last executing test programs: 3.737325859s ago: executing program 1 (id=176): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1301"], 0x16) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0xf) socket$packet(0x11, 0x3, 0x300) 3.490291514s ago: executing program 1 (id=181): getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.380980416s ago: executing program 3 (id=183): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000300)={0x1, 0x0, {0x100, 0x94, 0x2021, 0x9, 0x0, 0x0, 0x2, 0x3}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x34565348, 0x425, 0x10001, 0x6, 0x2, 0xfeedcafe, 0x3, 0x0, 0x6}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x84, 0x3, 0x4038a0b, 0x11, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x20, 0x7800, 0xffffffff, 0x4}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 3.375109866s ago: executing program 3 (id=184): r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 3.22087497s ago: executing program 3 (id=187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff80, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2) 2.638606392s ago: executing program 1 (id=194): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000300)={0x1, 0x0, {0x100, 0x94, 0x2021, 0x9, 0x0, 0x0, 0x2, 0x3}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x34565348, 0x425, 0x10001, 0x6, 0x2, 0xfeedcafe, 0x3, 0x0, 0x6}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x84, 0x3, 0x4038a0b, 0x11, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x20, 0x7800, 0xffffffff, 0x4}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 2.589789294s ago: executing program 1 (id=196): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 2.512108305s ago: executing program 2 (id=199): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040)=0x804, 0x4) 2.436936847s ago: executing program 0 (id=202): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x101, 0xb, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) 2.436846487s ago: executing program 2 (id=203): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1301"], 0x16) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB], 0xf) socket$packet(0x11, 0x3, 0x300) 1.987151567s ago: executing program 2 (id=204): getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.978828247s ago: executing program 4 (id=205): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_getoverrun(r0) 1.920961308s ago: executing program 0 (id=206): syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff0000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.920756818s ago: executing program 0 (id=207): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000300)={0x1, 0x0, {0x100, 0x94, 0x2021, 0x9, 0x0, 0x0, 0x2, 0x3}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x34565348, 0x425, 0x10001, 0x6, 0x2, 0xfeedcafe, 0x3, 0x0, 0x6}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x84, 0x3, 0x4038a0b, 0x11, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x20, 0x7800, 0xffffffff, 0x4}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1.907083799s ago: executing program 3 (id=208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r4 = dup(r3) write$binfmt_elf32(r4, 0x0, 0x258) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x7, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r5}, 0x38) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000005900)={0x18, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8010}, 0x20004c00) 1.878404279s ago: executing program 0 (id=209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40880) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.698838563s ago: executing program 3 (id=210): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x884}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x95) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa8201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2400}], 0x1, 0x0, 0x0, 0x0) 1.648925194s ago: executing program 1 (id=211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB]) mount$fuse(0x0, 0x0, 0x0, 0x280449c, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) 1.648785674s ago: executing program 0 (id=212): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @local}, 0x14) 1.627446615s ago: executing program 4 (id=213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r1], 0x20}}, 0x0) 1.589427116s ago: executing program 4 (id=214): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1301"], 0x16) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB], 0xf) socket$packet(0x11, 0x3, 0x300) 1.508891667s ago: executing program 0 (id=215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x1d, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000005dc0)={@ifindex, 0x11, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[], 0x47) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000040)=[0x5, 0xffffffff], 0x2) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 1.254641373s ago: executing program 4 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 925.97349ms ago: executing program 2 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000240)=r0) 857.009602ms ago: executing program 2 (id=218): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='fd/3\x00') read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) 837.336422ms ago: executing program 3 (id=219): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff80, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 791.619283ms ago: executing program 1 (id=220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0x2020) 28.94807ms ago: executing program 4 (id=221): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc5}, 0x24000806) shutdown(0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 28.77322ms ago: executing program 2 (id=222): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=223): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000006c0)={0x60, 0x0, &(0x7f000010d000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x7, 0x0, 0x0, 0x3, 0x32, 0x10, 0x5a, 0x58}) kernel console output (not intermixed with test programs): [ 9.223936][ T3992] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK [ 9.266598][ T245] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.273922][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. syzkaller login: [ 28.714432][ T4314] cgroup: Unknown subsys name 'net' [ 29.064800][ T4314] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.343429][ T4314] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.035376][ T4328] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.037301][ T4328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.038761][ T4328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.040502][ T4328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.041808][ T4328] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.043502][ T4328] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.044886][ T4328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.046720][ T4328] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.048397][ T4328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.048695][ T4334] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.051241][ T4328] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.052538][ T4328] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.059711][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.061309][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.062876][ T4328] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.064383][ T4328] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.065771][ T4328] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.067000][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.078422][ T4332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.082811][ T4332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.084890][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.086638][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.087883][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.089177][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.090433][ T4328] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.092069][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.093553][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.095036][ T4328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.103607][ T4328] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.104944][ T4328] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.178101][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 30.183503][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 30.235095][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.236548][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.238132][ T4326] device bridge_slave_0 entered promiscuous mode [ 30.242042][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.243699][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.245256][ T4326] device bridge_slave_1 entered promiscuous mode [ 30.253148][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.254527][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.256046][ T4337] device bridge_slave_0 entered promiscuous mode [ 30.263588][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 30.266911][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.268586][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.269669][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.271182][ T4337] device bridge_slave_1 entered promiscuous mode [ 30.277555][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.284986][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.294481][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.303270][ T4326] team0: Port device team_slave_0 added [ 30.309747][ T4337] team0: Port device team_slave_0 added [ 30.311481][ T4337] team0: Port device team_slave_1 added [ 30.314903][ T4326] team0: Port device team_slave_1 added [ 30.324559][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.325644][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.329434][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.332001][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.333623][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.337413][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.339294][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 30.352875][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.354056][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.355485][ T4331] device bridge_slave_0 entered promiscuous mode [ 30.357782][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.358910][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.360310][ T4331] device bridge_slave_1 entered promiscuous mode [ 30.363406][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.364532][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.368539][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.381776][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.384028][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.388003][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.396121][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.433654][ T4337] device hsr_slave_0 entered promiscuous mode [ 30.472395][ T4337] device hsr_slave_1 entered promiscuous mode [ 30.519547][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.528576][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.529815][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.531266][ T4327] device bridge_slave_0 entered promiscuous mode [ 30.538316][ T4331] team0: Port device team_slave_0 added [ 30.541231][ T4331] team0: Port device team_slave_1 added [ 30.542910][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.544037][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.545537][ T4327] device bridge_slave_1 entered promiscuous mode [ 30.563872][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 30.613731][ T4326] device hsr_slave_0 entered promiscuous mode [ 30.662368][ T4326] device hsr_slave_1 entered promiscuous mode [ 30.712216][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.713598][ T4326] Cannot create hsr debugfs directory [ 30.714815][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.716082][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.720160][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.725014][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.729365][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.730440][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.734658][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.737373][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.764994][ T4327] team0: Port device team_slave_0 added [ 30.767875][ T4327] team0: Port device team_slave_1 added [ 30.788337][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.789550][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.796249][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.833305][ T4331] device hsr_slave_0 entered promiscuous mode [ 30.872384][ T4331] device hsr_slave_1 entered promiscuous mode [ 30.912237][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.913459][ T4331] Cannot create hsr debugfs directory [ 30.916593][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.917949][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.919447][ T4335] device bridge_slave_0 entered promiscuous mode [ 30.921255][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.922730][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.926826][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.932687][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.933728][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.935153][ T4335] device bridge_slave_1 entered promiscuous mode [ 30.957367][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.967461][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.023432][ T4327] device hsr_slave_0 entered promiscuous mode [ 31.062432][ T4327] device hsr_slave_1 entered promiscuous mode [ 31.112264][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.113549][ T4327] Cannot create hsr debugfs directory [ 31.124969][ T4335] team0: Port device team_slave_0 added [ 31.134707][ T4335] team0: Port device team_slave_1 added [ 31.143439][ T4337] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.179380][ T4337] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.213581][ T4337] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.254568][ T4337] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.297837][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.299016][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.304009][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.322806][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.323952][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.327985][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.356041][ T4326] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.387655][ T4326] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.423748][ T4326] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.533944][ T4335] device hsr_slave_0 entered promiscuous mode [ 31.572324][ T4335] device hsr_slave_1 entered promiscuous mode [ 31.612202][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.613409][ T4335] Cannot create hsr debugfs directory [ 31.616158][ T4326] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.656868][ T4331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.694377][ T4331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.733150][ T4331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.784602][ T4331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.868556][ T4327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.896401][ T4327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.937752][ T4327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.974691][ T4327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.028129][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.054859][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.057776][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.059876][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.063806][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.070057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.071884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.074712][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.075903][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.077467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.080407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.082851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.084761][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.085872][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.092755][ T4328] Bluetooth: hci1: command 0x0409 tx timeout [ 32.095181][ T4335] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.102330][ T4328] Bluetooth: hci4: command 0x0409 tx timeout [ 32.103361][ T4328] Bluetooth: hci0: command 0x0409 tx timeout [ 32.125829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.127590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.129326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.130781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.133194][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.135770][ T4335] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.172306][ T4332] Bluetooth: hci3: command 0x0409 tx timeout [ 32.172410][ T4328] Bluetooth: hci2: command 0x0409 tx timeout [ 32.176407][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.178273][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.179804][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.185460][ T4335] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.235307][ T4335] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.277645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.279386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.285324][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.287478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.289260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.290858][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.291995][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.294007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.298640][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.300229][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.301746][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.303690][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.305136][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.306225][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.313917][ T4337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.315964][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.318148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.319681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.320999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.324339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.330958][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.334547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.336110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.341794][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.344658][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.346397][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.351951][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.363660][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.365626][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.367192][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.368705][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.370115][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.371243][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.373192][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.380596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.382878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.384305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.385855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.387277][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.388355][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.398523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.400411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.401846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.404294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.411259][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.415389][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.417417][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.419948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.421407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.424620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.426063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.427508][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.428593][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.435219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.436725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.438735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.440291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.441939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.445158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.451282][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.453080][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.454471][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.455515][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.456820][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.464292][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.465688][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.468957][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.478186][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.479818][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.481461][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.483926][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.485995][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.489318][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.490853][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.497435][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.499282][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.500890][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.509018][ T4327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.510627][ T4327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.517301][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.518968][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.520404][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.521805][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.525213][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.526823][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.528250][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.531903][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.540198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.541790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.543995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.545544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.554833][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.556031][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.557609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.559209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.560995][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.562292][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.567561][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.577663][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.580036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.581475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.583738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.585086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.586784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.591288][ T4337] device veth0_vlan entered promiscuous mode [ 32.598170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.599625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.601168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.604145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.605766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.615442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.617146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.618834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.620548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.622054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.624141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.626903][ T4337] device veth1_vlan entered promiscuous mode [ 32.641720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.643866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.645403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.646820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.648001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.649292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.650696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.656442][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.659875][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.669752][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.671303][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.675918][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.677521][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.678835][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.682278][ T4326] device veth0_vlan entered promiscuous mode [ 32.696447][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.698213][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.701120][ T4337] device veth0_macvtap entered promiscuous mode [ 32.715408][ T4326] device veth1_vlan entered promiscuous mode [ 32.719929][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.721440][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.724143][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.725616][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.727242][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.730068][ T4337] device veth1_macvtap entered promiscuous mode [ 32.743388][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.745064][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.746334][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.749726][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.761688][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.764784][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.766418][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.768001][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.769576][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.772982][ T4326] device veth0_macvtap entered promiscuous mode [ 32.781492][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.786554][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.789041][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.790590][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.791789][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.794092][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.795664][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.800760][ T4326] device veth1_macvtap entered promiscuous mode [ 32.804023][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.805713][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.807292][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.808930][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.811059][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.820564][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.822116][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.827209][ T4327] device veth0_vlan entered promiscuous mode [ 32.830000][ T4337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.831368][ T4337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.834113][ T4337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.835448][ T4337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.844586][ T4327] device veth1_vlan entered promiscuous mode [ 32.846244][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.847981][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.850154][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.857839][ T4327] device veth0_macvtap entered promiscuous mode [ 32.860110][ T4327] device veth1_macvtap entered promiscuous mode [ 32.865504][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.867114][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.868598][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.870190][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.872799][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.877108][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.878799][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.880941][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.884321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.885842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.887243][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.888753][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.890180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.891682][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.899152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.900654][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.902890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.904351][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.905951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.907435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.908944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.910582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.912000][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.914267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.918942][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.920629][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.922457][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.924142][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.926309][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.929864][ T4326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.931175][ T4326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.932827][ T4326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.934171][ T4326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.939270][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.941000][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.947717][ T4327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.949078][ T4327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.950355][ T4327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.951624][ T4327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.970637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.972662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.975397][ T4331] device veth0_vlan entered promiscuous mode [ 33.006795][ T4331] device veth1_vlan entered promiscuous mode [ 33.011948][ T4335] device veth0_vlan entered promiscuous mode [ 33.016935][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.018243][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.025011][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.026649][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.028155][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.029711][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.037535][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.039081][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.040525][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.047155][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.048553][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.055873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.061891][ T4335] device veth1_vlan entered promiscuous mode [ 33.070685][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.072014][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.078945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.080493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.082018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.085074][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.086406][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.091959][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.101241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.103158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.108216][ T4335] device veth0_macvtap entered promiscuous mode [ 33.111537][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.113331][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.115916][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.119147][ T4384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.120434][ T4384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.121930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.127797][ T4331] device veth0_macvtap entered promiscuous mode [ 33.135723][ T4335] device veth1_macvtap entered promiscuous mode [ 33.140113][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.141422][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.143670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.145893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.147514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.173045][ T4331] device veth1_macvtap entered promiscuous mode [ 33.243286][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.244902][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.246361][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.248898][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.250360][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.251904][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.261370][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.263478][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.264999][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.266536][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.268121][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.269520][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.271255][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.273462][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.275096][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.277295][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.282802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.284462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.286475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.290740][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.296720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.304036][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.305796][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.307719][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.311695][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.315919][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.317939][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.320360][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.336889][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.338646][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.340115][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.341856][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.345846][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.347692][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.349265][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.351059][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.357166][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.360022][ T4331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.361819][ T4331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.368170][ T4331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.370251][ T4331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.377833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.379661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.381378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.384077][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.386198][ T4414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 33.579922][ T4328] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 33.848185][ T4335] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.849794][ T4335] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.851313][ T4335] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.853173][ T4335] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.917176][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.919472][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.930575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.956764][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.958324][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.959939][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.964228][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.965622][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.968244][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.979944][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.981430][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.985152][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.040054][ T4425] netlink: 'syz.4.5': attribute type 3 has an invalid length. [ 34.173066][ T4328] Bluetooth: hci0: command 0x041b tx timeout [ 34.174817][ T4334] Bluetooth: hci4: command 0x041b tx timeout [ 34.174874][ T4328] Bluetooth: hci1: command 0x041b tx timeout [ 34.286843][ T4328] Bluetooth: hci3: command 0x041b tx timeout [ 34.377450][ T4328] Bluetooth: hci2: command 0x041b tx timeout [ 34.549591][ T4443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 34.592432][ T4373] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.608059][ T4447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16'. [ 34.718506][ T4451] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18'. [ 34.828011][ T4373] usb 1-1: Using ep0 maxpacket: 32 [ 34.835772][ T4373] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 34.841400][ T4373] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 34.843617][ T4373] usb 1-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.00 [ 34.845140][ T4373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.851872][ T4373] usb 1-1: config 0 descriptor?? [ 35.272969][ T4373] apple 0003:05AC:0267.0001: hidraw0: USB HID v0.00 Device [HID 05ac:0267] on usb-dummy_hcd.0-1/input0 [ 35.474608][ T4421] usb 1-1: USB disconnect, device number 2 [ 35.554298][ T4440] Set syz1 is full, maxelem 65536 reached [ 35.830968][ T4328] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 36.065531][ T4476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27'. [ 36.194904][ T4480] netlink: 132 bytes leftover after parsing attributes in process `syz.2.29'. [ 36.216448][ T4482] netlink: 36 bytes leftover after parsing attributes in process `syz.2.30'. [ 36.252834][ T4328] Bluetooth: hci4: command 0x040f tx timeout [ 36.253901][ T4328] Bluetooth: hci0: command 0x040f tx timeout [ 36.254939][ T4328] Bluetooth: hci1: command 0x040f tx timeout [ 36.420665][ T4328] Bluetooth: hci3: command 0x040f tx timeout [ 36.421834][ T4332] Bluetooth: hci2: command 0x040f tx timeout [ 36.911292][ T4375] libceph: connect (1)[c::]:6789 error -101 [ 36.913870][ T4375] libceph: mon0 (1)[c::]:6789 connect error [ 36.916673][ T4375] libceph: connect (1)[c::]:6789 error -101 [ 36.917776][ T4375] libceph: mon0 (1)[c::]:6789 connect error [ 36.951647][ T4501] ceph: No mds server is up or the cluster is laggy [ 37.215122][ T4512] netlink: 132 bytes leftover after parsing attributes in process `syz.2.40'. [ 37.255213][ T4516] netlink: 36 bytes leftover after parsing attributes in process `syz.1.41'. [ 37.333691][ T4520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.335972][ T4520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.575730][ T4334] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 38.332716][ T4334] Bluetooth: hci1: command 0x0419 tx timeout [ 38.334532][ T4328] Bluetooth: hci0: command 0x0419 tx timeout [ 38.335634][ T4332] Bluetooth: hci4: command 0x0419 tx timeout [ 38.498150][ T4332] Bluetooth: hci3: command 0x0419 tx timeout [ 38.499332][ T4332] Bluetooth: hci2: command 0x0419 tx timeout [ 39.262819][ T4548] netlink: 132 bytes leftover after parsing attributes in process `syz.3.54'. [ 39.280189][ T4551] netlink: 36 bytes leftover after parsing attributes in process `syz.1.53'. [ 39.319131][ T4555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 39.384480][ T4486] Set syz1 is full, maxelem 65536 reached [ 40.680714][ T47] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 40.936074][ T4587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.937708][ T4587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.947171][ T4588] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 40.983846][ T4589] netlink: 132 bytes leftover after parsing attributes in process `syz.1.65'. [ 41.074169][ T4593] ======================================================= [ 41.074169][ T4593] WARNING: The mand mount option has been deprecated and [ 41.074169][ T4593] and is ignored by this kernel. Remove the mand [ 41.074169][ T4593] option from the mount to silence this warning. [ 41.074169][ T4593] ======================================================= [ 41.136507][ T4594] trusted_key: encrypted_key: key trusted:syz not found [ 41.761056][ T4603] netlink: 36 bytes leftover after parsing attributes in process `syz.0.68'. [ 42.956898][ T4633] netlink: 132 bytes leftover after parsing attributes in process `syz.0.77'. [ 43.364225][ T4638] netlink: 36 bytes leftover after parsing attributes in process `syz.2.79'. [ 43.441861][ T47] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 43.727129][ T4645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 43.745895][ T4648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.747558][ T4648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.989205][ T4653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.990760][ T4653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.090955][ T4659] netlink: 132 bytes leftover after parsing attributes in process `syz.0.88'. [ 44.576458][ T4665] syz.2.90 uses obsolete (PF_INET,SOCK_PACKET) [ 44.609936][ T4667] netlink: 36 bytes leftover after parsing attributes in process `syz.1.91'. [ 45.846286][ T47] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 46.038911][ T4613] Set syz1 is full, maxelem 65536 reached [ 46.138772][ T4692] netlink: 132 bytes leftover after parsing attributes in process `syz.4.99'. [ 46.165399][ T4695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 46.435895][ T4701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.439616][ T4701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.499522][ T4717] binder: 4716:4717 tried to acquire reference to desc 0, got 1 instead [ 46.501677][ T4717] binder: 4716:4717 got reply transaction with bad transaction stack, transaction 5 has target 4716:0 [ 46.504031][ T4717] binder: 4716:4717 transaction reply to 0:0 failed 6/29201/-71, size 0-0 line 2961 [ 46.506930][ T4717] binder: 4716:4717 got reply transaction with no transaction stack [ 46.508171][ T4717] binder: 4716:4717 transaction reply to 0:0 failed 7/29201/-71, size 0-0 line 2946 [ 46.510079][ T7] binder: release 4716:4717 transaction 5 out, still active [ 46.511319][ T7] binder: undelivered TRANSACTION_COMPLETE [ 46.512352][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 46.519477][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 46.520446][ T7] binder: send failed reply for transaction 5, target dead [ 47.217440][ T4332] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 47.600760][ T4751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.013047][ T4769] tls_set_device_offload_rx: netdev not found [ 48.042756][ T4763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.044657][ T4763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.069712][ T4773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.132'. [ 48.203618][ T4778] netlink: 32 bytes leftover after parsing attributes in process `syz.0.134'. [ 49.012652][ T4332] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 49.133000][ T4332] Bluetooth: hci1: command 0x2016 tx timeout [ 50.011867][ T4822] capability: warning: `syz.0.150' uses deprecated v2 capabilities in a way that may be insecure [ 50.024850][ T4822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.150'. [ 50.183165][ T4750] Set syz1 is full, maxelem 65536 reached [ 50.419751][ T47] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 50.662836][ T47] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 50.664549][ T47] CPU: 0 PID: 47 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 50.665671][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 50.667363][ T47] Workqueue: hci0 hci_rx_work [ 50.668189][ T47] Call trace: [ 50.668731][ T47] dump_backtrace+0x1c4/0x1f0 [ 50.669418][ T47] show_stack+0x2c/0x3c [ 50.670096][ T47] __dump_stack+0x30/0x40 [ 50.670798][ T47] dump_stack_lvl+0xf4/0x15c [ 50.671601][ T47] dump_stack+0x1c/0x5c [ 50.672266][ T47] sysfs_create_dir_ns+0x244/0x264 [ 50.673287][ T47] kobject_add_internal+0x5a8/0xb18 [ 50.674123][ T47] kobject_add+0x144/0x20c [ 50.674854][ T47] device_add+0x3dc/0xe4c [ 50.675541][ T47] hci_conn_add_sysfs+0xb8/0x1bc [ 50.676373][ T47] le_conn_complete_evt+0xcd4/0x127c [ 50.677213][ T47] hci_le_conn_complete_evt+0x114/0x3b8 [ 50.678050][ T47] hci_le_meta_evt+0x2c0/0x4a8 [ 50.678867][ T47] hci_event_packet+0x64c/0xe60 [ 50.679625][ T47] hci_rx_work+0x320/0xa94 [ 50.680416][ T47] process_one_work+0x7e4/0x13bc [ 50.681209][ T47] worker_thread+0x8cc/0xfe8 [ 50.681939][ T47] kthread+0x254/0x2e0 [ 50.682575][ T47] ret_from_fork+0x10/0x20 [ 50.689469][ T47] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 50.692759][ T47] Bluetooth: hci0: failed to register connection device [ 50.902086][ T4869] netlink: 'syz.0.170': attribute type 21 has an invalid length. [ 50.913116][ T4869] netlink: 156 bytes leftover after parsing attributes in process `syz.0.170'. [ 51.049314][ T4879] capability: warning: `syz.1.175' uses 32-bit capabilities (legacy support in use) [ 51.202925][ T47] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 51.204487][ T47] CPU: 0 PID: 47 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 51.205738][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 51.207575][ T47] Workqueue: hci0 hci_rx_work [ 51.208364][ T47] Call trace: [ 51.208945][ T47] dump_backtrace+0x1c4/0x1f0 [ 51.209705][ T47] show_stack+0x2c/0x3c [ 51.210357][ T47] __dump_stack+0x30/0x40 [ 51.211032][ T47] dump_stack_lvl+0xf4/0x15c [ 51.211764][ T47] dump_stack+0x1c/0x5c [ 51.212470][ T47] sysfs_create_dir_ns+0x244/0x264 [ 51.213292][ T47] kobject_add_internal+0x5a8/0xb18 [ 51.214115][ T47] kobject_add+0x144/0x20c [ 51.214812][ T47] device_add+0x3dc/0xe4c [ 51.215500][ T47] hci_conn_add_sysfs+0xb8/0x1bc [ 51.216333][ T47] le_conn_complete_evt+0xcd4/0x127c [ 51.217226][ T47] hci_le_conn_complete_evt+0x114/0x3b8 [ 51.218190][ T47] hci_le_meta_evt+0x2c0/0x4a8 [ 51.219031][ T47] hci_event_packet+0x64c/0xe60 [ 51.219854][ T47] hci_rx_work+0x320/0xa94 [ 51.220576][ T47] process_one_work+0x7e4/0x13bc [ 51.221364][ T47] worker_thread+0x8cc/0xfe8 [ 51.222137][ T47] kthread+0x254/0x2e0 [ 51.222834][ T47] ret_from_fork+0x10/0x20 [ 51.226597][ T47] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 51.228642][ T47] Bluetooth: hci0: failed to register connection device [ 51.232350][ T4372] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 51.453577][ T4372] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 51.455155][ T4372] usb 1-1: config 8 has no interface number 0 [ 51.456229][ T4372] usb 1-1: config 8 interface 177 altsetting 9 has an invalid endpoint with address 0xAD, skipping [ 51.457798][ T4372] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid maxpacket 203, setting to 64 [ 51.460949][ T4372] usb 1-1: config 8 interface 177 has no altsetting 0 [ 51.461973][ T4372] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 51.465815][ T4372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.470781][ T4869] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 51.472136][ T4869] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 51.684228][ T4372] usb 1-1: string descriptor 0 read error: -71 [ 51.686269][ T4372] ir_toy 1-1:8.177: required endpoints not found [ 51.689799][ T4372] usb 1-1: USB disconnect, device number 3 [ 51.694574][ T4320] udevd[4320]: setting owner of /dev/bus/usb/001/003 to uid=0, gid=0 failed: No such file or directory [ 51.892945][ T47] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 52.022303][ T47] Bluetooth: hci0: command 0x2016 tx timeout [ 52.388793][ T4332] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 52.391611][ T4332] CPU: 1 PID: 4332 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 52.392948][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 52.394598][ T4332] Workqueue: hci4 hci_rx_work [ 52.395373][ T4332] Call trace: [ 52.395898][ T4332] dump_backtrace+0x1c4/0x1f0 [ 52.396684][ T4332] show_stack+0x2c/0x3c [ 52.397389][ T4332] __dump_stack+0x30/0x40 [ 52.398106][ T4332] dump_stack_lvl+0xf4/0x15c [ 52.398812][ T4332] dump_stack+0x1c/0x5c [ 52.399498][ T4332] sysfs_create_dir_ns+0x244/0x264 [ 52.400349][ T4332] kobject_add_internal+0x5a8/0xb18 [ 52.401184][ T4332] kobject_add+0x144/0x20c [ 52.401903][ T4332] device_add+0x3dc/0xe4c [ 52.402655][ T4332] hci_conn_add_sysfs+0xb8/0x1bc [ 52.403467][ T4332] le_conn_complete_evt+0xcd4/0x127c [ 52.404299][ T4332] hci_le_conn_complete_evt+0x114/0x3b8 [ 52.405261][ T4332] hci_le_meta_evt+0x2c0/0x4a8 [ 52.406024][ T4332] hci_event_packet+0x64c/0xe60 [ 52.406886][ T4332] hci_rx_work+0x320/0xa94 [ 52.407611][ T4332] process_one_work+0x7e4/0x13bc [ 52.408456][ T4332] worker_thread+0x8cc/0xfe8 [ 52.409228][ T4332] kthread+0x254/0x2e0 [ 52.409884][ T4332] ret_from_fork+0x10/0x20 [ 52.715021][ T4332] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 52.718213][ T4332] Bluetooth: hci4: failed to register connection device [ 53.011614][ T4962] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 53.901704][ T4982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.110274][ T47] Bluetooth: hci4: command 0x2016 tx timeout [ 54.111698][ T47] Bluetooth: hci0: command 0x2016 tx timeout [ 54.639429][ T4332] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 54.837501][ T5001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.839834][ T5001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.875772][ T5003] ------------[ cut here ]------------ [ 54.876875][ T5003] WARNING: CPU: 0 PID: 5003 at include/linux/fs.h:503 hugetlb_split+0x234/0x29c [ 54.878412][ T5003] Modules linked in: [ 54.879121][ T5003] CPU: 0 PID: 5003 Comm: syz.4.223 Not tainted syzkaller #0 [ 54.880302][ T5003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 54.881991][ T5003] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 54.883311][ T5003] pc : hugetlb_split+0x234/0x29c [ 54.884137][ T5003] lr : hugetlb_split+0x234/0x29c [ 54.884997][ T5003] sp : ffff8000215b73d0 [ 54.885688][ T5003] x29: ffff8000215b73d0 x28: ffff8000215b7500 x27: dfff800000000000 [ 54.887123][ T5003] x26: 0000000000000000 x25: ffff800015380000 x24: 1ffff00002a70070 [ 54.888524][ T5003] x23: dfff800000000000 x22: 0000000000000001 x21: 0000000000000000 [ 54.890144][ T5003] x20: 0000000020200000 x19: ffff0000f8a1a438 x18: 0000000000000000 [ 54.891488][ T5003] x17: 0000000000000000 x16: ffff8000082dba2c x15: 0000000000000000 [ 54.892805][ T5003] x14: 0000000000000001 x13: 1fffe000195616db x12: 0000000000080000 [ 54.894174][ T5003] x11: 0000000000002db0 x10: ffff800028b0d000 x9 : ffff8000088a401c [ 54.895589][ T5003] x8 : 0000000000002db1 x7 : 0000000000000000 x6 : 000000000000003f [ 54.896955][ T5003] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff8000088a3e9c [ 54.898373][ T5003] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 54.899805][ T5003] Call trace: [ 54.900371][ T5003] hugetlb_split+0x234/0x29c [ 54.901148][ T5003] __vma_adjust+0x458/0x16fc [ 54.901949][ T5003] __split_vma+0x328/0x44c [ 54.902719][ T5003] do_mas_align_munmap+0x5f4/0xf28 [ 54.903623][ T5003] mmap_region+0x6a0/0x1860 [ 54.904391][ T5003] do_mmap+0xa64/0x1210 [ 54.905109][ T5003] vm_mmap_pgoff+0x194/0x298 [ 54.905937][ T5003] ksys_mmap_pgoff+0xd0/0x5a0 [ 54.906788][ T5003] __arm64_sys_mmap+0x108/0x120 [ 54.907679][ T5003] invoke_syscall+0x98/0x290 [ 54.908480][ T5003] el0_svc_common+0x13c/0x258 [ 54.909198][ T5003] do_el0_svc+0x5c/0x134 [ 54.909880][ T5003] el0_svc+0x58/0x128 [ 54.910607][ T5003] el0t_64_sync_handler+0x84/0xf0 [ 54.911459][ T5003] el0t_64_sync+0x18c/0x190 [ 54.912175][ T5003] irq event stamp: 354 [ 54.912873][ T5003] hardirqs last enabled at (353): [] kmem_cache_alloc_bulk+0x3c0/0x4e8 [ 54.914476][ T5003] hardirqs last disabled at (354): [] el1_dbg+0x24/0x80 [ 54.915954][ T5003] softirqs last enabled at (322): [] local_bh_enable+0x10/0x34 [ 54.917562][ T5003] softirqs last disabled at (320): [] local_bh_disable+0x10/0x34 [ 54.919108][ T5003] ---[ end trace 0000000000000000 ]--- [ 54.936704][ T5003] ------------[ cut here ]------------ [ 54.937721][ T5003] WARNING: CPU: 1 PID: 5003 at include/linux/fs.h:503 hugetlb_split+0x234/0x29c [ 54.939306][ T5003] Modules linked in: [ 54.939902][ T5003] CPU: 1 PID: 5003 Comm: syz.4.223 Tainted: G W syzkaller #0 [ 54.941399][ T5003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 54.943018][ T5003] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 54.944331][ T5003] pc : hugetlb_split+0x234/0x29c [ 54.945160][ T5003] lr : hugetlb_split+0x234/0x29c [ 54.945939][ T5003] sp : ffff8000215b73d0 [ 54.946615][ T5003] x29: ffff8000215b73d0 x28: ffff8000215b7500 x27: dfff800000000000 [ 54.947989][ T5003] x26: 0000000000000000 x25: ffff800015380000 x24: 1ffff00002a70070 [ 54.949213][ T5003] x23: dfff800000000000 x22: 0000000000000001 x21: 0000000000000000 [ 54.950442][ T5003] x20: 0000000021000000 x19: ffff0000f8a1a438 x18: 0000000000000000 [ 54.951718][ T5003] x17: 0000000000000000 x16: ffff8000082dba2c x15: 0000000000000000 [ 54.953013][ T5003] x14: 0000000000000001 x13: 1fffe000195616db x12: 0000000000080000 [ 54.954377][ T5003] x11: 000000000001c992 x10: ffff800028b0d000 x9 : ffff8000088a401c [ 54.955681][ T5003] x8 : 000000000001c993 x7 : 0000000000000000 x6 : 000000000000003f [ 54.956892][ T5003] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff8000088a3e9c [ 54.958271][ T5003] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 54.959601][ T5003] Call trace: [ 54.960180][ T5003] hugetlb_split+0x234/0x29c [ 54.960976][ T5003] __vma_adjust+0x464/0x16fc [ 54.961731][ T5003] __split_vma+0x328/0x44c [ 54.962494][ T5003] do_mas_align_munmap+0x5f4/0xf28 [ 54.963331][ T5003] mmap_region+0x6a0/0x1860 [ 54.964088][ T5003] do_mmap+0xa64/0x1210 [ 54.964806][ T5003] vm_mmap_pgoff+0x194/0x298 [ 54.965595][ T5003] ksys_mmap_pgoff+0xd0/0x5a0 [ 54.966376][ T5003] __arm64_sys_mmap+0x108/0x120 [ 54.967178][ T5003] invoke_syscall+0x98/0x290 [ 54.967902][ T5003] el0_svc_common+0x13c/0x258 [ 54.968671][ T5003] do_el0_svc+0x5c/0x134 [ 54.969357][ T5003] el0_svc+0x58/0x128 [ 54.969992][ T5003] el0t_64_sync_handler+0x84/0xf0 [ 54.970835][ T5003] el0t_64_sync+0x18c/0x190 [ 54.971564][ T5003] irq event stamp: 606 [ 54.972239][ T5003] hardirqs last enabled at (605): [] exit_to_kernel_mode+0xcc/0xfc [ 54.973813][ T5003] hardirqs last disabled at (606): [] el1_dbg+0x24/0x80 [ 54.975159][ T5003] softirqs last enabled at (600): [] handle_softirqs+0xb1c/0xc90 [ 54.976692][ T5003] softirqs last disabled at (357): [] __do_softirq+0x14/0x20 [ 54.978209][ T5003] ---[ end trace 0000000000000000 ]--- [ 54.979152][ C1] vkms_vblank_simulate: vblank timer overrun [ 55.292218][ T4332] Bluetooth: hci3: command 0x2016 tx timeout [ 55.932630][ T4332] Bluetooth: hci1: command 0x2016 tx timeout [ 56.172281][ T4332] Bluetooth: hci0: command 0x2016 tx timeout [ 56.172622][ T47] Bluetooth: hci4: command 0x2016 tx timeout [ 64.495843][ T22] cfg80211: failed to load regulatory.db [ 64.497662][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.498825][ T2063] ieee802154 phy1 wpan1: encryption failed: -22