last executing test programs: 2m33.885015581s ago: executing program 3 (id=89): socket$netlink(0x10, 0x3, 0x0) mknod(0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000740)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) sendmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="100000"], 0x10}}], 0x1, 0x14008000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2m32.972851875s ago: executing program 0 (id=92): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0xc) 2m32.712934654s ago: executing program 2 (id=94): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = mq_open(0x0, 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_unlink(0x0) close(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000001040), &(0x7f0000001080)=0x26) mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./bus\x00', 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) 2m32.699299251s ago: executing program 4 (id=95): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(0x3) 2m32.675074215s ago: executing program 3 (id=96): socket$alg(0x26, 0x5, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) setrlimit(0xf, &(0x7f0000000040)={0x5, 0x7}) timer_create(0x3, 0x0, &(0x7f0000000200)=0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20004000) timer_delete(r0) socket(0x1d, 0x800, 0x656) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) 2m31.75697901s ago: executing program 3 (id=97): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000280)=0x4000, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6gre0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 2m31.75664482s ago: executing program 0 (id=98): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b708000000020000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r1, 0x20000005) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="020e0403020000002cbd7000fcdbdf25ab91005b142dd561eded6dd8e311383545b726c23fd727f49e57d30c5a418668713ab20df39b296ed8041cfac6094a70446602f89d7e5aff6db8cd994a14de864f5cf60a0932367750b251171871e0e17808b179ab72fe15e6bc1f3ff6628de104a9b5cd822364fbed90b52e271d6bc26f30af5fbc53d9d1669b0232575d14af3a0ce80c52c363e47f1a7cd62e6a897bd68489a53a787354ca64a9b9678c26"], 0x10}}, 0x810) 2m31.725009917s ago: executing program 4 (id=99): r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) syz_open_dev$tty1(0xc, 0x4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) 2m31.624777484s ago: executing program 3 (id=100): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000009c0)={0xaa, 0x3}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x2000}) 2m31.385399052s ago: executing program 3 (id=101): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x9, 0x6, 0xe, 0x10, 0x0, 0xc0000000, 0x402, 0x2, 0x6, 0x7f, 0x3, 0x6, 0x7f, 0xfffffffc, 0x0, 0x2, 0x80000000, 0x5, 0x1ff, 0xfffffff9, 0xc}}) 2m31.265156899s ago: executing program 0 (id=102): r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000b80), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) 2m31.04665971s ago: executing program 3 (id=104): openat$rtc(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0xfffffffd, 0x34324152, 0x0, 0x4, [{}, {0x10}, {}, {0x0, 0x3}, {}, {}, {0x0, 0x800000}], 0x0, 0xff, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) eventfd(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xb, 0x1, 0x200, &(0x7f0000000cc0)="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"}) 2m30.856967562s ago: executing program 0 (id=105): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlockall(0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40087446, &(0x7f0000000380)={0x0, 0x0}) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x11) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) fsetxattr$trusted_overlay_opaque(r1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m30.0671117s ago: executing program 2 (id=106): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0xda90) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 2m29.773363304s ago: executing program 4 (id=107): socket$alg(0x26, 0x5, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) setrlimit(0xf, &(0x7f0000000040)={0x5, 0x7}) timer_create(0x3, 0x0, &(0x7f0000000200)=0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20004000) timer_delete(r0) socket(0x1d, 0x800, 0x656) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) 2m29.58498343s ago: executing program 1 (id=108): socket$alg(0x26, 0x5, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) setrlimit(0xf, &(0x7f0000000040)={0x5, 0x7}) timer_delete(0x0) socket(0x1d, 0x800, 0x656) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) connect$tipc(r0, 0x0, 0x0) 2m28.927146874s ago: executing program 4 (id=109): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(0x3) 2m28.80530413s ago: executing program 0 (id=110): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c90000cf47d16331aef6ee13ff7f266e13da7be839b35e9ae1a333f2d8fd8e1983903166f4d8f3d5e043b8eb3a4dd0a04b39df97c82009b7"], 0x1004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m28.700954369s ago: executing program 2 (id=111): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18050000000000000000000002000000b7480000000000007b8af8ff00200000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) rseq(0x0, 0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {0x0}], 0x2, &(0x7f0000001700)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2085, 0x0) write(r3, &(0x7f0000000000)="38000300010003", 0x7) 2m28.678502396s ago: executing program 4 (id=112): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = mq_open(0x0, 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_unlink(0x0) close(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000001040), &(0x7f0000001080)=0x26) mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./bus\x00', 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff122]}, 0x45c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) 2m27.586518527s ago: executing program 1 (id=113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="08006b00b40000000a001800030003030303000024002380060001"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m27.544859918s ago: executing program 4 (id=114): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x4, {}, [{0x80, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) r1 = syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7f, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffff00230000000086dd60f2a40000492f00fe880000000000000000000000000001fe8000000000000000000000000000aa342088be0005000054812cbd3b00000800000086dd430588be00000000100000000100000000000000080022eb000000002000000002000000000000000000000008", @ANYRESDEC=r1], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) sched_setscheduler(r3, 0x6, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r6, &(0x7f0000000580)={@val={0xa}, @void, @eth={@broadcast, @remote, @val={@val, {0x8864}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0xfffffdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="140000002700133300000000000000", @ANYRES8=r3, @ANYRES64=r7], 0x14}], 0x1}, 0x20000000) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x1) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) close(r8) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r9 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r9, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) 2m26.320317441s ago: executing program 1 (id=115): r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000b80), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) 2m26.319787897s ago: executing program 2 (id=116): r0 = syz_io_uring_setup(0x1111, &(0x7f0000000300)={0x0, 0x1, 0x80}, &(0x7f0000000040), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, 0x0, 0x0) 2m26.2347589s ago: executing program 0 (id=117): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x8000, 0x4, 0x280}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x104, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0xa00, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) ioctl$UFFDIO_COPY(r6, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000adb000/0x2000)=nil, &(0x7f0000fee000/0x11000)=nil, 0x2000}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x8, 0x2004, @fd_index=0x5, 0x6, 0xc, 0x0, 0x1c, 0x1, {0x3, r5}}) 2m25.992954014s ago: executing program 2 (id=118): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000380), 0x2, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0000000400000004000000030000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000c30b89ac5a7199285e91dd1d1f6700b719c8", @ANYBLOB, @ANYRES64=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$loop(&(0x7f0000000300), 0x2, 0x40000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000002c0)={0x0, 0x0, 0x27f}) ioctl$sock_bt_hci(r5, 0x800448d3, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r7, 0x0, 0x0) close_range(r6, r7, 0x0) inotify_init1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r8, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) 2m24.663601303s ago: executing program 1 (id=119): socket$alg(0x26, 0x5, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) setrlimit(0xf, &(0x7f0000000040)={0x5, 0x7}) timer_create(0x3, 0x0, &(0x7f0000000200)=0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20004000) timer_delete(r0) socket(0x1d, 0x800, 0x656) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) 2m24.584398952s ago: executing program 2 (id=120): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$packet(0x11, 0x3, 0x300) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, 0x0, &(0x7f0000000280), &(0x7f0000000200)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000063c0)={0x14, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2m23.503334378s ago: executing program 1 (id=121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='rtc_alarm_irq_enable\x00', r1, 0x0, 0x202}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1}}}}}}}, 0x0) 2m23.273126266s ago: executing program 1 (id=122): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(0x3) 2m15.407203934s ago: executing program 32 (id=104): openat$rtc(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0xfffffffd, 0x34324152, 0x0, 0x4, [{}, {0x10}, {}, {0x0, 0x3}, {}, {}, {0x0, 0x800000}], 0x0, 0xff, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) eventfd(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xb, 0x1, 0x200, &(0x7f0000000cc0)="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"}) 2m12.426652908s ago: executing program 33 (id=114): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x4, {}, [{0x80, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) r1 = syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7f, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffff00230000000086dd60f2a40000492f00fe880000000000000000000000000001fe8000000000000000000000000000aa342088be0005000054812cbd3b00000800000086dd430588be00000000100000000100000000000000080022eb000000002000000002000000000000000000000008", @ANYRESDEC=r1], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) sched_setscheduler(r3, 0x6, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r6, &(0x7f0000000580)={@val={0xa}, @void, @eth={@broadcast, @remote, @val={@val, {0x8864}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0xfffffdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="140000002700133300000000000000", @ANYRES8=r3, @ANYRES64=r7], 0x14}], 0x1}, 0x20000000) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x1) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) close(r8) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r9 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r9, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) 2m10.908929929s ago: executing program 34 (id=117): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x8000, 0x4, 0x280}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x104, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0xa00, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) ioctl$UFFDIO_COPY(r6, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000adb000/0x2000)=nil, &(0x7f0000fee000/0x11000)=nil, 0x2000}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x8, 0x2004, @fd_index=0x5, 0x6, 0xc, 0x0, 0x1c, 0x1, {0x3, r5}}) 2m9.42587667s ago: executing program 35 (id=120): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$packet(0x11, 0x3, 0x300) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, 0x0, &(0x7f0000000280), &(0x7f0000000200)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000063c0)={0x14, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2m7.916212382s ago: executing program 36 (id=122): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(0x3) 12.534688889s ago: executing program 7 (id=165): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='trusted\x00', &(0x7f0000000240)='syz') openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x501740, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000002c0)={0x35}) 10.820873496s ago: executing program 7 (id=166): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 10.574088737s ago: executing program 7 (id=167): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1, 0x4000}}, 0x20) 10.206635843s ago: executing program 7 (id=168): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x8000, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x0, 0x10000004, 0x7}, 0x1}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 9.268837632s ago: executing program 6 (id=169): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = mq_open(0x0, 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_unlink(0x0) close(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000001040), &(0x7f0000001080)=0x26) mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./bus\x00', 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) 7.89189709s ago: executing program 6 (id=170): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 7.538998109s ago: executing program 6 (id=171): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r0}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) 7.46451677s ago: executing program 7 (id=172): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x2000000) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff9000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) brk(0x20ffc004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x881, &(0x7f0000000480)={0x0, 0xeb6a, 0x0, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f00000000c0)=0x3, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000856000/0x1000)=nil, 0x1000, 0x14, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6.917341586s ago: executing program 6 (id=174): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) sendmsg$tipc(r0, &(0x7f0000001680)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x50) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.841067463s ago: executing program 5 (id=175): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x10d, 0xcf, &(0x7f0000000280)=0xa, 0x4) 4.848825519s ago: executing program 6 (id=176): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) syz_open_dev$dri(0x0, 0x1f, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) socket$netlink(0x10, 0x3, 0x0) semget$private(0x0, 0x0, 0x7) recvfrom$inet6(r2, &(0x7f00000000c0)=""/104, 0x68, 0x10002, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 3.599068777s ago: executing program 5 (id=177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3.288149996s ago: executing program 5 (id=178): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = mq_open(0x0, 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_unlink(0x0) close(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000001040), &(0x7f0000001080)=0x26) mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./bus\x00', 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) 3.112708678s ago: executing program 6 (id=179): msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000040)=""/145) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0xfffffd00, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x26c02, &(0x7f0000001540)='\r\x87\x17^\x981\xd5\x14\xe2\x81\xa6\xcd\t\xa5\xbasG\x88\x7f]\x03\xf3\xd5t\x97\x9f\xee\"\xebU\xccM\x02\x17\x0f[\x9c\x9e\xa6\xd2\xe4(\xea\x7f\xe4\x90K\xcb\xb5;f\x02}\x147\x04=\xe50\x8d;\x90!\x01,\xdb,\xb9\x8e\t\x13\x1eh\xbc^<\xd2\x809G\xe6H\xbb&^\\\x9c\xady\xd9\xb5\xa3\x16\xd0\xdf\x1a\xaa\xfcHz\x89\x19\xe1\xe6+\xf6\xc3\xad\x80\x98\xc2\x10\x91\xec\xf6\x93=\xbe\x10\xfc`\x86\xa7\xe6\xae\x00*R\x92\x05\xf6\x80u\xf9\xb7S{\xd6\x99\x9a\xf3\xcc\x04o\xdd\x91 \x92;\x87\xfb\x82c>\x82VR8\xe5\x0f\xeb\xcdJz\f\xf5.\xd7!\xa1\xfe\xc8\xf0\xb5\\\xc2\xc7\xc7\xaa\xd9:\xa3+\x12\x9f\xfc\xf6@},`=\xea\x91\fJ\xe4\rC\xa9\xe0\x8b%\x9f\'\xbdX\xbfS\x00\x8c\x84\x10\xcf\xf0\xd7\xe0\xf9\xf8E\xa3?\x17\\\x9e\n\xa1h!\x9e\xd8\xe8\xa5\xc5\xbf_\xa7\xc9\x91U\x86=\xa5\xf7g~\xaa\xc8N\"^\x8e%') socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, 0x2, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_ID={0x8}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048400}, 0x0) keyctl$setperm(0x5, 0x0, 0x10200000) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r5, &(0x7f0000001700)={0x0, 0x5e, &(0x7f0000001680)={&(0x7f0000000540)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) 1.815735089s ago: executing program 5 (id=180): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 481.636674ms ago: executing program 5 (id=181): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 8.79529ms ago: executing program 5 (id=182): pipe(&(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x7, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b33090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f3b0009090890e0878f0e1ac6e7049b336d959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074b0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendfile(r5, r5, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 0s ago: executing program 7 (id=183): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x42) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500), 0x0, 0x1}}, 0x3c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.167' (ED25519) to the list of known hosts. [ 81.475279][ T5822] cgroup: Unknown subsys name 'net' [ 81.585615][ T5822] cgroup: Unknown subsys name 'cpuset' [ 81.595002][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.296688][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.354749][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.382898][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.408117][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.417837][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.432435][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.442015][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.442352][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.450038][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.457293][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.466829][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.475956][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.480784][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.488511][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.500683][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.503418][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.510068][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.516825][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.523869][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.530447][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.537998][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.554157][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.561846][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.565708][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.569579][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.588028][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.605185][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.614090][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.627235][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.637321][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.645594][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.070765][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 88.189300][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.249420][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 88.259619][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 88.280105][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 88.308851][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.318193][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.326414][ T5833] bridge_slave_0: entered allmulticast mode [ 88.334505][ T5833] bridge_slave_0: entered promiscuous mode [ 88.375085][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.382850][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.390337][ T5833] bridge_slave_1: entered allmulticast mode [ 88.397736][ T5833] bridge_slave_1: entered promiscuous mode [ 88.537287][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.575206][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.597318][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.605512][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.612833][ T5843] bridge_slave_0: entered allmulticast mode [ 88.619659][ T5843] bridge_slave_0: entered promiscuous mode [ 88.653746][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.661308][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.668677][ T5843] bridge_slave_1: entered allmulticast mode [ 88.676063][ T5843] bridge_slave_1: entered promiscuous mode [ 88.702902][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.711359][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.719124][ T5840] bridge_slave_0: entered allmulticast mode [ 88.727484][ T5840] bridge_slave_0: entered promiscuous mode [ 88.764226][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.772157][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.779414][ T5832] bridge_slave_0: entered allmulticast mode [ 88.787763][ T5832] bridge_slave_0: entered promiscuous mode [ 88.799668][ T5833] team0: Port device team_slave_0 added [ 88.806676][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.814483][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.822140][ T5840] bridge_slave_1: entered allmulticast mode [ 88.829010][ T5840] bridge_slave_1: entered promiscuous mode [ 88.854544][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.862348][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.869689][ T5832] bridge_slave_1: entered allmulticast mode [ 88.878046][ T5832] bridge_slave_1: entered promiscuous mode [ 88.886726][ T5833] team0: Port device team_slave_1 added [ 88.902149][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.909279][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.917100][ T5847] bridge_slave_0: entered allmulticast mode [ 88.924183][ T5847] bridge_slave_0: entered promiscuous mode [ 88.933660][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.940847][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.949231][ T5847] bridge_slave_1: entered allmulticast mode [ 88.959086][ T5847] bridge_slave_1: entered promiscuous mode [ 88.970280][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.012142][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.032168][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.081651][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.111405][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.123888][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.132429][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.161359][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.195955][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.209474][ T5843] team0: Port device team_slave_0 added [ 89.218417][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.238921][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.246699][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.273910][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.301537][ T5840] team0: Port device team_slave_0 added [ 89.309510][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.321496][ T5843] team0: Port device team_slave_1 added [ 89.339468][ T5832] team0: Port device team_slave_0 added [ 89.348369][ T5840] team0: Port device team_slave_1 added [ 89.383756][ T5832] team0: Port device team_slave_1 added [ 89.410136][ T5847] team0: Port device team_slave_0 added [ 89.425249][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.435563][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.462471][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.489994][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.497426][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.523709][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.537271][ T5847] team0: Port device team_slave_1 added [ 89.564338][ T5833] hsr_slave_0: entered promiscuous mode [ 89.571337][ T5833] hsr_slave_1: entered promiscuous mode [ 89.578707][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.585801][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.613430][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.644259][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.652210][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.667193][ T5844] Bluetooth: hci0: command tx timeout [ 89.681758][ T5849] Bluetooth: hci2: command tx timeout [ 89.682255][ T5849] Bluetooth: hci1: command tx timeout [ 89.687769][ T5143] Bluetooth: hci3: command tx timeout [ 89.695362][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.716392][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.723769][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.731624][ T5844] Bluetooth: hci4: command tx timeout [ 89.750656][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.797016][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.804237][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.831966][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.846550][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.854714][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.881695][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.895360][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.902934][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.930644][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.012320][ T5840] hsr_slave_0: entered promiscuous mode [ 90.022192][ T5840] hsr_slave_1: entered promiscuous mode [ 90.029498][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.038467][ T5840] Cannot create hsr debugfs directory [ 90.065613][ T5843] hsr_slave_0: entered promiscuous mode [ 90.072207][ T5843] hsr_slave_1: entered promiscuous mode [ 90.078443][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.086497][ T5843] Cannot create hsr debugfs directory [ 90.150110][ T5832] hsr_slave_0: entered promiscuous mode [ 90.157947][ T5832] hsr_slave_1: entered promiscuous mode [ 90.165829][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.174322][ T5832] Cannot create hsr debugfs directory [ 90.206117][ T5847] hsr_slave_0: entered promiscuous mode [ 90.214264][ T5847] hsr_slave_1: entered promiscuous mode [ 90.227482][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.235428][ T5847] Cannot create hsr debugfs directory [ 90.588254][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.602884][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.617495][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.629386][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.682540][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.703579][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.721463][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.733781][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.797902][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.816186][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.828566][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.840745][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.905264][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.923275][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.958729][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.972936][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.075164][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.094459][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.104544][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.116694][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.142068][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.225483][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.260504][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.287787][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.295559][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.319611][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.327264][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.352095][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.396261][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.435141][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.442549][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.454073][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.461360][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.481783][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.515662][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.527976][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.535181][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.577550][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.584741][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.620500][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.629566][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.668817][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.676059][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.728882][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.732328][ T5844] Bluetooth: hci1: command tx timeout [ 91.738098][ T5143] Bluetooth: hci2: command tx timeout [ 91.744957][ T5844] Bluetooth: hci0: command tx timeout [ 91.749632][ T5838] Bluetooth: hci3: command tx timeout [ 91.787829][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.795888][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.812088][ T5143] Bluetooth: hci4: command tx timeout [ 91.838103][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.845361][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.856818][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.864028][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.885125][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.039928][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.110429][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.276227][ T5833] veth0_vlan: entered promiscuous mode [ 92.337841][ T5833] veth1_vlan: entered promiscuous mode [ 92.417829][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.473295][ T5833] veth0_macvtap: entered promiscuous mode [ 92.491895][ T5833] veth1_macvtap: entered promiscuous mode [ 92.522544][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.637645][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.669572][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.728626][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.749960][ T5843] veth0_vlan: entered promiscuous mode [ 92.765946][ T5847] veth0_vlan: entered promiscuous mode [ 92.789494][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.817527][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.827788][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.838841][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.848701][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.870489][ T5847] veth1_vlan: entered promiscuous mode [ 92.899141][ T5843] veth1_vlan: entered promiscuous mode [ 93.120940][ T5847] veth0_macvtap: entered promiscuous mode [ 93.178478][ T5843] veth0_macvtap: entered promiscuous mode [ 93.199532][ T5847] veth1_macvtap: entered promiscuous mode [ 93.216450][ T5840] veth0_vlan: entered promiscuous mode [ 93.243151][ T5843] veth1_macvtap: entered promiscuous mode [ 93.278955][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.299964][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.332452][ T5840] veth1_vlan: entered promiscuous mode [ 93.363922][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.376091][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.389322][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.409485][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.422309][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.433629][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.446523][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.459759][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.503170][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.515185][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.529199][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.558869][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.562229][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.575855][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.579656][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.592341][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.601233][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.623280][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.634392][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.644773][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.657003][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.669045][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.690297][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.703788][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.713385][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.722468][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.753642][ T5832] veth0_vlan: entered promiscuous mode [ 93.759010][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.765807][ T5832] veth1_vlan: entered promiscuous mode [ 93.801170][ T5832] veth0_macvtap: entered promiscuous mode [ 93.822384][ T5143] Bluetooth: hci0: command tx timeout [ 93.828533][ T5143] Bluetooth: hci1: command tx timeout [ 93.834642][ T5143] Bluetooth: hci2: command tx timeout [ 93.840246][ T5143] Bluetooth: hci3: command tx timeout [ 93.871970][ T5840] veth0_macvtap: entered promiscuous mode [ 93.882547][ T5832] veth1_macvtap: entered promiscuous mode [ 93.891395][ T5143] Bluetooth: hci4: command tx timeout [ 93.966376][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.977575][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.987664][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.999072][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.010409][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.021403][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.032646][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.043401][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.056018][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.069336][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.081431][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.091806][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.102723][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.114949][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.125759][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.135563][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.144731][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.154177][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.252515][ T5840] veth1_macvtap: entered promiscuous mode [ 95.065661][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.077587][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.090669][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.104902][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.116583][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.128192][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.139708][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.151150][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.164127][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.176680][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.191518][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.203217][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.215070][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.226037][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.237501][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.250108][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.262148][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.273817][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.306213][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.309021][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.315070][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.324462][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.341265][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.350181][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.419561][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.430573][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.476413][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.500287][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.723782][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.735389][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.743747][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.873273][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.961910][ T5143] Bluetooth: hci2: command tx timeout [ 95.968843][ T5143] Bluetooth: hci3: command tx timeout [ 95.976873][ T5143] Bluetooth: hci1: command tx timeout [ 95.983573][ T5143] Bluetooth: hci0: command tx timeout [ 95.992234][ T5143] Bluetooth: hci4: command tx timeout [ 96.198443][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.351252][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.586042][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.621266][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.770768][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.811355][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.874540][ T5927] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 96.887239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.902234][ T5922] o2cb: This node has not been configured. [ 96.909187][ T5922] o2cb: Cluster check failed. Fix errors before retrying. [ 96.916927][ T5922] (syz.0.6,5922,1):user_dlm_register:674 ERROR: status = -22 [ 96.925219][ T5922] (syz.0.6,5922,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 97.502732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.545602][ T51] cfg80211: failed to load regulatory.db [ 98.371501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.481288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.730415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.952733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.961882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.973236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.982421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.414655][ T29] audit: type=1326 audit(1736725965.838:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad52785d29 code=0x7ffc0000 [ 99.458432][ T5940] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.671674][ T29] audit: type=1326 audit(1736725965.838:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fad52785d29 code=0x7ffc0000 [ 99.694319][ T29] audit: type=1326 audit(1736725965.838:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad52785d29 code=0x7ffc0000 [ 99.720938][ T29] audit: type=1326 audit(1736725965.838:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad52785d29 code=0x7ffc0000 [ 99.744387][ T29] audit: type=1326 audit(1736725965.838:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fad52785d29 code=0x7ffc0000 [ 99.767514][ T29] audit: type=1326 audit(1736725965.838:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad52785d29 code=0x7ffc0000 [ 99.790383][ T29] audit: type=1326 audit(1736725965.838:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad52785d29 code=0x7ffc0000 [ 99.814797][ T29] audit: type=1326 audit(1736725965.838:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fad52785d29 code=0x7ffc0000 [ 100.448578][ T29] audit: type=1326 audit(1736725965.838:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad52785d29 code=0x7ffc0000 [ 100.471980][ T29] audit: type=1326 audit(1736725965.838:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fad52785d29 code=0x7ffc0000 [ 100.743083][ T5949] input: syz0 as /devices/virtual/input/input5 [ 100.771726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.615265][ T5956] binder: 5935:5956 ioctl c0306201 20000280 returned -14 [ 104.878147][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 104.878167][ T29] audit: type=1804 audit(1736725971.758:103): pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.17" name="/newroot/3/file0" dev="tmpfs" ino=33 res=1 errno=0 [ 104.882975][ T5983] ref_ctr going negative. vaddr: 0x20ffc002, curr val: -29824, delta: 1 [ 104.939857][ T5983] ref_ctr increment failed for inode: 0x21 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807b2b6400 [ 105.218348][ T5989] 9pnet_virtio: no channels available for device syz [ 105.911119][ T5838] Bluetooth: hci4: command tx timeout [ 107.191407][ T6004] netlink: 'syz.0.24': attribute type 4 has an invalid length. [ 107.492746][ T6008] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 107.503260][ T6008] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 107.518928][ T6008] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 107.533893][ T6008] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 107.546508][ T6008] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 107.558070][ T6008] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 107.568936][ T6008] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 107.580515][ T6008] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 107.591192][ T6008] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 107.602028][ T6008] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 107.790978][ T6019] 9pnet_virtio: no channels available for device syz [ 107.806957][ T6019] Zero length message leads to an empty skb [ 107.857038][ T6019] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.911121][ T6033] 9pnet_virtio: no channels available for device syz [ 110.801514][ T6038] netlink: 124 bytes leftover after parsing attributes in process `syz.2.36'. [ 110.927820][ T6040] bad cache= option: none [ 110.927820][ T6040] [ 110.976672][ T6040] CIFS: VFS: bad cache= option: none [ 110.980447][ T6045] tmpfs: Bad value for 'huge' [ 110.993133][ T6044] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 111.063629][ T6044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.39'. [ 111.283275][ T51] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.503502][ T51] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 111.535804][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.625746][ T6058] netlink: 48 bytes leftover after parsing attributes in process `syz.4.42'. [ 111.662919][ T51] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 111.695095][ T51] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 111.771250][ T51] usb 4-1: Manufacturer: syz [ 111.933570][ T51] usb 4-1: config 0 descriptor?? [ 112.356651][ T6064] syz.0.44 uses obsolete (PF_INET,SOCK_PACKET) [ 113.051168][ T6051] syz.2.37 (6051): drop_caches: 2 [ 113.234517][ T51] rc_core: IR keymap rc-hauppauge not found [ 113.240811][ T51] Registered IR keymap rc-empty [ 113.249894][ T51] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 113.265118][ T51] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 113.729639][ T2060] usb 4-1: USB disconnect, device number 2 [ 113.900011][ T6077] loop6: detected capacity change from 0 to 64 [ 113.941028][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 113.981528][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.991138][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.011732][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 114.021205][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.045117][ T6082] net_ratelimit: 54 callbacks suppressed [ 114.045144][ T6082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.508017][ T6090] Bluetooth: MGMT ver 1.23 [ 118.363570][ T6111] Bluetooth: MGMT ver 1.23 [ 119.497545][ T6134] capability: warning: `syz.4.64' uses 32-bit capabilities (legacy support in use) [ 120.278844][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'. [ 120.468600][ T5143] Bluetooth: hci0: command 0x1407 tx timeout [ 120.471146][ T5838] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 120.715432][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 120.726593][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.70'. [ 120.746225][ T6155] netlink: 'syz.4.70': attribute type 1 has an invalid length. [ 120.929543][ T6158] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 120.939961][ T6158] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 121.136878][ T5838] Bluetooth: Wrong link type (-71) [ 122.455866][ T5886] IPVS: starting estimator thread 0... [ 122.651153][ T6178] IPVS: using max 18 ests per chain, 43200 per kthread [ 124.976585][ T6196] tipc: Started in network mode [ 124.981864][ T6196] tipc: Node identity ac1414aa, cluster identity 4711 [ 124.991304][ T6196] tipc: Enabled bearer , priority 10 [ 125.607464][ T6213] netlink: 'syz.1.82': attribute type 10 has an invalid length. [ 126.332953][ T1205] tipc: Node number set to 2886997162 [ 126.351188][ T6215] tty tty28: ldisc open failed (-12), clearing slot 27 [ 126.632771][ T6213] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 127.608513][ T6232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.850426][ T6243] tipc: Started in network mode [ 127.855762][ T6243] tipc: Node identity ac1414aa, cluster identity 4711 [ 127.863260][ T6243] tipc: Enabled bearer , priority 10 [ 129.454842][ T5886] tipc: Node number set to 2886997162 [ 133.192710][ T6297] unsupported nlmsg_type 40 [ 133.335399][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.387371][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.307132][ T6310] insert transport fail, errno -16 [ 141.641031][ T6297] orangefs_mount: mount request failed with -4 [ 144.614526][ T5143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 144.628565][ T5143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 144.637042][ T5143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 144.645561][ T5143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 144.653394][ T5143] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 144.660788][ T5143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.691101][ T5143] Bluetooth: hci5: command tx timeout [ 147.585811][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.596436][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.605829][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 147.622922][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 147.630688][ T5838] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.641223][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 148.771019][ T5143] Bluetooth: hci5: command tx timeout [ 149.100056][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 149.109375][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 149.126569][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 149.141232][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 149.149196][ T5838] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 149.163510][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.731080][ T5143] Bluetooth: hci6: command tx timeout [ 150.568313][ T5838] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 150.578676][ T5838] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 150.593843][ T5838] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 150.612799][ T5838] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 150.620826][ T5838] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 150.631222][ T5838] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 150.851134][ T5143] Bluetooth: hci5: command tx timeout [ 151.262303][ T5143] Bluetooth: hci7: command tx timeout [ 151.811116][ T5143] Bluetooth: hci6: command tx timeout [ 152.084788][ T5838] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 152.099705][ T5838] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 152.111548][ T5838] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 152.129329][ T5838] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 152.137815][ T5838] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 152.152742][ T5838] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 152.692058][ T5143] Bluetooth: hci8: command tx timeout [ 152.931216][ T5143] Bluetooth: hci5: command tx timeout [ 153.331014][ T5143] Bluetooth: hci7: command tx timeout [ 153.891198][ T5143] Bluetooth: hci6: command tx timeout [ 154.217212][ T5143] Bluetooth: hci9: command tx timeout [ 154.777001][ T5143] Bluetooth: hci8: command tx timeout [ 155.417315][ T5143] Bluetooth: hci7: command tx timeout [ 155.971078][ T5143] Bluetooth: hci6: command tx timeout [ 156.291585][ T5143] Bluetooth: hci9: command tx timeout [ 156.851127][ T5143] Bluetooth: hci8: command tx timeout [ 157.068009][ T6326] chnl_net:caif_netlink_parms(): no params data found [ 157.156480][ T6334] chnl_net:caif_netlink_parms(): no params data found [ 157.491275][ T5143] Bluetooth: hci7: command tx timeout [ 157.647973][ T6340] chnl_net:caif_netlink_parms(): no params data found [ 158.203852][ T6331] chnl_net:caif_netlink_parms(): no params data found [ 158.371595][ T5143] Bluetooth: hci9: command tx timeout [ 158.518000][ T6337] chnl_net:caif_netlink_parms(): no params data found [ 158.758483][ T6334] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.771156][ T6334] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.778495][ T6334] bridge_slave_0: entered allmulticast mode [ 158.799352][ T6334] bridge_slave_0: entered promiscuous mode [ 158.846051][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.869929][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.881317][ T6334] bridge_slave_1: entered allmulticast mode [ 158.900809][ T6334] bridge_slave_1: entered promiscuous mode [ 158.934669][ T5143] Bluetooth: hci8: command tx timeout [ 159.197015][ T6334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.264777][ T6326] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.288367][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.301454][ T6326] bridge_slave_0: entered allmulticast mode [ 159.321151][ T6326] bridge_slave_0: entered promiscuous mode [ 159.342261][ T6326] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.349446][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.371287][ T6326] bridge_slave_1: entered allmulticast mode [ 159.379943][ T6326] bridge_slave_1: entered promiscuous mode [ 159.405020][ T6340] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.421337][ T6340] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.428763][ T6340] bridge_slave_0: entered allmulticast mode [ 159.450360][ T6340] bridge_slave_0: entered promiscuous mode [ 159.474489][ T6340] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.493460][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.512087][ T6340] bridge_slave_1: entered allmulticast mode [ 159.521469][ T6340] bridge_slave_1: entered promiscuous mode [ 159.543011][ T6334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.749825][ T6334] team0: Port device team_slave_0 added [ 159.784368][ T6337] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.801319][ T6337] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.810268][ T6337] bridge_slave_0: entered allmulticast mode [ 159.839510][ T6337] bridge_slave_0: entered promiscuous mode [ 159.905416][ T6326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.930757][ T6340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.963939][ T6340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.994180][ T6334] team0: Port device team_slave_1 added [ 160.001648][ T6331] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.009063][ T6331] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.029410][ T6331] bridge_slave_0: entered allmulticast mode [ 160.042323][ T6331] bridge_slave_0: entered promiscuous mode [ 160.070603][ T6331] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.091189][ T6331] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.098800][ T6331] bridge_slave_1: entered allmulticast mode [ 160.120466][ T6331] bridge_slave_1: entered promiscuous mode [ 160.140320][ T6337] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.159835][ T6337] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.181392][ T6337] bridge_slave_1: entered allmulticast mode [ 160.201513][ T6337] bridge_slave_1: entered promiscuous mode [ 160.210589][ T6326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.443802][ T6340] team0: Port device team_slave_0 added [ 160.452393][ T5143] Bluetooth: hci9: command tx timeout [ 160.461848][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.468839][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.517367][ T6334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.548453][ T6331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.564826][ T6331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.590539][ T6337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.636317][ T6326] team0: Port device team_slave_0 added [ 160.654710][ T6340] team0: Port device team_slave_1 added [ 160.672044][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.679040][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.725973][ T6334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.775145][ T6337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.812592][ T6326] team0: Port device team_slave_1 added [ 160.870738][ T6331] team0: Port device team_slave_0 added [ 160.985909][ T6340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.015033][ T6340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.057874][ T6340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.163210][ T6331] team0: Port device team_slave_1 added [ 163.174275][ T6337] team0: Port device team_slave_0 added [ 165.400463][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.420726][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.460678][ T6326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.217260][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.267140][ T6340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.281277][ T6340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.319499][ T6340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.435574][ T6337] team0: Port device team_slave_1 added [ 167.455817][ T6334] hsr_slave_0: entered promiscuous mode [ 167.472404][ T6334] hsr_slave_1: entered promiscuous mode [ 167.493067][ T6334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.500735][ T6334] Cannot create hsr debugfs directory [ 167.554713][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.571118][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.614776][ T6326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.673976][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.719385][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.739204][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.784397][ T6331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.809891][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.838598][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.880188][ T6331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.116926][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.162193][ T6337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.169209][ T6337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.219731][ T6337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.313061][ T6326] hsr_slave_0: entered promiscuous mode [ 168.331558][ T6326] hsr_slave_1: entered promiscuous mode [ 168.339136][ T6326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.351024][ T6326] Cannot create hsr debugfs directory [ 168.370451][ T6340] hsr_slave_0: entered promiscuous mode [ 168.392359][ T6340] hsr_slave_1: entered promiscuous mode [ 168.401658][ T6340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.409352][ T6340] Cannot create hsr debugfs directory [ 168.479943][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.518164][ T6337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.539064][ T6337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.585499][ T6337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.672724][ T6331] hsr_slave_0: entered promiscuous mode [ 168.681912][ T6331] hsr_slave_1: entered promiscuous mode [ 168.701922][ T6331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.709585][ T6331] Cannot create hsr debugfs directory [ 168.997531][ T6337] hsr_slave_0: entered promiscuous mode [ 169.013201][ T6337] hsr_slave_1: entered promiscuous mode [ 169.031532][ T6337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.039261][ T6337] Cannot create hsr debugfs directory [ 171.803704][ T52] bridge_slave_1: left allmulticast mode [ 171.809918][ T52] bridge_slave_1: left promiscuous mode [ 171.842600][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.908017][ T52] bridge_slave_0: left allmulticast mode [ 171.931096][ T52] bridge_slave_0: left promiscuous mode [ 171.936924][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.180509][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.204401][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.233046][ T52] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 173.271551][ T52] bond0 (unregistering): Released all slaves [ 173.952586][ T6334] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 173.991972][ T6334] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 174.125420][ T52] hsr_slave_0: left promiscuous mode [ 174.161287][ T52] hsr_slave_1: left promiscuous mode [ 174.171563][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.179094][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.223183][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.230682][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.325470][ T52] veth1_macvtap: left promiscuous mode [ 174.352709][ T52] veth0_macvtap: left promiscuous mode [ 174.358379][ T52] veth1_vlan: left promiscuous mode [ 174.391565][ T52] veth0_vlan: left promiscuous mode [ 175.766184][ T52] team0 (unregistering): Port device team_slave_1 removed [ 175.873439][ T52] team0 (unregistering): Port device team_slave_0 removed [ 176.985680][ T6334] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 177.023449][ T6334] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 177.208023][ T6334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.246848][ T6334] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.367748][ T6334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.391145][ T6334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.715336][ T6334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.163585][ T6334] veth0_vlan: entered promiscuous mode [ 178.188013][ T6334] veth1_vlan: entered promiscuous mode [ 178.243966][ T6334] veth0_macvtap: entered promiscuous mode [ 178.265540][ T6334] veth1_macvtap: entered promiscuous mode [ 178.308053][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.336886][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.352034][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.374049][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.391166][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.416123][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.434995][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.459621][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.482371][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.503638][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.525776][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.551151][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.571303][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.594722][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.620697][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.640974][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.660999][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.683089][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.770271][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.777495][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.792048][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.798383][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.852979][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.860132][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.944670][ T6334] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.961259][ T6334] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.970289][ T6334] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.995404][ T6334] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.249848][ T6340] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 195.316721][ T6340] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 195.431757][ T6340] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 195.464825][ T6340] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 195.672333][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.680213][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.998569][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.075848][ T6326] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 196.104588][ T6326] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 196.199926][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.222799][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.286905][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.353099][ T6326] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 196.392515][ T6326] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 196.552948][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.686804][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.860654][ T52] bridge_slave_1: left allmulticast mode [ 196.869014][ T52] bridge_slave_1: left promiscuous mode [ 196.881281][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.892124][ T52] bridge_slave_0: left allmulticast mode [ 196.898022][ T52] bridge_slave_0: left promiscuous mode [ 196.915991][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.708339][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.730355][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.759467][ T52] bond0 (unregistering): Released all slaves [ 198.819473][ T6331] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 199.035529][ T6331] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 199.107002][ T6340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.153160][ T6331] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 199.233974][ T6331] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 199.512900][ T6340] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.555582][ T6337] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 199.679174][ T6337] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 199.734884][ T6337] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 199.836848][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.844079][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.963541][ T6326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.982246][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.989418][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.052774][ T6337] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 200.276002][ T6326] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.517350][ T52] hsr_slave_0: left promiscuous mode [ 200.651299][ T52] hsr_slave_1: left promiscuous mode [ 200.667075][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.701898][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.785277][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.804297][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.013349][ T52] veth1_macvtap: left promiscuous mode [ 201.018975][ T52] veth0_macvtap: left promiscuous mode [ 201.054057][ T52] veth1_vlan: left promiscuous mode [ 201.059515][ T52] veth0_vlan: left promiscuous mode [ 203.425296][ T52] team0 (unregistering): Port device team_slave_1 removed [ 203.545497][ T52] team0 (unregistering): Port device team_slave_0 removed [ 205.234650][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.254505][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.273036][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.292945][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.300751][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 205.310056][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.806894][ T6331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.912129][ T6331] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.106393][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.113765][ T5924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.181590][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.188746][ T5924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.409935][ T6337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.647911][ T6340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.789735][ T6331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 206.911495][ T6331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.986685][ T6337] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.191047][ T6459] chnl_net:caif_netlink_parms(): no params data found [ 207.295127][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.302498][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.453857][ T5143] Bluetooth: hci0: command tx timeout [ 207.465422][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.472667][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.116149][ T52] IPVS: stop unused estimator thread 0... [ 208.264612][ T6337] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 208.378476][ T6337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.493184][ T5143] Bluetooth: hci0: command tx timeout [ 209.774991][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.784556][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.792131][ T5886] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 209.804222][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.824579][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.838729][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.847216][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.042639][ T6459] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.049803][ T6459] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.059139][ T5886] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 210.083293][ T5886] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.101377][ T6459] bridge_slave_0: entered allmulticast mode [ 210.107464][ T5886] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.130387][ T6459] bridge_slave_0: entered promiscuous mode [ 210.152194][ T5886] usb 8-1: config 0 interface 0 has no altsetting 0 [ 210.176233][ T5886] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.187630][ T6459] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.201224][ T5886] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.213295][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.220723][ T6459] bridge_slave_1: entered allmulticast mode [ 210.237359][ T5886] usb 8-1: config 0 interface 0 has no altsetting 0 [ 210.260259][ T6459] bridge_slave_1: entered promiscuous mode [ 210.271832][ T5886] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.301449][ T5886] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.335263][ T5886] usb 8-1: config 0 interface 0 has no altsetting 0 [ 210.378862][ T5886] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.419671][ T5886] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.505482][ T5886] usb 8-1: config 0 interface 0 has no altsetting 0 [ 210.543505][ T5886] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.577338][ T5886] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.632403][ T5886] usb 8-1: config 0 interface 0 has no altsetting 0 [ 210.679480][ T5886] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.719665][ T5886] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.784849][ T5886] usb 8-1: config 0 interface 0 has no altsetting 0 [ 210.825046][ T5886] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.859690][ T5886] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.907246][ T5886] usb 8-1: config 0 interface 0 has no altsetting 0 [ 210.940106][ T6459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.964069][ T5886] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.001185][ T5886] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.027256][ T6459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.073890][ T5886] usb 8-1: config 0 interface 0 has no altsetting 0 [ 211.111755][ T6340] veth0_vlan: entered promiscuous mode [ 211.126580][ T5886] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 211.176332][ T5886] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 211.238542][ T5886] usb 8-1: Product: syz [ 211.256724][ T5886] usb 8-1: Manufacturer: syz [ 211.295981][ T5886] usb 8-1: SerialNumber: syz [ 211.315079][ T5886] usb 8-1: config 0 descriptor?? [ 211.365988][ T6340] veth1_vlan: entered promiscuous mode [ 211.417017][ T5886] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 211.572905][ T5143] Bluetooth: hci0: command tx timeout [ 211.591594][ T6459] team0: Port device team_slave_0 added [ 211.727465][ T6459] team0: Port device team_slave_1 added [ 211.893027][ T5143] Bluetooth: hci1: command tx timeout [ 211.959921][ C0] usb 8-1: yurex_control_callback - control failed: -71 [ 211.970424][ T5884] usb 8-1: USB disconnect, device number 2 [ 212.078271][ T5884] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 212.212883][ T5143] Bluetooth: hci4: command 0x0406 tx timeout [ 212.332586][ T6459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.398984][ T6459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.621398][ T6459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.747708][ T6459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.807741][ T6459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.963741][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.981429][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.000614][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.019198][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.027441][ T5143] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.037581][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.127226][ T6459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.432512][ T5885] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 213.617641][ T52] bridge_slave_1: left allmulticast mode [ 213.636501][ T5885] usb 8-1: config 0 has an invalid interface number: 120 but max is 0 [ 213.659712][ T5143] Bluetooth: hci0: command tx timeout [ 213.681761][ T52] bridge_slave_1: left promiscuous mode [ 213.691272][ T5885] usb 8-1: config 0 has no interface number 0 [ 213.697416][ T5885] usb 8-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.734420][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.791987][ T5885] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 213.821708][ T52] bridge_slave_0: left allmulticast mode [ 213.851777][ T52] bridge_slave_0: left promiscuous mode [ 213.863027][ T5885] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 213.893702][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.932372][ T5885] usb 8-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 213.973016][ T5143] Bluetooth: hci1: command tx timeout [ 213.980389][ T5885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.065704][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.075609][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.086411][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.103938][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.113332][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.121058][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.150395][ T5885] usb 8-1: config 0 descriptor?? [ 214.201460][ T6532] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 214.255047][ T5885] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.120/input/input8 [ 215.091095][ T5143] Bluetooth: hci2: command tx timeout [ 216.051004][ T5143] Bluetooth: hci1: command tx timeout [ 216.211090][ T5143] Bluetooth: hci3: command tx timeout [ 218.102496][ T9] usb 8-1: USB disconnect, device number 3 [ 218.154410][ T5838] Bluetooth: hci1: command tx timeout [ 218.160186][ T5143] Bluetooth: hci2: command tx timeout [ 218.292082][ T5143] Bluetooth: hci3: command tx timeout [ 218.607122][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 218.672992][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.694093][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.713481][ T52] bond0 (unregistering): Released all slaves [ 218.832366][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 218.863235][ T9] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 218.892307][ T9] usb 8-1: config 0 has no interface number 0 [ 218.898547][ T9] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 218.999912][ T9] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 219.027418][ T6459] hsr_slave_0: entered promiscuous mode [ 219.041225][ T9] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.061806][ T6459] hsr_slave_1: entered promiscuous mode [ 219.070891][ T9] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 219.114025][ T52] hsr_slave_0: left promiscuous mode [ 219.131143][ T9] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 219.140434][ T52] hsr_slave_1: left promiscuous mode [ 219.153257][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.162072][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.181943][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.209743][ T9] usb 8-1: config 0 descriptor?? [ 219.238098][ T9] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 219.748512][ T52] team0 (unregistering): Port device team_slave_1 removed [ 219.858317][ T52] team0 (unregistering): Port device team_slave_0 removed [ 220.012220][ T9] usb 8-1: USB disconnect, device number 4 [ 220.033794][ T9] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 220.227703][ T5143] Bluetooth: hci2: command tx timeout [ 220.389938][ T5143] Bluetooth: hci3: command tx timeout [ 221.818781][ T6511] chnl_net:caif_netlink_parms(): no params data found [ 222.294838][ T5143] Bluetooth: hci2: command tx timeout [ 222.494789][ T5838] Bluetooth: hci3: command tx timeout [ 223.120475][ T6527] chnl_net:caif_netlink_parms(): no params data found [ 223.531248][ T29] audit: type=1326 audit(1736726090.368:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.7.138" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8481385d29 code=0x0 [ 224.327989][ T6538] chnl_net:caif_netlink_parms(): no params data found [ 224.355823][ T6511] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.373574][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.400629][ T6511] bridge_slave_0: entered allmulticast mode [ 224.441298][ T6511] bridge_slave_0: entered promiscuous mode [ 224.599954][ T6511] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.625545][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.642713][ T6511] bridge_slave_1: entered allmulticast mode [ 224.659320][ T6511] bridge_slave_1: entered promiscuous mode [ 225.056616][ T6511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.099563][ T6511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.204571][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.213073][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.220447][ T6527] bridge_slave_0: entered allmulticast mode [ 225.229188][ T6527] bridge_slave_0: entered promiscuous mode [ 225.374920][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.387993][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.407283][ T6527] bridge_slave_1: entered allmulticast mode [ 225.429222][ T6527] bridge_slave_1: entered promiscuous mode [ 225.633684][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.651147][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.665985][ T6538] bridge_slave_0: entered allmulticast mode [ 225.683354][ T6538] bridge_slave_0: entered promiscuous mode [ 225.714753][ T6511] team0: Port device team_slave_0 added [ 225.739117][ T6511] team0: Port device team_slave_1 added [ 225.772162][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.833553][ T6538] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.872298][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.890227][ T6538] bridge_slave_1: entered allmulticast mode [ 225.924612][ T6538] bridge_slave_1: entered promiscuous mode [ 226.126245][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.177186][ T6459] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 226.528173][ T6538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.586869][ T6538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.642390][ T6511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.671217][ T6511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.815194][ T6511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.903018][ T6511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.910124][ T6511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.024756][ T6511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.326547][ T6459] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.386948][ T6459] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 227.986289][ T6527] team0: Port device team_slave_0 added [ 228.011433][ T6459] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 228.176808][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.214127][ T6538] team0: Port device team_slave_0 added [ 228.238585][ T6538] team0: Port device team_slave_1 added [ 228.285891][ T6527] team0: Port device team_slave_1 added [ 228.384717][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.622130][ T6511] hsr_slave_0: entered promiscuous mode [ 228.647530][ T6627] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 228.661327][ T6511] hsr_slave_1: entered promiscuous mode [ 228.677507][ T6511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.695497][ T6511] Cannot create hsr debugfs directory [ 228.713732][ T6627] overlayfs: failed to set xattr on upper [ 228.743187][ T6627] overlayfs: ...falling back to redirect_dir=nofollow. [ 228.762878][ T6627] overlayfs: ...falling back to index=off. [ 228.774489][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.791212][ T6627] overlayfs: ...falling back to uuid=null. [ 228.797183][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.889413][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.077940][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.133953][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.162471][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.244798][ T6538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.301427][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.318747][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.456919][ T6538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.395921][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.418435][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.566690][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.702431][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.233796][ T6538] hsr_slave_0: entered promiscuous mode [ 232.282048][ T6538] hsr_slave_1: entered promiscuous mode [ 232.311113][ T6538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.340192][ T6538] Cannot create hsr debugfs directory [ 232.423271][ T6527] hsr_slave_0: entered promiscuous mode [ 232.461953][ T6527] hsr_slave_1: entered promiscuous mode [ 232.480041][ T6527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.510051][ T6527] Cannot create hsr debugfs directory [ 234.185445][ T6459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.468574][ T6459] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.574545][ T52] bridge_slave_1: left allmulticast mode [ 234.580264][ T52] bridge_slave_1: left promiscuous mode [ 234.603495][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.623845][ T52] bridge_slave_0: left allmulticast mode [ 234.629551][ T52] bridge_slave_0: left promiscuous mode [ 234.649814][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.674147][ T52] bridge_slave_1: left allmulticast mode [ 234.679851][ T52] bridge_slave_1: left promiscuous mode [ 234.699825][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.720462][ T52] bridge_slave_0: left allmulticast mode [ 234.741055][ T52] bridge_slave_0: left promiscuous mode [ 234.746918][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.764561][ T52] bridge_slave_1: left allmulticast mode [ 234.770282][ T52] bridge_slave_1: left promiscuous mode [ 234.791310][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.813132][ T52] bridge_slave_0: left allmulticast mode [ 234.818852][ T52] bridge_slave_0: left promiscuous mode [ 234.845362][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.864401][ T52] bridge_slave_1: left allmulticast mode [ 234.870284][ T52] bridge_slave_1: left promiscuous mode [ 234.889085][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.912970][ T52] bridge_slave_0: left allmulticast mode [ 234.918681][ T52] bridge_slave_0: left promiscuous mode [ 234.943177][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.514034][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.534349][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.554992][ T52] bond0 (unregistering): Released all slaves [ 237.909471][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.931551][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.953238][ T52] bond0 (unregistering): Released all slaves [ 238.292600][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.318998][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.348076][ T52] bond0 (unregistering): Released all slaves [ 238.701448][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.723994][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.743687][ T52] bond0 (unregistering): Released all slaves [ 238.767537][ T6479] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.774770][ T6479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.804151][ T6479] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.811485][ T6479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.278570][ T6459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.290698][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.7.146'. [ 239.396836][ T6511] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 239.569056][ T6511] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 239.994300][ T6511] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 241.349019][ T52] hsr_slave_0: left promiscuous mode [ 241.374334][ T52] hsr_slave_1: left promiscuous mode [ 241.401175][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.440320][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.495189][ T52] hsr_slave_0: left promiscuous mode [ 241.531220][ T52] hsr_slave_1: left promiscuous mode [ 241.543488][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.571256][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.603971][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.636027][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.691168][ T52] hsr_slave_0: left promiscuous mode [ 241.727454][ T52] hsr_slave_1: left promiscuous mode [ 241.742444][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.770761][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.813784][ T52] hsr_slave_0: left promiscuous mode [ 241.820278][ T52] hsr_slave_1: left promiscuous mode [ 241.842510][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.873387][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.979193][ T52] veth1_vlan: left promiscuous mode [ 242.004420][ T52] veth0_vlan: left promiscuous mode [ 242.022158][ T52] veth1_macvtap: left promiscuous mode [ 242.027777][ T52] veth0_macvtap: left promiscuous mode [ 242.044230][ T52] veth1_vlan: left promiscuous mode [ 242.049589][ T52] veth0_vlan: left promiscuous mode [ 243.305013][ T52] team0 (unregistering): Port device team_slave_1 removed [ 243.416151][ T52] team0 (unregistering): Port device team_slave_0 removed [ 245.517138][ T52] team0 (unregistering): Port device team_slave_1 removed [ 245.623563][ T52] team0 (unregistering): Port device team_slave_0 removed [ 247.281927][ T52] team0 (unregistering): Port device team_slave_1 removed [ 247.397731][ T52] team0 (unregistering): Port device team_slave_0 removed [ 248.825975][ T52] team0 (unregistering): Port device team_slave_1 removed [ 248.934515][ T52] team0 (unregistering): Port device team_slave_0 removed [ 249.900034][ T6511] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 250.233001][ T6713] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 250.356440][ T6459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.164476][ T6511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.456610][ T6511] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.602404][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.609557][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.942879][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.950044][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.205393][ T6459] veth0_vlan: entered promiscuous mode [ 253.313415][ T6740] evm: overlay not supported [ 253.329254][ T6511] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.411272][ T6511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.564701][ T6459] veth1_vlan: entered promiscuous mode [ 253.634643][ T6538] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 253.729435][ T6538] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 253.898683][ T6538] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 254.171477][ T6538] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 254.242466][ T6459] veth0_macvtap: entered promiscuous mode [ 254.333364][ T6459] veth1_macvtap: entered promiscuous mode [ 254.394896][ T6527] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 254.507413][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.580445][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.619001][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.661016][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.691299][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.730065][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.784727][ T6459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.843315][ T6527] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 254.873100][ T6527] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 254.946531][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.979162][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.023026][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.051362][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.079377][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.100591][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.133112][ T6459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.198232][ T6527] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 255.246434][ T6511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.268687][ T6459] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.300623][ T6459] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.324865][ T6459] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.357231][ T6459] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.440634][ T6748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.488369][ T6748] bond0: (slave rose0): Enslaving as an active interface with an up link [ 256.031922][ T6538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.193383][ T6538] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.219822][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.230757][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.286386][ T5924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.352325][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.359489][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.375112][ T5924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.462769][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.469940][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.766151][ T6698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.793185][ T6527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.820357][ T6698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.840318][ T6538] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 257.913573][ T6538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.129830][ T6527] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.197913][ T6511] veth0_vlan: entered promiscuous mode [ 258.275583][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.282967][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.363674][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.370902][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.437664][ T6511] veth1_vlan: entered promiscuous mode [ 258.670269][ T6527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.747421][ T6511] veth0_macvtap: entered promiscuous mode [ 258.815480][ T6511] veth1_macvtap: entered promiscuous mode [ 258.905757][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.961500][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.994030][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.031967][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.061210][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.085297][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.113096][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.130602][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.153240][ T6511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.244419][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.287511][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.332181][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.361176][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.390127][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.410495][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.438481][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.459082][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.479543][ T6511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.545676][ T6538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.598968][ T6511] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.625584][ T6511] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.655062][ T6511] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.689279][ T6511] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.195649][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.276478][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.337220][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.636440][ T6538] veth0_vlan: entered promiscuous mode [ 262.662121][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.670040][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.810804][ T6538] veth1_vlan: entered promiscuous mode [ 263.194167][ T6538] veth0_macvtap: entered promiscuous mode [ 263.290662][ T6527] veth0_vlan: entered promiscuous mode [ 263.336631][ T6527] veth1_vlan: entered promiscuous mode [ 263.400196][ T6538] veth1_macvtap: entered promiscuous mode [ 264.586829][ T6527] veth0_macvtap: entered promiscuous mode [ 264.696511][ T6527] veth1_macvtap: entered promiscuous mode [ 264.834236][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.909698][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.230138][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.271017][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.309980][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.370455][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.404813][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.448341][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.499054][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.552715][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.594476][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.657796][ T6825] ip6gretap0: entered promiscuous mode [ 265.675808][ T6825] batadv_slave_0: entered promiscuous mode [ 265.805869][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.858620][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.931796][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.010281][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.057456][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.099785][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.138301][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.181051][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.228959][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.285704][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.362943][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.432573][ T6538] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.625904][ T6538] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.668586][ T6538] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.714385][ T6538] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.764523][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.823143][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.894301][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.964207][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.051498][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.103755][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.153638][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.202542][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.246170][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.294864][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.339568][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.380064][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.443394][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.517400][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.573144][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.618555][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.694516][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.749921][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.800976][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.863207][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.911043][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.005810][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.065889][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.130929][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.179097][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.232651][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.417568][ T6527] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.472234][ T6527] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.514539][ T6527] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.559933][ T6527] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.086082][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.170942][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.718261][ T6859] binder: BINDER_SET_CONTEXT_MGR already set [ 272.780929][ T6859] binder: 6858:6859 ioctl 4018620d 20004a80 returned -16 [ 273.651569][ T5143] Bluetooth: hci7: command 0x0406 tx timeout [ 274.032179][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.045765][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.056275][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.065235][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.075814][ T5844] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.085234][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.591975][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.611282][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.622602][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.632031][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.821032][ T5844] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 274.991046][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 275.875016][ T6866] chnl_net:caif_netlink_parms(): no params data found [ 275.892178][ T6879] process 'syz.6.176' launched './file0' with NULL argv: empty string added [ 276.294293][ T5844] Bluetooth: hci5: command tx timeout [ 277.641085][ T5844] Bluetooth: hci6: command tx timeout [ 278.790584][ T5844] Bluetooth: hci5: command tx timeout [ 279.478823][ T51] ------------[ cut here ]------------ [ 279.484893][ T51] WARNING: CPU: 1 PID: 51 at mm/util.c:674 __kvmalloc_node_noprof+0x17a/0x190 [ 279.494064][ T51] Modules linked in: [ 279.498042][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/1:1 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 279.508269][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 279.518464][ T51] Workqueue: events rht_deferred_worker [ 279.524157][ T51] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190 [ 279.530467][ T51] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 2f 7a bb ff 41 81 e7 00 20 00 00 74 0a e8 e1 75 bb ff e9 3b ff ff ff e8 d7 75 bb ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 279.550336][ T51] RSP: 0018:ffffc90000bb78d8 EFLAGS: 00010293 [ 279.557045][ T51] RAX: ffffffff8203c389 RBX: 0000000080000080 RCX: ffff888021ee5a00 [ 279.565308][ T51] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 279.573625][ T51] RBP: 0000000000000000 R08: ffffffff8203c371 R09: 00000000ffffffff [ 279.581949][ T51] R10: ffffc90000bb7720 R11: fffff52000176ee9 R12: ffffc90068800000 [ 279.590155][ T51] R13: dffffc0000000000 R14: 00000000ffffffff R15: 0000000000000000 [ 279.598360][ T51] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 279.607646][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.614616][ T51] CR2: 00007fec1fc1e990 CR3: 000000000e736000 CR4: 00000000003526f0 [ 279.622950][ T51] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 279.631125][ T51] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 279.639271][ T51] Call Trace: [ 279.642613][ T51] [ 279.645574][ T51] ? __warn+0x165/0x4d0 [ 279.649821][ T51] ? __kvmalloc_node_noprof+0x17a/0x190 [ 279.655592][ T51] ? report_bug+0x2b3/0x500 [ 279.660222][ T51] ? __kvmalloc_node_noprof+0x17a/0x190 [ 279.666573][ T51] ? handle_bug+0x60/0x90 [ 279.671107][ T51] ? exc_invalid_op+0x1a/0x50 [ 279.675836][ T51] ? asm_exc_invalid_op+0x1a/0x20 [ 279.681655][ T51] ? __kvmalloc_node_noprof+0x161/0x190 [ 279.687275][ T51] ? __kvmalloc_node_noprof+0x179/0x190 [ 279.692988][ T51] ? __kvmalloc_node_noprof+0x17a/0x190 [ 279.698589][ T51] ? __kvmalloc_node_noprof+0x179/0x190 [ 279.704265][ T51] rhashtable_rehash_alloc+0x9e/0x290 [ 279.709687][ T51] ? rht_deferred_worker+0x4cb/0x23f0 [ 279.715359][ T51] rht_deferred_worker+0x4e1/0x23f0 [ 279.720743][ T51] ? __pfx_lock_acquire+0x10/0x10 [ 279.725914][ T51] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 279.732272][ T51] ? __pfx_rht_deferred_worker+0x10/0x10 [ 279.733317][ T5844] Bluetooth: hci6: command tx timeout [ 279.737942][ T51] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.749752][ T51] ? process_scheduled_works+0x976/0x1840 [ 279.755586][ T51] process_scheduled_works+0xa66/0x1840 [ 279.761463][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 279.767512][ T51] ? assign_work+0x364/0x3d0 [ 279.772198][ T51] worker_thread+0x870/0xd30 [ 279.777004][ T51] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 279.783242][ T51] ? __kthread_parkme+0x169/0x1d0 [ 279.788508][ T51] ? __pfx_worker_thread+0x10/0x10 [ 279.793941][ T51] kthread+0x7a9/0x920 [ 279.798067][ T51] ? __pfx_kthread+0x10/0x10 [ 279.802754][ T51] ? __pfx_worker_thread+0x10/0x10 [ 279.807911][ T51] ? __pfx_kthread+0x10/0x10 [ 279.812725][ T51] ? __pfx_kthread+0x10/0x10 [ 279.817368][ T51] ? __pfx_kthread+0x10/0x10 [ 279.822327][ T51] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.827594][ T51] ? lockdep_hardirqs_on+0x99/0x150 [ 279.832918][ T51] ? __pfx_kthread+0x10/0x10 [ 279.837677][ T51] ret_from_fork+0x4b/0x80 [ 279.842203][ T51] ? __pfx_kthread+0x10/0x10 [ 279.846953][ T51] ret_from_fork_asm+0x1a/0x30 [ 279.851948][ T51] [ 279.855102][ T51] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 279.862518][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/1:1 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 279.873161][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 279.883349][ T51] Workqueue: events rht_deferred_worker [ 279.888934][ T51] Call Trace: [ 279.892236][ T51] [ 279.895224][ T51] dump_stack_lvl+0x241/0x360 [ 279.899932][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.905146][ T51] ? __pfx__printk+0x10/0x10 [ 279.909798][ T51] ? vscnprintf+0x5d/0x90 [ 279.914240][ T51] panic+0x349/0x880 [ 279.918155][ T51] ? __warn+0x174/0x4d0 [ 279.922336][ T51] ? __pfx_panic+0x10/0x10 [ 279.926828][ T51] ? ret_from_fork_asm+0x1a/0x30 [ 279.931874][ T51] __warn+0x344/0x4d0 [ 279.935870][ T51] ? __kvmalloc_node_noprof+0x17a/0x190 [ 279.941434][ T51] report_bug+0x2b3/0x500 [ 279.945862][ T51] ? __kvmalloc_node_noprof+0x17a/0x190 [ 279.951487][ T51] handle_bug+0x60/0x90 [ 279.955661][ T51] exc_invalid_op+0x1a/0x50 [ 279.960219][ T51] asm_exc_invalid_op+0x1a/0x20 [ 279.965114][ T51] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190 [ 279.971348][ T51] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 2f 7a bb ff 41 81 e7 00 20 00 00 74 0a e8 e1 75 bb ff e9 3b ff ff ff e8 d7 75 bb ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 279.990993][ T51] RSP: 0018:ffffc90000bb78d8 EFLAGS: 00010293 [ 279.997104][ T51] RAX: ffffffff8203c389 RBX: 0000000080000080 RCX: ffff888021ee5a00 [ 280.005087][ T51] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 280.013079][ T51] RBP: 0000000000000000 R08: ffffffff8203c371 R09: 00000000ffffffff [ 280.021080][ T51] R10: ffffc90000bb7720 R11: fffff52000176ee9 R12: ffffc90068800000 [ 280.029151][ T51] R13: dffffc0000000000 R14: 00000000ffffffff R15: 0000000000000000 [ 280.037231][ T51] ? __kvmalloc_node_noprof+0x161/0x190 [ 280.042822][ T51] ? __kvmalloc_node_noprof+0x179/0x190 [ 280.048497][ T51] ? __kvmalloc_node_noprof+0x179/0x190 [ 280.054153][ T51] rhashtable_rehash_alloc+0x9e/0x290 [ 280.059885][ T51] ? rht_deferred_worker+0x4cb/0x23f0 [ 280.065292][ T51] rht_deferred_worker+0x4e1/0x23f0 [ 280.070525][ T51] ? __pfx_lock_acquire+0x10/0x10 [ 280.075572][ T51] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 280.081580][ T51] ? __pfx_rht_deferred_worker+0x10/0x10 [ 280.087246][ T51] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 280.093787][ T51] ? process_scheduled_works+0x976/0x1840 [ 280.099696][ T51] process_scheduled_works+0xa66/0x1840 [ 280.105276][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 280.111277][ T51] ? assign_work+0x364/0x3d0 [ 280.116085][ T51] worker_thread+0x870/0xd30 [ 280.120951][ T51] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 280.126864][ T51] ? __kthread_parkme+0x169/0x1d0 [ 280.131940][ T51] ? __pfx_worker_thread+0x10/0x10 [ 280.137070][ T51] kthread+0x7a9/0x920 [ 280.141152][ T51] ? __pfx_kthread+0x10/0x10 [ 280.145783][ T51] ? __pfx_worker_thread+0x10/0x10 [ 280.150909][ T51] ? __pfx_kthread+0x10/0x10 [ 280.155516][ T51] ? __pfx_kthread+0x10/0x10 [ 280.160124][ T51] ? __pfx_kthread+0x10/0x10 [ 280.164730][ T51] ? _raw_spin_unlock_irq+0x23/0x50 [ 280.169962][ T51] ? lockdep_hardirqs_on+0x99/0x150 [ 280.175255][ T51] ? __pfx_kthread+0x10/0x10 [ 280.179862][ T51] ret_from_fork+0x4b/0x80 [ 280.184296][ T51] ? __pfx_kthread+0x10/0x10 [ 280.188905][ T51] ret_from_fork_asm+0x1a/0x30 [ 280.193702][ T51] [ 280.197028][ T51] Kernel Offset: disabled [ 280.201466][ T51] Rebooting in 86400 seconds..