last executing test programs: 4.888961286s ago: executing program 1 (id=2): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000085000000070000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) 4.60588248s ago: executing program 2 (id=3): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) 4.446018257s ago: executing program 2 (id=16): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) io_setup(0x0, &(0x7f00000009c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="58000000bbbbbbbbbbbbaaaaaaaaaaaa81"], 0x18) 4.180341227s ago: executing program 0 (id=19): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffffffff, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000)=0xf3e, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000480)=""/177, 0xb1}], 0x1, 0x0, 0x0) 2.89190091s ago: executing program 4 (id=22): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x80, 0xf9002fd280fa163a}, 0xe) 2.797887802s ago: executing program 4 (id=24): r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) 2.70699957s ago: executing program 4 (id=25): ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @tipc=@name={0x1e, 0x2, 0x0, {{0x2}}}, @nfc, @nl=@unspec}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000003c0)) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x1}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB], 0x20}}, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback}}}}, 0xfdef) 1.92509394s ago: executing program 3 (id=26): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x214f1000) 1.849780438s ago: executing program 3 (id=27): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x11) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_procfs(0x0, &(0x7f0000001240)='gid_map\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000001200)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x10, 0x1, 0x3, 0xffffffff, {{0x1a, 0x4, 0x1, 0x20, 0x68, 0x68, 0x0, 0x1, 0x29, 0x0, @private=0xa010102, @remote, {[@ssrr={0x89, 0x27, 0x1c, [@multicast1, @dev={0xac, 0x14, 0x14, 0x33}, @local, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @broadcast, @multicast2]}, @timestamp={0x44, 0x8, 0xfe, 0x0, 0x0, [0x4]}, @lsrr={0x83, 0x7, 0xac, [@multicast1]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x8d, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x9}, {@empty, 0xc}, {@empty, 0x4}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x29, 0x11, 0xb, 0x1, 0x10, @dev={0xfe, 0x80, '\x00', 0x30}, @dev, 0x10, 0x0, 0x9, 0x1}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'macvtap0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r3, 0x0, 0x37, 0x59, &(0x7f0000000880)="00f4792bfaf56329b5a6ce291e14bafcb59eded07188ef956ff30d1783b6f68596385d239bb79133509784e102ced1ed81d9321c92baf3", &(0x7f0000000900)=""/89, 0x840, 0x0, 0x15, 0x2a, &(0x7f0000000980)="ae1b0122c6af25ca6eba11d5a3679bb94128d3d51e", &(0x7f00000009c0)="539d809e0d90ddf8995cc421c03ba8cf71a2c98b2a931f5aa6c5a370cbf81a9c73512acd4cb967294256", 0x1, 0x0, 0x3ff}, 0x50) getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000640)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 1.675467571s ago: executing program 2 (id=28): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000400)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.6204314s ago: executing program 0 (id=29): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.55612038s ago: executing program 2 (id=30): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1000000, &(0x7f0000000440)=ANY=[@ANYBLOB="9e87760b9e18406c0187b64a70cef4a51f48caabdccb5095a458ae9f6dede4fd1acaa62c0294784fdfeaa0ad3eea2366ba6ddadad42e62916143edb2fde713fbe7e9df35f3c4125f4273180db1c771af7de98368baa240fb7554aa9348fc423d098b46581f0f"], 0x3, 0x186, &(0x7f00000004c0)="$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") r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/snmp6\x00') r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, r0, 0x2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40), 0x4000000000000aa, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140), 0xe9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r6, @ANYBLOB="0500000000420000000000f2ff0000000000", @ANYRES32=r7, @ANYBLOB="3c000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000000040600000000000006020000760600000000060008000c006400000008000d00000000000a0034000202020202020000080035000000000008007e000000000006009600f9ff0000"], 0x8c}}, 0x0) r8 = openat$cgroup_ro(r4, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r8, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000"], 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/fdt', 0x0, 0x0) dup3(r9, r10, 0x0) 1.555276703s ago: executing program 0 (id=31): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x90) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)=r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c9801288463608646"], 0xffdd) 1.549304581s ago: executing program 4 (id=32): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7020000030000008500000086"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.457834003s ago: executing program 4 (id=33): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$binfmt_elf64(r0, &(0x7f00000014c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000005f010900de50d1aa3dd355d57b26d710dbc65c1898e47b4d00bed0a144d2a1c4bc75bd9139466e7b11d4aa943bbcb92e5d7b91afd7e09719035d4d3721"], 0xed) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0', [{0x20, 'hash\x00'}, {0x20, ':'}, {0x20, '\x00'}], 0xa, "dbe1e8cbec59c68786138aca09be8ddb1aec362c2a784ca8933bfe0bd9b1b81977626a1e3f7737d461912f07c80ef3c25e5ca69e183e26335eecacfa757aa91e22abca480c93a0fc0bf72da0e73f60e62bf8db32a9012d4d4539b817b0c2eb07d3c831a8fc97c48411ee258044"}, 0x82) socket$alg(0x26, 0x5, 0x0) pwritev(r0, &(0x7f0000000440)=[{&(0x7f0000000140)='2', 0x1}], 0x1, 0x4000000, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) landlock_create_ruleset(&(0x7f0000000140), 0x13, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000003aea416cfbd656f707374a387d0000000000000000000018110000dfeea4e99ba48362f1eccf99e9dc401871f9251167fc49498404e6d3d7d50bea34e145752ec6f9bd93ca9d539a9f2b8a6f5282e6600ac670d411080c379e9084d5db9df15f20f96c97efca4c85e38ce2c4ca11e294a25422e5701b7e9cd24c87c50fdb2245bdedc472e2e90a02b6e35c2246b5d8775b5a389e03986f9133abe890408c", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000000)=""/1, 0x1, 0x0, &(0x7f0000000180)=""/170, 0xaa}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000080)={0x5}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x9c}}, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000180)={0x5, 0x5825}) r6 = syz_open_dev$video4linux(&(0x7f0000000300), 0x0, 0x0) dup3(r6, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='ext4_free_blocks\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.sectors\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r7) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x4) 1.3535121s ago: executing program 0 (id=34): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = socket(0x200000000000011, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000022c0), &(0x7f0000000000)=0x14) 1.294974561s ago: executing program 4 (id=35): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x5) ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c96558", 0xe}], 0x1) 986.026274ms ago: executing program 3 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') 957.329345ms ago: executing program 3 (id=37): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000340)={0x28, 0x0, r7, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000380)={0x28, 0x0, r9, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r10, 0x0, 0xffe6) sendmmsg$unix(r3, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000440)="b6ce3d347d48d2b07dc6e49e0cb46a1ab2700d0be61ad9c7e48d16c08924971660a8ad550569f47fd71bd1d6fd5195ba4c33d31b3f019bd272799c08cae69b3ea093ff5b904f075a2f0766605405c8467b8916f779c8d20f04390ea87b8224901909fd306061b10e9574", 0x6a}, {&(0x7f00000004c0)="7bb8f5a8c5033ca463a44846e537086669aa67df0abe9ab6056e18595b947c2cd2416cea79bfc7f6bd3b2037899159a8c10cc09f71afa07fb6a860ffdeca9b4d2b9b2c88e269192ccec3668bbdef3d06bf8d6a286ea550426f12144aeb0fd62673e071cb3b46985f9e77fb24abcfd0606b7ebd6ba3e44889f68275998f44db823969eb8d1c691b2803a96b81d23d276937aa7dcf7a084fcfd2e121a041219d2cdf1ca5ac61d8f3797f8c4e1b59bf95f0d80353c544eb014ce9d187701894d5b91e2d13c4df0418719de30957981e7816049928d97ab075fa9a11d1c9981941f8447f9169ea2b9ba6ecce5bb64b3288411ee38b170922e6eb", 0xf8}, {&(0x7f0000000080)="8c30348cf3d58de561f947554d8a8e4629952ce0e6ee9cd66ab41895c3f9cf554493aab6d848091accd0fd035c13945c27891fbe", 0x34}, {&(0x7f00000006c0)="9c4c229aea3f3dac3995fc25150800c4e261c1a3f0bdb18aebee8d0f4e4cbf42096562fb6c2a327ca8e90a3ed058965ecc42cee09c", 0x35}, {&(0x7f0000000740)="c17f4b2372004ccc6203846aa5a66895724b13c5e7ed04cba6d82742145fd8a5ddb11f309cbc607450357471baac54e9e8371498795ca2a16fa598093f06c0b1033b7455840dd260e1d7bae95ea7ef8cc00598bfe9e192a5e631c99a5a030800b0c9a07109f24765fa3948f5245cc45b1bd56a91fb0d7d3adfa1ca3ac64996ae464772db7e2d71c9c859de28ccd85c97389a982871c6b7a5e22fdb1741ffffdae72661f1", 0xa4}], 0x5, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r2, r6, r0, r0, r6, r4, r2]}}], 0x50}}, {{&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000000300), 0x0, &(0x7f0000000f40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r5, r2, r6, r5, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}], 0xd0, 0x48840}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001040)="b8eb4fb17fe543bee270e14678581b0128b790f0f8", 0x15}, {0x0}, {&(0x7f0000001140)="b2922d27f9c8709e0b92b22dfe207b65dd67fb267ccf2af6cd2e2477761c699a4913a4e5", 0x24}], 0x3, &(0x7f00000016c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r1, r5, r4, r4, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r2]}}, @rights={{0x24, 0x1, 0x1, [r10, r2, r0, r2, r6]}}], 0x110, 0x20000000}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001880)="50187ba6b113e12427132edcf360b6ac482ffbe9f65466085cb5c5455f997259fc9e33467e67c3ec33e92927d0ee6d49723850751737ac0356c6ee54521d816080b4e173d83594058bda0168417586c69619def4088b55ee0cea8cbf4a77", 0x5e}, {&(0x7f0000001980)}, {&(0x7f0000001a00)="0051bf74be7cb1e3a18ac9a21ba068cc", 0x10}], 0x3, &(0x7f0000001a80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r4, r0, 0xffffffffffffffff, r2]}}], 0x28, 0x10}}], 0x4, 0x4) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0xa, r8, 0x0, r11}) 887.626292ms ago: executing program 0 (id=38): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) 756.608319ms ago: executing program 0 (id=39): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @hyper}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@loopback, 0x6, 0x0, 0x102, 0x3, 0xd9}, 0x20) r3 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1b) quotactl_fd$Q_QUOTAOFF(r4, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) bind$can_raw(r6, &(0x7f00000000c0), 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$l2tp6(0xa, 0x2, 0x73) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 752.79437ms ago: executing program 2 (id=40): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 1.468205ms ago: executing program 3 (id=41): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 3 (id=42): ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @tipc=@name={0x1e, 0x2, 0x0, {{0x2}}}, @nfc, @nl=@unspec}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000003c0)) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x1}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB], 0x20}}, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback}}}}, 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.7' (ED25519) to the list of known hosts. [ 30.438741][ T6276] cgroup: Unknown subsys name 'net' [ 30.694888][ T6276] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.025916][ T6276] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 33.121926][ T6291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.138525][ T6304] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 33.140637][ T6302] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.143895][ T6302] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 33.143917][ T6304] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 33.146632][ T6302] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 33.149917][ T6304] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 33.151224][ T6302] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 33.153234][ T6304] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 33.154441][ T6302] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 33.156265][ T6304] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 33.158143][ T6302] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 33.159987][ T6304] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 33.162607][ T6302] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 33.169871][ T6302] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 33.172019][ T6302] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 33.175330][ T6302] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 33.178942][ T6302] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 33.181537][ T6302] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 33.184139][ T6302] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 33.184617][ T6304] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 33.186511][ T6302] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 33.189398][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 33.190582][ T6302] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 33.192569][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 33.196204][ T6302] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 33.199192][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 33.202412][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 33.218406][ T52] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 33.234410][ T6293] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 33.395897][ T6294] chnl_net:caif_netlink_parms(): no params data found [ 33.428156][ T6289] chnl_net:caif_netlink_parms(): no params data found [ 33.461263][ T6288] chnl_net:caif_netlink_parms(): no params data found [ 33.497454][ T6294] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.499750][ T6294] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.501773][ T6294] bridge_slave_0: entered allmulticast mode [ 33.503964][ T6294] bridge_slave_0: entered promiscuous mode [ 33.522847][ T6294] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.524786][ T6294] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.526861][ T6294] bridge_slave_1: entered allmulticast mode [ 33.529331][ T6294] bridge_slave_1: entered promiscuous mode [ 33.531845][ T6296] chnl_net:caif_netlink_parms(): no params data found [ 33.557608][ T6289] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.560076][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.562223][ T6289] bridge_slave_0: entered allmulticast mode [ 33.564286][ T6289] bridge_slave_0: entered promiscuous mode [ 33.588759][ T6289] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.590805][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.592895][ T6289] bridge_slave_1: entered allmulticast mode [ 33.595196][ T6289] bridge_slave_1: entered promiscuous mode [ 33.598941][ T6294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.607357][ T6288] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.610322][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.612436][ T6288] bridge_slave_0: entered allmulticast mode [ 33.614618][ T6288] bridge_slave_0: entered promiscuous mode [ 33.626605][ T6294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.635467][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.637392][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.640059][ T6288] bridge_slave_1: entered allmulticast mode [ 33.642180][ T6288] bridge_slave_1: entered promiscuous mode [ 33.646073][ T6289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.669998][ T6289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.672622][ T6296] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.674575][ T6296] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.676599][ T6296] bridge_slave_0: entered allmulticast mode [ 33.679509][ T6296] bridge_slave_0: entered promiscuous mode [ 33.688220][ T6294] team0: Port device team_slave_0 added [ 33.690738][ T6295] chnl_net:caif_netlink_parms(): no params data found [ 33.694918][ T6294] team0: Port device team_slave_1 added [ 33.700639][ T6296] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.702760][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.704806][ T6296] bridge_slave_1: entered allmulticast mode [ 33.706979][ T6296] bridge_slave_1: entered promiscuous mode [ 33.727045][ T6288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.731481][ T6288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.751443][ T6289] team0: Port device team_slave_0 added [ 33.767515][ T6294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.769781][ T6294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.776618][ T6294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.782174][ T6296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.784902][ T6294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.786823][ T6294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.794247][ T6294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.798553][ T6289] team0: Port device team_slave_1 added [ 33.801685][ T6288] team0: Port device team_slave_0 added [ 33.813866][ T6296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.825016][ T6288] team0: Port device team_slave_1 added [ 33.842459][ T6295] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.844521][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.846556][ T6295] bridge_slave_0: entered allmulticast mode [ 33.848701][ T6295] bridge_slave_0: entered promiscuous mode [ 33.851814][ T6295] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.853735][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.855769][ T6295] bridge_slave_1: entered allmulticast mode [ 33.857908][ T6295] bridge_slave_1: entered promiscuous mode [ 33.868001][ T6289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.870244][ T6289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.877312][ T6289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.887162][ T6296] team0: Port device team_slave_0 added [ 33.901910][ T6289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.903923][ T6289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.911255][ T6289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.924532][ T6296] team0: Port device team_slave_1 added [ 33.928204][ T6295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.931985][ T6288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.933895][ T6288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.941914][ T6288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.980597][ T6294] hsr_slave_0: entered promiscuous mode [ 34.019152][ T6294] hsr_slave_1: entered promiscuous mode [ 34.085139][ T6295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.093058][ T6288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.095000][ T6288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.102063][ T6288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.123569][ T6296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.125548][ T6296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.133157][ T6296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.137353][ T6296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.139492][ T6296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.146515][ T6296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.200690][ T6289] hsr_slave_0: entered promiscuous mode [ 34.239322][ T6289] hsr_slave_1: entered promiscuous mode [ 34.279184][ T6289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.281529][ T6289] Cannot create hsr debugfs directory [ 34.340413][ T6288] hsr_slave_0: entered promiscuous mode [ 34.419343][ T6288] hsr_slave_1: entered promiscuous mode [ 34.459141][ T6288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.461313][ T6288] Cannot create hsr debugfs directory [ 34.472063][ T6295] team0: Port device team_slave_0 added [ 34.501116][ T6295] team0: Port device team_slave_1 added [ 34.535537][ T6295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.537486][ T6295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.545004][ T6295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.580756][ T6296] hsr_slave_0: entered promiscuous mode [ 34.619258][ T6296] hsr_slave_1: entered promiscuous mode [ 34.659659][ T6296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.661816][ T6296] Cannot create hsr debugfs directory [ 34.668399][ T6295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.670770][ T6295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.677873][ T6295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.790795][ T6295] hsr_slave_0: entered promiscuous mode [ 34.829117][ T6295] hsr_slave_1: entered promiscuous mode [ 34.869049][ T6295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.871178][ T6295] Cannot create hsr debugfs directory [ 34.965037][ T6294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.975992][ T6294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.982585][ T6294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.985998][ T6294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.030821][ T6289] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.045201][ T6288] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.052708][ T6289] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.056532][ T6289] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.062154][ T6289] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.066063][ T6288] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.070042][ T6288] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.079899][ T6288] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.124787][ T6294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.130447][ T6296] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.152254][ T6296] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.156233][ T6296] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.168262][ T6294] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.171974][ T6296] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.198129][ T6295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.214547][ T6289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.222132][ T6293] Bluetooth: hci0: command tx timeout [ 35.223859][ T6293] Bluetooth: hci1: command tx timeout [ 35.226114][ T6295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.230189][ T6295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.234940][ T6343] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.236998][ T6343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.245795][ T6289] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.259902][ T6295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.266737][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.268742][ T6344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.277512][ T6344] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.279558][ T6344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.283359][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.285296][ T6344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.289163][ T6303] Bluetooth: hci4: command tx timeout [ 35.290936][ T6303] Bluetooth: hci2: command tx timeout [ 35.292669][ T6303] Bluetooth: hci3: command tx timeout [ 35.304156][ T6288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.320080][ T6294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.374244][ T6289] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.377104][ T6289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.383625][ T6288] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.393007][ T6347] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.394996][ T6347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.408537][ T6347] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.410688][ T6347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.472420][ T6296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.483032][ T6288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.490523][ T6294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.506979][ T6296] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.526744][ T6295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.545437][ T6344] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.547390][ T6344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.565040][ T6289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.568483][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.570493][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.576937][ T6294] veth0_vlan: entered promiscuous mode [ 35.584582][ T6294] veth1_vlan: entered promiscuous mode [ 35.606425][ T6288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.611287][ T6296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.614073][ T6296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.645720][ T6295] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.656998][ T6289] veth0_vlan: entered promiscuous mode [ 35.685270][ T6289] veth1_vlan: entered promiscuous mode [ 35.695486][ T6344] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.697590][ T6344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.706272][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.708308][ T6344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.724150][ T6294] veth0_macvtap: entered promiscuous mode [ 35.735146][ T6294] veth1_macvtap: entered promiscuous mode [ 35.740169][ T6289] veth0_macvtap: entered promiscuous mode [ 35.743672][ T6289] veth1_macvtap: entered promiscuous mode [ 35.759256][ T6288] veth0_vlan: entered promiscuous mode [ 35.761533][ T6295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.774203][ T6294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.778103][ T6294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.787094][ T6296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.792194][ T6288] veth1_vlan: entered promiscuous mode [ 35.806047][ T6294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.808508][ T6294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.812044][ T6294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.814396][ T6294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.822633][ T6289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.825703][ T6289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.831305][ T6289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.844344][ T6289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.847333][ T6289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.861087][ T6289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.873588][ T6289] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.876189][ T6289] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.878620][ T6289] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.883252][ T6289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.891310][ T6296] veth0_vlan: entered promiscuous mode [ 35.896367][ T6295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.901275][ T6288] veth0_macvtap: entered promiscuous mode [ 35.904771][ T6288] veth1_macvtap: entered promiscuous mode [ 35.927195][ T6296] veth1_vlan: entered promiscuous mode [ 35.950670][ T6288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.953502][ T6288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.956190][ T6288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.973657][ T6288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.977352][ T6288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.993009][ T6288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.995936][ T6288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.998571][ T6288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.006580][ T6288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.010674][ T6288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.042537][ T6288] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.044968][ T6288] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.047341][ T6288] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.052526][ T6288] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.064334][ T6296] veth0_macvtap: entered promiscuous mode [ 36.093250][ T6296] veth1_macvtap: entered promiscuous mode [ 36.102068][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.105693][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.133207][ T6295] veth0_vlan: entered promiscuous mode [ 36.153807][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.156814][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.168511][ T6296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.172075][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.174236][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.175583][ T6296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.179659][ T6296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.182553][ T6296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.185160][ T6296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.188088][ T6296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.192874][ T6296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.201915][ T6295] veth1_vlan: entered promiscuous mode [ 36.214004][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.216261][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.218780][ T595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.224246][ T595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.233673][ T6296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.236608][ T6296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.242512][ T6296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.245407][ T6296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.248030][ T6296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.251674][ T6296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.260133][ T6296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.271444][ T6296] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.273885][ T6296] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.276218][ T6296] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.278572][ T6296] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.289398][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.292145][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.301645][ T6295] veth0_macvtap: entered promiscuous mode [ 36.305148][ T6295] veth1_macvtap: entered promiscuous mode [ 36.313183][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.316079][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.318770][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.323785][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.326414][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.331325][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.333925][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.336748][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.342640][ T6295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.354797][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.357738][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.360996][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.365600][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.368237][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.380642][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.383418][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.386257][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.393077][ T6295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.397216][ T6295] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.401252][ T6295] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.403684][ T6295] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.406019][ T6295] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.485937][ T595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.488011][ T595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.520839][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.523085][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.599995][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.600695][ T595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.605002][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.619966][ T595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.762409][ T6395] loop3: detected capacity change from 0 to 16 [ 36.764702][ T6395] erofs: Unknown parameter 'ž‡v ž@l‡¶JpÎô¥HÊ«ÜËP•¤X®Ÿmíäýʦ' [ 36.794087][ T6303] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 36.797019][ T6303] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 36.799871][ T6303] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 36.802440][ T6303] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 36.804815][ T6303] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 36.806943][ T6303] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 36.823702][ T6280] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 36.835965][ T6395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.838577][ T6395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.846048][ T6400] loop0: detected capacity change from 0 to 512 [ 36.877648][ T6395] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.951168][ T6400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.086714][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.090930][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.123753][ T6294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.192593][ T6282] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 37.260890][ T6394] chnl_net:caif_netlink_parms(): no params data found [ 37.319323][ T6293] Bluetooth: hci1: command tx timeout [ 37.328602][ T6428] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET) [ 37.368964][ T6293] Bluetooth: hci3: command tx timeout [ 37.370586][ T6293] Bluetooth: hci2: command tx timeout [ 37.372690][ T6293] Bluetooth: hci4: command tx timeout [ 37.469511][ T6394] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.480487][ T6394] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.483236][ T6394] bridge_slave_0: entered allmulticast mode [ 37.485579][ T6394] bridge_slave_0: entered promiscuous mode [ 37.495419][ T6394] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.500130][ T6394] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.504616][ T6394] bridge_slave_1: entered allmulticast mode [ 37.512858][ T6394] bridge_slave_1: entered promiscuous mode [ 37.582922][ T6394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.597289][ T6394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.668317][ T6394] team0: Port device team_slave_0 added [ 37.692048][ T6394] team0: Port device team_slave_1 added [ 37.725316][ T6394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.732130][ T6394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.755688][ T6394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.767769][ T6394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.787231][ T6394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.835491][ T6394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.726768][ T6394] hsr_slave_0: entered promiscuous mode [ 38.802509][ T6394] hsr_slave_1: entered promiscuous mode [ 38.881458][ T6394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.914092][ T6394] Cannot create hsr debugfs directory [ 38.954786][ T6303] Bluetooth: hci5: command tx timeout [ 39.369035][ T6303] Bluetooth: hci1: command tx timeout [ 39.445869][ T6452] syzkaller1: entered promiscuous mode [ 39.449158][ T52] Bluetooth: hci3: command tx timeout [ 39.451332][ T6293] Bluetooth: hci2: command tx timeout [ 39.453725][ T6303] Bluetooth: hci4: command tx timeout [ 39.489178][ T6452] syzkaller1: entered allmulticast mode [ 39.702957][ T6394] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.892969][ T6469] loop2: detected capacity change from 0 to 16 [ 39.895166][ T6469] erofs: Unknown parameter 'ž‡v ž@l‡¶JpÎô¥HÊ«ÜËP•¤X®Ÿmíäýʦ' [ 39.953543][ T6282] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 39.962437][ T6469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.964966][ T6469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.003146][ T6477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.33'. [ 40.098256][ T6481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.108128][ T6481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.415311][ T30] audit: type=1326 audit(40.390:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6486 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f741e28 code=0x7ffc0000 [ 40.431018][ T30] audit: type=1326 audit(40.390:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6486 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f741e28 code=0x7ffc0000 [ 40.443983][ T30] audit: type=1326 audit(40.410:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6486 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=51 compat=0 ip=0xffff9f741e28 code=0x7ffc0000 [ 40.451533][ T30] audit: type=1326 audit(40.410:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6486 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f741e28 code=0x7ffc0000 [ 40.457481][ T30] audit: type=1326 audit(40.410:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6486 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f741e28 code=0x7ffc0000 [ 40.688023][ T6303] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 40.969336][ T6303] Bluetooth: hci5: command tx timeout [ 41.449859][ T6303] Bluetooth: hci1: command tx timeout [ 41.528996][ T6303] Bluetooth: hci4: command tx timeout [ 41.530607][ T6303] Bluetooth: hci2: command tx timeout [ 43.048930][ T6303] Bluetooth: hci5: command tx timeout [ 44.739779][ T6303] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 44.742231][ T6303] Bluetooth: hci3: Injecting HCI hardware error event [ 44.745036][ T6293] Bluetooth: hci3: hardware error 0x00 [ 44.970819][ T6293] ------------[ cut here ]------------ [ 44.973561][ T6293] ida_free called for id=8192 which is not allocated. [ 44.976191][ T6293] WARNING: CPU: 1 PID: 6293 at lib/idr.c:525 ida_free+0x2b8/0x378 [ 44.978248][ T6293] Modules linked in: [ 44.979307][ T6293] CPU: 1 PID: 6293 Comm: kworker/u9:3 Not tainted 6.10.0-rc6-syzkaller-g8a03d70c27fc #0 [ 44.982102][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 44.984902][ T6293] Workqueue: hci3 hci_error_reset [ 44.986305][ T6293] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 44.988517][ T6293] pc : ida_free+0x2b8/0x378 [ 44.989798][ T6293] lr : ida_free+0x2b8/0x378 [ 44.991093][ T6293] sp : ffff80009a527880 [ 44.992234][ T6293] x29: ffff80009a527930 x28: 1ffff00012423c94 x27: 1ffff000134a4f14 [ 44.994442][ T6293] x26: dfff800000000000 x25: ffff7000134a4f10 x24: ffff0000e893c008 [ 44.996646][ T6293] x23: 0000000000000000 x22: 0000000000000000 x21: 0000000000000000 [ 44.998783][ T6293] x20: 0000000000002000 x19: ffff80009a5278a0 x18: 0000000000000008 [ 45.000948][ T6293] x17: 0000000000000000 x16: ffff800082fcbd70 x15: 0000000000000001 [ 45.003166][ T6293] x14: 1fffe000367ae64a x13: 0000000000000000 x12: 0000000000000000 [ 45.005392][ T6293] x11: 0000000000000002 x10: 0000000000ff0100 x9 : 699a7d3ddc17e000 [ 45.007598][ T6293] x8 : 699a7d3ddc17e000 x7 : 0000000000000001 x6 : 0000000000000001 [ 45.009794][ T6293] x5 : ffff80009a526fd8 x4 : ffff80008f295200 x3 : ffff8000805ef510 [ 45.011970][ T6293] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 45.014200][ T6293] Call trace: [ 45.015121][ T6293] ida_free+0x2b8/0x378 [ 45.016302][ T6293] hci_conn_del+0x5c4/0xaa0 [ 45.017518][ T6293] hci_conn_hash_flush+0x184/0x220 [ 45.018973][ T6293] hci_dev_close_sync+0x76c/0xec0 [ 45.020425][ T6293] hci_error_reset+0x108/0x35c [ 45.021727][ T6293] process_one_work+0x79c/0x15b8 [ 45.023102][ T6293] worker_thread+0x938/0xecc [ 45.024364][ T6293] kthread+0x288/0x310 [ 45.025544][ T6293] ret_from_fork+0x10/0x20 [ 45.026762][ T6293] irq event stamp: 5470 [ 45.027858][ T6293] hardirqs last enabled at (5469): [] console_unlock+0x18c/0x3d4 [ 45.030547][ T6293] hardirqs last disabled at (5470): [] el1_dbg+0x24/0x80 [ 45.032911][ T6293] softirqs last enabled at (5454): [] handle_softirqs+0xa3c/0xbfc [ 45.035578][ T6293] softirqs last disabled at (5263): [] __do_softirq+0x14/0x20 [ 45.038117][ T6293] ---[ end trace 0000000000000000 ]--- [ 45.128987][ T6303] Bluetooth: hci5: command tx timeout [ 47.129012][ T6293] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 49.209093][ T6293] Bluetooth: hci3: Opcode 0x206c failed: -110 [ 51.246059][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39'. [ 51.251196][ T6495] vlan2: entered promiscuous mode [ 51.290690][ T6293] Bluetooth: hci3: Opcode 0x2046 failed: -110 [ 51.693999][ T6394] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.784035][ T6394] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.861221][ T6394] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.998913][ T595] bridge_slave_1: left allmulticast mode [ 52.000577][ T595] bridge_slave_1: left promiscuous mode [ 52.002819][ T595] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.010295][ T595] bridge_slave_0: left allmulticast mode [ 52.011886][ T595] bridge_slave_0: left promiscuous mode [ 52.013469][ T595] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.596654][ T595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.641815][ T595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.682714][ T595] bond0 (unregistering): Released all slaves [ 53.706941][ T6394] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.711644][ T6394] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.715802][ T6394] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.723667][ T6394] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.783235][ T6394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.791481][ T6394] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.803981][ T6505] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.806103][ T6505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.813723][ T6505] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.815729][ T6505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.054748][ T6394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.076847][ T6394] veth0_vlan: entered promiscuous mode [ 54.082019][ T6394] veth1_vlan: entered promiscuous mode [ 54.095995][ T6394] veth0_macvtap: entered promiscuous mode [ 54.100047][ T6394] veth1_macvtap: entered promiscuous mode [ 54.150676][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.153580][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.156524][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.159256][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.161991][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.164818][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.167472][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.172110][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.175003][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.177798][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.182310][ T6394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.186959][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.190380][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.193234][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.196023][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.198638][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.201734][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.204464][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.207291][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.210314][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.213140][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.216717][ T6394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.377269][ T6394] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.379881][ T6394] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.382269][ T6394] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.384628][ T6394] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.467308][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.470064][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.478157][ T595] hsr_slave_0: left promiscuous mode [ 54.499774][ T595] hsr_slave_1: left promiscuous mode [ 54.569032][ T595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.571370][ T595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.574390][ T595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.576461][ T595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.587857][ T595] veth1_macvtap: left promiscuous mode [ 54.589805][ T595] veth0_macvtap: left promiscuous mode [ 54.591389][ T595] veth1_vlan: left promiscuous mode [ 54.592951][ T595] veth0_vlan: left promiscuous mode