last executing test programs: 2.26017186s ago: executing program 2 (id=81): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast}, {@empty}, {@loopback}, {@private}]}, @rr={0x7, 0x23, 0x0, [@remote, @empty, @empty, @multicast1, @remote, @dev, @loopback, @rand_addr]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.162613232s ago: executing program 1 (id=87): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 2.067059289s ago: executing program 1 (id=89): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000001900)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty, 0x400}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x2, {0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @in6=@empty, @in6=@mcast1}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x2, 0xffffffff, @mcast2}}, @sadb_x_sec_ctx={0x1}]}, 0xa8}}, 0x400c0) 2.066884445s ago: executing program 4 (id=90): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2.066571445s ago: executing program 2 (id=91): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100004b028ee7000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000016c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001680)={&(0x7f0000001500)={0x114, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xb4a1fe70}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5c57}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffffff3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2b}]}, @CTA_NAT_SRC={0x54, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}}]}, @CTA_NAT_SRC={0x3c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x4000090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0x88000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000001c0)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key(&(0x7f0000000440)='logon\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="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", 0x1000, 0xffffffffffffffff) keyctl$search(0xa, r3, &(0x7f0000000140)='big_key\x00', &(0x7f0000000400)={'syz', 0x1}, r4) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x13f0, 0x1250, 0x5802, 0x294, 0x0, 0x294, 0x1320, 0x325, 0x378, 0x1320, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'pimreg0\x00', 'wlan1\x00'}, 0x0, 0x1228, 0x1250, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x8, 0x1, 0x7fffffff}}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1450) 2.066069189s ago: executing program 3 (id=92): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000180)={0x18, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) 1.988554165s ago: executing program 3 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004c80)={&(0x7f0000004640)=@updsa={0x13c, 0x1a, 0x1, 0x1, 0x0, {{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@dev, 0x0, 0x33}, @in6=@private1, {}, {}, {0x0, 0x0, 0x3}, 0x0, 0x400000, 0x2}, [@algo_aead={0x4c, 0x12, {{'generic-gcm-aesni\x00'}}}]}, 0x13c}}, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 1.980074738s ago: executing program 1 (id=95): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) fcntl$lock(r0, 0x5, &(0x7f0000000300)={0x2, 0x2, 0x9, 0xd}) 1.885868474s ago: executing program 0 (id=96): r0 = syz_io_uring_setup(0x445e, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000004c0)=@sco}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) 1.846928206s ago: executing program 0 (id=97): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') pread64(r0, &(0x7f0000033240)=""/102376, 0xfffffffffffffee7, 0x100008) 1.475692741s ago: executing program 1 (id=98): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x60, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x0, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8, 0xb, 0x60}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xfff1}}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x1b0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.146937249s ago: executing program 0 (id=99): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10}}, 0x68}}, 0x0) 1.145911273s ago: executing program 4 (id=100): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB=',norock,iocharset=iso8859-15,norock,\x00'], 0x2, 0x699, &(0x7f0000000140)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.144832078s ago: executing program 2 (id=101): r0 = socket(0x22, 0x2, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x22}, 0x6) 1.075658407s ago: executing program 2 (id=102): r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x35b) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000084"], 0x18}}], 0x2, 0x0) 1.074400928s ago: executing program 3 (id=103): io_setup(0x3, &(0x7f0000000000)=0x0) r1 = timerfd_create(0x0, 0x0) r2 = syz_io_uring_setup(0x23b, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0xfffffffd}, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0xfffffffffffffe9d) io_submit(r0, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 1.055052471s ago: executing program 1 (id=104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) 981.94059ms ago: executing program 0 (id=105): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0x501}], 0x1}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)=0x3) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) 975.579072ms ago: executing program 4 (id=106): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) splice(r0, 0x0, r1, 0x0, 0x1, 0x4) 934.231383ms ago: executing program 3 (id=107): r0 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 907.136025ms ago: executing program 4 (id=108): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 905.93939ms ago: executing program 0 (id=109): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_to_batadv\x00', 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 905.877886ms ago: executing program 2 (id=110): r0 = socket(0x25, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x44c) 857.923852ms ago: executing program 1 (id=111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 850.154266ms ago: executing program 3 (id=112): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) 813.374819ms ago: executing program 4 (id=113): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x6000000, [{0x9, 0x43000000}, {}, {0x200, 0xfffffffd}]}]}}, &(0x7f0000000f40)=""/4096, 0x3e, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x20) 810.435916ms ago: executing program 3 (id=114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004c80)={&(0x7f0000004640)=@updsa={0x13c, 0x1a, 0x1, 0x1, 0x0, {{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@dev, 0x0, 0x33}, @in6=@private1, {}, {}, {0x0, 0x0, 0x3}, 0x0, 0x400000, 0x2}, [@algo_aead={0x4c, 0x12, {{'generic-gcm-aesni\x00'}}}]}, 0x13c}}, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 757.867872ms ago: executing program 2 (id=115): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000005c0)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 680.885887ms ago: executing program 4 (id=116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) write$cgroup_freezer_state(r3, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r3, &(0x7f0000000200)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) 0s ago: executing program 0 (id=117): r0 = socket$netlink(0x10, 0x3, 0x18) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x8000000}, 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getcwd(0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/1912], 0x778) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000040000000000000000000000000016082218e8cc63a0d7de4608473465d91871f2ae638c41e90ae5"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.138' (ED25519) to the list of known hosts. [ 33.553954][ T6404] cgroup: Unknown subsys name 'net' [ 33.861779][ T6404] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.189094][ T6404] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 35.762512][ T6416] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.776515][ T6421] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.778955][ T6421] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.781389][ T6421] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.783684][ T6424] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.786153][ T6424] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.788716][ T6424] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 35.802664][ T6429] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.804979][ T6429] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 35.807320][ T6429] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 35.808256][ T6426] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.810079][ T6429] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 35.811365][ T6426] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 35.813501][ T6429] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 35.816038][ T6426] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 35.817418][ T6430] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 35.819198][ T6426] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 35.822320][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 35.822755][ T6426] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.828066][ T6426] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 35.830990][ T5979] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 35.837635][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.837701][ T5979] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 35.841430][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 35.842933][ T5979] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 35.843561][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 35.845393][ T5979] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 35.849598][ T5979] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 35.851969][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 35.862190][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 35.997855][ T6414] chnl_net:caif_netlink_parms(): no params data found [ 36.082189][ T6425] chnl_net:caif_netlink_parms(): no params data found [ 36.092753][ T6414] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.094615][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.096458][ T6414] bridge_slave_0: entered allmulticast mode [ 36.099607][ T6414] bridge_slave_0: entered promiscuous mode [ 36.112003][ T6414] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.113892][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.115797][ T6414] bridge_slave_1: entered allmulticast mode [ 36.118338][ T6414] bridge_slave_1: entered promiscuous mode [ 36.120654][ T6418] chnl_net:caif_netlink_parms(): no params data found [ 36.177675][ T6414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.195838][ T6414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.207693][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.209655][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.211578][ T6425] bridge_slave_0: entered allmulticast mode [ 36.213412][ T6425] bridge_slave_0: entered promiscuous mode [ 36.235943][ T6418] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.240279][ T6418] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.242231][ T6418] bridge_slave_0: entered allmulticast mode [ 36.244352][ T6418] bridge_slave_0: entered promiscuous mode [ 36.247341][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.249247][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.251136][ T6425] bridge_slave_1: entered allmulticast mode [ 36.253216][ T6425] bridge_slave_1: entered promiscuous mode [ 36.256827][ T6414] team0: Port device team_slave_0 added [ 36.259862][ T6414] team0: Port device team_slave_1 added [ 36.266999][ T6423] chnl_net:caif_netlink_parms(): no params data found [ 36.272404][ T6418] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.274446][ T6418] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.276241][ T6418] bridge_slave_1: entered allmulticast mode [ 36.279261][ T6418] bridge_slave_1: entered promiscuous mode [ 36.304006][ T6425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.308328][ T6415] chnl_net:caif_netlink_parms(): no params data found [ 36.321643][ T6414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.323518][ T6414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.330698][ T6414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.335563][ T6425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.345429][ T6418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.362839][ T6414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.364542][ T6414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.371371][ T6414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.380745][ T6418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.397301][ T6425] team0: Port device team_slave_0 added [ 36.409813][ T6418] team0: Port device team_slave_0 added [ 36.421024][ T6423] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.422826][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.424759][ T6423] bridge_slave_0: entered allmulticast mode [ 36.426730][ T6423] bridge_slave_0: entered promiscuous mode [ 36.430088][ T6425] team0: Port device team_slave_1 added [ 36.432141][ T6423] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.434028][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.435825][ T6423] bridge_slave_1: entered allmulticast mode [ 36.437999][ T6423] bridge_slave_1: entered promiscuous mode [ 36.463345][ T6418] team0: Port device team_slave_1 added [ 36.518782][ T6414] hsr_slave_0: entered promiscuous mode [ 36.557281][ T6414] hsr_slave_1: entered promiscuous mode [ 36.608429][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.610292][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.617184][ T6425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.621386][ T6423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.635695][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.637834][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.644315][ T6425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.651979][ T6423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.662736][ T6418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.664603][ T6418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.671413][ T6418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.679544][ T6415] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.681446][ T6415] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.683404][ T6415] bridge_slave_0: entered allmulticast mode [ 36.685474][ T6415] bridge_slave_0: entered promiscuous mode [ 36.703815][ T6423] team0: Port device team_slave_0 added [ 36.705766][ T6418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.711690][ T6418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.718773][ T6418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.721964][ T6415] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.723911][ T6415] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.725867][ T6415] bridge_slave_1: entered allmulticast mode [ 36.728857][ T6415] bridge_slave_1: entered promiscuous mode [ 36.758549][ T6425] hsr_slave_0: entered promiscuous mode [ 36.797266][ T6425] hsr_slave_1: entered promiscuous mode [ 36.847087][ T6425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.849202][ T6425] Cannot create hsr debugfs directory [ 36.854702][ T6423] team0: Port device team_slave_1 added [ 36.867756][ T6415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.886571][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.888638][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.895215][ T6423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.899310][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.901176][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.907931][ T6423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.915426][ T6415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.989069][ T6418] hsr_slave_0: entered promiscuous mode [ 37.027336][ T6418] hsr_slave_1: entered promiscuous mode [ 37.067014][ T6418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.069056][ T6418] Cannot create hsr debugfs directory [ 37.076133][ T6415] team0: Port device team_slave_0 added [ 37.080825][ T6415] team0: Port device team_slave_1 added [ 37.126725][ T6415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.132806][ T6415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.139662][ T6415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.145328][ T6415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.147325][ T6415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.153729][ T6415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.228385][ T6423] hsr_slave_0: entered promiscuous mode [ 37.267385][ T6423] hsr_slave_1: entered promiscuous mode [ 37.307069][ T6423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.309309][ T6423] Cannot create hsr debugfs directory [ 37.379130][ T6415] hsr_slave_0: entered promiscuous mode [ 37.417473][ T6415] hsr_slave_1: entered promiscuous mode [ 37.457085][ T6415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.463149][ T6415] Cannot create hsr debugfs directory [ 37.507392][ T6414] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.513111][ T6414] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.518436][ T6414] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.536388][ T6414] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.592166][ T6425] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.611052][ T6425] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.615322][ T6425] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.628323][ T6425] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.637642][ T6418] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.646065][ T6418] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.651705][ T6418] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.654826][ T6418] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.726690][ T6414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.729578][ T6415] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.732652][ T6415] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.741934][ T6425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.765700][ T6423] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.771088][ T6415] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.774401][ T6423] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.781465][ T6414] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.784081][ T6425] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.795589][ T6415] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.799678][ T6423] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.805471][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.807522][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.811828][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.813843][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.816531][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.818508][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.848906][ T6423] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.854133][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.856138][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.858501][ T6421] Bluetooth: hci2: command tx timeout [ 37.858513][ T6424] Bluetooth: hci0: command tx timeout [ 37.873541][ T6418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.899848][ T6418] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.903968][ T6414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.933597][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.935373][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.938065][ T6424] Bluetooth: hci1: command tx timeout [ 37.939704][ T6424] Bluetooth: hci3: command tx timeout [ 37.941209][ T6424] Bluetooth: hci4: command tx timeout [ 37.955685][ T6415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.973005][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.974852][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.999886][ T6425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.009475][ T6415] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.032736][ T199] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.034537][ T199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.039822][ T199] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.041784][ T199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.064012][ T6415] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.066665][ T6415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.078891][ T6414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.132804][ T6425] veth0_vlan: entered promiscuous mode [ 38.142068][ T6414] veth0_vlan: entered promiscuous mode [ 38.146481][ T6414] veth1_vlan: entered promiscuous mode [ 38.161649][ T6425] veth1_vlan: entered promiscuous mode [ 38.191101][ T6425] veth0_macvtap: entered promiscuous mode [ 38.194734][ T6418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.198603][ T6425] veth1_macvtap: entered promiscuous mode [ 38.202678][ T6423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.211938][ T6423] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.236494][ T6414] veth0_macvtap: entered promiscuous mode [ 38.250089][ T6414] veth1_macvtap: entered promiscuous mode [ 38.258776][ T6414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.268522][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.271305][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.274568][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.282644][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.284411][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.290229][ T6414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.293138][ T6415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.299680][ T6414] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.301960][ T6414] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.304137][ T6414] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.306161][ T6414] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.316521][ T6418] veth0_vlan: entered promiscuous mode [ 38.330099][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.332758][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.335936][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.366211][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.368143][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.378107][ T6425] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.380274][ T6425] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.382416][ T6425] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.384694][ T6425] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.390062][ T6418] veth1_vlan: entered promiscuous mode [ 38.418316][ T6423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.444710][ T6418] veth0_macvtap: entered promiscuous mode [ 38.473595][ T6418] veth1_macvtap: entered promiscuous mode [ 38.492888][ T281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.494931][ T281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.543029][ T6415] veth0_vlan: entered promiscuous mode [ 38.545301][ T347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.546366][ T6423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.548583][ T347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.551330][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.554067][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.556384][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.560388][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.563600][ T6418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.572704][ T347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.574748][ T347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.574937][ T6415] veth1_vlan: entered promiscuous mode [ 38.594613][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.596688][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.599710][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.602238][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.604802][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.608681][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.611982][ T6418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.632113][ T6418] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.634529][ T6418] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.636670][ T6418] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.640070][ T6418] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.658850][ T6415] veth0_macvtap: entered promiscuous mode [ 38.663444][ T6415] veth1_macvtap: entered promiscuous mode [ 38.702333][ T6415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.704955][ T6415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.709671][ T6415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.712389][ T6415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.714916][ T6415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.718580][ T6415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.722192][ T6415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.738572][ T6423] veth0_vlan: entered promiscuous mode [ 38.741107][ T6415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.743849][ T6415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.746296][ T6415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.749925][ T6415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.752543][ T6415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.755043][ T6415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.760053][ T6415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.764734][ T6415] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.768750][ T6415] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.770932][ T6415] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.773044][ T6415] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.776790][ T281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.779031][ T281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.794248][ T6423] veth1_vlan: entered promiscuous mode [ 38.850289][ T281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.852196][ T281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.852365][ T6423] veth0_macvtap: entered promiscuous mode [ 38.981145][ T6423] veth1_macvtap: entered promiscuous mode [ 39.022312][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.026061][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.034244][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.044116][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.046725][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.050956][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.053476][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.056046][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.064549][ T6423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.071377][ T281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.075351][ T281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.110747][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.113268][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.115592][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.137894][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.140822][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.150008][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.152696][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.162409][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.168995][ T6423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.205913][ T6423] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.224659][ T6423] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.231231][ T30] audit: type=1326 audit(39.210:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba749728 code=0x7ffc0000 [ 39.231924][ T6423] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.246006][ T30] audit: type=1326 audit(39.220:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=23 compat=0 ip=0xffffba749728 code=0x7ffc0000 [ 39.247525][ T6423] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.265761][ T30] audit: type=1326 audit(39.220:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba749728 code=0x7ffc0000 [ 39.287501][ T281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.287796][ T30] audit: type=1326 audit(39.220:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffba749728 code=0x7ffc0000 [ 39.295793][ T281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.327081][ T30] audit: type=1326 audit(39.220:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba749728 code=0x7ffc0000 [ 39.350461][ T30] audit: type=1326 audit(39.220:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffba749728 code=0x7ffc0000 [ 39.388359][ T30] audit: type=1326 audit(39.220:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba749728 code=0x7ffc0000 [ 39.390147][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.395688][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.409306][ T30] audit: type=1326 audit(39.220:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffba747e60 code=0x7ffc0000 [ 39.428530][ T30] audit: type=1326 audit(39.220:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba749728 code=0x7ffc0000 [ 39.450681][ T30] audit: type=1326 audit(39.230:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffba749728 code=0x7ffc0000 [ 39.476965][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.479104][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.584769][ T6522] loop2: detected capacity change from 0 to 512 [ 39.637722][ T6522] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.11: Failed to acquire dquot type 1 [ 39.741710][ T6522] EXT4-fs (loop2): 1 truncate cleaned up [ 39.743758][ T6522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.841318][ T6425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.953430][ T6535] loop3: detected capacity change from 0 to 256 [ 39.972412][ T6421] Bluetooth: hci0: command tx timeout [ 39.974188][ T6421] Bluetooth: hci2: command tx timeout [ 40.017107][ T6421] Bluetooth: hci4: command tx timeout [ 40.019012][ T6421] Bluetooth: hci3: command tx timeout [ 40.020911][ T6421] Bluetooth: hci1: command tx timeout [ 40.630651][ T6531] loop4: detected capacity change from 0 to 8192 [ 40.694487][ T6543] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 40.721499][ T6531] Dev loop4: unable to read RDB block 8 [ 40.723131][ T6531] loop4: unable to read partition table [ 40.853965][ T6531] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 41.037065][ T6550] loop2: detected capacity change from 0 to 1024 [ 41.217029][ T6550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.614439][ T6425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.657501][ T6555] netlink: 'syz.3.21': attribute type 6 has an invalid length. [ 41.705720][ T6563] loop2: detected capacity change from 0 to 512 [ 41.764662][ T6563] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.772249][ T6563] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.810870][ T6563] EXT4-fs (loop2): 1 truncate cleaned up [ 41.812801][ T6563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.861833][ T6569] loop4: detected capacity change from 0 to 2048 [ 41.939646][ T6569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.001557][ T6425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.020373][ T6424] Bluetooth: hci2: command tx timeout [ 42.021895][ T6424] Bluetooth: hci0: command tx timeout [ 42.097397][ T6421] Bluetooth: hci1: command tx timeout [ 42.098872][ T6421] Bluetooth: hci3: command tx timeout [ 42.100232][ T6421] Bluetooth: hci4: command tx timeout [ 42.105797][ T6594] 9pnet_fd: Insufficient options for proto=fd [ 42.124721][ T6415] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.137939][ T6594] netlink: '+}[@': attribute type 10 has an invalid length. [ 43.061850][ T6606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.30'. [ 43.146944][ T6624] loop2: detected capacity change from 0 to 128 [ 43.164388][ T6624] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 43.184534][ T6624] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 43.216340][ T6624] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.35: Directory block failed checksum [ 43.253375][ T6425] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.278168][ T6638] netlink: 40 bytes leftover after parsing attributes in process `syz.4.41'. [ 43.294260][ T6640] loop3: detected capacity change from 0 to 512 [ 43.334223][ T6640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.506044][ T6418] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.528943][ T6660] loop2: detected capacity change from 0 to 512 [ 43.536743][ T6660] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.057866][ T6660] EXT4-fs error (device loop2): ext4_quota_enable:7022: inode #3: comm syz.2.53: iget: bogus i_mode (3200) [ 44.097329][ T6421] Bluetooth: hci2: command tx timeout [ 44.098876][ T6424] Bluetooth: hci0: command tx timeout [ 44.146150][ T6660] EXT4-fs error (device loop2): ext4_quota_enable:7025: comm syz.2.53: Bad quota inode: 3, type: 0 [ 44.155710][ T6660] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 44.177321][ T6421] Bluetooth: hci3: command tx timeout [ 44.179194][ T6421] Bluetooth: hci1: command tx timeout [ 44.180653][ T6424] Bluetooth: hci4: command tx timeout [ 44.349312][ T6425] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 45.233581][ T6694] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 45.247795][ T6677] capability: warning: `syz.3.58' uses deprecated v2 capabilities in a way that may be insecure [ 45.260201][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 47.219947][ T6763] syz.4.90 uses obsolete (PF_INET,SOCK_PACKET) [ 47.265739][ T6765] xt_NFQUEUE: number of total queues is 0 [ 48.173324][ T6786] loop4: detected capacity change from 0 to 164 [ 48.213937][ T6786] process 'syz.4.100' launched './file0' with NULL argv: empty string added [ 48.237667][ T6786] syz.4.100: attempt to access beyond end of device [ 48.237667][ T6786] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 48.241605][ T6786] syz.4.100: attempt to access beyond end of device [ 48.241605][ T6786] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 48.387065][ T6808] bond0: option miimon: invalid value (18446744073709551615) [ 48.400106][ T6808] bond0: option miimon: allowed values 0 - 2147483647 [ 48.416529][ T6811] Zero length message leads to an empty skb [ 48.519991][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 49.260506][ T6817] ------------[ cut here ]------------ [ 49.262253][ T6817] name '7487' [ 49.264284][ T6817] WARNING: CPU: 1 PID: 6817 at fs/proc/generic.c:711 remove_proc_entry+0x278/0x4cc [ 49.266978][ T6817] Modules linked in: [ 49.268033][ T6817] CPU: 1 UID: 0 PID: 6817 Comm: syz.2.115 Not tainted 6.11.0-rc7-syzkaller-g5f5673607153 #0 [ 49.270803][ T6817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 49.273564][ T6817] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 49.275711][ T6817] pc : remove_proc_entry+0x278/0x4cc [ 49.277108][ T6817] lr : remove_proc_entry+0x278/0x4cc [ 49.278566][ T6817] sp : ffff8000a15b7ac0 [ 49.279739][ T6817] x29: ffff8000a15b7b40 x28: ffff0000e9435dc0 x27: dfff800000000000 [ 49.281979][ T6817] x26: ffff7000142b6f58 x25: ffff800092593e60 x24: 1ffff000142b6f60 [ 49.284090][ T6817] x23: 0000000000000004 x22: ffff0000e9435e78 x21: ffff0000d53f2548 [ 49.286268][ T6817] x20: 0000000000000000 x19: ffff0000d53f2548 x18: 1fffe000366d79ee [ 49.288469][ T6817] x17: ffff80008f56d000 x16: ffff800080347214 x15: 0000000000000001 [ 49.290625][ T6817] x14: 1fffe000366da4d0 x13: 0000000000000000 x12: 0000000000000003 [ 49.292823][ T6817] x11: 0000000000000001 x10: 0000000000000003 x9 : 777f73a3a1ed4800 [ 49.295021][ T6817] x8 : 777f73a3a1ed4800 x7 : ffff8000802b7e24 x6 : 0000000000000000 [ 49.297144][ T6817] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 [ 49.299297][ T6817] x2 : 0000000000000006 x1 : ffff80008b4b2c40 x0 : ffff800124205000 [ 49.301540][ T6817] Call trace: [ 49.302397][ T6817] remove_proc_entry+0x278/0x4cc [ 49.303787][ T6817] bcm_release+0x21c/0x800 [ 49.304972][ T6817] sock_close+0xa4/0x1e8 [ 49.306098][ T6817] __fput+0x1bc/0x774 [ 49.307179][ T6817] ____fput+0x20/0x30 [ 49.308259][ T6817] task_work_run+0x230/0x2e0 [ 49.309527][ T6817] do_notify_resume+0x178/0x1f4 [ 49.310845][ T6817] el0_svc+0xac/0x168 [ 49.311935][ T6817] el0t_64_sync_handler+0x84/0xfc [ 49.313306][ T6817] el0t_64_sync+0x190/0x194 [ 49.314524][ T6817] irq event stamp: 13758 [ 49.315706][ T6817] hardirqs last enabled at (13757): [] finish_lock_switch+0xbc/0x1e4 [ 49.318358][ T6817] hardirqs last disabled at (13758): [] el1_dbg+0x24/0x80 [ 49.320673][ T6817] softirqs last enabled at (13732): [] lock_sock_nested+0xcc/0x11c [ 49.323246][ T6817] softirqs last disabled at (13730): [] lock_sock_nested+0x74/0x11c [ 49.325885][ T6817] ---[ end trace 0000000000000000 ]--- [ 49.366516][ T6827] pim6reg: entered allmulticast mode [ 49.370431][ T6829] pim6reg: left allmulticast mode