last executing test programs: 43.081068617s ago: executing program 1 (id=2): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f00000001c0)) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000000700)=""/147, &(0x7f00000007c0)=0x93) socket$nl_netfilter(0x10, 0x3, 0xc) setresuid(0xee00, 0xffffffffffffffff, 0x0) 36.812955556s ago: executing program 1 (id=14): socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140)) socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4841) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00'], 0x64}}, 0x4800) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000200)={0x72be92819639f682, 0xb9cd8224dab94072}) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="0404040000000000000057c801"], 0xd) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) syz_clone3(0x0, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000080)) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r6 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYRES8], 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) landlock_restrict_self(r5, 0x9) socket(0x10, 0x3, 0x0) 21.507561331s ago: executing program 32 (id=14): socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140)) socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4841) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00'], 0x64}}, 0x4800) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000200)={0x72be92819639f682, 0xb9cd8224dab94072}) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="0404040000000000000057c801"], 0xd) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) syz_clone3(0x0, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000080)) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r6 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYRES8], 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) landlock_restrict_self(r5, 0x9) socket(0x10, 0x3, 0x0) 13.013922083s ago: executing program 0 (id=70): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x2, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, 0x0, 0x10) 9.282540911s ago: executing program 4 (id=76): ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000080)={0x400000ca}) 8.029084546s ago: executing program 4 (id=78): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a090400000000000000000200fffe0900010073797a30000000000900020073797a320000000024000480200001800a00010071756f74610000001000"], 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890) 7.637013401s ago: executing program 3 (id=81): socket$nl_route(0x10, 0x3, 0x0) r0 = io_uring_setup(0x63c8, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x2, 0x35d}) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(0x0, 0x1, &(0x7f0000001680)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) close_range(r0, 0xffffffffffffffff, 0x0) 7.547730472s ago: executing program 4 (id=82): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs(0x0, &(0x7f0000005840)='net/snmp6\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r5, &(0x7f00000004c0)=""/57, 0x39) 7.209073857s ago: executing program 2 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x802, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000680), 0x4) 7.149319657s ago: executing program 3 (id=84): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2720, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x7, 0x5, 0x9, 0x7}, {0x8762, 0x10, 0x6, 0xed}, {0xe2, 0x5, 0x3, 0x8000}, {0xfff8, 0x9, 0x11}, {0x1, 0x80, 0x5, 0x200b7}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setsockopt(0xffffffffffffffff, 0x8, 0x8001, &(0x7f00000005c0), 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) sendmmsg$sock(r2, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) 6.737732554s ago: executing program 0 (id=85): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_PTRACER(0x59616d61, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r3, &(0x7f0000d6f000/0x3000)=nil, 0x6000) 5.052337656s ago: executing program 0 (id=86): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x101, 0x1) ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, 0x0) 5.050821872s ago: executing program 4 (id=87): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, 0x0, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2720, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r2) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x7, 0x5, 0x9, 0x7}, {0x8762, 0x10, 0x6, 0xed}, {0xe2, 0x5, 0x3, 0x8000}, {0xfff8, 0x9, 0x11}, {0x1, 0x80, 0x5, 0x200b7}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setsockopt(0xffffffffffffffff, 0x8, 0x8001, &(0x7f00000005c0), 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x3}]}]}, {0x4}, {0xc}, {0x68}}}]}]}, 0x6c}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) sendmmsg$sock(r5, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 4.821156006s ago: executing program 2 (id=88): r0 = socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[], 0x47) splice(r1, 0x0, r0, 0x0, 0x5, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x4000, r1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)=0x0) sched_setscheduler(r4, 0x1, &(0x7f0000000000)=0x8) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000005) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r7, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000000)) fchdir(r6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) r8 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 4.380481865s ago: executing program 3 (id=89): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x70bd2b, 0x25dfdbfe}, 0x10}}, 0x0) 2.78240908s ago: executing program 0 (id=90): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000380)="a1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001c80)="83", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000001e00)="dc", 0x1}], 0x1}}], 0x3, 0x40) 2.575741835s ago: executing program 3 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a090400000000000000000200fffe0900010073797a30000000000900020073797a320000000024000480200001800a00010071756f74610000001000"], 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890) 2.513326596s ago: executing program 0 (id=92): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) 2.46107974s ago: executing program 2 (id=93): socket$nl_route(0x10, 0x3, 0x0) r0 = io_uring_setup(0x63c8, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x2, 0x35d}) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(0x0, 0x1, &(0x7f0000001680)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) close_range(r0, 0xffffffffffffffff, 0x0) 2.304806802s ago: executing program 4 (id=94): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x2, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, 0x0, 0x10) 2.231484377s ago: executing program 2 (id=95): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_PTRACER(0x59616d61, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r3, &(0x7f0000d6f000/0x3000)=nil, 0x6000) 2.124168593s ago: executing program 0 (id=96): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r5}, 0x18) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0x4}}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_sock_diag(0x10, 0x3, 0x4) 2.117058941s ago: executing program 3 (id=97): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x35, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x111, 0x0, 0x0, @fd}]}]}, 0x20}}, 0x0) 1.137676145s ago: executing program 2 (id=98): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2720, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x7, 0x5, 0x9, 0x7}, {0x8762, 0x10, 0x6, 0xed}, {0xe2, 0x5, 0x3, 0x8000}, {0xfff8, 0x9, 0x11}, {0x1, 0x80, 0x5, 0x200b7}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setsockopt(0xffffffffffffffff, 0x8, 0x8001, &(0x7f00000005c0), 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) sendmmsg$sock(r2, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) 1.137054858s ago: executing program 4 (id=99): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES8, @ANYBLOB], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40009060}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13100}, &(0x7f0000000240), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, 0x0, 0x1) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x4000, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) io_setup(0x81, &(0x7f0000001100)) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) 941.245011ms ago: executing program 3 (id=100): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x70bd2b, 0x25dfdbfe}, 0x10}}, 0x0) 0s ago: executing program 2 (id=101): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000380)="a1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001c80)="83", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000001e00)="dc", 0x1}], 0x1}}], 0x3, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.33' (ED25519) to the list of known hosts. [ 91.054715][ T5595] cgroup: Unknown subsys name 'net' [ 91.287242][ T5595] cgroup: Unknown subsys name 'cpuset' [ 91.350985][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.927966][ T1244] cfg80211: failed to load regulatory.db [ 93.427248][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.178962][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.219534][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.236900][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.248946][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.262811][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.264613][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.278364][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.279644][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.284503][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.311345][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.312427][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.363942][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.368829][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.369536][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.391558][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.396511][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.406327][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.406576][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.407882][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.445699][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.451755][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.462224][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.462687][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.477402][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.492541][ T4922] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.562115][ T60] Bluetooth: hci3: command tx timeout [ 98.571040][ T60] Bluetooth: hci4: command tx timeout [ 98.641443][ T60] Bluetooth: hci2: command tx timeout [ 98.641466][ T4922] Bluetooth: hci0: command tx timeout [ 98.641597][ T60] Bluetooth: hci1: command tx timeout [ 99.384107][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.385431][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.385646][ T5615] bridge_slave_0: entered allmulticast mode [ 99.388383][ T5615] bridge_slave_0: entered promiscuous mode [ 99.450644][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.450899][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.451155][ T5618] bridge_slave_0: entered allmulticast mode [ 99.453690][ T5618] bridge_slave_0: entered promiscuous mode [ 99.500889][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.501205][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.501754][ T5615] bridge_slave_1: entered allmulticast mode [ 99.504573][ T5615] bridge_slave_1: entered promiscuous mode [ 99.563183][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.563572][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.563861][ T5618] bridge_slave_1: entered allmulticast mode [ 99.567055][ T5618] bridge_slave_1: entered promiscuous mode [ 99.629156][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.629472][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.629670][ T5616] bridge_slave_0: entered allmulticast mode [ 99.639991][ T5616] bridge_slave_0: entered promiscuous mode [ 99.657653][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.658005][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.664309][ T5617] bridge_slave_0: entered allmulticast mode [ 99.675457][ T5617] bridge_slave_0: entered promiscuous mode [ 99.709059][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.709349][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.709558][ T5614] bridge_slave_0: entered allmulticast mode [ 99.725290][ T5614] bridge_slave_0: entered promiscuous mode [ 99.760813][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.761159][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.761455][ T5616] bridge_slave_1: entered allmulticast mode [ 99.764081][ T5616] bridge_slave_1: entered promiscuous mode [ 99.765715][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.765959][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.766370][ T5617] bridge_slave_1: entered allmulticast mode [ 99.768802][ T5617] bridge_slave_1: entered promiscuous mode [ 99.830284][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.830645][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.830934][ T5614] bridge_slave_1: entered allmulticast mode [ 99.833516][ T5614] bridge_slave_1: entered promiscuous mode [ 99.845746][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.911374][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.945666][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.992055][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.039628][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.054370][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.087076][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.121617][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.126170][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.164931][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.170112][ T5615] team0: Port device team_slave_0 added [ 100.228238][ T5618] team0: Port device team_slave_0 added [ 100.255010][ T5615] team0: Port device team_slave_1 added [ 100.298926][ T5618] team0: Port device team_slave_1 added [ 100.352802][ T5616] team0: Port device team_slave_0 added [ 100.356620][ T5617] team0: Port device team_slave_0 added [ 100.388575][ T5614] team0: Port device team_slave_0 added [ 100.415989][ T5616] team0: Port device team_slave_1 added [ 100.419303][ T5617] team0: Port device team_slave_1 added [ 100.453366][ T5614] team0: Port device team_slave_1 added [ 100.455341][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.455354][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.455375][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.531648][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.531662][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.531683][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.593034][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.593048][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.593072][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.641135][ T5633] Bluetooth: hci4: command tx timeout [ 100.641222][ T5633] Bluetooth: hci3: command tx timeout [ 100.677273][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.677287][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.677309][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.723820][ T4922] Bluetooth: hci2: command tx timeout [ 100.727292][ T5633] Bluetooth: hci0: command tx timeout [ 100.727564][ T60] Bluetooth: hci1: command tx timeout [ 100.763968][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.763982][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.764003][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.766367][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.766380][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.766400][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.193373][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.193387][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.193409][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.198076][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.198089][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.198110][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.203676][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.203688][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.203709][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.236898][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.236950][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.236993][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.537525][ T5615] hsr_slave_0: entered promiscuous mode [ 101.539290][ T5615] hsr_slave_1: entered promiscuous mode [ 101.575050][ T5618] hsr_slave_0: entered promiscuous mode [ 101.576755][ T5618] hsr_slave_1: entered promiscuous mode [ 101.578304][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 101.578404][ T5618] Cannot create hsr debugfs directory [ 101.705956][ T5616] hsr_slave_0: entered promiscuous mode [ 101.707580][ T5616] hsr_slave_1: entered promiscuous mode [ 101.708896][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 101.708929][ T5616] Cannot create hsr debugfs directory [ 101.746401][ T5617] hsr_slave_0: entered promiscuous mode [ 101.749116][ T5617] hsr_slave_1: entered promiscuous mode [ 101.762939][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 101.762961][ T5617] Cannot create hsr debugfs directory [ 101.776323][ T5614] hsr_slave_0: entered promiscuous mode [ 101.783988][ T5614] hsr_slave_1: entered promiscuous mode [ 101.788866][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 101.788930][ T5614] Cannot create hsr debugfs directory [ 102.720719][ T5633] Bluetooth: hci4: command tx timeout [ 102.721118][ T60] Bluetooth: hci3: command tx timeout [ 102.810540][ T5633] Bluetooth: hci0: command tx timeout [ 102.810571][ T5633] Bluetooth: hci2: command tx timeout [ 102.811964][ T60] Bluetooth: hci1: command tx timeout [ 102.949955][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.014852][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.022114][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.068596][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.078472][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.107892][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.138963][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.157582][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.279756][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.315811][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.329380][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.354570][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.369242][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.406648][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.441716][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.487530][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.668183][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.706741][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.718383][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.749486][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.767311][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.805034][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.854285][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.896515][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.123397][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.168924][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.186812][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.216784][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.232153][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.274751][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.317542][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.354568][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.544969][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.585516][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.604090][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.666713][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.689280][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.716399][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.738189][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.753468][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.785097][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.811965][ T4922] Bluetooth: hci4: command tx timeout [ 104.812017][ T60] Bluetooth: hci3: command tx timeout [ 104.891511][ T60] Bluetooth: hci1: command tx timeout [ 104.891541][ T4922] Bluetooth: hci2: command tx timeout [ 104.891568][ T4922] Bluetooth: hci0: command tx timeout [ 104.939316][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.962609][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.042441][ T3373] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.042962][ T3373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.117252][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.117400][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.163916][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.222461][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.253382][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.255723][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.319108][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.319231][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.428610][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.498632][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.516572][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.516745][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.585824][ T3373] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.585962][ T3373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.708594][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.779565][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.814436][ T3373] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.814619][ T3373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.934640][ T3373] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.936787][ T3373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.098841][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.178642][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.178794][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.296068][ T3400] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.297770][ T3400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.203913][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.257530][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.475960][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.093433][ T5615] veth0_vlan: entered promiscuous mode [ 108.136069][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.204991][ T5617] veth0_vlan: entered promiscuous mode [ 108.229109][ T5615] veth1_vlan: entered promiscuous mode [ 108.334402][ T5617] veth1_vlan: entered promiscuous mode [ 108.407329][ T5616] veth0_vlan: entered promiscuous mode [ 108.429232][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.509211][ T5616] veth1_vlan: entered promiscuous mode [ 108.570887][ T5615] veth0_macvtap: entered promiscuous mode [ 108.588295][ T5614] veth0_vlan: entered promiscuous mode [ 108.619987][ T5615] veth1_macvtap: entered promiscuous mode [ 108.650551][ T5617] veth0_macvtap: entered promiscuous mode [ 108.688898][ T5614] veth1_vlan: entered promiscuous mode [ 108.702277][ T5617] veth1_macvtap: entered promiscuous mode [ 108.784986][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.839053][ T5616] veth0_macvtap: entered promiscuous mode [ 108.859310][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.886557][ T5618] veth0_vlan: entered promiscuous mode [ 108.900140][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.909940][ T5616] veth1_macvtap: entered promiscuous mode [ 108.952962][ T211] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.974442][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.974552][ T211] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.007113][ T211] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.035616][ T211] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.038845][ T5618] veth1_vlan: entered promiscuous mode [ 109.089303][ T211] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.177445][ T211] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.178611][ T5614] veth0_macvtap: entered promiscuous mode [ 109.229361][ T211] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.253970][ T211] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.264555][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.342914][ T5614] veth1_macvtap: entered promiscuous mode [ 109.454782][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.635971][ T70] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.674261][ T70] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.749606][ T70] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.855790][ T70] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.878837][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.976923][ T347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.976953][ T347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.006603][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.039684][ T5618] veth0_macvtap: entered promiscuous mode [ 110.162032][ T5618] veth1_macvtap: entered promiscuous mode [ 110.179831][ T211] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.204437][ T211] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.205415][ T3099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.205434][ T3099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.248162][ T211] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.346376][ T3400] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.590432][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.590455][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.755292][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.776009][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.776029][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.125664][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.189326][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.189348][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.256021][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.347163][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.368206][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.393033][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.422336][ T3373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.422356][ T3373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.806404][ T3099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.806427][ T3099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.974532][ T5805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 112.449471][ T3373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.449494][ T3373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.538311][ T3373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.538362][ T3373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.958592][ T5732] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.052257][ T347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.052281][ T347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.231921][ T5732] usb 4-1: device descriptor read/64, error -71 [ 115.041387][ T5732] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.198744][ T5732] usb 4-1: device descriptor read/64, error -71 [ 115.389408][ T5732] usb usb4-port1: attempt power cycle [ 119.746817][ T5846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13'. [ 121.255263][ T5853] Invalid source name [ 121.350231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.924384][ T5633] Bluetooth: hci0: command tx timeout [ 122.301917][ T822] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 122.454875][ T822] usb 5-1: device descriptor read/64, error -71 [ 122.720846][ T822] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.870349][ T822] usb 5-1: device descriptor read/64, error -71 [ 123.115625][ T822] usb usb5-port1: attempt power cycle [ 126.506312][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.506353][ T5848] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 127.021642][ T5904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28'. [ 127.021725][ T5904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28'. [ 127.310290][ T5848] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 127.310318][ T5848] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 127.388131][ T5904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28'. [ 127.388203][ T5904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28'. [ 127.696763][ T5848] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 127.696794][ T5848] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 127.737302][ T5904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28'. [ 127.737358][ T5904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28'. [ 128.168506][ T5848] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.168537][ T5848] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 129.489348][ T5848] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.489376][ T5848] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 130.740363][ T5621] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 131.000341][ T5621] usb 3-1: device descriptor read/64, error -71 [ 131.493759][ T5621] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.760952][ T5621] usb 3-1: device descriptor read/64, error -71 [ 131.907719][ T5621] usb usb3-port1: attempt power cycle [ 132.127446][ T5954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.39'. [ 132.127508][ T5954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.39'. [ 132.520398][ T5621] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 132.541021][ T5621] usb 3-1: device descriptor read/8, error -71 [ 132.698548][ T5954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.39'. [ 132.698622][ T5954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.39'. [ 132.780406][ T5621] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.850961][ T5621] usb 3-1: device descriptor read/8, error -71 [ 132.923713][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.930539][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.961890][ T5621] usb usb3-port1: unable to enumerate USB device [ 133.910705][ T5621] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 134.069796][ T5621] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.069835][ T5621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.069865][ T5621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 134.069891][ T5621] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.069930][ T5621] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.069947][ T5621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.387968][ T5621] usb 1-1: config 0 descriptor?? [ 135.538125][ T5621] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 138.286684][ T6029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'. [ 138.286764][ T6029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'. [ 138.407494][ T6029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'. [ 138.407561][ T6029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'. [ 138.495595][ T37] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 138.502124][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 138.545683][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 138.554180][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 138.579164][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 138.582413][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 138.635784][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 138.642373][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 138.642824][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 138.650353][ T37] usb 4-1: device descriptor read/64, error -71 [ 138.688366][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 138.689235][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 138.983372][ T37] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 139.212197][ T37] usb 4-1: device descriptor read/64, error -71 [ 139.290573][ T5621] usb 1-1: USB disconnect, device number 2 [ 139.321676][ T37] usb usb4-port1: attempt power cycle [ 139.734715][ T37] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 139.775653][ T37] usb 4-1: device descriptor read/8, error -71 [ 140.900363][ T37] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 140.934164][ T37] usb 4-1: device descriptor read/8, error -71 [ 140.957022][ T5633] Bluetooth: hci5: command tx timeout [ 141.053805][ T37] usb usb4-port1: unable to enumerate USB device [ 142.963103][ T5633] Bluetooth: hci5: command tx timeout [ 145.227544][ T5633] Bluetooth: hci5: command tx timeout [ 145.882323][ T1244] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 146.010408][ T1244] usb 3-1: device descriptor read/64, error -71 [ 146.251064][ T1244] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 146.380485][ T1244] usb 3-1: device descriptor read/64, error -71 [ 146.490738][ T1244] usb usb3-port1: attempt power cycle [ 147.010925][ T1244] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 147.031109][ T1244] usb 3-1: device descriptor read/8, error -71 [ 147.129587][ T6140] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 147.580704][ T5633] Bluetooth: hci5: command tx timeout [ 148.688122][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.525492][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.715915][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.87'. [ 153.715987][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.87'. [ 155.146755][ T6211] Zero length message leads to an empty skb [ 156.133453][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.183712][ T6209] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 156.183738][ T6209] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 156.183768][ T6209] CPU: 0 UID: 0 PID: 6209 Comm: syz.0.96 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 156.183789][ T6209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.183801][ T6209] RIP: 0010:__schedule+0x4030/0x5550 [ 156.183829][ T6209] Code: 24 80 00 00 00 e8 80 67 fc f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 156.183844][ T6209] RSP: 0018:ffffc900079a6f40 EFLAGS: 00010003 [ 156.183869][ T6209] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 156.183882][ T6209] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff8880b8620c60 [ 156.183894][ T6209] RBP: ffffc900079a7128 R08: ffffffff8f8d70f7 R09: 1ffffffff1f1ae1e [ 156.183909][ T6209] R10: dffffc0000000000 R11: fffffbfff1f1ae1f R12: ffff8880b863c658 [ 156.183923][ T6209] R13: ffff888125eb8000 R14: 1ffff110170c7922 R15: 0000000000000014 [ 156.183937][ T6209] FS: 00007fe3feadd6c0(0000) GS:ffff888125eb8000(0000) knlGS:0000000000000000 [ 156.183953][ T6209] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.183965][ T6209] CR2: 00007ffc1f55dd60 CR3: 00000000328e8000 CR4: 00000000003526f0 [ 156.183982][ T6209] Call Trace: [ 156.183993][ T6209] [ 156.184011][ T6209] ? __lock_acquire+0x6b5/0x2d10 [ 156.184057][ T6209] ? __pfx___schedule+0x10/0x10 [ 156.184092][ T6209] preempt_schedule_irq+0x4d/0xa0 [ 156.184115][ T6209] irqentry_exit+0x14f/0x8c0 [ 156.184142][ T6209] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 156.184162][ T6209] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x80 [ 156.184185][ T6209] Code: 8b 3d b4 c4 ca 0b 48 89 de 5b e9 43 78 60 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 58 f4 b0 10 65 8b 35 79 f4 b0 10 81 e6 00 00 ff 00 ba [ 156.184200][ T6209] RSP: 0018:ffffc900079a7258 EFLAGS: 00000202 [ 156.184215][ T6209] RAX: ffffffff81b9e039 RBX: 000000000000000d RCX: ffff888025833e00 [ 156.184229][ T6209] RDX: 0000000000000002 RSI: 000000000000000d RDI: 00000000000000ff [ 156.184239][ T6209] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.184251][ T6209] R10: 0000000000000100 R11: 0000000000000073 R12: ffffffff89073233 [ 156.184263][ T6209] R13: 000000000000004d R14: 00000000000000e0 R15: ffffffff8cb686cf [ 156.184277][ T6209] ? dev_get_by_index+0x1b3/0x2f0 [ 156.184305][ T6209] ? kallsyms_lookup_buildid+0x1c9/0x6a0 [ 156.184328][ T6209] kallsyms_lookup_buildid+0x1c9/0x6a0 [ 156.184350][ T6209] ? dev_get_by_index+0x1b3/0x2f0 [ 156.184376][ T6209] __sprint_symbol+0x1af/0x400 [ 156.184396][ T6209] ? __sprint_symbol+0xb9/0x400 [ 156.184415][ T6209] ? __pfx___sprint_symbol+0x10/0x10 [ 156.184435][ T6209] ? ktime_get+0x45/0x220 [ 156.184458][ T6209] ? lock_acquire+0x106/0x350 [ 156.184484][ T6209] ? __lock_acquire+0x6b5/0x2d10 [ 156.184512][ T6209] symbol_string+0x13f/0x400 [ 156.184532][ T6209] ? dev_get_by_index+0x1b3/0x2f0 [ 156.184558][ T6209] ? __pfx_symbol_string+0x10/0x10 [ 156.184604][ T6209] ? __ct_user_enter+0x90/0x130 [ 156.184631][ T6209] ? __lock_acquire+0x6b5/0x2d10 [ 156.184657][ T6209] ? __lock_acquire+0x6b5/0x2d10 [ 156.184681][ T6209] ? dev_get_by_index+0x1b3/0x2f0 [ 156.184707][ T6209] pointer+0x6fd/0x11f0 [ 156.184726][ T6209] ? __pfx_pointer+0x10/0x10 [ 156.184750][ T6209] vsnprintf+0x626/0xef0 [ 156.184772][ T6209] snprintf+0xe8/0x140 [ 156.184790][ T6209] ? is_bpf_text_address+0x26/0x2b0 [ 156.184818][ T6209] ? dev_get_by_index+0x1b3/0x2f0 [ 156.184844][ T6209] ? __pfx_snprintf+0x10/0x10 [ 156.184862][ T6209] ? unwind_get_return_address+0x4d/0x90 [ 156.184890][ T6209] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 156.184918][ T6209] trim_netdev_trace+0x29f/0x840 [ 156.184947][ T6209] ? __pfx_trim_netdev_trace+0x10/0x10 [ 156.184973][ T6209] ? stack_trace_save+0xa9/0x100 [ 156.185000][ T6209] save_netdev_trace_buffer+0x112/0x5f0 [ 156.185030][ T6209] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 156.185057][ T6209] ? dev_get_by_index+0x1b3/0x2f0 [ 156.185088][ T6209] ? j1939_sk_bind+0x278/0xb30 [ 156.185115][ T6209] ? __sys_bind+0x2e9/0x410 [ 156.185132][ T6209] ? __x64_sys_bind+0x7a/0x90 [ 156.185150][ T6209] ? do_syscall_64+0x174/0x580 [ 156.185173][ T6209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.185199][ T6209] ? dev_get_by_index+0x22/0x2f0 [ 156.185224][ T6209] ? dev_get_by_index+0x22/0x2f0 [ 156.185251][ T6209] dev_get_by_index+0x1b3/0x2f0 [ 156.185279][ T6209] j1939_sk_bind+0x278/0xb30 [ 156.185310][ T6209] __sys_bind+0x2e9/0x410 [ 156.185329][ T6209] ? __pfx___sys_bind+0x10/0x10 [ 156.185351][ T6209] ? rcu_is_watching+0x15/0xb0 [ 156.185370][ T6209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.185388][ T6209] __x64_sys_bind+0x7a/0x90 [ 156.185407][ T6209] do_syscall_64+0x174/0x580 [ 156.185430][ T6209] ? trace_irq_disable+0x3b/0x140 [ 156.185455][ T6209] ? clear_bhb_loop+0x40/0x90 [ 156.185475][ T6209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.185493][ T6209] RIP: 0033:0x7fe4008ace59 [ 156.185513][ T6209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.185528][ T6209] RSP: 002b:00007fe3feadd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 156.185547][ T6209] RAX: ffffffffffffffda RBX: 00007fe400b26090 RCX: 00007fe4008ace59 [ 156.185561][ T6209] RDX: 0000000000000018 RSI: 00002000000000c0 RDI: 0000000000000009 [ 156.185573][ T6209] RBP: 00007fe400942d6f R08: 0000000000000000 R09: 0000000000000000 [ 156.185585][ T6209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.185598][ T6209] R13: 00007fe400b26128 R14: 00007fe400b26090 R15: 00007ffc2c6f9278 [ 156.185620][ T6209] [ 156.185628][ T6209] Modules linked in: [ 156.185651][ T6209] ---[ end trace 0000000000000000 ]--- [ 156.185665][ T6209] RIP: 0010:__schedule+0x4030/0x5550 [ 156.185686][ T6209] Code: 24 80 00 00 00 e8 80 67 fc f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 156.185699][ T6209] RSP: 0018:ffffc900079a6f40 EFLAGS: 00010003 [ 156.185713][ T6209] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 156.185724][ T6209] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff8880b8620c60 [ 156.185734][ T6209] RBP: ffffc900079a7128 R08: ffffffff8f8d70f7 R09: 1ffffffff1f1ae1e [ 156.185747][ T6209] R10: dffffc0000000000 R11: fffffbfff1f1ae1f R12: ffff8880b863c658 [ 156.185759][ T6209] R13: ffff888125eb8000 R14: 1ffff110170c7922 R15: 0000000000000014 [ 156.185771][ T6209] FS: 00007fe3feadd6c0(0000) GS:ffff888125eb8000(0000) knlGS:0000000000000000 [ 156.185786][ T6209] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.185797][ T6209] CR2: 00007ffc1f55dd60 CR3: 00000000328e8000 CR4: 00000000003526f0 [ 156.185813][ T6209] Kernel panic - not syncing: Fatal exception [ 157.292228][ T6209] Shutting down cpus with NMI [ 157.292443][ T6209] Kernel Offset: disabled