last executing test programs: 4.691623558s ago: executing program 1 (id=6): r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x1000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x740, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x6dc, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3f5}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x6b4, 0x7, [@m_mpls={0xa0, 0x16, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6005}, @TCA_MPLS_LABEL={0x8, 0x5, 0x38993}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_LABEL={0x8, 0x5, 0xbc27b}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf80e6}]}, {0x39, 0x6, "612d3699db034f8f08430151bfb3f0819c1d44301a821ce1a7e2fcd26a93322f414a08eb783ba01be15256ed15fc2fa03568c8552b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0x160, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x20000000, 0xffff, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x8, 0x8, 0x401}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a61, 0x5a68ce02, 0x0, 0x2eca, 0x5}, 0x3}}]}, {0xd1, 0x6, "71558f82c797ed40aa96cae0561caac80e37421fbe6b5847795e9152419bd6e36082801f37e53ccbea50d8b4e7d6d4cd06cec76ec462499bdf122811144a51b56146738d4d25cbd285f2e729dbbe3c6137f7cd123b784cfddefd732ecc306f6cd0dc9c82fffc866125185fd50c16a59b8228811ffa42a3fc06ae6c491841f2d3b022b410d20071f23972ad211e8d088570180a0b72ec30b207b439e9499530f5ed3add294c6979c4716758179993cb396d1a9e8371981dc62a436962aa697442d2123e008f091efa1ef638699b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0xb8, 0xb, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}]}, {0x7d, 0x6, "41aded84741ae0ad62644bf1bcd133afd532ca829ac6bda1bb5ef9fa93873a30f5d3e7c176e9df8b4cd9294006f3b071f6f02d14812ffa5cddbb03a1310a0ea81c2fcf52aedcdea451b78b010e5bcb69df46195784d5f23b7684f1f9cb0d1990615f2a605f5835cc5c16bc790a705509f99537287825cfde87"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0xb4, 0x15, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x7}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x29, 0x6, "7cc4d4d8913023393152cf1483893cb72022204afc5a3c78451fb35e595b70d04ef5495ca4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x70, 0xb, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x400}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "097b3d39beb12e12ca7970f0c2b46dae"}]}, {0x19, 0x6, "3b8dd99ff628f0e136ea03ee3bb7e4eb97a588c1fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x90, 0x1f, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x7}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_ACTION={0x6, 0x3, 0x21}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0600be9e48e760ba6779831df0129d79"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e7011bcc7a6b8ee870edb3e1d4364f94"}, @TCA_CT_ACTION={0x6, 0x3, 0x34}, @TCA_CT_LABELS={0x14, 0x7, "d84f053b22a32e873e2676b45f4a0ad9"}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x6c, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x2d, 0x6, "871e4a3093c0e8019f3e85d16b62fbd06858927c4759e03eb68fe380f18d158dfeeec5a54f2e4d1b78"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0xd8, 0x13, 0x0, 0x0, {{0xa}, {0x4}, {0xa9, 0x6, "13095aa19e3ff97ff1475cc7f6d44e64023e0f07f5503ec93c537ec467da66e10c0670c5424185a4211b985fbb71c90e943fd5ba6989123f51adc29f4d098a5853a725f727bd15293ea587519524ef80fd8af80f756cfebcef3980870a5ae562474c9ec51aaff99d80483e5889203fa14a5bdb050b4f8c23a709ea648f0083bafcaefd2dfdc6e9fd21bd1230b100d95fdedd566e96c84f3a440023eb3e68c8f4ce4718278e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x100, 0x2, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_MARK={0x8, 0x5, 0x1}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0e16c0fbcfd4e59e5f04cfa3cef75f58"}, @TCA_CT_ZONE={0x6, 0x4, 0x40}]}, {0x71, 0x6, "a1f2a4ce007ddd8790543600a2420ec559f8c649a2a9f3d420934096de08ac63d9c315e8dded6fb2508c68041b7a0aaceed27574893969cda1525b9c8934a0e1e629652c69b92b0c6af575f0df47a043720f08c20d25a11fd3d0a1a33bb49821dd083349fa0d176cd4a307e71c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x60}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x740}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) read$watch_queue(r1, &(0x7f0000000040)=""/41, 0x29) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 4.467153466s ago: executing program 4 (id=5): r0 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000200)=0x1, 0x4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x0, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1}}}, {{@arp={@local, @broadcast, 0x0, 0xff, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pim6reg1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@dev, @rand_addr, @broadcast}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @broadcast, @multicast2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) recvmmsg$unix(r0, &(0x7f00000001c0), 0x4000000000000bd, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000004880), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000048c0)) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r2, &(0x7f00000049c0)=[{&(0x7f0000000240)=@in6={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xce}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000003c0)='M', 0x1}], 0x1, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB='0'], 0x68}], 0x1, 0xc4) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000200)=0x100002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x0, 0x40000000) mount(0x0, 0x0, 0x0, 0x100082, &(0x7f0000000340)='\x01') r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) fsmount(r1, 0x1, 0xb) syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB="183b03000802110000000802110000005050505050506300ffffffffffff0802110000000802110000014c003300629efba888e074692aedd7fb01e1be452f54c111a09c5dd1301f3a2932ccd35814f4035d8fb4c0cbf6c99576dfbc327572070ae362a101d579f61ea3df08401ae3a5d0dc376ea07664c10000080211000000ffffffffffff00000000080211000000080211000000a100545364cde8e6a73b634db4f49f7c83431713c915add9c3f7ba07fa887e6fba1de096ed8a631a63e7e5f87d8f34a93307bb99cf3f58d7d74e838ca8860667683b5709057f8000328f1aad1dbee2aefe2a9bea250bc4aab9af198a498eba39b3d8c19ffc98a35085d40177c35e7d96cb5ae94f53b647a1d70f283e22440190604cc360b91bdd4059824b960b027507ecb47976b064b04be62a960d8b6606d6ab1a62000802110000010802110000007300568318e9c1c89767154a9b8ffd04dd4c0bb2c89c304548948041dfe7e176e011cffe043b45170d667aebdf10c47690e1513ee97c253304ce34177075548ac079d688d53a20759950dc50283211f3aff0b1f074ca3ab6a5d4ee9bbf39506539719082cca182c0dfd339056939d88be4eb545985000000ffffffffffff0802110000014400ce1d63978b214ebcde625172b11545345b5f64382e31aac84d1eae70834f3965ebf11bda071eb5ac3ba525acd460a8c2b59d72fbafa69e50345a0d0ab1b9324c4b53f58a0000"], 0x212) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600ff7f00000300", @ANYRES32=r8, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="0800c9006c0911001e001f0008001c000200000000046e6700000a00000a00360002020202010101000000000000000000000000009a824dcbc7f8a6f759e4d6f544b0b11b6cbc17ec61c01b4899535295eafdf154103d6cb9ac42f6e49685b0eb79a4a601000000357c1919444dd81f7a07dd8bc9d051c4fec6a847e11f2448ba890e9d7c94d922d86a4adff17ccc984ae1d2fa2166c099e720f304f9dffedc1daa8cb9fd5696661bd5a439bb86595002af04628b64f6aab3801e1eb73f1d007209272552"], 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 4.358109704s ago: executing program 1 (id=7): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xa, 0x40) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) (fail_nth: 1) 4.304112018s ago: executing program 0 (id=1): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/xfrm_stat\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x32, 0x0, 0x0, 0xfd, @time, {}, {0xe}, @queue}], 0x1c) syz_open_procfs(r1, &(0x7f0000000240)='cgroup\x00') preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000140)=""/189, 0xffffff4a}], 0x1, 0x0, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, @default, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, 0x0, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket$inet6(0xa, 0x8000b, 0x9) 4.156018351s ago: executing program 3 (id=4): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (fail_nth: 1) 3.008061319s ago: executing program 0 (id=8): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/power/sync_on_suspend', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x2, 0x1, &(0x7f0000000440)=""/172, &(0x7f0000000500)=""/145, &(0x7f0000000140)=""/7, 0x8000000}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) fdatasync(0xffffffffffffffff) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r7 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @broadcast}, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1}}}}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, r3, 0x1}, 0x14}}, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x6a) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000006c0)={0x3, 0x1, &(0x7f00000002c0)=""/11, &(0x7f00000005c0)=""/55, &(0x7f0000000600)=""/130, 0x5000}) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}]}, 0x5c}}, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc0}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.001082646s ago: executing program 2 (id=3): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 2.942045966s ago: executing program 3 (id=9): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xa, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x88, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE={0x4}]]}, 0x88}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) 2.94134848s ago: executing program 1 (id=10): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xa, 0x40) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) 2.817097983s ago: executing program 1 (id=11): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x0, &(0x7f0000000000)={0xe714, 0xc9}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) init_module(&(0x7f0000000300)=ANY=[@ANYBLOB], 0xaf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket(0x10, 0x803, 0x0) write(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.814497751s ago: executing program 2 (id=12): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0xfffffffc, 0x4) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x73}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000a06010200000000000000000000000004000880080009400000000005000100070000000900020073797a3000000000100008"], 0x44}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x20000810) 1.393654228s ago: executing program 1 (id=13): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x0, &(0x7f0000000000)={0xe714, 0xc9}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) init_module(&(0x7f0000000300)=ANY=[@ANYBLOB], 0xaf, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r2, 0x0, 0xfffffffffffffffc}, 0x18) r3 = socket(0x10, 0x803, 0x0) write(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f1ff0000000071300000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040400007203200000000000e500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.325530323s ago: executing program 0 (id=14): unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) (fail_nth: 1) 1.324870832s ago: executing program 3 (id=15): unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 1.004063384s ago: executing program 2 (id=16): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xfff2, 0xffff}, {0x0, 0x1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@gettaction={0x8c, 0x32, 0x1, 0x70bd26, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800000}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4e35}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000180)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40305829, &(0x7f0000000040)=0x7f) write$tun(r6, &(0x7f0000000280)={@void, @val={0x2, 0x1, 0x0, 0xf1, 0x9, 0xd2f9}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @multicast, @loopback, @remote, @broadcast}}, 0x26) 558.135213ms ago: executing program 3 (id=17): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0xfffffffc, 0x4) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x73}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000a06010200000000000000000000000004000880080009400000000005000100070000000900020073797a3000000000100008"], 0x44}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x20000810) 1.450774ms ago: executing program 0 (id=18): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001700)) r2 = socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1b, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002400), 0x2102, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r7, 0x40046f41, 0x20000502) sendfile(r5, r6, &(0x7f0000000100), 0x100000000010001) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000001800ffff00000000000000000a000000000000"], 0x1c}}, 0x0) syz_clone3(&(0x7f0000000300)={0x200000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x38}, &(0x7f0000000100)=""/110, 0x6e, &(0x7f0000000180)=""/17, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) 0s ago: executing program 1 (id=19): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x1c0, 0x12, 0x60a, 0x1c0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socket$unix(0x1, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/sem\x00', 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) r6 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000000c0), 0x6db6e559) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.64' (ED25519) to the list of known hosts. [ 48.981836][ T5207] cgroup: Unknown subsys name 'net' [ 49.118548][ T5207] cgroup: Unknown subsys name 'cpuset' [ 49.127109][ T5207] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.360815][ T5207] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.716025][ T5222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.735720][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.753895][ T5224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.772130][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.781439][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.789225][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.796834][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.804287][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.812878][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.820668][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.828317][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.832403][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.836647][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.844751][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.851135][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.858023][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.865820][ T5237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.872342][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.879261][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.886228][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.892538][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.899479][ T5234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.905962][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.913211][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.920261][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.930413][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.935653][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.941069][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.979693][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.988715][ T5224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.362392][ T5221] chnl_net:caif_netlink_parms(): no params data found [ 55.419941][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 55.482590][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 55.551231][ T5217] chnl_net:caif_netlink_parms(): no params data found [ 55.567932][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 55.601953][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.609946][ T5221] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.618576][ T5221] bridge_slave_0: entered allmulticast mode [ 55.625256][ T5221] bridge_slave_0: entered promiscuous mode [ 55.637958][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.645111][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.652523][ T5221] bridge_slave_1: entered allmulticast mode [ 55.659612][ T5221] bridge_slave_1: entered promiscuous mode [ 55.782725][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.790068][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.797884][ T5232] bridge_slave_0: entered allmulticast mode [ 55.804478][ T5232] bridge_slave_0: entered promiscuous mode [ 55.811478][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.818720][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.826124][ T5227] bridge_slave_0: entered allmulticast mode [ 55.833125][ T5227] bridge_slave_0: entered promiscuous mode [ 55.854904][ T5221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.869227][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.876497][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.883656][ T5232] bridge_slave_1: entered allmulticast mode [ 55.890896][ T5232] bridge_slave_1: entered promiscuous mode [ 55.897764][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.904861][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.912318][ T5227] bridge_slave_1: entered allmulticast mode [ 55.919318][ T5227] bridge_slave_1: entered promiscuous mode [ 55.950894][ T5221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.990910][ T5217] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.998193][ T5217] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.006014][ T5217] bridge_slave_0: entered allmulticast mode [ 56.012626][ T5217] bridge_slave_0: entered promiscuous mode [ 56.044607][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.059591][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.069026][ T5217] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.076760][ T5217] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.083924][ T5217] bridge_slave_1: entered allmulticast mode [ 56.090778][ T5217] bridge_slave_1: entered promiscuous mode [ 56.108397][ T5221] team0: Port device team_slave_0 added [ 56.115107][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.122302][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.129531][ T5225] bridge_slave_0: entered allmulticast mode [ 56.136532][ T5225] bridge_slave_0: entered promiscuous mode [ 56.144761][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.156249][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.181027][ T5221] team0: Port device team_slave_1 added [ 56.187333][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.194845][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.202260][ T5225] bridge_slave_1: entered allmulticast mode [ 56.209032][ T5225] bridge_slave_1: entered promiscuous mode [ 56.236803][ T5217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.249171][ T5217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.293190][ T5227] team0: Port device team_slave_0 added [ 56.302393][ T5232] team0: Port device team_slave_0 added [ 56.322389][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.329774][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.355908][ T5221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.371120][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.391814][ T5227] team0: Port device team_slave_1 added [ 56.398854][ T5232] team0: Port device team_slave_1 added [ 56.414725][ T5217] team0: Port device team_slave_0 added [ 56.421169][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.428284][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.454573][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.474425][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.501360][ T5217] team0: Port device team_slave_1 added [ 56.543951][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.551109][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.577350][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.589648][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.596797][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.623226][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.654964][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.662237][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.688426][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.705130][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.712432][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.738827][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.754720][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.761890][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.787950][ T5217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.800900][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.808192][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.834151][ T5217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.849170][ T5221] hsr_slave_0: entered promiscuous mode [ 56.857786][ T5221] hsr_slave_1: entered promiscuous mode [ 56.867260][ T5225] team0: Port device team_slave_0 added [ 56.902569][ T5225] team0: Port device team_slave_1 added [ 56.968948][ T5232] hsr_slave_0: entered promiscuous mode [ 56.975204][ T5232] hsr_slave_1: entered promiscuous mode [ 56.983276][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.991237][ T5232] Cannot create hsr debugfs directory [ 57.010788][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.018339][ T5237] Bluetooth: hci3: command tx timeout [ 57.018534][ T5224] Bluetooth: hci4: command tx timeout [ 57.024032][ T5237] Bluetooth: hci1: command tx timeout [ 57.029875][ T5222] Bluetooth: hci0: command tx timeout [ 57.035166][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.067050][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.079984][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.087342][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.100930][ T5222] Bluetooth: hci2: command tx timeout [ 57.113987][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.163291][ T5227] hsr_slave_0: entered promiscuous mode [ 57.170003][ T5227] hsr_slave_1: entered promiscuous mode [ 57.176414][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.183982][ T5227] Cannot create hsr debugfs directory [ 57.212892][ T5217] hsr_slave_0: entered promiscuous mode [ 57.219197][ T5217] hsr_slave_1: entered promiscuous mode [ 57.226028][ T5217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.233613][ T5217] Cannot create hsr debugfs directory [ 57.309808][ T5225] hsr_slave_0: entered promiscuous mode [ 57.317130][ T5225] hsr_slave_1: entered promiscuous mode [ 57.323128][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.331299][ T5225] Cannot create hsr debugfs directory [ 57.527269][ T5221] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.552498][ T5221] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.572566][ T5221] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.592909][ T5221] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.632909][ T5232] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.643996][ T5232] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.653694][ T5232] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.672628][ T5232] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.723555][ T5227] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.737042][ T5227] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.748647][ T5227] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.767882][ T5227] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.853010][ T5217] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.862668][ T5217] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.888717][ T5217] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.908877][ T5217] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.967540][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.998540][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.005435][ T5225] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.019017][ T5225] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.042368][ T5225] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.052844][ T5225] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.070939][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.078205][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.106781][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.113906][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.138578][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.192991][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.220865][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.244875][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.267864][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.274967][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.310091][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.317297][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.354146][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.361340][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.399023][ T3109] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.406198][ T3109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.478827][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.497891][ T5217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.543462][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.555097][ T5217] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.587124][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.594254][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.604870][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.612174][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.643693][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.651389][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.674614][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.681819][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.725357][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.841280][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.882714][ T5221] veth0_vlan: entered promiscuous mode [ 58.938951][ T5221] veth1_vlan: entered promiscuous mode [ 59.024591][ T5221] veth0_macvtap: entered promiscuous mode [ 59.054850][ T5221] veth1_macvtap: entered promiscuous mode [ 59.096237][ T5222] Bluetooth: hci0: command tx timeout [ 59.096472][ T5237] Bluetooth: hci4: command tx timeout [ 59.101678][ T5222] Bluetooth: hci1: command tx timeout [ 59.108820][ T5237] Bluetooth: hci3: command tx timeout [ 59.163429][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.176486][ T5237] Bluetooth: hci2: command tx timeout [ 59.194684][ T5217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.229114][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.267014][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.303718][ T5221] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.313306][ T5221] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.323458][ T5221] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.332636][ T5221] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.350506][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.371407][ T5217] veth0_vlan: entered promiscuous mode [ 59.441455][ T5217] veth1_vlan: entered promiscuous mode [ 59.477690][ T5227] veth0_vlan: entered promiscuous mode [ 59.494210][ T5232] veth0_vlan: entered promiscuous mode [ 59.531492][ T5227] veth1_vlan: entered promiscuous mode [ 59.542919][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.557565][ T5232] veth1_vlan: entered promiscuous mode [ 59.563131][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.610379][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.619049][ T5217] veth0_macvtap: entered promiscuous mode [ 59.630147][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.665516][ T5225] veth0_vlan: entered promiscuous mode [ 59.680567][ T5225] veth1_vlan: entered promiscuous mode [ 59.692400][ T5227] veth0_macvtap: entered promiscuous mode [ 59.702723][ T5217] veth1_macvtap: entered promiscuous mode [ 59.713927][ T5232] veth0_macvtap: entered promiscuous mode [ 59.732730][ T5227] veth1_macvtap: entered promiscuous mode [ 59.755953][ T5232] veth1_macvtap: entered promiscuous mode [ 59.771110][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.775298][ T5221] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.781919][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.807845][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.833278][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.845087][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.857841][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.884062][ T5232] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.901506][ T5232] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.911378][ T5232] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.922247][ T5232] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.940559][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.952297][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.963065][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.973645][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.988013][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.999971][ T5225] veth0_macvtap: entered promiscuous mode [ 60.013754][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.025248][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.038583][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.049839][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.060508][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.072178][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.084520][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.099068][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.111493][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.121915][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.132824][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.144117][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.155791][ T5225] veth1_macvtap: entered promiscuous mode [ 60.172892][ T5217] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.182132][ T5217] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.193153][ T5217] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.202501][ T5217] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.217710][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.228413][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.240240][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.251211][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.262824][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.273820][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.285376][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.312016][ T5227] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.321867][ T5227] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.331009][ T5227] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.339818][ T5227] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.381723][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.398547][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.410379][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.423726][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.433664][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.444334][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.461343][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.473283][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.486852][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.511775][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.522718][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.534545][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.545841][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.555819][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.566364][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.576301][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.587556][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.598812][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.653286][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.663804][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.686730][ T5225] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.695537][ T5225] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.704266][ T5225] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.720796][ T5225] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.800613][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.835017][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.849453][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.862505][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.876420][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.902750][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.964202][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.977506][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.036054][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.054319][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.095215][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.125924][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.176282][ T5237] Bluetooth: hci1: command tx timeout [ 61.176304][ T5222] Bluetooth: hci4: command tx timeout [ 61.181717][ T5237] Bluetooth: hci0: command tx timeout [ 61.187195][ T5222] Bluetooth: hci3: command tx timeout [ 61.215294][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.228107][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.244103][ T5312] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET) [ 61.256698][ T5235] Bluetooth: hci2: command tx timeout [ 61.428877][ T5312] FAULT_INJECTION: forcing a failure. [ 61.428877][ T5312] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 61.506854][ T5312] CPU: 1 UID: 0 PID: 5312 Comm: syz.1.7 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 61.517368][ T5312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 61.523250][ T5319] FAULT_INJECTION: forcing a failure. [ 61.523250][ T5319] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 61.527438][ T5312] Call Trace: [ 61.527448][ T5312] [ 61.527456][ T5312] dump_stack_lvl+0x241/0x360 [ 61.527500][ T5312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 61.527520][ T5312] ? __pfx__printk+0x10/0x10 [ 61.561254][ T5312] ? snprintf+0xda/0x120 [ 61.565547][ T5312] should_fail_ex+0x3b0/0x4e0 [ 61.570255][ T5312] _copy_to_user+0x2f/0xb0 [ 61.574869][ T5312] simple_read_from_buffer+0xca/0x150 [ 61.580248][ T5312] proc_fail_nth_read+0x1e9/0x250 [ 61.585279][ T5312] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.590837][ T5312] ? rw_verify_area+0x55e/0x6f0 [ 61.595696][ T5312] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.601247][ T5312] vfs_read+0x201/0xbc0 [ 61.605416][ T5312] ? __pfx_vfs_read+0x10/0x10 [ 61.610095][ T5312] ? do_sock_setsockopt+0x3e2/0x720 [ 61.615299][ T5312] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 61.620851][ T5312] ? fdget_pos+0x265/0x320 [ 61.625303][ T5312] ksys_read+0x183/0x2b0 [ 61.629563][ T5312] ? __pfx_ksys_read+0x10/0x10 [ 61.634342][ T5312] ? do_syscall_64+0x100/0x230 [ 61.639111][ T5312] ? do_syscall_64+0xb6/0x230 [ 61.643788][ T5312] do_syscall_64+0xf3/0x230 [ 61.648288][ T5312] ? clear_bhb_loop+0x35/0x90 [ 61.653048][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.658991][ T5312] RIP: 0033:0x7fc2a397ca3c [ 61.663412][ T5312] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 61.683032][ T5312] RSP: 002b:00007fc2a471f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.691462][ T5312] RAX: ffffffffffffffda RBX: 00007fc2a3b35f80 RCX: 00007fc2a397ca3c [ 61.699466][ T5312] RDX: 000000000000000f RSI: 00007fc2a471f0a0 RDI: 0000000000000004 [ 61.707439][ T5312] RBP: 00007fc2a471f090 R08: 0000000000000000 R09: 0000000000000000 [ 61.715412][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.723381][ T5312] R13: 0000000000000000 R14: 00007fc2a3b35f80 R15: 00007ffc409f4678 [ 61.731363][ T5312] [ 62.324605][ T5319] CPU: 1 UID: 0 PID: 5319 Comm: syz.3.4 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 62.335091][ T5319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 62.345178][ T5319] Call Trace: [ 62.348474][ T5319] [ 62.351423][ T5319] dump_stack_lvl+0x241/0x360 [ 62.356137][ T5319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 62.361362][ T5319] ? __pfx__printk+0x10/0x10 [ 62.365974][ T5319] ? __pfx_lock_release+0x10/0x10 [ 62.371033][ T5319] should_fail_ex+0x3b0/0x4e0 [ 62.375741][ T5319] _copy_from_user+0x2f/0xe0 [ 62.380367][ T5319] __sys_bpf+0x1a4/0x810 [ 62.384637][ T5319] ? __pfx___sys_bpf+0x10/0x10 [ 62.389441][ T5319] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 62.395455][ T5319] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 62.401812][ T5319] ? do_syscall_64+0x100/0x230 [ 62.406626][ T5319] __x64_sys_bpf+0x7c/0x90 [ 62.411065][ T5319] do_syscall_64+0xf3/0x230 [ 62.415592][ T5319] ? clear_bhb_loop+0x35/0x90 [ 62.420316][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.426257][ T5319] RIP: 0033:0x7f9c6277dff9 [ 62.430706][ T5319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.450347][ T5319] RSP: 002b:00007f9c63605038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 62.458803][ T5319] RAX: ffffffffffffffda RBX: 00007f9c62935f80 RCX: 00007f9c6277dff9 [ 62.466812][ T5319] RDX: 0000000000000028 RSI: 0000000020000140 RDI: 0000000000000012 [ 62.474812][ T5319] RBP: 00007f9c63605090 R08: 0000000000000000 R09: 0000000000000000 [ 62.483344][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.491349][ T5319] R13: 0000000000000001 R14: 00007f9c62935f80 R15: 00007ffdb8762f68 [ 62.499368][ T5319] [ 63.015515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 63.025263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.259576][ T5235] Bluetooth: hci0: command tx timeout [ 63.265026][ T5235] Bluetooth: hci3: command tx timeout [ 63.275579][ T5237] Bluetooth: hci4: command tx timeout [ 63.281045][ T5237] Bluetooth: hci1: command tx timeout [ 63.356246][ T5237] Bluetooth: hci2: command tx timeout [ 63.561601][ T5313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.575011][ T5313] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 63.585932][ T5334] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.615751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.685201][ T5337] Invalid ELF header magic: != ELF [ 63.713064][ T5337] Zero length message leads to an empty skb [ 64.244594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.346935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.429348][ T5342] Invalid ELF header magic: != ELF [ 64.930356][ T5351] FAULT_INJECTION: forcing a failure. [ 64.930356][ T5351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.045772][ T5351] CPU: 1 UID: 0 PID: 5351 Comm: syz.0.14 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 65.056361][ T5351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 65.066450][ T5351] Call Trace: [ 65.069752][ T5351] [ 65.072705][ T5351] dump_stack_lvl+0x241/0x360 [ 65.077413][ T5351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 65.082646][ T5351] ? __pfx__printk+0x10/0x10 [ 65.087273][ T5351] ? snprintf+0xda/0x120 [ 65.091576][ T5351] should_fail_ex+0x3b0/0x4e0 [ 65.096301][ T5351] _copy_to_user+0x2f/0xb0 [ 65.100766][ T5351] simple_read_from_buffer+0xca/0x150 [ 65.106179][ T5351] proc_fail_nth_read+0x1e9/0x250 [ 65.111236][ T5351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.116824][ T5351] ? rw_verify_area+0x55e/0x6f0 [ 65.121706][ T5351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.127287][ T5351] vfs_read+0x201/0xbc0 [ 65.131487][ T5351] ? bpf_trace_run2+0x1fc/0x540 [ 65.136389][ T5351] ? __pfx_vfs_read+0x10/0x10 [ 65.141094][ T5351] ? do_sys_openat2+0x17a/0x1d0 [ 65.145981][ T5351] ? __pfx_unix_dgram_connect+0x10/0x10 [ 65.151570][ T5351] ? bpf_trace_run2+0x1fc/0x540 [ 65.156458][ T5351] ? fdget_pos+0x265/0x320 [ 65.160909][ T5351] ksys_read+0x183/0x2b0 [ 65.165182][ T5351] ? __pfx_ksys_read+0x10/0x10 [ 65.169988][ T5351] ? rcu_is_watching+0x15/0xb0 [ 65.174792][ T5351] ? trace_sys_enter+0x1f/0xd0 [ 65.179597][ T5351] do_syscall_64+0xf3/0x230 [ 65.184145][ T5351] ? clear_bhb_loop+0x35/0x90 [ 65.188941][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.194878][ T5351] RIP: 0033:0x7fc9aab7ca3c [ 65.199331][ T5351] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 65.219142][ T5351] RSP: 002b:00007fc9aba25030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.227600][ T5351] RAX: ffffffffffffffda RBX: 00007fc9aad35f80 RCX: 00007fc9aab7ca3c [ 65.235612][ T5351] RDX: 000000000000000f RSI: 00007fc9aba250a0 RDI: 0000000000000005 [ 65.243628][ T5351] RBP: 00007fc9aba25090 R08: 0000000000000000 R09: 0000000000000000 [ 65.251643][ T5351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.259652][ T5351] R13: 0000000000000000 R14: 00007fc9aad35f80 R15: 00007fff9dbd8868 [ 65.267674][ T5351] [ 65.385661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.394111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! SYZFAIL: bad allocate request allocated=0 size=18446744073709551346/18446744073709551352 (errno 11: Resource temporarily unavailable) [ 66.863502][ T1097] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.074890][ T1097] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.167890][ T1097] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.292738][ T1097] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.490935][ T1097] bridge_slave_1: left allmulticast mode [ 67.500945][ T1097] bridge_slave_1: left promiscuous mode [ 67.513670][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.570672][ T1097] bridge_slave_0: left allmulticast mode [ 67.580388][ T1097] bridge_slave_0: left promiscuous mode [ 67.595238][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.205950][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.232645][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.253773][ T1097] bond0 (unregistering): Released all slaves [ 68.606967][ T1097] hsr_slave_0: left promiscuous mode [ 68.629991][ T1097] hsr_slave_1: left promiscuous mode [ 68.642533][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.659344][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.686200][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.703415][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.734563][ T1097] veth1_macvtap: left promiscuous mode [ 68.755799][ T1097] veth0_macvtap: left promiscuous mode [ 68.763089][ T1097] veth1_vlan: left promiscuous mode [ 68.772751][ T1097] veth0_vlan: left promiscuous mode [ 68.925829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.934324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.943018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.353514][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 69.391531][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 70.142703][ T1097] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.203938][ T1097] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.278817][ T1097] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.361363][ T1097] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.492325][ T1097] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.580700][ T1097] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.651371][ T1097] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.707164][ T1097] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.854451][ T1097] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.928041][ T1097] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.010298][ T1097] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.121032][ T1097] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.242413][ T1097] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.332814][ T1097] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.403336][ T1097] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.487648][ T1097] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.601760][ T1097] bridge_slave_1: left allmulticast mode [ 71.607834][ T1097] bridge_slave_1: left promiscuous mode [ 71.613527][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.623192][ T1097] bridge_slave_0: left allmulticast mode [ 71.629714][ T1097] bridge_slave_0: left promiscuous mode [ 71.635390][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.646895][ T1097] bridge_slave_1: left allmulticast mode [ 71.652578][ T1097] bridge_slave_1: left promiscuous mode [ 71.658733][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.667901][ T1097] bridge_slave_0: left allmulticast mode [ 71.673586][ T1097] bridge_slave_0: left promiscuous mode [ 71.679533][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.690243][ T1097] bridge_slave_1: left allmulticast mode [ 71.696221][ T1097] bridge_slave_1: left promiscuous mode [ 71.702051][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.711783][ T1097] bridge_slave_0: left allmulticast mode [ 71.718042][ T1097] bridge_slave_0: left promiscuous mode [ 71.724675][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.734935][ T1097] bridge_slave_1: left allmulticast mode [ 71.741944][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.750420][ T1097] bridge_slave_1: left promiscuous mode [ 71.755671][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.759825][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.774223][ T1097] bridge_slave_0: left allmulticast mode [ 71.782832][ T1097] bridge_slave_0: left promiscuous mode [ 71.790977][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.829992][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.840718][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.852765][ T1097] bond0 (unregistering): Released all slaves [ 72.932795][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.943507][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.955785][ T1097] bond0 (unregistering): Released all slaves [ 73.037988][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.052131][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.062598][ T1097] bond0 (unregistering): Released all slaves [ 73.151008][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.162560][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.173453][ T1097] bond0 (unregistering): Released all slaves [ 73.954067][ T1097] hsr_slave_0: left promiscuous mode [ 73.964885][ T1097] hsr_slave_1: left promiscuous mode [ 73.973775][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.982145][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.991159][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.999053][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.012435][ T1097] hsr_slave_0: left promiscuous mode [ 74.018806][ T1097] hsr_slave_1: left promiscuous mode [ 74.024837][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.032472][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.041632][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.049363][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.060855][ T1097] hsr_slave_0: left promiscuous mode [ 74.067014][ T1097] hsr_slave_1: left promiscuous mode [ 74.072960][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.080466][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.088703][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.096229][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.107744][ T1097] hsr_slave_0: left promiscuous mode [ 74.113701][ T1097] hsr_slave_1: left promiscuous mode [ 74.122172][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.129833][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.144312][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.152074][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.188227][ T1097] veth1_macvtap: left promiscuous mode [ 74.193762][ T1097] veth0_macvtap: left promiscuous mode [ 74.199802][ T1097] veth1_vlan: left promiscuous mode [ 74.205134][ T1097] veth0_vlan: left promiscuous mode [ 74.211542][ T1097] veth1_macvtap: left promiscuous mode [ 74.217608][ T1097] veth0_macvtap: left promiscuous mode [ 74.224213][ T1097] veth1_vlan: left promiscuous mode [ 74.229649][ T1097] veth0_vlan: left promiscuous mode [ 74.236842][ T1097] veth1_macvtap: left promiscuous mode [ 74.242462][ T1097] veth0_macvtap: left promiscuous mode [ 74.248275][ T1097] veth1_vlan: left promiscuous mode [ 74.253561][ T1097] veth0_vlan: left promiscuous mode [ 74.259801][ T1097] veth1_macvtap: left promiscuous mode [ 74.265304][ T1097] veth0_macvtap: left promiscuous mode [ 74.271082][ T1097] veth1_vlan: left promiscuous mode [ 74.276733][ T1097] veth0_vlan: left promiscuous mode [ 74.779202][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 74.812658][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 75.352120][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 75.384409][ T1097] team0 (unregistering): Port device team_slave_0 removed