last executing test programs: 786.980499ms ago: executing program 0 (id=1): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x7, 0x0, 0x8, 0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000008400000000000000620000000000010020000000000000008400000008"], 0x38}, 0x0) 690.082305ms ago: executing program 0 (id=6): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) ustat(0x8, &(0x7f0000000100)) 543.47578ms ago: executing program 0 (id=7): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000)={[{@norecovery}, {@grpquota}, {@nombcache}, {@user_xattr}, {@nomblk_io_submit}]}, 0x1, 0xbbc, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "8bdd2e", 0x10, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="ff"], 0x0) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) 0s ago: executing program 4 (id=5): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x0, @val=@tcx}, 0x40) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts. [ 52.805586][ T5080] cgroup: Unknown subsys name 'net' [ 52.941595][ T5080] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.315877][ T5080] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.897560][ T5099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.913659][ T5103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.921981][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.923815][ T5102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.936491][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.938029][ T5102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.952618][ T5103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.952854][ T5102] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.959967][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.967815][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.977125][ T5103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.981123][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.988687][ T5103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.996604][ T5108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.002340][ T5103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.016396][ T5103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.017994][ T5108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.024021][ T5103] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.032305][ T5108] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.038519][ T5103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.044911][ T5108] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.053998][ T4492] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.065612][ T4492] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.070434][ T5108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.072925][ T4492] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.080313][ T5108] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.087891][ T4492] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.093847][ T5108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.100639][ T4492] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.114935][ T4492] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.625989][ T5089] chnl_net:caif_netlink_parms(): no params data found [ 58.663370][ T5090] chnl_net:caif_netlink_parms(): no params data found [ 58.776463][ T5097] chnl_net:caif_netlink_parms(): no params data found [ 58.850535][ T5104] chnl_net:caif_netlink_parms(): no params data found [ 58.909857][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.917297][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.924896][ T5089] bridge_slave_0: entered allmulticast mode [ 58.931870][ T5089] bridge_slave_0: entered promiscuous mode [ 58.976454][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.983663][ T5089] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.991022][ T5089] bridge_slave_1: entered allmulticast mode [ 58.998208][ T5089] bridge_slave_1: entered promiscuous mode [ 59.020542][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.027735][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.035219][ T5090] bridge_slave_0: entered allmulticast mode [ 59.041919][ T5090] bridge_slave_0: entered promiscuous mode [ 59.049754][ T5092] chnl_net:caif_netlink_parms(): no params data found [ 59.060728][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.067913][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.075121][ T5090] bridge_slave_1: entered allmulticast mode [ 59.081801][ T5090] bridge_slave_1: entered promiscuous mode [ 59.177738][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.190179][ T5089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.203064][ T5089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.213167][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.221007][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.228223][ T5097] bridge_slave_0: entered allmulticast mode [ 59.235562][ T5097] bridge_slave_0: entered promiscuous mode [ 59.274249][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.303258][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.310573][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.318731][ T5097] bridge_slave_1: entered allmulticast mode [ 59.325758][ T5097] bridge_slave_1: entered promiscuous mode [ 59.338074][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.345314][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.352483][ T5104] bridge_slave_0: entered allmulticast mode [ 59.360111][ T5104] bridge_slave_0: entered promiscuous mode [ 59.367910][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.375168][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.382441][ T5104] bridge_slave_1: entered allmulticast mode [ 59.389928][ T5104] bridge_slave_1: entered promiscuous mode [ 59.408485][ T5090] team0: Port device team_slave_0 added [ 59.452196][ T5090] team0: Port device team_slave_1 added [ 59.460830][ T5089] team0: Port device team_slave_0 added [ 59.468901][ T5089] team0: Port device team_slave_1 added [ 59.487392][ T5097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.556097][ T5097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.569181][ T5104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.598558][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.606039][ T5092] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.613235][ T5092] bridge_slave_0: entered allmulticast mode [ 59.620488][ T5092] bridge_slave_0: entered promiscuous mode [ 59.629211][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.636402][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.644340][ T5092] bridge_slave_1: entered allmulticast mode [ 59.651565][ T5092] bridge_slave_1: entered promiscuous mode [ 59.678422][ T5104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.698708][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.705992][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.732032][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.753594][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.761068][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.787558][ T5089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.812630][ T5097] team0: Port device team_slave_0 added [ 59.821131][ T5097] team0: Port device team_slave_1 added [ 59.840566][ T5104] team0: Port device team_slave_0 added [ 59.847340][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.854856][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.881509][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.893403][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.900665][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.926720][ T5089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.961859][ T5104] team0: Port device team_slave_1 added [ 59.985738][ T5092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.033827][ T5092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.043599][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.053618][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.081498][ T54] Bluetooth: hci0: command tx timeout [ 60.085699][ T5097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.100329][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.107473][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.133604][ T5097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.154357][ T54] Bluetooth: hci3: command tx timeout [ 60.158269][ T4492] Bluetooth: hci2: command tx timeout [ 60.177602][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.184758][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.210844][ T5104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.234291][ T4492] Bluetooth: hci1: command tx timeout [ 60.244679][ T4492] Bluetooth: hci4: command tx timeout [ 60.263829][ T5090] hsr_slave_0: entered promiscuous mode [ 60.270966][ T5090] hsr_slave_1: entered promiscuous mode [ 60.278443][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.285646][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.311901][ T5104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.352259][ T5092] team0: Port device team_slave_0 added [ 60.376111][ T5089] hsr_slave_0: entered promiscuous mode [ 60.382712][ T5089] hsr_slave_1: entered promiscuous mode [ 60.389949][ T5089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.398662][ T5089] Cannot create hsr debugfs directory [ 60.419044][ T5092] team0: Port device team_slave_1 added [ 60.500641][ T5104] hsr_slave_0: entered promiscuous mode [ 60.507175][ T5104] hsr_slave_1: entered promiscuous mode [ 60.513185][ T5104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.520970][ T5104] Cannot create hsr debugfs directory [ 60.546966][ T5097] hsr_slave_0: entered promiscuous mode [ 60.553215][ T5097] hsr_slave_1: entered promiscuous mode [ 60.559540][ T5097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.567914][ T5097] Cannot create hsr debugfs directory [ 60.594228][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.601260][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.627331][ T5092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.666121][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.673108][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.700487][ T5092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.810709][ T5092] hsr_slave_0: entered promiscuous mode [ 60.817152][ T5092] hsr_slave_1: entered promiscuous mode [ 60.823145][ T5092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.831044][ T5092] Cannot create hsr debugfs directory [ 61.114797][ T5090] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.126705][ T5090] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.137249][ T5090] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.161309][ T5090] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.255944][ T5089] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.275977][ T5089] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.293029][ T5089] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.315319][ T5089] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.360879][ T5097] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.387280][ T5097] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.399045][ T5097] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.430071][ T5097] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.534527][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.546062][ T5092] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.557609][ T5092] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.591360][ T5092] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.615421][ T5092] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.653780][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.677238][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.715329][ T5104] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.740473][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.747779][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.758714][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.765892][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.778001][ T5104] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.800625][ T5104] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.845112][ T5104] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.868997][ T5089] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.901904][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.953023][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.960223][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.981110][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.017517][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.024662][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.050244][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.068091][ T5090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.111164][ T5092] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.160116][ T4492] Bluetooth: hci0: command tx timeout [ 62.166509][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.173650][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.220001][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.227180][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.239043][ T4492] Bluetooth: hci2: command tx timeout [ 62.241314][ T54] Bluetooth: hci3: command tx timeout [ 62.280972][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.288192][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.307257][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.314461][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.322306][ T54] Bluetooth: hci4: command tx timeout [ 62.323579][ T4492] Bluetooth: hci1: command tx timeout [ 62.457230][ T5104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.478684][ T5089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.521826][ T5092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.561222][ T5104] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.596025][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.603306][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.676442][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.708957][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.716148][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.852956][ T5104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.922414][ T5090] veth0_vlan: entered promiscuous mode [ 62.952961][ T5090] veth1_vlan: entered promiscuous mode [ 63.070386][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.099656][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.162614][ T5090] veth0_macvtap: entered promiscuous mode [ 63.183460][ T5090] veth1_macvtap: entered promiscuous mode [ 63.200238][ T5089] veth0_vlan: entered promiscuous mode [ 63.237174][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.246701][ T5089] veth1_vlan: entered promiscuous mode [ 63.268754][ T5104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.278526][ T5097] veth0_vlan: entered promiscuous mode [ 63.299577][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.312044][ T5090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.321450][ T5090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.330829][ T5090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.339614][ T5090] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.357672][ T5097] veth1_vlan: entered promiscuous mode [ 63.410673][ T5089] veth0_macvtap: entered promiscuous mode [ 63.451926][ T5089] veth1_macvtap: entered promiscuous mode [ 63.496562][ T5097] veth0_macvtap: entered promiscuous mode [ 63.505542][ T5104] veth0_vlan: entered promiscuous mode [ 63.519443][ T5092] veth0_vlan: entered promiscuous mode [ 63.529671][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.540765][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.552337][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.572877][ T5097] veth1_macvtap: entered promiscuous mode [ 63.602941][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.615410][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.626965][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.650763][ T5104] veth1_vlan: entered promiscuous mode [ 63.677322][ T5092] veth1_vlan: entered promiscuous mode [ 63.688610][ T2817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.699146][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.702689][ T2817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.711527][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.728811][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.739608][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.752756][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.769802][ T5089] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.779013][ T5089] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.788290][ T5089] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.797031][ T5089] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.850003][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.861246][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.872521][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.883672][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.895424][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.907645][ T5097] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.917662][ T5097] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.927474][ T5097] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.936969][ T5097] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.967358][ T5104] veth0_macvtap: entered promiscuous mode [ 63.988643][ T5092] veth0_macvtap: entered promiscuous mode [ 64.008049][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.020591][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.036918][ T5092] veth1_macvtap: entered promiscuous mode [ 64.062753][ T5104] veth1_macvtap: entered promiscuous mode [ 64.149228][ T2817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.172319][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.176880][ T2817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.196453][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.207600][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.219809][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.229866][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.234237][ T4492] Bluetooth: hci0: command tx timeout [ 64.241909][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.282156][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.297915][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.311055][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.321336][ T4492] Bluetooth: hci2: command tx timeout [ 64.325135][ T54] Bluetooth: hci3: command tx timeout [ 64.345128][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.361125][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.372451][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.384173][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.394883][ T54] Bluetooth: hci4: command tx timeout [ 64.398561][ T4492] Bluetooth: hci1: command tx timeout [ 64.401167][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.417596][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.429987][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.461595][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.483750][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.500664][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.524003][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.533849][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.551066][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.557450][ T5181] loop0: detected capacity change from 0 to 4096 [ 64.570393][ T5181] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.581434][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.608711][ T5181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.637626][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.657511][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.672777][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.686679][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.697072][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.707636][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.718092][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.728648][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.740733][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.757674][ T5092] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.768365][ T5092] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.778123][ T5092] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.787132][ T5092] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.804990][ T2838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.813439][ T2838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.822479][ T5104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.832957][ T5104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.842945][ T5104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.852706][ T5104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.927379][ T2838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.939071][ T2838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.091302][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.112713][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.119706][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.130281][ T5187] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] PREEMPT SMP KASAN PTI [ 65.130304][ T5187] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 65.130326][ T5187] CPU: 0 UID: 0 PID: 5187 Comm: syz.4.5 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 65.130346][ T5187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 65.130360][ T5187] RIP: 0010:dev_map_redirect+0x65/0x6a0 [ 65.130390][ T5187] Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 83 b3 3d 00 4c 8b 2b 4d 8d 7d 38 4c 89 fb 48 c1 eb 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 03 84 c0 0f 85 6e 04 00 00 41 8b 2f 89 ee 83 e6 02 31 ff [ 65.130407][ T5187] RSP: 0018:ffffc900042576e8 EFLAGS: 00010202 [ 65.130424][ T5187] RAX: dffffc0000000000 RBX: 0000000000000007 RCX: 0000000000040000 [ 65.130435][ T5187] RDX: ffffc900099aa000 RSI: 0000000000002135 RDI: 0000000000002136 [ 65.130448][ T5187] RBP: dffffc0000000000 R08: 0000000000000007 R09: ffffffff81b5ee2f [ 65.130460][ T5187] R10: 0000000000000004 R11: ffff88802f3d5a00 R12: 0000000004257738 [ 65.130471][ T5187] R13: 0000000000000000 R14: 0000000000000008 R15: 0000000000000038 [ 65.130483][ T5187] FS: 00007f7b579da6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 65.130499][ T5187] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.130512][ T5187] CR2: 0000000020010000 CR3: 000000001669e000 CR4: 00000000003506f0 [ 65.130527][ T5187] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.130538][ T5187] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.130550][ T5187] Call Trace: [ 65.130557][ T5187] [ 65.130565][ T5187] ? __die_body+0x88/0xe0 [ 65.130590][ T5187] ? die_addr+0x108/0x140 [ 65.130615][ T5187] ? exc_general_protection+0x3dd/0x5d0 [ 65.130647][ T5187] ? asm_exc_general_protection+0x26/0x30 [ 65.130672][ T5187] ? bpf_ringbuf_query+0x4f/0x150 [ 65.130694][ T5187] ? dev_map_redirect+0x65/0x6a0 [ 65.130713][ T5187] ? dev_map_redirect+0x28/0x6a0 [ 65.130732][ T5187] bpf_prog_ec9efaa32d58ce69+0x56/0x5a [ 65.130754][ T5187] bpf_prog_run_generic_xdp+0x679/0x14c0 [ 65.130790][ T5187] do_xdp_generic+0x673/0xb90 [ 65.130816][ T5187] ? __pfx_do_xdp_generic+0x10/0x10 [ 65.130836][ T5187] ? tun_get_user+0x26c8/0x4560 [ 65.130860][ T5187] ? tun_get_user+0x26c8/0x4560 [ 65.130876][ T5187] tun_get_user+0x2805/0x4560 [ 65.130900][ T5187] ? __pfx_tun_get_user+0x10/0x10 [ 65.130921][ T5187] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 65.130938][ T5187] ? tun_get+0x1e/0x2f0 [ 65.130962][ T5187] ? tun_get+0x1e/0x2f0 [ 65.130978][ T5187] ? tun_get+0x27d/0x2f0 [ 65.130995][ T5187] tun_chr_write_iter+0x113/0x1f0 [ 65.131012][ T5187] vfs_write+0xa72/0xc90 [ 65.131030][ T5187] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 65.131048][ T5187] ? __pfx_vfs_write+0x10/0x10 [ 65.131063][ T5187] ? do_futex+0x33b/0x560 [ 65.131094][ T5187] ksys_write+0x1a0/0x2c0 [ 65.131112][ T5187] ? __pfx_ksys_write+0x10/0x10 [ 65.131129][ T5187] ? do_syscall_64+0x100/0x230 [ 65.131146][ T5187] ? do_syscall_64+0xb6/0x230 [ 65.131162][ T5187] do_syscall_64+0xf3/0x230 [ 65.131178][ T5187] ? clear_bhb_loop+0x35/0x90 [ 65.131201][ T5187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.131219][ T5187] RIP: 0033:0x7f7b56b7475f [ 65.131244][ T5187] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 65.131258][ T5187] RSP: 002b:00007f7b579da010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 65.131276][ T5187] RAX: ffffffffffffffda RBX: 00007f7b56d03f60 RCX: 00007f7b56b7475f [ 65.131290][ T5187] RDX: 000000000000fdef RSI: 00000000200002c0 RDI: 00000000000000c8 [ 65.131302][ T5187] RBP: 00007f7b56be4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 65.131314][ T5187] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 65.131324][ T5187] R13: 000000000000000b R14: 00007f7b56d03f60 R15: 00007ffc47dcb3b8 [ 65.131344][ T5187] [ 65.131350][ T5187] Modules linked in: [ 65.131362][ T5187] ---[ end trace 0000000000000000 ]--- [ 65.145275][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.152362][ T5187] RIP: 0010:dev_map_redirect+0x65/0x6a0 [ 65.180640][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.197837][ T5187] Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 83 b3 3d 00 4c 8b 2b 4d 8d 7d 38 4c 89 fb 48 c1 eb 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 03 84 c0 0f 85 6e 04 00 00 41 8b 2f 89 ee 83 e6 02 31 ff [ 65.197857][ T5187] RSP: 0018:ffffc900042576e8 EFLAGS: 00010202 [ 65.197875][ T5187] RAX: dffffc0000000000 RBX: 0000000000000007 RCX: 0000000000040000 [ 65.197889][ T5187] RDX: ffffc900099aa000 RSI: 0000000000002135 RDI: 0000000000002136 [ 65.197902][ T5187] RBP: dffffc0000000000 R08: 0000000000000007 R09: ffffffff81b5ee2f [ 65.197916][ T5187] R10: 0000000000000004 R11: ffff88802f3d5a00 R12: 0000000004257738 [ 65.197929][ T5187] R13: 0000000000000000 R14: 0000000000000008 R15: 0000000000000038 [ 65.197942][ T5187] FS: 00007f7b579da6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 65.197957][ T5187] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.197971][ T5187] CR2: 0000000020010000 CR3: 000000001669e000 CR4: 00000000003506f0 [ 65.197987][ T5187] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.197999][ T5187] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.198014][ T5187] Kernel panic - not syncing: Fatal exception in interrupt [ 65.198229][ T5187] Kernel Offset: disabled