 63.343907][ T5232] ? die+0xcf/0x110 [ 63.343926][ T5232] ? do_trap+0x15a/0x3a0 [ 63.343947][ T5232] ? do_error_trap+0x1dc/0x2c0 [ 63.343970][ T5232] ? __pfx_do_error_trap+0x10/0x10 [ 63.343992][ T5232] ? rcu_is_watching+0x15/0xb0 [ 63.344015][ T5232] ? exc_stack_segment+0x38/0x50 [ 63.344031][ T5232] ? asm_exc_stack_segment+0x26/0x30 [ 63.344050][ T5232] ? bpf_prog_run_generic_xdp+0x5f0/0x14c0 [ 63.344070][ T5232] ? bpf_xdp_redirect+0x59/0x1a0 [ 63.344094][ T5232] ? bpf_xdp_redirect+0x25/0x1a0 [ 63.344117][ T5232] bpf_prog_bd73926c2776e1d5+0x1a/0x1c [ 63.344138][ T5232] bpf_prog_run_generic_xdp+0x679/0x14c0 [ 63.344171][ T5232] do_xdp_generic+0x673/0xb90 [ 63.344193][ T5232] ? __pfx_validate_chain+0x10/0x10 [ 63.344218][ T5232] ? __pfx_do_xdp_generic+0x10/0x10 [ 63.344245][ T5232] __netif_receive_skb_core+0x1be6/0x4570 [ 63.344268][ T5232] ? mark_lock+0x9a/0x360 [ 63.344297][ T5232] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 63.344322][ T5232] ? mark_lock+0x9a/0x360 [ 63.344342][ T5232] ? __lock_acquire+0x1359/0x2000 [ 63.344370][ T5232] __netif_receive_skb+0x12f/0x650 [ 63.344393][ T5232] ? __pfx_lock_acquire+0x10/0x10 [ 63.344412][ T5232] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 63.344431][ T5232] ? __pfx___netif_receive_skb+0x10/0x10 [ 63.344451][ T5232] ? __kasan_slab_alloc+0x66/0x80 [ 63.344471][ T5232] ? read_tsc+0x9/0x20 [ 63.344491][ T5232] ? timekeeping_get_ns+0x2c0/0x420 [ 63.344515][ T5232] ? netif_receive_skb+0x131/0x890 [ 63.344536][ T5232] ? netif_receive_skb+0x131/0x890 [ 63.344557][ T5232] netif_receive_skb+0x1e8/0x890 [ 63.344579][ T5232] ? tun_rx_batched+0x160/0x8f0 [ 63.344597][ T5232] ? __pfx_netif_receive_skb+0x10/0x10 [ 63.344623][ T5232] ? tun_rx_batched+0x160/0x8f0 [ 63.344641][ T5232] tun_rx_batched+0x1b7/0x8f0 [ 63.344659][ T5232] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 63.344682][ T5232] ? __pfx_lock_acquire+0x10/0x10 [ 63.344701][ T5232] ? __pfx_tun_rx_batched+0x10/0x10 [ 63.344727][ T5232] tun_get_user+0x2f3b/0x4560 [ 63.344745][ T5232] ? tun_get_user+0x2a35/0x4560 [ 63.344768][ T5232] ? __pfx_tun_get_user+0x10/0x10 [ 63.344796][ T5232] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 63.344814][ T5232] ? tun_get+0x1e/0x2f0 [ 63.344839][ T5232] ? tun_get+0x1e/0x2f0 [ 63.344855][ T5232] ? tun_get+0x27d/0x2f0 [ 63.344872][ T5232] tun_chr_write_iter+0x113/0x1f0 [ 63.344890][ T5232] vfs_write+0xa72/0xc90 [ 63.344908][ T5232] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 63.344924][ T5232] ? __pfx_vfs_write+0x10/0x10 [ 63.344938][ T5232] ? do_futex+0x33b/0x560 [ 63.344968][ T5232] ksys_write+0x1a0/0x2c0 [ 63.344987][ T5232] ? __pfx_ksys_write+0x10/0x10 [ 63.345003][ T5232] ? do_syscall_64+0x100/0x230 [ 63.345021][ T5232] ? do_syscall_64+0xb6/0x230 [ 63.345037][ T5232] do_syscall_64+0xf3/0x230 [ 63.345053][ T5232] ? clear_bhb_loop+0x35/0x90 [ 63.345075][ T5232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.345095][ T5232] RIP: 0033:0x7f0dbff7475f [ 63.345111][ T5232] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 63.345124][ T5232] RSP: 002b:00007f0dc0cac010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 63.345143][ T5232] RAX: ffffffffffffffda RBX: 00007f0dc0103f60 RCX: 00007f0dbff7475f [ 63.345156][ T5232] RDX: 0000000000000066 RSI: 00000000200002c0 RDI: 00000000000000c8 [ 63.345168][ T5232] RBP: 00007f0dbffe4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 63.345179][ T5232] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000000 [ 63.345191][ T5232] R13: 000000000000000b R14: 00007f0dc0103f60 R15: 00007ffc6150ab68 [ 63.345211][ T5232] [ 63.345216][ T5232] Modules linked in: [ 63.345253][ T5232] ---[ end trace 0000000000000000 ]--- [ 63.380151][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 63.397415][ T5232] RIP: 0010:bpf_xdp_redirect+0x59/0x1a0 [ 63.397455][ T5232] Code: 81 c3 00 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b5 18 90 f8 48 8b 1b 4c 8d 63 38 4c 89 e5 48 c1 ed 03 <42> 0f b6 44 2d 00 84 c0 0f 85 d0 00 00 00 45 8b 34 24 44 89 f6 83 [ 63.887316][ T5232] RSP: 0018:ffffc90004207098 EFLAGS: 00010202 [ 63.893383][ T5232] RAX: 1ffff110031506c0 RBX: 0000000000000000 RCX: 0000000000040000 [ 63.901357][ T5232] RDX: ffffc9000961a000 RSI: 00000000000004b5 RDI: 00000000000004b6 [ 63.909311][ T5232] RBP: 0000000000000007 R08: ffffffff895fff80 R09: 1ffff1100bfc225c [ 63.917275][ T5232] R10: dffffc0000000000 R11: ffffed100bfc225d R12: 0000000000000038 [ 63.925244][ T5232] R13: dffffc0000000000 R14: 1ffff92000840e55 R15: 0000000000000000 [ 63.933230][ T5232] FS: 00007f0dc0cac6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 63.942159][ T5232] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.948717][ T5232] CR2: 000000110c3ca591 CR3: 00000000151ea000 CR4: 00000000003506f0 [ 63.956688][ T5232] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.964653][ T5232] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.972625][ T5232] Kernel panic - not syncing: Fatal exception in interrupt [ 63.979916][ T5232] Kernel Offset: disabled [ 63.984225][ T5232] Rebooting in 86400 seconds..