last executing test programs: 1m41.455316136s ago: executing program 0 (id=1): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x71bd0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 1m25.928456301s ago: executing program 32 (id=1): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x71bd0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 7.650775624s ago: executing program 5 (id=327): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004a40)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r4, 0x13}], 0x1, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, &(0x7f00000004c0)=@udp}, 0x20) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, 0xffffffffffffffff, 0xb}}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000000)=0x100000001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6800) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd28, 0x25dfdbfa, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4040006) 7.650415757s ago: executing program 3 (id=328): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x7, 0x4c, 0x10, 0x0, 0x28}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r4) 7.346616965s ago: executing program 1 (id=330): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000009000000030000000600009301000000010000000300020001000000020000000700000001000000050033c1445cb3c5e8b411000500000002000000030000000400002178000000000000000c0000000a00000002d30000002e616ea0bf"], &(0x7f00000006c0)=""/237, 0x75, 0xed, 0x1}, 0x28) 7.093417957s ago: executing program 1 (id=332): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 5.320354255s ago: executing program 3 (id=338): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000005040)=""/154, 0x9a}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000002d40)=""/4101, 0x1005}, {&(0x7f0000000640)=""/55, 0x37}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x10}], 0x5, 0x12002, 0x0) 4.918644545s ago: executing program 3 (id=340): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x2d, 0x2, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c900160012"], 0x1b) 4.429909023s ago: executing program 3 (id=342): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x44}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20}, 0x94) 4.122666168s ago: executing program 3 (id=344): syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="65e6008d99ff"}) 3.381041385s ago: executing program 3 (id=348): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x7, 0x4c, 0x10, 0x0, 0x28}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r4) 3.071501601s ago: executing program 4 (id=349): syz_emit_vhci(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000c800)=[{{0x0, 0x0, &(0x7f0000002e40)=[{0x0}, {0x0}], 0x2}, 0xc}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x40000000, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xffffffff) 3.070274688s ago: executing program 2 (id=350): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000005040)=""/154, 0x9a}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000002d40)=""/4101, 0x1005}, {&(0x7f0000000640)=""/55, 0x37}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x10}], 0x5, 0x12002, 0x0) 2.701767431s ago: executing program 4 (id=351): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="f0", 0x1}], 0x1}}], 0x1, 0x40) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001580)="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", 0x4fa}], 0x1}}], 0x1, 0xc4) 2.700734174s ago: executing program 5 (id=352): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x2d, 0x2, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c900160012000500"], 0x1b) 2.633973215s ago: executing program 2 (id=353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 2.403174906s ago: executing program 5 (id=354): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000340)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 2.30228872s ago: executing program 2 (id=355): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.301375297s ago: executing program 4 (id=356): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fcffffff000000000000000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) 2.29306021s ago: executing program 1 (id=357): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.030011617s ago: executing program 5 (id=358): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002b40)="da75", 0x2}], 0x1}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x22) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) 2.014291584s ago: executing program 2 (id=359): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="65e6008d99ff"}) 1.996258594s ago: executing program 1 (id=360): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0xe0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.953807574s ago: executing program 4 (id=361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) 1.745594349s ago: executing program 5 (id=362): syz_emit_vhci(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000c800)=[{{0x0, 0x0, &(0x7f0000002e40)=[{0x0}, {0x0}], 0x2}, 0xc}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x40000000, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xffffffff) 1.729398259s ago: executing program 2 (id=363): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)="9807", 0x2}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x8397de475a1b5b02) 1.637365038s ago: executing program 1 (id=364): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x2d, 0x2, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c900160012000500"], 0x1b) 1.48684539s ago: executing program 4 (id=365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8084) 344.241695ms ago: executing program 5 (id=366): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) write$cgroup_int(r1, &(0x7f0000000100)=0x1, 0x12) 324.292306ms ago: executing program 1 (id=367): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 323.298868ms ago: executing program 2 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000b000000002e392421"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000cc1300800c00054000000000000000000c00054000000000000000000c0004400000000000000000e0000a80480002800800034000000003080003400000000308000340000000020900020073797a"], 0x14b0}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = msgget$private(0x0, 0x3ac) msgsnd(r5, &(0x7f0000000000)=ANY=[], 0x5d, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x1, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x9, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x4d3, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x13c) msgctl$IPC_STAT(r5, 0x2, &(0x7f0000000480)=""/69) syz_extract_tcp_res(0x0, 0x6, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) syz_io_uring_setup(0x49d, &(0x7f0000000300)={0x0, 0x44df, 0x1, 0x3, 0x33f}, 0x0, &(0x7f0000000080)) eventfd(0xfffffff9) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=369): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000300)={0x58d3c7c1, 0xb000, "a5378888ab09383a652166d5e8aaf739c7505d222988b308", {0x0, 0x4}, 0xb6c}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x17) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) kernel console output (not intermixed with test programs): [ 92.108207][ T989] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts. [ 97.933677][ T5801] cgroup: Unknown subsys name 'net' [ 98.154264][ T5801] cgroup: Unknown subsys name 'cpuset' [ 98.197729][ T5801] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.375029][ T5801] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 104.839928][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.842239][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.847460][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.866129][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.871415][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.872324][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.873638][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.875429][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.875754][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.879107][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.968641][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.972707][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.974718][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.978235][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.984243][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.028713][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.030393][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.031162][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.032479][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.043210][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.077878][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.079631][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 105.080753][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 105.082040][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 105.106032][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 106.073801][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 106.148653][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 106.379110][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 106.556550][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 106.577567][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 106.979176][ T59] Bluetooth: hci1: command tx timeout [ 106.979195][ T5129] Bluetooth: hci0: command tx timeout [ 107.057276][ T59] Bluetooth: hci2: command tx timeout [ 107.137349][ T5129] Bluetooth: hci3: command tx timeout [ 107.139717][ T59] Bluetooth: hci4: command tx timeout [ 107.226527][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.228275][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.229146][ T5820] bridge_slave_0: entered allmulticast mode [ 107.232918][ T5820] bridge_slave_0: entered promiscuous mode [ 107.269431][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.269578][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.269793][ T5819] bridge_slave_0: entered allmulticast mode [ 107.272329][ T5819] bridge_slave_0: entered promiscuous mode [ 107.313058][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.313221][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.313440][ T5820] bridge_slave_1: entered allmulticast mode [ 107.316409][ T5820] bridge_slave_1: entered promiscuous mode [ 107.416476][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.416621][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.416777][ T5819] bridge_slave_1: entered allmulticast mode [ 107.420902][ T5819] bridge_slave_1: entered promiscuous mode [ 107.770888][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.771024][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.771239][ T5830] bridge_slave_0: entered allmulticast mode [ 107.774613][ T5830] bridge_slave_0: entered promiscuous mode [ 108.041788][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.042270][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.042490][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.042683][ T5830] bridge_slave_1: entered allmulticast mode [ 108.045560][ T5830] bridge_slave_1: entered promiscuous mode [ 108.204271][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.283434][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.400366][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.400552][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.400798][ T5826] bridge_slave_0: entered allmulticast mode [ 108.403913][ T5826] bridge_slave_0: entered promiscuous mode [ 108.412458][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.414860][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.415013][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.415244][ T5827] bridge_slave_0: entered allmulticast mode [ 108.426852][ T5827] bridge_slave_0: entered promiscuous mode [ 108.708674][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.708804][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.708959][ T5826] bridge_slave_1: entered allmulticast mode [ 108.711335][ T5826] bridge_slave_1: entered promiscuous mode [ 108.716408][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.716525][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.716704][ T5827] bridge_slave_1: entered allmulticast mode [ 108.723057][ T5827] bridge_slave_1: entered promiscuous mode [ 108.834334][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.057371][ T59] Bluetooth: hci0: command tx timeout [ 109.057411][ T59] Bluetooth: hci1: command tx timeout [ 109.060926][ T5820] team0: Port device team_slave_0 added [ 109.065093][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.068000][ T5819] team0: Port device team_slave_0 added [ 109.137229][ T5129] Bluetooth: hci2: command tx timeout [ 109.211338][ T5820] team0: Port device team_slave_1 added [ 109.227307][ T5129] Bluetooth: hci4: command tx timeout [ 109.227344][ T5129] Bluetooth: hci3: command tx timeout [ 109.280108][ T5819] team0: Port device team_slave_1 added [ 109.284089][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.289280][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.708393][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.711583][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.810937][ T5830] team0: Port device team_slave_0 added [ 110.080272][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.080291][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.080320][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.084217][ T5830] team0: Port device team_slave_1 added [ 110.085254][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.085268][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.085288][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.248965][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.248985][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.249015][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.328991][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.329012][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.329034][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.331341][ T5826] team0: Port device team_slave_0 added [ 110.333956][ T5827] team0: Port device team_slave_0 added [ 110.441761][ T5826] team0: Port device team_slave_1 added [ 110.445341][ T5827] team0: Port device team_slave_1 added [ 110.609864][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.609883][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.609903][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.786149][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.786163][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.786185][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.108988][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.109003][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.109022][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.110286][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.110301][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.110329][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.137557][ T59] Bluetooth: hci1: command tx timeout [ 111.137594][ T59] Bluetooth: hci0: command tx timeout [ 111.218594][ T5129] Bluetooth: hci2: command tx timeout [ 111.293429][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.293449][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.293477][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.294900][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.294918][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.294938][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.298432][ T5129] Bluetooth: hci3: command tx timeout [ 111.298484][ T5129] Bluetooth: hci4: command tx timeout [ 111.311839][ T5820] hsr_slave_0: entered promiscuous mode [ 111.313919][ T5820] hsr_slave_1: entered promiscuous mode [ 111.350472][ T5819] hsr_slave_0: entered promiscuous mode [ 111.352096][ T5819] hsr_slave_1: entered promiscuous mode [ 111.353348][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 111.353525][ T5819] Cannot create hsr debugfs directory [ 111.745213][ T5830] hsr_slave_0: entered promiscuous mode [ 111.746244][ T5830] hsr_slave_1: entered promiscuous mode [ 111.746882][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 111.746905][ T5830] Cannot create hsr debugfs directory [ 112.296259][ T5827] hsr_slave_0: entered promiscuous mode [ 112.302885][ T5827] hsr_slave_1: entered promiscuous mode [ 112.303967][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 112.303997][ T5827] Cannot create hsr debugfs directory [ 112.324044][ T5826] hsr_slave_0: entered promiscuous mode [ 112.325429][ T5826] hsr_slave_1: entered promiscuous mode [ 112.326319][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 112.326344][ T5826] Cannot create hsr debugfs directory [ 113.217449][ T5129] Bluetooth: hci1: command tx timeout [ 113.217505][ T59] Bluetooth: hci0: command tx timeout [ 113.297136][ T59] Bluetooth: hci2: command tx timeout [ 113.377205][ T5129] Bluetooth: hci3: command tx timeout [ 113.377254][ T59] Bluetooth: hci4: command tx timeout [ 113.912230][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.958188][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.995653][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.062113][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.211050][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 114.246508][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.282585][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.335414][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.496122][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.560331][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.598694][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.642653][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.841079][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 114.877301][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 114.915390][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 114.979187][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.140385][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.185207][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 115.232123][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 115.280178][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 115.319225][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 115.381910][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.414069][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.471734][ T3035] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.472211][ T3035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.540466][ T3035] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.540702][ T3035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.550876][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.633525][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.633630][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.693889][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.694232][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.740477][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.882189][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.920133][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.953933][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.954108][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.035786][ T3035] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.036038][ T3035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.113541][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.199653][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.199904][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.224825][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.310379][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.312026][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.413861][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.483991][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.484150][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.543468][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.545766][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.655751][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.819288][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.173208][ T5819] veth0_vlan: entered promiscuous mode [ 117.243823][ T5819] veth1_vlan: entered promiscuous mode [ 117.470964][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.495316][ T5819] veth0_macvtap: entered promiscuous mode [ 117.551731][ T5819] veth1_macvtap: entered promiscuous mode [ 117.641936][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.664450][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.694597][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.713651][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.761279][ T1122] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.782562][ T5820] veth0_vlan: entered promiscuous mode [ 117.783084][ T1122] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.795621][ T1122] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.824147][ T1122] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.829198][ T5830] veth0_vlan: entered promiscuous mode [ 117.911648][ T5820] veth1_vlan: entered promiscuous mode [ 117.963593][ T5830] veth1_vlan: entered promiscuous mode [ 118.184808][ T5827] veth0_vlan: entered promiscuous mode [ 118.236881][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.236905][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.305486][ T5827] veth1_vlan: entered promiscuous mode [ 118.322853][ T5826] veth0_vlan: entered promiscuous mode [ 118.342656][ T5820] veth0_macvtap: entered promiscuous mode [ 118.401967][ T5830] veth0_macvtap: entered promiscuous mode [ 118.405501][ T5820] veth1_macvtap: entered promiscuous mode [ 118.431911][ T3168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.431934][ T3168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.454412][ T5830] veth1_macvtap: entered promiscuous mode [ 118.458943][ T5826] veth1_vlan: entered promiscuous mode [ 118.565380][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.592993][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.618372][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.644572][ T5827] veth0_macvtap: entered promiscuous mode [ 118.664005][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.702048][ T3035] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.717674][ T5827] veth1_macvtap: entered promiscuous mode [ 118.719267][ T3035] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.749422][ T3035] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.774084][ T3035] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.799358][ T3035] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.816895][ T3035] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.878202][ T5826] veth0_macvtap: entered promiscuous mode [ 118.880072][ T3035] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.885512][ T3035] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.007322][ T5826] veth1_macvtap: entered promiscuous mode [ 119.024298][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.258430][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.376945][ T71] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.486382][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.497121][ T71] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.528152][ T71] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.547940][ T3035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.547965][ T3035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.610244][ T71] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.648760][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.728699][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.728734][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.806658][ T3035] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.857767][ T3035] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.892636][ T3035] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.938881][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.943526][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.943548][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.169227][ T3035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.169251][ T3035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.258244][ T5941] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 131.983708][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.983733][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.616739][ T3168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.616761][ T3168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.732328][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.732351][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.072623][ T1746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.072646][ T1746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.621980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.917056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.548536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.548606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.548651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.548721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.548765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.548809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.548852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.548895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.195472][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.195575][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.039681][ T6029] netlink: 'syz.4.28': attribute type 29 has an invalid length. [ 141.051299][ T6029] netlink: 'syz.4.28': attribute type 29 has an invalid length. [ 141.179267][ T6031] warning: `syz.1.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 143.207254][ T38] audit: type=1326 audit(1759335664.060:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6047 comm="syz.4.36" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02ef90eec9 code=0x0 [ 143.314499][ T989] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 143.647133][ T989] usb 2-1: Using ep0 maxpacket: 16 [ 143.664471][ T989] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 143.664497][ T989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 143.709047][ T989] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 143.709071][ T989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.709086][ T989] usb 2-1: Product: syz [ 143.709097][ T989] usb 2-1: Manufacturer: syz [ 143.709107][ T989] usb 2-1: SerialNumber: syz [ 143.790749][ T989] usb 2-1: config 0 descriptor?? [ 143.872586][ T989] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 143.872628][ T989] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 144.430335][ T989] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 144.444318][ T989] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 144.444785][ T989] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 144.444803][ T989] em28xx 2-1:0.0: No AC97 audio processor [ 144.547466][ T989] usb 2-1: USB disconnect, device number 2 [ 144.552358][ T989] em28xx 2-1:0.0: Disconnecting em28xx [ 144.627770][ T989] em28xx 2-1:0.0: Freeing device [ 144.972276][ T6057] netlink: 48 bytes leftover after parsing attributes in process `syz.4.39'. [ 146.847138][ T31] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 147.055588][ T31] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 147.055618][ T31] usb 2-1: config 6 has no interface number 0 [ 147.055670][ T31] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 147.055695][ T31] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.055723][ T31] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 147.055753][ T31] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 147.063430][ T31] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 147.063466][ T31] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 147.063489][ T31] usb 2-1: Product: syz [ 147.063505][ T31] usb 2-1: Manufacturer: syz [ 147.063522][ T31] usb 2-1: SerialNumber: syz [ 147.197205][ T5903] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 147.231455][ T31] hso 2-1:6.2: Failed to find BULK IN ep [ 147.377220][ T5903] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 147.377255][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.377276][ T5903] usb 4-1: Product: syz [ 147.377291][ T5903] usb 4-1: Manufacturer: syz [ 147.377306][ T5903] usb 4-1: SerialNumber: syz [ 147.401629][ T5903] usb 4-1: config 0 descriptor?? [ 148.034740][ T5903] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 149.273964][ T5129] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.286912][ T5129] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.309586][ T5129] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.320330][ T5129] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.327289][ T5129] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.485657][ T5903] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 149.601958][ T5903] usb 4-1: USB disconnect, device number 2 [ 149.794511][ T989] usb 2-1: USB disconnect, device number 3 [ 151.377186][ T5129] Bluetooth: hci5: command tx timeout [ 151.692291][ T6111] random: crng reseeded on system resumption [ 151.772156][ T6085] chnl_net:caif_netlink_parms(): no params data found [ 153.457134][ T5129] Bluetooth: hci5: command tx timeout [ 154.597175][ T44] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 154.747182][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 154.749992][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.750054][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.750100][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 154.750125][ T44] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 154.750150][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.751893][ T44] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 154.751924][ T44] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 154.751947][ T44] usb 3-1: Manufacturer: syz [ 154.767175][ T5913] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 154.841996][ T44] usb 3-1: config 0 descriptor?? [ 154.946041][ T5913] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 154.946074][ T5913] usb 4-1: config 6 has no interface number 0 [ 154.946193][ T5913] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 154.946220][ T5913] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.946250][ T5913] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 154.946352][ T5913] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 155.257735][ T5913] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 155.257768][ T5913] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 155.257791][ T5913] usb 4-1: Product: syz [ 155.257806][ T5913] usb 4-1: Manufacturer: syz [ 155.257821][ T5913] usb 4-1: SerialNumber: syz [ 155.327452][ T5894] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 155.377398][ T5913] hso 4-1:6.2: Failed to find BULK IN ep [ 155.477177][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 155.481347][ T5894] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 155.481384][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 155.486253][ T5894] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 155.486287][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.486318][ T5894] usb 5-1: Product: syz [ 155.486334][ T5894] usb 5-1: Manufacturer: syz [ 155.486349][ T5894] usb 5-1: SerialNumber: syz [ 155.537108][ T5129] Bluetooth: hci5: command tx timeout [ 155.584586][ T5894] usb 5-1: config 0 descriptor?? [ 155.593530][ T44] rc_core: IR keymap rc-hauppauge not found [ 155.593558][ T44] Registered IR keymap rc-empty [ 155.594088][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 155.615611][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 155.622539][ T6132] gfs2: error -5 reading superblock [ 155.639371][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 155.643381][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 155.816275][ T5894] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 155.816317][ T5894] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 155.875136][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 155.887561][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 155.908400][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 155.927339][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 155.947360][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 155.967228][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 155.987188][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 156.007567][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 156.027645][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 156.047231][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 156.066117][ T989] usb 4-1: USB disconnect, device number 3 [ 156.107711][ T44] mceusb 3-1:0.0: Registered Ы with mce emulator interface version 1 [ 156.107731][ T44] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 156.238794][ T5894] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 156.239312][ T5894] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 156.239773][ T5894] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 156.239791][ T5894] em28xx 5-1:0.0: No AC97 audio processor [ 156.317391][ T44] usb 3-1: USB disconnect, device number 2 [ 156.442364][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.494343][ T5894] usb 5-1: USB disconnect, device number 2 [ 156.535284][ T5894] em28xx 5-1:0.0: Disconnecting em28xx [ 156.555980][ T5894] em28xx 5-1:0.0: Freeing device [ 156.919389][ T6145] syz.2.67 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 157.102636][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 157.576795][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.617192][ T5129] Bluetooth: hci5: command tx timeout [ 157.659736][ T6085] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.659937][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.660212][ T6085] bridge_slave_0: entered allmulticast mode [ 157.665126][ T6085] bridge_slave_0: entered promiscuous mode [ 157.719590][ T6085] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.719741][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.720000][ T6085] bridge_slave_1: entered allmulticast mode [ 157.729713][ T6085] bridge_slave_1: entered promiscuous mode [ 159.161695][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.230354][ T6085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.268113][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 159.286781][ T6085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.429453][ T9] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 159.429505][ T9] usb 3-1: config 6 has no interface number 0 [ 159.429558][ T9] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 159.429584][ T9] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.429611][ T9] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 159.429640][ T9] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 159.431932][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 159.431954][ T9] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 159.431970][ T9] usb 3-1: Product: syz [ 159.431980][ T9] usb 3-1: Manufacturer: syz [ 159.431991][ T9] usb 3-1: SerialNumber: syz [ 159.598870][ T9] hso 3-1:6.2: Failed to find BULK IN ep [ 160.386724][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.595226][ T6085] team0: Port device team_slave_0 added [ 160.792034][ T44] usb 3-1: USB disconnect, device number 3 [ 160.815265][ T6085] team0: Port device team_slave_1 added [ 161.506791][ T6085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.506809][ T6085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.506838][ T6085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.562537][ T6085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.562555][ T6085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.562582][ T6085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.807176][ T989] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 162.102662][ T989] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.102727][ T989] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 238, using maximum allowed: 30 [ 162.102773][ T989] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.102804][ T989] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 238 [ 162.102848][ T989] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 162.155532][ T989] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 162.155572][ T989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.155597][ T989] usb 5-1: Product: syz [ 162.155614][ T989] usb 5-1: Manufacturer: syz [ 162.155632][ T989] usb 5-1: SerialNumber: syz [ 162.336739][ T989] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 162.336843][ T989] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 162.361806][ T989] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 162.361869][ T989] cdc_ncm 5-1:1.1: bind() failure [ 162.384723][ T989] usbtest 5-1:1.1: couldn't get endpoints, -22 [ 162.384826][ T989] usbtest 5-1:1.1: probe with driver usbtest failed with error -22 [ 162.703736][ T6204] netlink: 148 bytes leftover after parsing attributes in process `syz.3.86'. [ 162.768678][ T6085] hsr_slave_0: entered promiscuous mode [ 162.771250][ T6085] hsr_slave_1: entered promiscuous mode [ 162.772166][ T6085] debugfs: 'hsr0' already exists in 'hsr' [ 162.772194][ T6085] Cannot create hsr debugfs directory [ 163.326653][ T37] bridge_slave_1: left allmulticast mode [ 163.326858][ T37] bridge_slave_1: left promiscuous mode [ 163.335943][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.571302][ T37] bridge_slave_0: left allmulticast mode [ 163.571334][ T37] bridge_slave_0: left promiscuous mode [ 163.571585][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.680061][ T989] usb 5-1: USB disconnect, device number 3 [ 166.458832][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.780806][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.039305][ T6274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.112'. [ 167.106999][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.198035][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.242900][ T37] bond0 (unregistering): Released all slaves [ 167.712674][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.113758][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.658947][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.800456][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.632556][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.010903][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.260180][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.339783][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 175.452245][ T6360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.133'. [ 176.824593][ T37] hsr_slave_0: left promiscuous mode [ 176.839584][ T37] hsr_slave_1: left promiscuous mode [ 176.840953][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.841078][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.039772][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.039805][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.457121][ T6384] syz.4.139 (6384) used greatest stack depth: 16728 bytes left [ 177.502312][ T37] veth1_macvtap: left promiscuous mode [ 177.502587][ T37] veth0_macvtap: left promiscuous mode [ 177.502875][ T37] veth1_vlan: left promiscuous mode [ 177.503228][ T37] veth0_vlan: left promiscuous mode [ 178.322478][ T6392] netlink: 4804 bytes leftover after parsing attributes in process `syz.2.141'. [ 178.323527][ T6392] netlink: 4804 bytes leftover after parsing attributes in process `syz.2.141'. [ 179.497199][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 179.718049][ T10] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 179.718080][ T10] usb 5-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 179.718100][ T10] usb 5-1: config 0 has no interface number 0 [ 179.718161][ T10] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 511 [ 179.718187][ T10] usb 5-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.778175][ T10] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 179.778208][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.778230][ T10] usb 5-1: Product: syz [ 179.778246][ T10] usb 5-1: Manufacturer: syz [ 179.778262][ T10] usb 5-1: SerialNumber: syz [ 179.786405][ T10] usb 5-1: config 0 descriptor?? [ 179.826164][ T6395] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 179.838884][ T10] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 179.842175][ T10] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 179.876887][ T10] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 180.059265][ T31] usb 5-1: USB disconnect, device number 4 [ 180.174408][ T31] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 180.175428][ T31] cyberjack 5-1:0.69: device disconnected [ 181.674651][ T37] team0 (unregistering): Port device team_slave_1 removed [ 181.858019][ T37] team0 (unregistering): Port device team_slave_0 removed [ 183.962225][ T6376] lo: entered allmulticast mode [ 184.029512][ T6376] lo: left allmulticast mode [ 184.177585][ T6085] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 184.235366][ T6085] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 184.597892][ T6085] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 185.484219][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.152'. [ 185.798485][ T6085] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 186.516334][ T6451] overlayfs: failed to resolve './file0': -2 [ 187.572775][ T6085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.706701][ T6085] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.752055][ T1746] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.753070][ T1746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.756321][ T1746] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.756479][ T1746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.807270][ T6460] lo: entered allmulticast mode [ 187.899252][ T6456] lo: left allmulticast mode [ 188.199832][ T6085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.264505][ T6499] lo: entered allmulticast mode [ 190.342721][ T6495] lo: left allmulticast mode [ 190.585352][ T6085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.567600][ T6542] lo: entered allmulticast mode [ 191.725290][ T6085] veth0_vlan: entered promiscuous mode [ 191.742768][ T6085] veth1_vlan: entered promiscuous mode [ 191.814168][ T6085] veth0_macvtap: entered promiscuous mode [ 191.830566][ T6085] veth1_macvtap: entered promiscuous mode [ 191.862436][ T6085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.921867][ T6085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.938618][ T6540] lo: left allmulticast mode [ 192.595202][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.595257][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.595299][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.595340][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.448309][ T6563] netlink: 5120 bytes leftover after parsing attributes in process `syz.3.184'. [ 194.897266][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 195.068751][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'. [ 195.442949][ T38] audit: type=1326 audit(1759335716.300:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6587 comm="syz.2.192" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4b734eec9 code=0x0 [ 196.693527][ T6604] netlink: 48 bytes leftover after parsing attributes in process `syz.3.188'. [ 196.870822][ T6565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.870847][ T6565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.144848][ T3168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.144874][ T3168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.632025][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.632112][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.476672][ T6658] pim6reg1: entered promiscuous mode [ 200.476694][ T6658] pim6reg1: entered allmulticast mode [ 201.977713][ T6695] veth1_macvtap: left promiscuous mode [ 201.977756][ T6695] macsec0: entered promiscuous mode [ 202.320191][ T6698] Driver unsupported XDP return value 0 on prog (id 81) dev N/A, expect packet loss! [ 204.583906][ T6728] netlink: 72 bytes leftover after parsing attributes in process `syz.3.232'. [ 205.819342][ T6759] netlink: 745 bytes leftover after parsing attributes in process `syz.2.245'. [ 205.819368][ T6759] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.245'. [ 205.819386][ T6759] netlink: 745 bytes leftover after parsing attributes in process `syz.2.245'. [ 205.939984][ T6753] pim6reg1: entered promiscuous mode [ 205.940013][ T6753] pim6reg1: entered allmulticast mode [ 208.453661][ T6798] netlink: 745 bytes leftover after parsing attributes in process `syz.3.256'. [ 208.453690][ T6798] netlink: 130160 bytes leftover after parsing attributes in process `syz.3.256'. [ 208.453709][ T6798] netlink: 745 bytes leftover after parsing attributes in process `syz.3.256'. [ 208.612429][ T6800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.257'. [ 208.738656][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 209.098975][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 210.114621][ T10] usb 5-1: config 0 has an invalid interface number: 78 but max is 0 [ 210.114655][ T10] usb 5-1: config 0 has no interface number 0 [ 210.121035][ T10] usb 5-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 210.121070][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.121093][ T10] usb 5-1: Product: syz [ 210.121117][ T10] usb 5-1: Manufacturer: syz [ 210.121133][ T10] usb 5-1: SerialNumber: syz [ 210.521601][ T10] usb 5-1: config 0 descriptor?? [ 212.122667][ T10] usbhid 5-1:0.78: couldn't find an input interrupt endpoint [ 212.143819][ T10] usb 5-1: USB disconnect, device number 5 [ 213.407400][ T6843] wg2: entered promiscuous mode [ 213.407429][ T6843] wg2: entered allmulticast mode [ 217.148056][ T6880] netlink: 72 bytes leftover after parsing attributes in process `syz.1.283'. [ 222.240823][ T6960] netlink: 745 bytes leftover after parsing attributes in process `syz.1.311'. [ 222.240857][ T6960] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.311'. [ 222.240875][ T6960] netlink: 745 bytes leftover after parsing attributes in process `syz.1.311'. [ 222.760280][ T6975] netlink: 72 bytes leftover after parsing attributes in process `syz.5.317'. [ 227.308925][ T7022] Bluetooth: hci0: command 0x0406 tx timeout [ 227.309897][ T7022] Bluetooth: hci1: command 0x0406 tx timeout [ 227.309937][ T7022] Bluetooth: hci2: command 0x0406 tx timeout [ 227.309965][ T7022] Bluetooth: hci3: command 0x0406 tx timeout [ 229.740426][ T7090] Zero length message leads to an empty skb [ 229.996621][ T7093] sit0: entered promiscuous mode [ 229.996650][ T7093] sit0: entered allmulticast mode [ 230.100814][ T7099] netlink: 745 bytes leftover after parsing attributes in process `syz.2.355'. [ 230.100839][ T7099] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.355'. [ 230.100857][ T7099] netlink: 745 bytes leftover after parsing attributes in process `syz.2.355'. [ 232.382515][ T7127] ------------[ cut here ]------------ [ 232.382540][ T7127] WARNING: CPU: 1 PID: 7127 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 232.382613][ T7127] Modules linked in: [ 232.382661][ T7127] CPU: 1 UID: 0 PID: 7127 Comm: syz.5.366 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 232.382715][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 232.382730][ T7127] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 232.382770][ T7127] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 e1 43 67 00 e9 da f9 ff ff e8 17 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 232.382789][ T7127] RSP: 0018:ffffc900055778e0 EFLAGS: 00010283 [ 232.382809][ T7127] RAX: ffffffff81b6c6a9 RBX: 0000000000000000 RCX: 0000000000080000 [ 232.382825][ T7127] RDX: ffffc9001b40e000 RSI: 00000000000000ac RDI: 00000000000000ad [ 232.382840][ T7127] RBP: ffffc90005577a70 R08: 0000000000000000 R09: 0000000000000000 [ 232.382855][ T7127] R10: dffffc0000000000 R11: fffffbfff1d6d2a7 R12: dffffc0000000000 [ 232.382872][ T7127] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88805aa1a791 [ 232.382887][ T7127] FS: 00007f8e621266c0(0000) GS:ffff888127117000(0000) knlGS:0000000000000000 [ 232.382906][ T7127] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.382922][ T7127] CR2: 000000110c30d921 CR3: 000000002f7ea000 CR4: 00000000003526f0 [ 232.382941][ T7127] Call Trace: [ 232.382954][ T7127] [ 232.382984][ T7127] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 232.383026][ T7127] ? __pfx_cgroup_freeze+0x10/0x10 [ 232.383055][ T7127] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 232.383092][ T7127] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 232.383128][ T7127] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 232.383168][ T7127] ? mutex_lock_nested+0x154/0x1d0 [ 232.383194][ T7127] ? cgroup_kn_lock_live+0x13c/0x230 [ 232.383240][ T7127] cgroup_freeze_write+0x156/0x1c0 [ 232.383266][ T7127] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 232.383288][ T7127] ? kernfs_root+0x1c/0x230 [ 232.383309][ T7127] ? kernfs_root+0x1c/0x230 [ 232.383332][ T7127] ? kernfs_root+0x1ea/0x230 [ 232.383352][ T7127] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 232.383378][ T7127] cgroup_file_write+0x39b/0x740 [ 232.383418][ T7127] ? __pfx_cgroup_file_write+0x10/0x10 [ 232.383468][ T7127] ? __pfx_cgroup_file_write+0x10/0x10 [ 232.383499][ T7127] kernfs_fop_write_iter+0x3b0/0x540 [ 232.383537][ T7127] vfs_write+0x5d5/0xb40 [ 232.383570][ T7127] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 232.383603][ T7127] ? __pfx_vfs_write+0x10/0x10 [ 232.383625][ T7127] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 232.383665][ T7127] ? mutex_lock_nested+0x154/0x1d0 [ 232.383691][ T7127] ? fdget_pos+0x253/0x320 [ 232.383733][ T7127] ksys_write+0x14b/0x260 [ 232.383773][ T7127] ? __pfx_ksys_write+0x10/0x10 [ 232.383797][ T7127] ? rcu_is_watching+0x15/0xb0 [ 232.383829][ T7127] ? do_syscall_64+0xbe/0x3b0 [ 232.383856][ T7127] do_syscall_64+0xfa/0x3b0 [ 232.383877][ T7127] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.383910][ T7127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.383932][ T7127] ? clear_bhb_loop+0x60/0xb0 [ 232.383961][ T7127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.383982][ T7127] RIP: 0033:0x7f8e63ebeec9 [ 232.384009][ T7127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.384027][ T7127] RSP: 002b:00007f8e62126038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.384051][ T7127] RAX: ffffffffffffffda RBX: 00007f8e64115fa0 RCX: 00007f8e63ebeec9 [ 232.384068][ T7127] RDX: 0000000000000012 RSI: 0000200000000100 RDI: 0000000000000004 [ 232.384083][ T7127] RBP: 00007f8e63f41f91 R08: 0000000000000000 R09: 0000000000000000 [ 232.384097][ T7127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.384110][ T7127] R13: 00007f8e64116038 R14: 00007f8e64115fa0 R15: 00007ffe2fba3f08 [ 232.384149][ T7127] [ 232.384160][ T7127] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 232.384176][ T7127] CPU: 1 UID: 0 PID: 7127 Comm: syz.5.366 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 232.384201][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 232.384214][ T7127] Call Trace: [ 232.384223][ T7127] [ 232.384232][ T7127] dump_stack_lvl+0x99/0x250 [ 232.384255][ T7127] ? __asan_memcpy+0x40/0x70 [ 232.384279][ T7127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.384301][ T7127] ? __pfx__printk+0x10/0x10 [ 232.384346][ T7127] vpanic+0x281/0x750 [ 232.384369][ T7127] ? __pfx__printk+0x10/0x10 [ 232.384396][ T7127] ? __pfx_vpanic+0x10/0x10 [ 232.384418][ T7127] ? is_bpf_text_address+0x26/0x2b0 [ 232.384454][ T7127] panic+0xb9/0xc0 [ 232.384476][ T7127] ? __pfx_panic+0x10/0x10 [ 232.384518][ T7127] __warn+0x31b/0x4b0 [ 232.384538][ T7127] ? cgroup_freeze+0x80a/0xf90 [ 232.384572][ T7127] ? cgroup_freeze+0x80a/0xf90 [ 232.384603][ T7127] report_bug+0x2be/0x4f0 [ 232.384635][ T7127] ? cgroup_freeze+0x80a/0xf90 [ 232.384665][ T7127] ? cgroup_freeze+0x80a/0xf90 [ 232.384694][ T7127] ? cgroup_freeze+0x80c/0xf90 [ 232.384725][ T7127] handle_bug+0x84/0x160 [ 232.384751][ T7127] exc_invalid_op+0x1a/0x50 [ 232.384783][ T7127] asm_exc_invalid_op+0x1a/0x20 [ 232.384804][ T7127] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 232.384833][ T7127] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 e1 43 67 00 e9 da f9 ff ff e8 17 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 232.384851][ T7127] RSP: 0018:ffffc900055778e0 EFLAGS: 00010283 [ 232.384868][ T7127] RAX: ffffffff81b6c6a9 RBX: 0000000000000000 RCX: 0000000000080000 [ 232.384883][ T7127] RDX: ffffc9001b40e000 RSI: 00000000000000ac RDI: 00000000000000ad [ 232.384898][ T7127] RBP: ffffc90005577a70 R08: 0000000000000000 R09: 0000000000000000 [ 232.384911][ T7127] R10: dffffc0000000000 R11: fffffbfff1d6d2a7 R12: dffffc0000000000 [ 232.384927][ T7127] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88805aa1a791 [ 232.384951][ T7127] ? cgroup_freeze+0x809/0xf90 [ 232.384997][ T7127] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 232.385036][ T7127] ? __pfx_cgroup_freeze+0x10/0x10 [ 232.385064][ T7127] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 232.385099][ T7127] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 232.385133][ T7127] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 232.385174][ T7127] ? mutex_lock_nested+0x154/0x1d0 [ 232.385201][ T7127] ? cgroup_kn_lock_live+0x13c/0x230 [ 232.385246][ T7127] cgroup_freeze_write+0x156/0x1c0 [ 232.385272][ T7127] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 232.385294][ T7127] ? kernfs_root+0x1c/0x230 [ 232.385314][ T7127] ? kernfs_root+0x1c/0x230 [ 232.385338][ T7127] ? kernfs_root+0x1ea/0x230 [ 232.385358][ T7127] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 232.385383][ T7127] cgroup_file_write+0x39b/0x740 [ 232.385422][ T7127] ? __pfx_cgroup_file_write+0x10/0x10 [ 232.385472][ T7127] ? __pfx_cgroup_file_write+0x10/0x10 [ 232.385502][ T7127] kernfs_fop_write_iter+0x3b0/0x540 [ 232.385541][ T7127] vfs_write+0x5d5/0xb40 [ 232.385573][ T7127] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 232.385602][ T7127] ? __pfx_vfs_write+0x10/0x10 [ 232.385625][ T7127] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 232.385666][ T7127] ? mutex_lock_nested+0x154/0x1d0 [ 232.385692][ T7127] ? fdget_pos+0x253/0x320 [ 232.385733][ T7127] ksys_write+0x14b/0x260 [ 232.385771][ T7127] ? __pfx_ksys_write+0x10/0x10 [ 232.385796][ T7127] ? rcu_is_watching+0x15/0xb0 [ 232.385828][ T7127] ? do_syscall_64+0xbe/0x3b0 [ 232.385856][ T7127] do_syscall_64+0xfa/0x3b0 [ 232.385876][ T7127] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.385911][ T7127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.385933][ T7127] ? clear_bhb_loop+0x60/0xb0 [ 232.385961][ T7127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.385982][ T7127] RIP: 0033:0x7f8e63ebeec9 [ 232.386001][ T7127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.386019][ T7127] RSP: 002b:00007f8e62126038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.386041][ T7127] RAX: ffffffffffffffda RBX: 00007f8e64115fa0 RCX: 00007f8e63ebeec9 [ 232.386057][ T7127] RDX: 0000000000000012 RSI: 0000200000000100 RDI: 0000000000000004 [ 232.386071][ T7127] RBP: 00007f8e63f41f91 R08: 0000000000000000 R09: 0000000000000000 [ 232.386084][ T7127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.386097][ T7127] R13: 00007f8e64116038 R14: 00007f8e64115fa0 R15: 00007ffe2fba3f08 [ 232.386135][ T7127] [ 232.386599][ T7127] Kernel Offset: disabled