last executing test programs: 8.654851557s ago: executing program 0 (id=9): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) unshare(0x400) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1}, 0x6e) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000027d1287cff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup(r3) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) 8.477826952s ago: executing program 0 (id=10): syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_set_ext_adv_params}}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 8.398935391s ago: executing program 2 (id=3): gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) accept$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f, @void, @value}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 7.995681683s ago: executing program 0 (id=11): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000004080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020ae40802"], 0x10}}, 0x20040044) 7.46387023s ago: executing program 4 (id=5): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x21, 0x2}) 7.447508281s ago: executing program 0 (id=12): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="8500000019000000040000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7.426839921s ago: executing program 3 (id=4): socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0a010e04"], 0xd) pipe(0x0) 7.179648755s ago: executing program 3 (id=13): ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x7d30, 0x0, {0x9a03, 0x1}, {0x51, 0x2}, @const={0xb71, {0x5, 0xe5f, 0x205, 0x9}}}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2778) 7.144697695s ago: executing program 1 (id=2): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000590000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000003"], 0x210) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @empty}}]}, 0x110) 7.112906262s ago: executing program 3 (id=14): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x0, 0x7, 0xa}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.999486827s ago: executing program 0 (id=15): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x2, r3, 0x0) r5 = gettid() r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f0000000000)=0x5, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r7, &(0x7f0000006ac0)=[{{&(0x7f0000000000)=@l2tp, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/122, 0x7a}, 0xe6e}, {{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000001300)=""/207, 0xcf}, 0x9}, {{&(0x7f0000001400)=@hci, 0x80, 0x0, 0x0, &(0x7f0000002c80)=""/224, 0xe0}, 0x4}, {{0x0, 0x0, 0x0}, 0xa0b7}, {{0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000003f00)=""/225, 0xe1}, {&(0x7f0000004000)=""/4096, 0x1000}], 0x2}, 0xc}, {{0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000005180)=""/46, 0x2e}, {&(0x7f00000051c0)=""/129, 0x81}, {&(0x7f0000005280)=""/35, 0x23}, {&(0x7f00000052c0)=""/161, 0xa1}, {&(0x7f0000005380)=""/164, 0xa4}], 0x5, &(0x7f00000054c0)=""/18, 0x12}, 0x9}, {{&(0x7f0000005500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f00000055c0)=[{&(0x7f0000005580)=""/47, 0x2f}], 0x1}}, {{&(0x7f0000005700)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000006980)=[{&(0x7f0000005780)=""/170, 0xaa}, {0x0}, {&(0x7f0000005900)=""/65, 0x41}], 0x3, &(0x7f00000069c0)=""/218, 0xda}, 0xb79}], 0x8, 0x2, 0x0) 6.998688986s ago: executing program 2 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20002, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) unshare(0x600) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc45, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0xffffffffffffff47, 0x10, 0x8, 0x0, 0x0}}, 0x64) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4050000200080006110600000000000b70000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5c26838f2b9000f205891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fe5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[], 0x10) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000000), 0x1001) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x0, 0xe80, 0x0, &(0x7f00000001c0)="348b0d151f8218e3c73697e488ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.969856606s ago: executing program 3 (id=17): r0 = socket(0x2, 0x3, 0xff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$FUSE(r1, 0x0, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 6.892559279s ago: executing program 4 (id=18): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9461a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) 4.495676327s ago: executing program 0 (id=19): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef) 4.369186078s ago: executing program 1 (id=20): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x5, 0xa22) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x57) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448de, &(0x7f00000000c0)={0x0, 0x8000}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="05000000010000", 0x7) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f00000001c0)={0x10}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) close(r3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 4.368155165s ago: executing program 2 (id=21): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000007c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.367459283s ago: executing program 3 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xd19000, 0x115) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACESETUP(r5, 0x1276, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffff1c, 0xfffffffffffffe38, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0x0) 2.97592944s ago: executing program 4 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) munmap(&(0x7f000019a000/0x1000)=nil, 0x1000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x3e4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000000000/0x3000)=nil, 0x3000}, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.391748088s ago: executing program 1 (id=24): unshare(0x2040400) ioperm(0x0, 0x6, 0x10000) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') futimesat(r0, 0x0, 0x0) 2.196658811s ago: executing program 4 (id=25): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x2, r3, 0x0) r4 = gettid() r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, &(0x7f0000000000)=0x5, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r6, &(0x7f0000006ac0)=[{{&(0x7f0000000000)=@l2tp, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/122, 0x7a}, 0xe6e}, {{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000001300)=""/207, 0xcf}, 0x9}, {{&(0x7f0000001400)=@hci, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000001480)=""/229, 0xe5}, {&(0x7f0000001580)=""/165, 0xa5}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002700)=""/43, 0x2b}, {&(0x7f0000002740)=""/162, 0xa2}, {0x0}, {&(0x7f00000028c0)=""/211, 0xd3}, {&(0x7f0000002ac0)=""/197, 0xc5}], 0x8, &(0x7f0000002c80)=""/224, 0xe0}, 0x4}, {{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000002d80)=""/98, 0x62}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0x2}, 0xa0b7}, {{0x0, 0x0, &(0x7f0000005000), 0x0, &(0x7f0000005040)=""/133, 0x85}, 0xc}, {{0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000005180)=""/46, 0x2e}, {&(0x7f00000051c0)=""/129, 0x81}, {&(0x7f0000005280)=""/35, 0x23}, {&(0x7f00000052c0)=""/161, 0xa1}, {&(0x7f0000005380)=""/164, 0xa4}], 0x5, &(0x7f00000054c0)=""/18, 0x12}, 0x9}, {{&(0x7f0000005500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f00000055c0)=[{&(0x7f0000005580)=""/47, 0x2f}], 0x1}}, {{&(0x7f0000005700)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000006980)=[{&(0x7f0000005780)=""/170, 0xaa}, {0x0}, {&(0x7f0000005900)=""/65, 0x41}], 0x3, &(0x7f00000069c0)=""/218, 0xda}, 0xb79}], 0x8, 0x2, 0x0) 2.194656141s ago: executing program 1 (id=26): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xa9, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MTU={0x8, 0x4, 0x7c}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x10}]}, 0x40}}, 0x0) 864.160702ms ago: executing program 4 (id=27): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x4020}], 0x1, &(0x7f0000000180), 0x0, 0x0) 502.865108ms ago: executing program 3 (id=28): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x20009, 0x1, 0x100, 0x1, 0x1ff, 0x4007}, 0x20) socket$inet_icmp(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff00000502", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 243.685536ms ago: executing program 4 (id=29): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113a00000000008510000002000000b700"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='memory.stat\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8b30, &(0x7f0000000000)={'wlan1\x00', @random="0011002000"}) 192.083916ms ago: executing program 2 (id=30): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='exfat\x00', 0x0, 0x0) 0s ago: executing program 2 (id=31): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x2, r3, 0x0) r5 = gettid() r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f0000000000)=0x5, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r7, &(0x7f0000006ac0)=[{{&(0x7f0000000000)=@l2tp, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/122, 0x7a}, 0xe6e}, {{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000001300)=""/207, 0xcf}, 0x9}, {{&(0x7f0000001400)=@hci, 0x80, 0x0, 0x0, &(0x7f0000002c80)=""/224, 0xe0}, 0x4}, {{0x0, 0x0, 0x0}, 0xa0b7}, {{0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000003f00)=""/225, 0xe1}, {&(0x7f0000004000)=""/4096, 0x1000}], 0x2}, 0xc}, {{0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000005180)=""/46, 0x2e}, {&(0x7f00000051c0)=""/129, 0x81}, {&(0x7f0000005280)=""/35, 0x23}, {&(0x7f00000052c0)=""/161, 0xa1}, {&(0x7f0000005380)=""/164, 0xa4}], 0x5, &(0x7f00000054c0)=""/18, 0x12}, 0x9}, {{&(0x7f0000005500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f00000055c0)=[{&(0x7f0000005580)=""/47, 0x2f}], 0x1}}, {{&(0x7f0000005700)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000006980)=[{&(0x7f0000005780)=""/170, 0xaa}, {0x0}, {&(0x7f0000005900)=""/65, 0x41}], 0x3, &(0x7f00000069c0)=""/218, 0xda}, 0xb79}], 0x8, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.6' (ED25519) to the list of known hosts. [ 71.412518][ T5817] cgroup: Unknown subsys name 'net' [ 71.540957][ T5817] cgroup: Unknown subsys name 'cpuset' [ 71.550440][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.097642][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.152678][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.180185][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.186289][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.188799][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.196200][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.203170][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.216006][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.218278][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.234755][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.243460][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.251357][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.257594][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.267651][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.269430][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.276986][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.292035][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.299720][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.300175][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.307570][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.319939][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.324852][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.339502][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.346835][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.355609][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.363503][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.364047][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.383562][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.387769][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.398672][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.406419][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.778029][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 77.869148][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 77.929935][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 78.045773][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.053276][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.061609][ T5828] bridge_slave_0: entered allmulticast mode [ 78.069512][ T5828] bridge_slave_0: entered promiscuous mode [ 78.096646][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.106600][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.114159][ T5827] bridge_slave_0: entered allmulticast mode [ 78.121515][ T5827] bridge_slave_0: entered promiscuous mode [ 78.131600][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.139322][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.146525][ T5827] bridge_slave_1: entered allmulticast mode [ 78.154168][ T5827] bridge_slave_1: entered promiscuous mode [ 78.169946][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.177623][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.184842][ T5828] bridge_slave_1: entered allmulticast mode [ 78.191887][ T5828] bridge_slave_1: entered promiscuous mode [ 78.205426][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 78.230572][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 78.260664][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.273355][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.289851][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.301627][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.371983][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.380756][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.390720][ T5835] bridge_slave_0: entered allmulticast mode [ 78.398541][ T5835] bridge_slave_0: entered promiscuous mode [ 78.424120][ T5827] team0: Port device team_slave_0 added [ 78.432855][ T5828] team0: Port device team_slave_0 added [ 78.439402][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.446753][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.455342][ T5835] bridge_slave_1: entered allmulticast mode [ 78.462636][ T5835] bridge_slave_1: entered promiscuous mode [ 78.490860][ T5827] team0: Port device team_slave_1 added [ 78.498986][ T5828] team0: Port device team_slave_1 added [ 78.577845][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.589894][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.634849][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.644903][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.671019][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.715599][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.722892][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.749432][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.772138][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.779585][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.805918][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.831249][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.838676][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.845873][ T5840] bridge_slave_0: entered allmulticast mode [ 78.853039][ T5840] bridge_slave_0: entered promiscuous mode [ 78.860403][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.867765][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.874966][ T5834] bridge_slave_0: entered allmulticast mode [ 78.882145][ T5834] bridge_slave_0: entered promiscuous mode [ 78.890408][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.897638][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.904815][ T5834] bridge_slave_1: entered allmulticast mode [ 78.911829][ T5834] bridge_slave_1: entered promiscuous mode [ 78.918991][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.925965][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.952431][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.972989][ T5835] team0: Port device team_slave_0 added [ 78.979347][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.986457][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.999756][ T5840] bridge_slave_1: entered allmulticast mode [ 79.006569][ T5840] bridge_slave_1: entered promiscuous mode [ 79.044102][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.055794][ T5835] team0: Port device team_slave_1 added [ 79.091813][ T5828] hsr_slave_0: entered promiscuous mode [ 79.098863][ T5828] hsr_slave_1: entered promiscuous mode [ 79.107400][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.127498][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.175192][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.198246][ T5827] hsr_slave_0: entered promiscuous mode [ 79.204806][ T5827] hsr_slave_1: entered promiscuous mode [ 79.213212][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.221194][ T5827] Cannot create hsr debugfs directory [ 79.234950][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.246015][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.272823][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.308151][ T5832] Bluetooth: hci0: command tx timeout [ 79.331835][ T5834] team0: Port device team_slave_0 added [ 79.340477][ T5834] team0: Port device team_slave_1 added [ 79.346725][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.354037][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.380334][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.391113][ T5833] Bluetooth: hci1: command tx timeout [ 79.396925][ T5832] Bluetooth: hci3: command tx timeout [ 79.433878][ T5840] team0: Port device team_slave_0 added [ 79.442531][ T5840] team0: Port device team_slave_1 added [ 79.467376][ T5832] Bluetooth: hci4: command tx timeout [ 79.467386][ T5833] Bluetooth: hci2: command tx timeout [ 79.504005][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.511330][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.538467][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.566785][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.573930][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.600387][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.628380][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.635392][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.661524][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.681376][ T5835] hsr_slave_0: entered promiscuous mode [ 79.688136][ T5835] hsr_slave_1: entered promiscuous mode [ 79.694501][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.702267][ T5835] Cannot create hsr debugfs directory [ 79.720048][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.727122][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.753128][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.855262][ T5840] hsr_slave_0: entered promiscuous mode [ 79.862115][ T5840] hsr_slave_1: entered promiscuous mode [ 79.869376][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.877368][ T5840] Cannot create hsr debugfs directory [ 79.923515][ T5834] hsr_slave_0: entered promiscuous mode [ 79.930251][ T5834] hsr_slave_1: entered promiscuous mode [ 79.937782][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.945465][ T5834] Cannot create hsr debugfs directory [ 80.095485][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.121566][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.138840][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.155343][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.263712][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.283947][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.312126][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.322580][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.373823][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.405834][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.428969][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.455896][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.512534][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.534256][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.544878][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.567748][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.651014][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.659910][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.683765][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.704564][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.712916][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.724344][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.743326][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.770687][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.778813][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.815298][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.826121][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.833277][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.868580][ T205] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.875678][ T205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.918381][ T205] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.925534][ T205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.941116][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.000743][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.012603][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.045787][ T205] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.052997][ T205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.118881][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.149912][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.185314][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.198643][ T205] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.205801][ T205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.216491][ T205] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.223692][ T205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.247782][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.280851][ T205] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.288063][ T205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.306068][ T205] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.313373][ T205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.353920][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.361100][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.387911][ T5832] Bluetooth: hci0: command tx timeout [ 81.461295][ T5834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.473670][ T5832] Bluetooth: hci3: command tx timeout [ 81.473684][ T5833] Bluetooth: hci1: command tx timeout [ 81.480101][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.509366][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.535236][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.547883][ T5833] Bluetooth: hci4: command tx timeout [ 81.548415][ T5832] Bluetooth: hci2: command tx timeout [ 81.553941][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.608268][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.749812][ T5827] veth0_vlan: entered promiscuous mode [ 81.801303][ T5827] veth1_vlan: entered promiscuous mode [ 81.901973][ T5827] veth0_macvtap: entered promiscuous mode [ 81.942013][ T5827] veth1_macvtap: entered promiscuous mode [ 81.975647][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.048903][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.093823][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.131344][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.140921][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.150111][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.159408][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.176079][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.198624][ T5834] veth0_vlan: entered promiscuous mode [ 82.275142][ T5834] veth1_vlan: entered promiscuous mode [ 82.299356][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.308272][ T5828] veth0_vlan: entered promiscuous mode [ 82.326326][ T5828] veth1_vlan: entered promiscuous mode [ 82.338774][ T5835] veth0_vlan: entered promiscuous mode [ 82.381188][ T5835] veth1_vlan: entered promiscuous mode [ 82.424207][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.446963][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.479057][ T5835] veth0_macvtap: entered promiscuous mode [ 82.488711][ T5834] veth0_macvtap: entered promiscuous mode [ 82.495966][ T5835] veth1_macvtap: entered promiscuous mode [ 82.525375][ T5834] veth1_macvtap: entered promiscuous mode [ 82.540961][ T5828] veth0_macvtap: entered promiscuous mode [ 82.552945][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.562119][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.584495][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.597989][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.611219][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.628786][ T5828] veth1_macvtap: entered promiscuous mode [ 82.636525][ T5840] veth0_vlan: entered promiscuous mode [ 82.651749][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.662584][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.674714][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.703949][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.714764][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.725203][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.736076][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.750855][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.766305][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.774834][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.792786][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.805049][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.815595][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.825641][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.837675][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.849305][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.863565][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.874426][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.885106][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.898912][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.911839][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.920860][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.929828][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.938810][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.948091][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.964707][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.975698][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.985710][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.996745][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.006911][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.017619][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.029273][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.043496][ T5840] veth1_vlan: entered promiscuous mode [ 83.070723][ T5840] veth0_macvtap: entered promiscuous mode [ 83.084443][ T5840] veth1_macvtap: entered promiscuous mode [ 83.101022][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.111773][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.121677][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.132216][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.142205][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.163698][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.169005][ T5915] xt_hashlimit: max too large, truncated to 1048576 [ 83.173822][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.191933][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.205094][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.221042][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.230522][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.239407][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.248458][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.261388][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.271032][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.280075][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.288894][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.323144][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.334557][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.346397][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.362150][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.372192][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.393391][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.405295][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.421379][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.434348][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.479255][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.481450][ T5832] Bluetooth: hci0: command tx timeout [ 83.488379][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.488443][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.512178][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.557568][ T5832] Bluetooth: hci1: command tx timeout [ 83.563037][ T5832] Bluetooth: hci3: command tx timeout [ 83.628142][ T5832] Bluetooth: hci4: command tx timeout [ 83.635593][ T5833] Bluetooth: hci2: command tx timeout [ 83.647179][ T205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.657589][ T205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.744404][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.763351][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.801611][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.830727][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.861138][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.879939][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.999449][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.007848][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.021873][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.030908][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.771184][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.784463][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.803207][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.818829][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.683640][ T5832] Bluetooth: hci3: command tx timeout [ 85.689541][ T5832] Bluetooth: hci1: command tx timeout [ 86.374528][ T5833] Bluetooth: hci2: command tx timeout [ 87.679563][ T970] cfg80211: failed to load regulatory.db [ 87.768833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.857422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.867611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.133949][ T5832] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 88.142662][ T5832] Bluetooth: hci0: Injecting HCI hardware error event [ 88.151412][ T5832] Bluetooth: hci0: hardware error 0x00 [ 88.161314][ T5963] Bluetooth: MGMT ver 1.23 [ 88.193435][ T5961] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 88.242463][ T5963] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.259070][ T5971] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 92.254344][ T5993] syz.2.30: attempt to access beyond end of device [ 92.254344][ T5993] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 92.276391][ T5993] exFAT-fs (loop2): unable to read boot sector [ 92.282951][ T5993] exFAT-fs (loop2): failed to read boot sector [ 92.292079][ T5993] exFAT-fs (loop2): failed to recognize exfat type [ 92.310003][ T47] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.481937][ T47] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.493229][ T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.523673][ T47] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 92.552122][ T47] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 92.570177][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 92.581446][ T47] usb 4-1: SerialNumber: syz [ 92.917256][ T5832] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 92.938922][ T5832] ================================================================== [ 92.947136][ T5832] BUG: KASAN: slab-use-after-free in set_powered_sync+0x3a/0xc0 [ 92.954821][ T5832] Read of size 8 at addr ffff888030c91918 by task kworker/u9:2/5832 [ 92.962818][ T5832] [ 92.965175][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: kworker/u9:2 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 92.975699][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 92.985787][ T5832] Workqueue: hci0 hci_cmd_sync_work [ 92.991030][ T5832] Call Trace: [ 92.994330][ T5832] [ 92.997279][ T5832] dump_stack_lvl+0x241/0x360 [ 93.001994][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.007247][ T5832] ? __pfx__printk+0x10/0x10 [ 93.012167][ T5832] ? _printk+0xd5/0x120 [ 93.016383][ T5832] ? __virt_addr_valid+0x183/0x530 [ 93.021555][ T5832] ? __virt_addr_valid+0x183/0x530 [ 93.026709][ T5832] print_report+0x169/0x550 [ 93.031247][ T5832] ? __virt_addr_valid+0x183/0x530 [ 93.036384][ T5832] ? __virt_addr_valid+0x183/0x530 [ 93.041525][ T5832] ? __virt_addr_valid+0x45f/0x530 [ 93.046668][ T5832] ? __phys_addr+0xba/0x170 [ 93.051200][ T5832] ? set_powered_sync+0x3a/0xc0 [ 93.056081][ T5832] kasan_report+0x143/0x180 [ 93.060637][ T5832] ? set_powered_sync+0x3a/0xc0 [ 93.065529][ T5832] set_powered_sync+0x3a/0xc0 [ 93.070254][ T5832] ? __pfx_set_powered_sync+0x10/0x10 [ 93.075658][ T5832] hci_cmd_sync_work+0x22b/0x400 [ 93.080655][ T5832] ? process_scheduled_works+0x976/0x1850 [ 93.086432][ T5832] process_scheduled_works+0xa63/0x1850 [ 93.092031][ T5832] ? __pfx_process_scheduled_works+0x10/0x10 [ 93.098049][ T5832] ? assign_work+0x364/0x3d0 [ 93.102674][ T5832] worker_thread+0x870/0xd30 [ 93.107302][ T5832] ? __kthread_parkme+0x169/0x1d0 [ 93.112364][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 93.117505][ T5832] kthread+0x2f0/0x390 [ 93.121601][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 93.126736][ T5832] ? __pfx_kthread+0x10/0x10 [ 93.131350][ T5832] ret_from_fork+0x4b/0x80 [ 93.135801][ T5832] ? __pfx_kthread+0x10/0x10 [ 93.140412][ T5832] ret_from_fork_asm+0x1a/0x30 [ 93.145208][ T5832] [ 93.148268][ T5832] [ 93.150604][ T5832] Allocated by task 5963: [ 93.154939][ T5832] kasan_save_track+0x3f/0x80 [ 93.159651][ T5832] __kasan_kmalloc+0x98/0xb0 [ 93.164279][ T5832] __kmalloc_cache_noprof+0x19c/0x2c0 [ 93.169674][ T5832] mgmt_pending_new+0x65/0x250 [ 93.174458][ T5832] mgmt_pending_add+0x36/0x120 [ 93.179249][ T5832] set_powered+0x3cd/0x5e0 [ 93.183696][ T5832] hci_mgmt_cmd+0xc47/0x11d0 [ 93.188311][ T5832] hci_sock_sendmsg+0x7b8/0x11c0 [ 93.193275][ T5832] __sock_sendmsg+0x221/0x270 [ 93.197974][ T5832] sock_write_iter+0x2d7/0x3f0 [ 93.202773][ T5832] vfs_write+0xaeb/0xd30 [ 93.207039][ T5832] ksys_write+0x18f/0x2b0 [ 93.211398][ T5832] do_syscall_64+0xf3/0x230 [ 93.215928][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.221857][ T5832] [ 93.224203][ T5832] Freed by task 5832: [ 93.228216][ T5832] kasan_save_track+0x3f/0x80 [ 93.231982][ T47] usb 4-1: 0:2 : does not exist [ 93.232911][ T5832] kasan_save_free_info+0x40/0x50 [ 93.232942][ T5832] __kasan_slab_free+0x59/0x70 [ 93.238113][ T47] usb 4-1: unit 5 not found! [ 93.242873][ T5832] kfree+0x1a0/0x440 [ 93.242899][ T5832] settings_rsp+0x2bc/0x390 [ 93.260772][ T5832] mgmt_pending_foreach+0xd1/0x130 [ 93.265921][ T5832] __mgmt_power_off+0x106/0x430 [ 93.271033][ T5832] hci_dev_close_sync+0x6c4/0x11c0 [ 93.276180][ T5832] hci_error_reset+0x12c/0x3f0 [ 93.280985][ T5832] process_scheduled_works+0xa63/0x1850 [ 93.286574][ T5832] worker_thread+0x870/0xd30 [ 93.291208][ T5832] kthread+0x2f0/0x390 [ 93.295300][ T5832] ret_from_fork+0x4b/0x80 [ 93.299747][ T5832] ret_from_fork_asm+0x1a/0x30 [ 93.304549][ T5832] [ 93.306892][ T5832] The buggy address belongs to the object at ffff888030c91900 [ 93.306892][ T5832] which belongs to the cache kmalloc-96 of size 96 [ 93.320801][ T5832] The buggy address is located 24 bytes inside of [ 93.320801][ T5832] freed 96-byte region [ffff888030c91900, ffff888030c91960) [ 93.326513][ T47] usb 4-1: USB disconnect, device number 2 [ 93.334442][ T5832] [ 93.334452][ T5832] The buggy address belongs to the physical page: [ 93.334472][ T5832] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30c91 [ 93.334499][ T5832] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 93.334528][ T5832] page_type: f5(slab) [ 93.334549][ T5832] raw: 00fff00000000000 ffff88801ac41280 dead000000000122 0000000000000000 [ 93.334567][ T5832] raw: 0000000000000000 0000000000200020 00000001f5000000 0000000000000000 [ 93.334579][ T5832] page dumped because: kasan: bad access detected [ 93.334594][ T5832] page_owner tracks the page as allocated [ 93.334602][ T5832] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 2958, tgid 2958 (kworker/u8:8), ts 88112320651, free_ts 87318562163 [ 93.334639][ T5832] post_alloc_hook+0x1f3/0x230 [ 93.334668][ T5832] get_page_from_freelist+0x363e/0x3790 [ 93.334697][ T5832] __alloc_pages_noprof+0x292/0x710 [ 93.334725][ T5832] alloc_pages_mpol_noprof+0x3e8/0x680 [ 93.334746][ T5832] alloc_slab_page+0x6a/0x140 [ 93.334773][ T5832] allocate_slab+0x5a/0x2f0 [ 93.334800][ T5832] ___slab_alloc+0xcd1/0x14b0 [ 93.334825][ T5832] __slab_alloc+0x58/0xa0 [ 93.334850][ T5832] __kmalloc_noprof+0x25a/0x400 [ 93.334872][ T5832] cfg80211_inform_single_bss_data+0xb2d/0x2090 [ 93.334898][ T5832] cfg80211_inform_bss_data+0x3ce/0x5e80 [ 93.334923][ T5832] cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 93.334950][ T5832] ieee80211_bss_info_update+0x8a7/0xbc0 [ 93.334971][ T5832] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 93.335004][ T5832] ieee80211_iface_work+0x8a5/0xf20 [ 93.335026][ T5832] cfg80211_wiphy_work+0x2db/0x490 [ 93.335056][ T5832] page last free pid 5952 tgid 5952 stack trace: [ 93.335069][ T5832] free_unref_folios+0xf21/0x1a10 [ 93.514027][ T5832] folios_put_refs+0x76c/0x860 [ 93.518807][ T5832] free_pages_and_swap_cache+0x5c8/0x690 [ 93.524465][ T5832] tlb_flush_mmu+0x3a3/0x680 [ 93.529089][ T5832] tlb_finish_mmu+0xd4/0x200 [ 93.533707][ T5832] exit_mmap+0x496/0xc40 [ 93.537966][ T5832] __mmput+0x115/0x380 [ 93.542059][ T5832] exit_mm+0x220/0x310 [ 93.546126][ T5832] do_exit+0x9b2/0x28e0 [ 93.550305][ T5832] do_group_exit+0x207/0x2c0 [ 93.554915][ T5832] get_signal+0x16a3/0x1740 [ 93.559439][ T5832] arch_do_signal_or_restart+0x96/0x860 [ 93.565016][ T5832] irqentry_exit_to_user_mode+0x79/0x280 [ 93.570660][ T5832] exc_page_fault+0x590/0x8c0 [ 93.575389][ T5832] asm_exc_page_fault+0x26/0x30 [ 93.580273][ T5832] [ 93.582594][ T5832] Memory state around the buggy address: [ 93.588237][ T5832] ffff888030c91800: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 93.596327][ T5832] ffff888030c91880: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 93.604412][ T5832] >ffff888030c91900: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 93.612474][ T5832] ^ [ 93.617343][ T5832] ffff888030c91980: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 93.625428][ T5832] ffff888030c91a00: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 93.633509][ T5832] ================================================================== [ 93.635017][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.650352][ T5832] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 93.650373][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: kworker/u9:2 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 93.650403][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 93.650418][ T5832] Workqueue: hci0 hci_cmd_sync_work [ 93.650453][ T5832] Call Trace: [ 93.650462][ T5832] [ 93.650472][ T5832] dump_stack_lvl+0x241/0x360 [ 93.650507][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.650545][ T5832] ? __pfx__printk+0x10/0x10 [ 93.650573][ T5832] ? preempt_schedule+0xe1/0xf0 [ 93.650599][ T5832] ? vscnprintf+0x5d/0x90 [ 93.650635][ T5832] panic+0x349/0x880 [ 93.650663][ T5832] ? check_panic_on_warn+0x21/0xb0 [ 93.650688][ T5832] ? __pfx_panic+0x10/0x10 [ 93.650717][ T5832] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 93.650742][ T5832] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 93.650765][ T5832] ? print_report+0x502/0x550 [ 93.650791][ T5832] check_panic_on_warn+0x86/0xb0 [ 93.650815][ T5832] ? set_powered_sync+0x3a/0xc0 [ 93.650842][ T5832] end_report+0x77/0x160 [ 93.650863][ T5832] kasan_report+0x154/0x180 [ 93.650886][ T5832] ? set_powered_sync+0x3a/0xc0 [ 93.650917][ T5832] set_powered_sync+0x3a/0xc0 [ 93.650943][ T5832] ? __pfx_set_powered_sync+0x10/0x10 [ 93.650971][ T5832] hci_cmd_sync_work+0x22b/0x400 [ 93.651001][ T5832] ? process_scheduled_works+0x976/0x1850 [ 93.651033][ T5832] process_scheduled_works+0xa63/0x1850 [ 93.651078][ T5832] ? __pfx_process_scheduled_works+0x10/0x10 [ 93.651114][ T5832] ? assign_work+0x364/0x3d0 [ 93.651147][ T5832] worker_thread+0x870/0xd30 [ 93.651186][ T5832] ? __kthread_parkme+0x169/0x1d0 [ 93.651220][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 93.651253][ T5832] kthread+0x2f0/0x390 [ 93.651274][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 93.651305][ T5832] ? __pfx_kthread+0x10/0x10 [ 93.651327][ T5832] ret_from_fork+0x4b/0x80 [ 93.651361][ T5832] ? __pfx_kthread+0x10/0x10 [ 93.651383][ T5832] ret_from_fork_asm+0x1a/0x30 [ 93.651422][ T5832] [ 93.658200][ T5832] Kernel Offset: disabled