last executing test programs: 5.539441601s ago: executing program 1 (id=30): personality(0x400000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1) 5.133024878s ago: executing program 4 (id=32): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x220000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x39, 0x0, 0x20000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r0, r0}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0xe40, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8860040dffd00139fb7a884bdfc14f48786dd", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) io_uring_setup(0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) socket$inet_icmp_raw(0x2, 0x3, 0x1) 4.923424966s ago: executing program 1 (id=35): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 4.426224032s ago: executing program 3 (id=36): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r1, 0x25, 0x2}, 0x10) 4.326921453s ago: executing program 1 (id=37): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349bfd2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x4a) 3.656813112s ago: executing program 4 (id=40): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {0x84}, {0x6, 0x0, 0x0, 0x7ffffd3e}]}) semget$private(0x0, 0x1, 0x0) 3.530644803s ago: executing program 2 (id=41): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000480)={0x1d, r1}, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x448}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="0100"/16, @ANYRES64, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYBLOB="000000800100000000000077ac"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 3.480052008s ago: executing program 3 (id=42): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf23}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x2, 0x4, 0x6, 0x0, r0}, 0x48) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x2}, 0x38) 3.378782122s ago: executing program 0 (id=43): r0 = fsopen(&(0x7f0000000040)='fusectl\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)=':#%&\x00', &(0x7f0000000080)="8d", 0x1) 3.113125841s ago: executing program 4 (id=44): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="26000000100014"], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 2.945413417s ago: executing program 2 (id=45): personality(0x400000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1) 2.883660732s ago: executing program 3 (id=46): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x4004, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303031302c636f6465706167653d63703835352c696f636861727365743d6370313235302c0065fcfac35652d2119752177b83dd62bd1f7de553835128ed9475d69a7ff68815d149e3d770260f87adedaaa6166f2883a669eadf2fc703841d76d28addf20312d9c8fc5b9c22b6ded1166f95bc118305a3ee7ebad510e9785ba1b21c76ac0d23979366134009b2e8055dfdb125c12135913b94b66581"], 0x1, 0x2f2, &(0x7f0000000580)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) 2.847772957s ago: executing program 0 (id=47): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 2.679145485s ago: executing program 1 (id=48): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x4400, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 2.401770233s ago: executing program 2 (id=49): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000278000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000335000/0x1000)=nil) mremap(&(0x7f00006e8000/0x800000)=nil, 0x800000, 0x4000, 0x3, &(0x7f00001fa000/0x4000)=nil) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mremap(&(0x7f00003f7000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000705000/0x2000)=nil) 2.398132525s ago: executing program 4 (id=50): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x220000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x39, 0x0, 0x20000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r0, r0}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0xe40, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8860040dffd00139fb7a884bdfc14f48786dd", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) io_uring_setup(0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2.072139977s ago: executing program 0 (id=51): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x0, &(0x7f0000000100)=""/4109, &(0x7f00000000c0)=0x100d) 1.78726881s ago: executing program 3 (id=52): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r1, 0x25, 0x2}, 0x10) 1.565445537s ago: executing program 0 (id=53): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x18, 0x0, 0x2}, 0x20) 1.369458073s ago: executing program 1 (id=54): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {0x84}, {0x6, 0x0, 0x0, 0x7ffffd3e}]}) semget$private(0x0, 0x1, 0x0) 1.250753082s ago: executing program 2 (id=55): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000480)={0x1d, r1}, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x448}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="0100"/16, @ANYRES64, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYBLOB="000000800100000000000077ac"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 846.132437ms ago: executing program 0 (id=56): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf23}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x2, 0x4, 0x6, 0x0, r0}, 0x48) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x2}, 0x38) 816.161913ms ago: executing program 3 (id=57): r0 = fsopen(&(0x7f0000000040)='fusectl\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)=':#%&\x00', &(0x7f0000000080)="8d", 0x1) 688.58046ms ago: executing program 1 (id=58): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349bfd2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x4a) 586.374172ms ago: executing program 4 (id=59): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000005}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 551.360204ms ago: executing program 2 (id=60): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="26000000100014"], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 316.167148ms ago: executing program 3 (id=61): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 239.702662ms ago: executing program 0 (id=62): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x2) 118.89006ms ago: executing program 4 (id=63): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000185000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) 0s ago: executing program 2 (id=64): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x4400, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.80' (ED25519) to the list of known hosts. [ 151.953551][ T5032] cgroup: Unknown subsys name 'net' [ 152.151180][ T5032] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 157.685622][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.692282][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.061406][ T5032] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 209.681746][ T5063] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.693989][ T5063] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.706013][ T5063] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.741701][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.776257][ T5068] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.785430][ T5068] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.798412][ T5074] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.807302][ T5074] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.819489][ T5074] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.828140][ T5074] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.841116][ T5074] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.852275][ T5074] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.869228][ T5074] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.881387][ T5074] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.882089][ T4431] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.893927][ T5074] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.897729][ T5076] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.912129][ T4431] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.923488][ T4431] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.933865][ T5076] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.948758][ T5066] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.953379][ T5076] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.974846][ T5066] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.984037][ T5066] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.994218][ T5066] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.004564][ T5066] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.094491][ T5076] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.120875][ T5076] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.249749][ T5076] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 210.284244][ T5076] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.848160][ T5060] chnl_net:caif_netlink_parms(): no params data found [ 211.586799][ T5067] chnl_net:caif_netlink_parms(): no params data found [ 211.797565][ T5065] chnl_net:caif_netlink_parms(): no params data found [ 211.914281][ T5076] Bluetooth: hci0: command tx timeout [ 212.003705][ T5076] Bluetooth: hci2: command tx timeout [ 212.009359][ T5076] Bluetooth: hci3: command tx timeout [ 212.057981][ T5072] chnl_net:caif_netlink_parms(): no params data found [ 212.086886][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.094870][ T5060] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.102622][ T5060] bridge_slave_0: entered allmulticast mode [ 212.111839][ T5060] bridge_slave_0: entered promiscuous mode [ 212.173261][ T5076] Bluetooth: hci1: command tx timeout [ 212.184545][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.192404][ T5060] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.203921][ T5060] bridge_slave_1: entered allmulticast mode [ 212.213459][ T5060] bridge_slave_1: entered promiscuous mode [ 212.311431][ T5064] chnl_net:caif_netlink_parms(): no params data found [ 212.385692][ T5060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.394362][ T5076] Bluetooth: hci4: command tx timeout [ 212.480372][ T5060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.791964][ T5060] team0: Port device team_slave_0 added [ 212.897895][ T5067] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.906674][ T5067] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.914574][ T5067] bridge_slave_0: entered allmulticast mode [ 212.923817][ T5067] bridge_slave_0: entered promiscuous mode [ 212.951450][ T5060] team0: Port device team_slave_1 added [ 212.990349][ T5067] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.998462][ T5067] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.007984][ T5067] bridge_slave_1: entered allmulticast mode [ 213.017218][ T5067] bridge_slave_1: entered promiscuous mode [ 213.086362][ T5072] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.094545][ T5072] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.102232][ T5072] bridge_slave_0: entered allmulticast mode [ 213.111384][ T5072] bridge_slave_0: entered promiscuous mode [ 213.243934][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.251661][ T5072] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.262290][ T5072] bridge_slave_1: entered allmulticast mode [ 213.275064][ T5072] bridge_slave_1: entered promiscuous mode [ 213.318788][ T5060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.326174][ T5060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.352866][ T5060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.365147][ T5065] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.372854][ T5065] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.381050][ T5065] bridge_slave_0: entered allmulticast mode [ 213.389530][ T5065] bridge_slave_0: entered promiscuous mode [ 213.441615][ T5067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.453566][ T5060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.460738][ T5060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.487167][ T5060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.502639][ T5065] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.510666][ T5065] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.518849][ T5065] bridge_slave_1: entered allmulticast mode [ 213.528013][ T5065] bridge_slave_1: entered promiscuous mode [ 213.593626][ T5067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.790090][ T5072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.877344][ T5065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.901185][ T5065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.919364][ T5072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.993311][ T5076] Bluetooth: hci0: command tx timeout [ 214.071143][ T5064] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.079455][ T5064] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.087414][ T5064] bridge_slave_0: entered allmulticast mode [ 214.096283][ T5064] bridge_slave_0: entered promiscuous mode [ 214.108556][ T5076] Bluetooth: hci3: command tx timeout [ 214.114474][ T5076] Bluetooth: hci2: command tx timeout [ 214.151529][ T5067] team0: Port device team_slave_0 added [ 214.228111][ T5064] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.233465][ T5073] Bluetooth: hci1: command tx timeout [ 214.236040][ T5064] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.249588][ T5064] bridge_slave_1: entered allmulticast mode [ 214.258269][ T5064] bridge_slave_1: entered promiscuous mode [ 214.309781][ T5072] team0: Port device team_slave_0 added [ 214.357339][ T5067] team0: Port device team_slave_1 added [ 214.376856][ T5060] hsr_slave_0: entered promiscuous mode [ 214.387511][ T5060] hsr_slave_1: entered promiscuous mode [ 214.408131][ T5065] team0: Port device team_slave_0 added [ 214.457267][ T5072] team0: Port device team_slave_1 added [ 214.473543][ T5073] Bluetooth: hci4: command tx timeout [ 214.474374][ T5064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.498755][ T5064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.542347][ T5065] team0: Port device team_slave_1 added [ 214.603525][ T5067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.610708][ T5067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.638399][ T5067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.766305][ T5067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.773711][ T5067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.800056][ T5067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.960291][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.968884][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.995651][ T5072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.029151][ T5064] team0: Port device team_slave_0 added [ 215.038526][ T5065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.045942][ T5065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.072517][ T5065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.107350][ T5065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.114899][ T5065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.141271][ T5065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.160328][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.167736][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.194113][ T5072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.212752][ T5064] team0: Port device team_slave_1 added [ 215.324990][ T5064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.332286][ T5064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.358731][ T5064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.476318][ T5067] hsr_slave_0: entered promiscuous mode [ 215.486708][ T5067] hsr_slave_1: entered promiscuous mode [ 215.495227][ T5067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.502919][ T5067] Cannot create hsr debugfs directory [ 215.517535][ T5064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.524871][ T5064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.551297][ T5064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.712953][ T5065] hsr_slave_0: entered promiscuous mode [ 215.723593][ T5065] hsr_slave_1: entered promiscuous mode [ 215.732146][ T5065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.741701][ T5065] Cannot create hsr debugfs directory [ 215.930851][ T5072] hsr_slave_0: entered promiscuous mode [ 215.942024][ T5072] hsr_slave_1: entered promiscuous mode [ 215.950531][ T5072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.958387][ T5072] Cannot create hsr debugfs directory [ 216.075171][ T5073] Bluetooth: hci0: command tx timeout [ 216.153388][ T5073] Bluetooth: hci2: command tx timeout [ 216.159058][ T5073] Bluetooth: hci3: command tx timeout [ 216.239328][ T5064] hsr_slave_0: entered promiscuous mode [ 216.249888][ T5064] hsr_slave_1: entered promiscuous mode [ 216.258970][ T5064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.266956][ T5064] Cannot create hsr debugfs directory [ 216.313464][ T5073] Bluetooth: hci1: command tx timeout [ 216.564417][ T5073] Bluetooth: hci4: command tx timeout [ 216.943884][ T5060] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.025764][ T5060] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.108617][ T5060] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.223273][ T5060] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.399439][ T5067] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 217.424776][ T5067] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 217.536839][ T5067] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 217.569400][ T5072] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 217.640257][ T5067] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 217.662579][ T5072] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 217.821878][ T5065] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 217.849203][ T5072] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 217.870006][ T5072] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 217.973478][ T5064] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 218.002565][ T5065] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 218.047335][ T5064] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.072014][ T5065] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 218.096848][ T5064] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.130569][ T5064] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.154070][ T5073] Bluetooth: hci0: command tx timeout [ 218.179617][ T5065] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 218.237506][ T5073] Bluetooth: hci3: command tx timeout [ 218.243524][ T5073] Bluetooth: hci2: command tx timeout [ 218.400934][ T5076] Bluetooth: hci1: command tx timeout [ 218.633343][ T5076] Bluetooth: hci4: command tx timeout [ 219.101358][ T5072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.138757][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.147043][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.180087][ T5060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.365480][ T5072] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.401538][ T5067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.435621][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.443441][ T5121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.548050][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.555826][ T5121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.582725][ T5060] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.637634][ T5064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.769499][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.777381][ T5122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.859819][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.867583][ T5122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.913608][ T5064] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.010462][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.018232][ T5122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.048626][ T5067] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.127092][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.134890][ T5122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.204867][ T5065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.376852][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.384617][ T5122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.417359][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.425128][ T5122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.662446][ T5065] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.684910][ T5060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.717714][ T5064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.904526][ T5067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.960952][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.968784][ T5122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.984985][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.992677][ T5122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.369610][ T5072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.768663][ T5060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.848313][ T5064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.088329][ T5067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.477465][ T5065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.550856][ T5060] veth0_vlan: entered promiscuous mode [ 223.732452][ T5060] veth1_vlan: entered promiscuous mode [ 223.768777][ T5064] veth0_vlan: entered promiscuous mode [ 223.840776][ T5067] veth0_vlan: entered promiscuous mode [ 223.904099][ T5064] veth1_vlan: entered promiscuous mode [ 224.059670][ T5067] veth1_vlan: entered promiscuous mode [ 224.200248][ T5065] veth0_vlan: entered promiscuous mode [ 224.303534][ T5060] veth0_macvtap: entered promiscuous mode [ 224.420263][ T5065] veth1_vlan: entered promiscuous mode [ 224.456379][ T5060] veth1_macvtap: entered promiscuous mode [ 224.505213][ T5067] veth0_macvtap: entered promiscuous mode [ 224.567615][ T5064] veth0_macvtap: entered promiscuous mode [ 224.644483][ T5067] veth1_macvtap: entered promiscuous mode [ 224.694254][ T5060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.740632][ T5064] veth1_macvtap: entered promiscuous mode [ 224.846894][ T5060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.919892][ T5067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.931269][ T5067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.946764][ T5067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.010923][ T5065] veth0_macvtap: entered promiscuous mode [ 225.123669][ T5067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.134609][ T5067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.149706][ T5067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.181150][ T5065] veth1_macvtap: entered promiscuous mode [ 225.199096][ T5060] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.208377][ T5060] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.217614][ T5060] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.226779][ T5060] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.267992][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.283744][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.293901][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.304639][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.320065][ T5064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.372091][ T5072] veth0_vlan: entered promiscuous mode [ 225.443438][ T5067] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.452483][ T5067] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.464008][ T5067] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.473035][ T5067] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.492749][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.503840][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.514071][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.524856][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.540066][ T5064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.601523][ T5072] veth1_vlan: entered promiscuous mode [ 225.650337][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.661918][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.672150][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.683189][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.693349][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.704125][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.719412][ T5065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.774146][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.784965][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.795213][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.806103][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.816250][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.827047][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.842280][ T5065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.894592][ T5064] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.903785][ T5064] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.912824][ T5064] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.922266][ T5064] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.975211][ T5065] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.985336][ T5065] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.996067][ T5065] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.006125][ T5065] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.473471][ T5072] veth0_macvtap: entered promiscuous mode [ 226.595925][ T5072] veth1_macvtap: entered promiscuous mode [ 226.789877][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.802198][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.812419][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.823303][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.833442][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.844218][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.854470][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.865241][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.886237][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.182274][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.193951][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.204287][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.215129][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.225284][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.236159][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.246298][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.257123][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.272664][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.559322][ T5072] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.569398][ T5072] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.578747][ T5072] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.587967][ T5072] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.519483][ T2899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.527740][ T2899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.763907][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.772075][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.979118][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.988261][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.233616][ T3531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.241704][ T3531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.804685][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.812822][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.864032][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.872001][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.131239][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.134870][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.139353][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.147266][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.362405][ T5245] loop0: detected capacity change from 0 to 64 [ 234.775571][ T3286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.783856][ T3286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.105476][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.128504][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.593556][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 235.622055][ C1] eth0: bad gso: type: 1, size: 1408 [ 235.908542][ T25] usb 2-1: config 1 has an invalid interface number: 82 but max is 1 [ 235.917293][ T25] usb 2-1: config 1 has no interface number 1 [ 235.928589][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 235.939497][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.956534][ T25] usb 2-1: too many endpoints for config 1 interface 82 altsetting 187: 133, using maximum allowed: 30 [ 235.969678][ T25] usb 2-1: config 1 interface 82 altsetting 187 has a duplicate endpoint with address 0xD, skipping [ 235.980869][ T25] usb 2-1: config 1 interface 82 altsetting 187 has 1 endpoint descriptor, different from the interface descriptor's value: 133 [ 235.995835][ T25] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 236.005425][ T25] usb 2-1: config 1 interface 82 has no altsetting 0 [ 236.124065][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=0466, bcdDevice=56.f6 [ 236.133662][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.141920][ T25] usb 2-1: Product: syz [ 236.146610][ T25] usb 2-1: Manufacturer: syz [ 236.151451][ T25] usb 2-1: SerialNumber: syz [ 236.186537][ T5274] loop4: detected capacity change from 0 to 256 [ 236.220263][ T5274] ======================================================= [ 236.220263][ T5274] WARNING: The mand mount option has been deprecated and [ 236.220263][ T5274] and is ignored by this kernel. Remove the mand [ 236.220263][ T5274] option from the mount to silence this warning. [ 236.220263][ T5274] ======================================================= [ 236.518720][ T25] usb 2-1: USB disconnect, device number 2 [ 236.589142][ T5278] loop0: detected capacity change from 0 to 64 [ 236.707998][ T5274] FAT-fs (loop4): Directory bread(block 64) failed [ 236.715251][ T5274] FAT-fs (loop4): Directory bread(block 65) failed [ 236.722316][ T5274] FAT-fs (loop4): Directory bread(block 66) failed [ 236.729301][ T5274] FAT-fs (loop4): Directory bread(block 67) failed [ 236.736502][ T5274] FAT-fs (loop4): Directory bread(block 68) failed [ 236.743490][ T5274] FAT-fs (loop4): Directory bread(block 69) failed [ 236.750426][ T5274] FAT-fs (loop4): Directory bread(block 70) failed [ 236.757905][ T5274] FAT-fs (loop4): Directory bread(block 71) failed [ 236.765016][ T5274] FAT-fs (loop4): Directory bread(block 72) failed [ 236.775830][ T5274] FAT-fs (loop4): Directory bread(block 73) failed [ 236.981163][ T5280] syzkaller0: entered promiscuous mode [ 236.987087][ T5280] syzkaller0: entered allmulticast mode [ 238.180125][ T5292] Bluetooth: MGMT ver 1.23 [ 238.185321][ T5292] Bluetooth: hci3: invalid length 0, exp 2 for type 20 [ 238.877879][ T5307] loop3: detected capacity change from 0 to 64 [ 239.801022][ T5312] syzkaller0: entered promiscuous mode [ 239.806997][ T5312] syzkaller0: entered allmulticast mode [ 240.858595][ T5329] Bluetooth: hci3: invalid length 0, exp 2 for type 20 [ 241.033690][ T5333] loop3: detected capacity change from 0 to 64 [ 241.713380][ C1] eth0: bad gso: type: 1, size: 1408 [ 243.316823][ T5362] Bluetooth: hci3: invalid length 0, exp 2 for type 20 [ 243.805031][ T5076] ===================================================== [ 243.812459][ T5076] BUG: KMSAN: uninit-value in hci_rx_work+0x10a8/0x1130 [ 243.819837][ T5076] hci_rx_work+0x10a8/0x1130 [ 243.824918][ T5076] process_scheduled_works+0xae0/0x1c40 [ 243.830670][ T5076] worker_thread+0xea5/0x1520 [ 243.839297][ T5076] kthread+0x3e2/0x540 [ 243.844786][ T5076] ret_from_fork+0x6d/0x90 [ 243.849391][ T5076] ret_from_fork_asm+0x1a/0x30 [ 243.854503][ T5076] [ 243.857420][ T5076] Uninit was created at: [ 243.862002][ T5076] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 243.868375][ T5076] kmalloc_reserve+0x13d/0x4a0 [ 243.873461][ T5076] __alloc_skb+0x363/0x7b0 [ 243.878058][ T5076] vhci_write+0x128/0x910 [ 243.882568][ T5076] vfs_write+0xb2f/0x1550 [ 243.887389][ T5076] ksys_write+0x20f/0x4c0 [ 243.891935][ T5076] __ia32_sys_write+0x91/0xe0 [ 243.896972][ T5076] ia32_sys_call+0x2e34/0x40d0 [ 243.901973][ T5076] __do_fast_syscall_32+0xb0/0x110 [ 243.908831][ T5076] do_fast_syscall_32+0x38/0x80 [ 243.914138][ T5076] do_SYSENTER_32+0x1f/0x30 [ 243.918840][ T5076] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.925525][ T5076] [ 243.927960][ T5076] CPU: 1 PID: 5076 Comm: kworker/u9:7 Not tainted 6.10.0-syzkaller-09278-ga4f928552058 #0 [ 243.942122][ T5076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 243.953717][ T5076] Workqueue: hci3 hci_rx_work [ 243.958637][ T5076] ===================================================== [ 243.965877][ T5076] Disabling lock debugging due to kernel taint [ 243.972161][ T5076] Kernel panic - not syncing: kmsan.panic set ... [ 243.978718][ T5076] CPU: 1 PID: 5076 Comm: kworker/u9:7 Tainted: G B 6.10.0-syzkaller-09278-ga4f928552058 #0 [ 243.990297][ T5076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 244.000529][ T5076] Workqueue: hci3 hci_rx_work [ 244.005453][ T5076] Call Trace: [ 244.008857][ T5076] [ 244.011895][ T5076] dump_stack_lvl+0x216/0x2d0 [ 244.016762][ T5076] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 244.022813][ T5076] dump_stack+0x1e/0x30 [ 244.027149][ T5076] panic+0x4e2/0xcd0 [ 244.031224][ T5076] ? kmsan_get_metadata+0x141/0x1d0 [ 244.036666][ T5076] kmsan_report+0x2d5/0x2e0 [ 244.041439][ T5076] ? kmsan_get_metadata+0x146/0x1d0 [ 244.046865][ T5076] ? __msan_warning+0x95/0x120 [ 244.051832][ T5076] ? hci_rx_work+0x10a8/0x1130 [ 244.056797][ T5076] ? process_scheduled_works+0xae0/0x1c40 [ 244.062711][ T5076] ? worker_thread+0xea5/0x1520 [ 244.067749][ T5076] ? kthread+0x3e2/0x540 [ 244.072191][ T5076] ? ret_from_fork+0x6d/0x90 [ 244.076946][ T5076] ? ret_from_fork_asm+0x1a/0x30 [ 244.082093][ T5076] ? filter_irq_stacks+0x60/0x1a0 [ 244.087359][ T5076] ? kmsan_get_metadata+0x146/0x1d0 [ 244.092781][ T5076] ? kmsan_get_metadata+0x146/0x1d0 [ 244.098206][ T5076] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 244.104758][ T5076] ? kmsan_get_metadata+0x146/0x1d0 [ 244.110184][ T5076] ? kmsan_get_metadata+0x146/0x1d0 [ 244.115599][ T5076] ? kmsan_get_metadata+0x146/0x1d0 [ 244.121012][ T5076] ? kmsan_get_metadata+0x146/0x1d0 [ 244.126436][ T5076] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 244.132986][ T5076] ? kmsan_get_metadata+0x146/0x1d0 [ 244.138414][ T5076] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 244.144460][ T5076] __msan_warning+0x95/0x120 [ 244.149257][ T5076] hci_rx_work+0x10a8/0x1130 [ 244.154067][ T5076] ? __pfx_hci_rx_work+0x10/0x10 [ 244.159211][ T5076] process_scheduled_works+0xae0/0x1c40 [ 244.165001][ T5076] worker_thread+0xea5/0x1520 [ 244.169875][ T5076] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 244.175936][ T5076] kthread+0x3e2/0x540 [ 244.180207][ T5076] ? __pfx_worker_thread+0x10/0x10 [ 244.185515][ T5076] ? __pfx_kthread+0x10/0x10 [ 244.190337][ T5076] ret_from_fork+0x6d/0x90 [ 244.194920][ T5076] ? __pfx_kthread+0x10/0x10 [ 244.199708][ T5076] ret_from_fork_asm+0x1a/0x30 [ 244.204700][ T5076] [ 244.208072][ T5076] Kernel Offset: disabled [ 244.212473][ T5076] Rebooting in 86400 seconds..