last executing test programs: 4.817067478s ago: executing program 2 (id=3): io_submit(0x0, 0x1, &(0x7f00000013c0)=[&(0x7f0000001240)={0x0, 0x0, 0x0, 0x6, 0x379, 0xffffffffffffffff, &(0x7f0000000240)="1413d9165f1d39d81dc5eb8f60cfc2310fced094f7065a194bbf09b30cca", 0x1e, 0x10000000000000, 0x0, 0x1}]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.274054606s ago: executing program 0 (id=6): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 4.273694955s ago: executing program 1 (id=2): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0xda, &(0x7f00000007c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x1, 0x1, 0x1, 0x0, 0xe, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x9c, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x401, 0x221, 0x6}, [@mdlm_detail={0x8d, 0x24, 0x13, 0x5, "07b4dbe6f14dd3471a58288a1942687b16758f4c80ab1dbbe3e47a943fde94b9265ffc2d948411c53c2c0e5298f1bea8b4546f1261542707a5adfd695d41a6ede901e19dd4e8205168de1b147a2a665b7d4c6bcdaa99015eba061d5f15bdbf15a9b91b963c08bd338ddbe81a7ca26b842c5816193b7590de00fc1fa943005c8309f916f7f413738d26"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xe6, 0x2, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.038814645s ago: executing program 0 (id=7): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xf}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3.950763228s ago: executing program 3 (id=4): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x41}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}], 0x38}, 0x0) 3.90206493s ago: executing program 4 (id=8): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getpeername$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) add_key$fscrypt_v1(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) chdir(&(0x7f0000000280)='./file0\x00') r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x268, 0x300, 0x268, 0x268, 0x378, 0x460, 0x460, 0x378, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x268, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x80ff, 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) 3.761024313s ago: executing program 0 (id=9): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x70bd2b, 0x25dfdbff, {0xa, 0x80, 0x10, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10011}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv4_getnexthop={0x18, 0x6a, 0x119, 0x70bd2c, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x7c, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0xfffc}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}, @CTA_NAT_SRC={0x4}, @CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 3.642170507s ago: executing program 3 (id=10): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x7, r0, 0x0, 0x3) 3.487180907s ago: executing program 2 (id=11): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r9 = socket$packet(0x11, 0x3, 0x300) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r10}, 0x10) setsockopt$packet_fanout(r9, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x6, 0x8, 0x8}]}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000068000100030000000400008000000000000000000c00020002000000fa0000009af6b176c34fb2a3e7c62095f61e9cba440de79a96eca6e1b435ceb95a392e4a03d8b1109759d8601d1efe3cedff72259ce4e5ec4cef52cb57b970b239e0512698c1aaa9e34fa0"], 0x24}}, 0x4000) 3.317977533s ago: executing program 0 (id=12): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) 3.208818008s ago: executing program 0 (id=13): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') read$FUSE(r4, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000500)={0x0, 0x18a, 0x0, 0x0, 0xc}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x50, 0x0, 0x0) r9 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r9, 0x0, 0x0) 3.085992851s ago: executing program 3 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800010000000200000000000a100200000000000400010008001e0001"], 0x24}}, 0x0) 2.919614711s ago: executing program 3 (id=15): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x840000000002, 0x3, 0xff) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 2.264227128s ago: executing program 1 (id=16): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0xa, 0x801, 0x84) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x32d) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x5) r2 = accept4(r1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001000), 0x581, 0x40000000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000009500000000000000e05e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f0000000240)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) listen(r5, 0x2f0) openat$cgroup_devices(r6, 0x0, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet(0x2, 0x80001, 0x84) 1.567209036s ago: executing program 4 (id=17): readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r0 = io_uring_setup(0x497c, &(0x7f00000001c0)) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) close_range(r0, 0xffffffffffffffff, 0x0) 1.406385523s ago: executing program 2 (id=18): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet(0x2, 0x2, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.290229564s ago: executing program 1 (id=19): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000003800)={0x2020}, 0x2020) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r3 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x4c, 0x1a, 0xc000000, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x40000, 0x0, 0x2, 0x0, 0x7}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 1.065887266s ago: executing program 4 (id=20): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) 864.130486ms ago: executing program 4 (id=21): r0 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 356.638058ms ago: executing program 2 (id=22): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4"]}, 0xe2) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="85952b177328da2f8757c9343d6559eb7a8197c0479df99720c9f9d0a8093c947d", 0x21, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/80, 0x50, 0x0) 297.537076ms ago: executing program 2 (id=23): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001480)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_AF_SPEC={0x4}]}, 0x34}}, 0x0) 242.190865ms ago: executing program 4 (id=24): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 110.381034ms ago: executing program 0 (id=25): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000100), 0x3ff, 0x2000) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x42041) syz_usb_disconnect(r0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0xc, 0x70000000, 0x80000001, 0x7}, 0x14) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xfdef) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=26): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x3}}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002680)="cdf5083070", 0x5}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.49' (ED25519) to the list of known hosts. [ 55.848867][ T5816] cgroup: Unknown subsys name 'net' [ 55.947129][ T5816] cgroup: Unknown subsys name 'cpuset' [ 55.955322][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.220856][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.438809][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.447548][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.447904][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.464207][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.472652][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.472961][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.480218][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.498787][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.499975][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.507545][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.521335][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.529922][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.539262][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.544345][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.546889][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.561796][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.574052][ T5144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.574447][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.590092][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.590273][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.604983][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.608566][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.613159][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.621169][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.626933][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.635650][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.647431][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.654689][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.666891][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 59.674314][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.020880][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 60.072768][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 60.274535][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 60.313306][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.321917][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.329532][ T5845] bridge_slave_0: entered allmulticast mode [ 60.336630][ T5845] bridge_slave_0: entered promiscuous mode [ 60.348686][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.356005][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.363205][ T5844] bridge_slave_0: entered allmulticast mode [ 60.370116][ T5844] bridge_slave_0: entered promiscuous mode [ 60.379892][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 60.391284][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.398852][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.406123][ T5845] bridge_slave_1: entered allmulticast mode [ 60.413018][ T5845] bridge_slave_1: entered promiscuous mode [ 60.425414][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.432546][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.440163][ T5844] bridge_slave_1: entered allmulticast mode [ 60.446947][ T5844] bridge_slave_1: entered promiscuous mode [ 60.503870][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 60.529426][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.540949][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.573284][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.609923][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.641373][ T5845] team0: Port device team_slave_0 added [ 60.698108][ T5845] team0: Port device team_slave_1 added [ 60.742304][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.749702][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.757661][ T5848] bridge_slave_0: entered allmulticast mode [ 60.764632][ T5848] bridge_slave_0: entered promiscuous mode [ 60.781671][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.788854][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.796365][ T5847] bridge_slave_0: entered allmulticast mode [ 60.802941][ T5847] bridge_slave_0: entered promiscuous mode [ 60.812331][ T5844] team0: Port device team_slave_0 added [ 60.820977][ T5844] team0: Port device team_slave_1 added [ 60.833212][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.840672][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.847926][ T5848] bridge_slave_1: entered allmulticast mode [ 60.855073][ T5848] bridge_slave_1: entered promiscuous mode [ 60.862041][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.869195][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.895472][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.907338][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.914678][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.921867][ T5847] bridge_slave_1: entered allmulticast mode [ 60.929034][ T5847] bridge_slave_1: entered promiscuous mode [ 60.976418][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.983418][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.010754][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.036605][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.043782][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.051641][ T5846] bridge_slave_0: entered allmulticast mode [ 61.058746][ T5846] bridge_slave_0: entered promiscuous mode [ 61.067559][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.075068][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.082256][ T5846] bridge_slave_1: entered allmulticast mode [ 61.089102][ T5846] bridge_slave_1: entered promiscuous mode [ 61.097689][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.110494][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.134151][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.146078][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.153054][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.179517][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.216797][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.236077][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.243065][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.269180][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.282114][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.322159][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.334390][ T5848] team0: Port device team_slave_0 added [ 61.350803][ T5847] team0: Port device team_slave_0 added [ 61.369665][ T5848] team0: Port device team_slave_1 added [ 61.378327][ T5845] hsr_slave_0: entered promiscuous mode [ 61.386583][ T5845] hsr_slave_1: entered promiscuous mode [ 61.396086][ T5847] team0: Port device team_slave_1 added [ 61.420121][ T5846] team0: Port device team_slave_0 added [ 61.459020][ T5846] team0: Port device team_slave_1 added [ 61.474792][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.481749][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.508709][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.531338][ T5844] hsr_slave_0: entered promiscuous mode [ 61.537685][ T5844] hsr_slave_1: entered promiscuous mode [ 61.544184][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.552082][ T5844] Cannot create hsr debugfs directory [ 61.583191][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.590511][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.616955][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.628082][ T5837] Bluetooth: hci1: command tx timeout [ 61.634950][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.635431][ T5833] Bluetooth: hci0: command tx timeout [ 61.641912][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.675393][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.691144][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.698440][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.724640][ T5833] Bluetooth: hci3: command tx timeout [ 61.724783][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.730506][ T5833] Bluetooth: hci2: command tx timeout [ 61.759680][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.766794][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.793688][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.804776][ T5833] Bluetooth: hci4: command tx timeout [ 61.822291][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.829445][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.855822][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.892817][ T5848] hsr_slave_0: entered promiscuous mode [ 61.899367][ T5848] hsr_slave_1: entered promiscuous mode [ 61.905929][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.913564][ T5848] Cannot create hsr debugfs directory [ 61.988380][ T5846] hsr_slave_0: entered promiscuous mode [ 61.995040][ T5846] hsr_slave_1: entered promiscuous mode [ 62.001496][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.009298][ T5846] Cannot create hsr debugfs directory [ 62.031492][ T5847] hsr_slave_0: entered promiscuous mode [ 62.039352][ T5847] hsr_slave_1: entered promiscuous mode [ 62.045802][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.053380][ T5847] Cannot create hsr debugfs directory [ 62.308465][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.331955][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.341611][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.361599][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.411142][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.430543][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.448035][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.470275][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.508157][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.521245][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.546843][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.568449][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.608775][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.656658][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.668289][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.692127][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.723861][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.735540][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.753301][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.772908][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.810724][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.852923][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.880933][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.888312][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.900767][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.936339][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.943457][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.989598][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.010901][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.032249][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.039500][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.073455][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.080583][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.136198][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.167862][ T3471] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.175032][ T3471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.190776][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.207082][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.252869][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.260001][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.276423][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.300378][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.321250][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.328418][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.341531][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.389570][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.396736][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.407010][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.414151][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.427817][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.434935][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.449393][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.537865][ T5845] veth0_vlan: entered promiscuous mode [ 63.555063][ T5844] veth0_vlan: entered promiscuous mode [ 63.568969][ T5845] veth1_vlan: entered promiscuous mode [ 63.599992][ T5844] veth1_vlan: entered promiscuous mode [ 63.614885][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.623434][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.698921][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.706377][ T5837] Bluetooth: hci1: command tx timeout [ 63.711865][ T5833] Bluetooth: hci0: command tx timeout [ 63.755707][ T5845] veth0_macvtap: entered promiscuous mode [ 63.776398][ T5844] veth0_macvtap: entered promiscuous mode [ 63.783102][ T5846] veth0_vlan: entered promiscuous mode [ 63.793598][ T5848] veth0_vlan: entered promiscuous mode [ 63.800167][ T5837] Bluetooth: hci3: command tx timeout [ 63.804403][ T5833] Bluetooth: hci2: command tx timeout [ 63.819336][ T5844] veth1_macvtap: entered promiscuous mode [ 63.831368][ T5845] veth1_macvtap: entered promiscuous mode [ 63.851990][ T5848] veth1_vlan: entered promiscuous mode [ 63.868191][ T5833] Bluetooth: hci4: command tx timeout [ 63.877700][ T5847] veth0_vlan: entered promiscuous mode [ 63.896226][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.911377][ T5847] veth1_vlan: entered promiscuous mode [ 63.927988][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.938521][ T5846] veth1_vlan: entered promiscuous mode [ 63.948525][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.960452][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.971457][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.983069][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.992274][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.001498][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.010264][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.026517][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.037176][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.049490][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.060904][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.070947][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.081751][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.091007][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.145905][ T5848] veth0_macvtap: entered promiscuous mode [ 64.172738][ T5847] veth0_macvtap: entered promiscuous mode [ 64.187454][ T5846] veth0_macvtap: entered promiscuous mode [ 64.208927][ T5848] veth1_macvtap: entered promiscuous mode [ 64.219089][ T5847] veth1_macvtap: entered promiscuous mode [ 64.241450][ T5846] veth1_macvtap: entered promiscuous mode [ 64.269582][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.281163][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.292098][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.302906][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.314626][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.331918][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.343511][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.353849][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.365306][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.375417][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.386300][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.397329][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.413450][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.425525][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.438221][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.448882][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.461879][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.472633][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.482831][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.493341][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.505815][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.515973][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.527031][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.536999][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.547763][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.558643][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.583367][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.594952][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.604938][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.615589][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.626422][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.637067][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.648778][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.666760][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.677509][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.687412][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.697948][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.707830][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.718573][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.728550][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.739140][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.750940][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.762032][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.772506][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.781400][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.790194][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.802525][ T5846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.812237][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.817057][ T5846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.820423][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.840435][ T5846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.849369][ T5846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.892162][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.902698][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.913280][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.922701][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.938233][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.949627][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.969922][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.979440][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.100995][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.107050][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.163035][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.227925][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.236064][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.242726][ T5887] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.325517][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.333386][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.455801][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.463655][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.467853][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.484148][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.525336][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.533210][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.603135][ T5891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 65.631030][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.652321][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.788992][ T5833] Bluetooth: hci0: command tx timeout [ 65.791293][ T5837] Bluetooth: hci1: command tx timeout [ 65.833229][ T5895] tipc: Started in network mode [ 65.846755][ T5895] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 65.857121][ T5895] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 65.858786][ T5890] kvm: emulating exchange as write [ 65.873586][ T5895] tipc: Enabled bearer , priority 10 [ 65.877995][ T5837] Bluetooth: hci2: command tx timeout [ 65.885751][ T5833] Bluetooth: hci3: command tx timeout [ 65.948367][ T5837] Bluetooth: hci4: command tx timeout [ 66.165010][ T5880] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 66.331101][ T5880] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 66.341920][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.398203][ T5880] usb 2-1: config 0 descriptor?? [ 66.432396][ T5880] cp210x 2-1:0.0: cp210x converter detected [ 66.740050][ T5837] Bluetooth: hci1: Invalid handle: 0xaf27 > 0x0eff [ 66.839155][ T5880] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 66.895574][ T5880] usb 2-1: cp210x converter now attached to ttyUSB0 [ 66.999850][ T8] tipc: Node number set to 1 [ 67.143736][ T910] usb 2-1: USB disconnect, device number 2 [ 67.180525][ T910] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 67.231810][ T910] cp210x 2-1:0.0: device disconnected [ 67.237801][ T5922] xt_NFQUEUE: number of total queues is 0 [ 67.864196][ T5833] Bluetooth: hci0: command tx timeout [ 67.870386][ T5833] Bluetooth: hci1: command tx timeout [ 67.954796][ T5837] Bluetooth: hci2: command tx timeout [ 67.954808][ T5833] Bluetooth: hci3: command tx timeout [ 68.036899][ T5837] Bluetooth: hci4: command tx timeout [ 69.170061][ T5947] xt_l2tp: v2 tid > 0xffff: 262144 [ 70.112074][ T5963] ------------[ cut here ]------------ [ 70.117884][ T5963] refcount_t: underflow; use-after-free. [ 70.169295][ T5963] WARNING: CPU: 1 PID: 5963 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 70.178920][ T5963] Modules linked in: [ 70.182865][ T5963] CPU: 1 UID: 0 PID: 5963 Comm: syz.4.26 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 70.194551][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.205469][ T5963] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 70.211673][ T5963] Code: e0 1e 5f 8c e8 87 c5 95 fc 90 0f 0b 90 90 eb 99 e8 2b 1e d5 fc c6 05 6d 2c 39 0b 01 90 48 c7 c7 40 1f 5f 8c e8 67 c5 95 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 08 1e d5 fc c6 05 47 2c 39 0b 01 90 [ 70.221108][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.231458][ T5963] RSP: 0018:ffffc900044ff8e8 EFLAGS: 00010246 [ 70.231510][ T5963] RAX: ea36bcde09544a00 RBX: ffff88802fd125e4 RCX: 0000000000080000 [ 70.231526][ T5963] RDX: ffffc9000d2fb000 RSI: 0000000000003d07 RDI: 0000000000003d08 [ 70.231540][ T5963] RBP: 0000000000000003 R08: ffffffff81601c02 R09: 1ffff110170e519a [ 70.231554][ T5963] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff88802cca6c68 [ 70.231570][ T5963] R13: ffff88802fd125e4 R14: 1ffff11005994d98 R15: ffff88802cca6c00 [ 70.231587][ T5963] FS: 00007f71829f86c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 70.231606][ T5963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.231621][ T5963] CR2: 0000000020129030 CR3: 0000000029ef0000 CR4: 00000000003526f0 [ 70.231641][ T5963] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.231655][ T5963] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.231669][ T5963] Call Trace: [ 70.231677][ T5963] [ 70.231688][ T5963] ? __warn+0x165/0x4d0 [ 70.231718][ T5963] ? refcount_warn_saturate+0x15a/0x1d0 [ 70.231752][ T5963] ? report_bug+0x2b3/0x500 [ 70.231776][ T5963] ? refcount_warn_saturate+0x15a/0x1d0 [ 70.231807][ T5963] ? handle_bug+0x60/0x90 [ 70.231834][ T5963] ? exc_invalid_op+0x1a/0x50 [ 70.231861][ T5963] ? asm_exc_invalid_op+0x1a/0x20 [ 70.231892][ T5963] ? __warn_printk+0x292/0x360 [ 70.231919][ T5963] ? refcount_warn_saturate+0x15a/0x1d0 [ 70.231947][ T5963] ? refcount_warn_saturate+0x159/0x1d0 [ 70.231974][ T5963] j1939_session_put+0x1ed/0x440 [ 70.232000][ T5963] j1939_sk_sendmsg+0x121b/0x14c0 [ 70.232043][ T5963] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 70.232067][ T5963] ? __import_iovec+0x590/0x870 [ 70.232095][ T5963] ? aa_sock_msg_perm+0x91/0x160 [ 70.232121][ T5963] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 70.232145][ T5963] __sock_sendmsg+0x221/0x270 [ 70.232177][ T5963] ____sys_sendmsg+0x52a/0x7e0 [ 70.232207][ T5963] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.232228][ T5963] ? __fget_files+0x2a/0x410 [ 70.232252][ T5963] ? __fget_files+0x2a/0x410 [ 70.232280][ T5963] __sys_sendmsg+0x269/0x350 [ 70.232308][ T5963] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.232328][ T5963] ? j1939_sk_connect+0x442/0x5c0 [ 70.232392][ T5963] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.232425][ T5963] ? do_syscall_64+0x100/0x230 [ 70.232457][ T5963] ? do_syscall_64+0xb6/0x230 [ 70.232487][ T5963] do_syscall_64+0xf3/0x230 [ 70.232515][ T5963] ? clear_bhb_loop+0x35/0x90 [ 70.232546][ T5963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.232572][ T5963] RIP: 0033:0x7f7181b7ff19 [ 70.232601][ T5963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.232619][ T5963] RSP: 002b:00007f71829f8058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.232643][ T5963] RAX: ffffffffffffffda RBX: 00007f7181d45fa0 RCX: 00007f7181b7ff19 [ 70.232661][ T5963] RDX: 0000000000000000 RSI: 0000000020002700 RDI: 0000000000000003 [ 70.232674][ T5963] RBP: 00007f7181bf3986 R08: 0000000000000000 R09: 0000000000000000 [ 70.232688][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.232702][ T5963] R13: 0000000000000000 R14: 00007f7181d45fa0 R15: 00007f7181e6fa38 [ 70.232732][ T5963] [ 70.232751][ T5963] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 70.232768][ T5963] CPU: 1 UID: 0 PID: 5963 Comm: syz.4.26 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 70.232792][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.232804][ T5963] Call Trace: [ 70.232812][ T5963] [ 70.232820][ T5963] dump_stack_lvl+0x241/0x360 [ 70.232851][ T5963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.232876][ T5963] ? __pfx__printk+0x10/0x10 [ 70.232897][ T5963] ? _printk+0xd5/0x120 [ 70.232922][ T5963] ? __init_begin+0x41000/0x41000 [ 70.232950][ T5963] ? vscnprintf+0x5d/0x90 [ 70.232973][ T5963] panic+0x349/0x880 [ 70.232998][ T5963] ? __warn+0x174/0x4d0 [ 70.233021][ T5963] ? __pfx_panic+0x10/0x10 [ 70.233062][ T5963] __warn+0x344/0x4d0 [ 70.233083][ T5963] ? refcount_warn_saturate+0x15a/0x1d0 [ 70.233113][ T5963] report_bug+0x2b3/0x500 [ 70.233136][ T5963] ? refcount_warn_saturate+0x15a/0x1d0 [ 70.233167][ T5963] handle_bug+0x60/0x90 [ 70.233192][ T5963] exc_invalid_op+0x1a/0x50 [ 70.233218][ T5963] asm_exc_invalid_op+0x1a/0x20 [ 70.233242][ T5963] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 70.233269][ T5963] Code: e0 1e 5f 8c e8 87 c5 95 fc 90 0f 0b 90 90 eb 99 e8 2b 1e d5 fc c6 05 6d 2c 39 0b 01 90 48 c7 c7 40 1f 5f 8c e8 67 c5 95 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 08 1e d5 fc c6 05 47 2c 39 0b 01 90 [ 70.233284][ T5963] RSP: 0018:ffffc900044ff8e8 EFLAGS: 00010246 [ 70.233302][ T5963] RAX: ea36bcde09544a00 RBX: ffff88802fd125e4 RCX: 0000000000080000 [ 70.233317][ T5963] RDX: ffffc9000d2fb000 RSI: 0000000000003d07 RDI: 0000000000003d08 [ 70.233330][ T5963] RBP: 0000000000000003 R08: ffffffff81601c02 R09: 1ffff110170e519a [ 70.233344][ T5963] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff88802cca6c68 [ 70.233359][ T5963] R13: ffff88802fd125e4 R14: 1ffff11005994d98 R15: ffff88802cca6c00 [ 70.233381][ T5963] ? __warn_printk+0x292/0x360 [ 70.233410][ T5963] ? refcount_warn_saturate+0x159/0x1d0 [ 70.233443][ T5963] j1939_session_put+0x1ed/0x440 [ 70.233474][ T5963] j1939_sk_sendmsg+0x121b/0x14c0 [ 70.233516][ T5963] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 70.233538][ T5963] ? __import_iovec+0x590/0x870 [ 70.233564][ T5963] ? aa_sock_msg_perm+0x91/0x160 [ 70.233589][ T5963] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 70.233611][ T5963] __sock_sendmsg+0x221/0x270 [ 70.233641][ T5963] ____sys_sendmsg+0x52a/0x7e0 [ 70.233670][ T5963] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.233690][ T5963] ? __fget_files+0x2a/0x410 [ 70.233712][ T5963] ? __fget_files+0x2a/0x410 [ 70.233739][ T5963] __sys_sendmsg+0x269/0x350 [ 70.233765][ T5963] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.233785][ T5963] ? j1939_sk_connect+0x442/0x5c0 [ 70.233847][ T5963] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.233871][ T5963] ? do_syscall_64+0x100/0x230 [ 70.233901][ T5963] ? do_syscall_64+0xb6/0x230 [ 70.233929][ T5963] do_syscall_64+0xf3/0x230 [ 70.233956][ T5963] ? clear_bhb_loop+0x35/0x90 [ 70.233986][ T5963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.234012][ T5963] RIP: 0033:0x7f7181b7ff19 [ 70.234028][ T5963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.234045][ T5963] RSP: 002b:00007f71829f8058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.234065][ T5963] RAX: ffffffffffffffda RBX: 00007f7181d45fa0 RCX: 00007f7181b7ff19 [ 70.234080][ T5963] RDX: 0000000000000000 RSI: 0000000020002700 RDI: 0000000000000003 [ 70.234093][ T5963] RBP: 00007f7181bf3986 R08: 0000000000000000 R09: 0000000000000000 [ 70.234106][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.234119][ T5963] R13: 0000000000000000 R14: 00007f7181d45fa0 R15: 00007f7181e6fa38 [ 70.234147][ T5963] [ 70.234289][ T5963] Kernel Offset: disabled