last executing test programs: 20.017860335s ago: executing program 3 (id=124): open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000000000a00ffffffffffffff80000000000000000000b5f4943a01fbffffff0000000002000100000000000400fb0c0000000005000500000000000a00000000000000000000000000000000000000000000010700000000000000040008"], 0x98}, 0x1, 0x7}, 0x14) 14.712737433s ago: executing program 3 (id=129): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) 14.692680594s ago: executing program 1 (id=131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00040'], 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0xd9) 10.779591537s ago: executing program 1 (id=132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() fanotify_init(0x0, 0x101000) pselect6(0x0, 0x0, 0x0, &(0x7f0000000880)={0x9, 0xfffffffffffff94e, 0x100, 0x10, 0x1, 0x5, 0xfffffffffffffff8, 0x985a}, &(0x7f00000008c0), 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_vhci(0x0, 0x4) setregid(0x0, 0x0) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setrlimit(0xf, &(0x7f0000000180)={0xa58, 0x7f}) 10.779357366s ago: executing program 3 (id=133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x5) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x14}, {0x0, 0x9, 0x7, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0xea9}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d80)=@newsa={0x138, 0x10, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x1, 0x714, 0x4e23, 0x405, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xfffffffffffffffb, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 9.540563574s ago: executing program 0 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x67c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setregs(0xf, r0, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) 9.462897138s ago: executing program 2 (id=137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) landlock_restrict_self(0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xfe, 0xc8, 0x9}}}, 0x7) 8.439711016s ago: executing program 0 (id=138): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 7.436138013s ago: executing program 2 (id=139): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004"], 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) rename(0x0, &(0x7f00000000c0)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x2c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x4800, 0x5dfbad83, 0x0, 0x8, 0x15, 0x9, 0x7}}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x58}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="080002691ceef6a0b0d82c0004"], 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x10000800040068], 0xd000, 0x80}) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0xeeee8000, 0xeeee0000, 0xe, 0x9, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.338766797s ago: executing program 0 (id=140): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) getegid() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x15, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r3}, 0x38) 4.593562145s ago: executing program 1 (id=141): sched_setscheduler(0x0, 0x2, 0x0) futex(&(0x7f000000cffc), 0x2, 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x1e}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 4.593314805s ago: executing program 3 (id=143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000e80)=[{{&(0x7f00000006c0)=@caif=@rfm, 0x80, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000880)=""/51, 0x33}, {0x0}, {&(0x7f0000000a80)=""/226, 0xe2}, {&(0x7f0000000b80)=""/240, 0xf0}, {&(0x7f0000000c80)=""/110, 0x6e}], 0x6, &(0x7f0000000d80)=""/203, 0xcb}, 0x7}], 0x1, 0x2020, &(0x7f0000000ec0)={0x77359400}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) kcmp(r0, 0x0, 0x1, r3, r1) getsockopt(r3, 0x200000000114, 0x2710, 0x0, &(0x7f0000000740)) mq_open(0x0, 0x41, 0x84, &(0x7f0000001200)={0x5, 0x8000, 0x7, 0x8}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='.\x00', 0x8a, &(0x7f00000005c0)={[{@nombcache}, {@errors_remount}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@mblk_io_submit}, {@noquota}, {@nodiscard}, {@nodiscard}, {@usrjquota}, {@norecovery}, {@init_itable_val}]}, 0x6, 0x493, &(0x7f0000000100)="$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") 4.592326735s ago: executing program 0 (id=150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x6000) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) 3.806259242s ago: executing program 2 (id=144): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 3.265041647s ago: executing program 0 (id=145): mount(0x0, 0x0, 0x0, 0x810004, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa348100000086dd60910100001c11fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22001c90780203000000000000000071cd0c3c92"], 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) lsetxattr$system_posix_acl(&(0x7f0000000140)='./dev/nvme0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {0x1, 0x1}, [], {0x4, 0x6}, [], {0x10, 0x3}, {0x20, 0x4}}, 0x24, 0x2) 3.264366327s ago: executing program 1 (id=146): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r1, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 2.190374058s ago: executing program 2 (id=147): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x42, 0x1ff) socket(0x400000000010, 0x3, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x1c2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 2.170664378s ago: executing program 0 (id=148): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) write$tun(r1, 0x0, 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) 2.042811834s ago: executing program 1 (id=149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) landlock_restrict_self(0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xfe, 0xc8, 0x9}}}, 0x7) 1.911577811s ago: executing program 2 (id=151): syz_clone3(&(0x7f0000000080)={0xa610b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000001c0)={0x9, 0x0, [0x2, 0x1, 0x0, 0xa6e], 0x0}) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') pread64(r5, &(0x7f0000001280)=""/200, 0xc8, 0x17a7) 1.887789142s ago: executing program 3 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() fanotify_init(0x0, 0x101000) pselect6(0x0, 0x0, 0x0, &(0x7f0000000880)={0x9, 0xfffffffffffff94e, 0x100, 0x10, 0x1, 0x5, 0xfffffffffffffff8, 0x985a}, &(0x7f00000008c0), 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_vhci(0x0, 0x4) setregid(0x0, 0x0) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setrlimit(0xf, &(0x7f0000000180)={0xa58, 0x7f}) 195.305391ms ago: executing program 2 (id=153): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) 8.69612ms ago: executing program 1 (id=154): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x68, &(0x7f0000000080), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r3, 0xffffffffffffffff}, 0x4) mmap(&(0x7f00002d5000/0x4000)=nil, 0x4000, 0x6, 0x13, r4, 0x11b09000) 0s ago: executing program 3 (id=155): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008a80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/250, 0xfa}], 0x1}, 0xffff}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000780)=""/76, 0x4c}], 0x1}, 0x2}], 0x2, 0x40000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x203}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffe0}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044015}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$FUSE(r2, &(0x7f0000003100)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts. [ 78.441458][ T5764] cgroup: Unknown subsys name 'net' [ 78.551553][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.177860][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.334442][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.352010][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.360389][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.368896][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.376418][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.384057][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.392065][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.393337][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.400307][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.411668][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.414992][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.420873][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.429722][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.438403][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.443736][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.452470][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.456797][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.462373][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.470044][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.477056][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.490584][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.496157][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.498762][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.512134][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.924883][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 83.118148][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.125928][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.133733][ T5776] bridge_slave_0: entered allmulticast mode [ 83.140844][ T5776] bridge_slave_0: entered promiscuous mode [ 83.159220][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 83.171095][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 83.181838][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.190187][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.197958][ T5776] bridge_slave_1: entered allmulticast mode [ 83.205474][ T5776] bridge_slave_1: entered promiscuous mode [ 83.212684][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 83.344367][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.357144][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.423296][ T5776] team0: Port device team_slave_0 added [ 83.471578][ T5776] team0: Port device team_slave_1 added [ 83.488975][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.496299][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.506418][ T5780] bridge_slave_0: entered allmulticast mode [ 83.513592][ T5780] bridge_slave_0: entered promiscuous mode [ 83.540356][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.547549][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.554928][ T5777] bridge_slave_0: entered allmulticast mode [ 83.562334][ T5777] bridge_slave_0: entered promiscuous mode [ 83.570018][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.577932][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.585287][ T5780] bridge_slave_1: entered allmulticast mode [ 83.592512][ T5780] bridge_slave_1: entered promiscuous mode [ 83.599663][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.608864][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.616273][ T5775] bridge_slave_0: entered allmulticast mode [ 83.623774][ T5775] bridge_slave_0: entered promiscuous mode [ 83.640100][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.647396][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.655061][ T5777] bridge_slave_1: entered allmulticast mode [ 83.662463][ T5777] bridge_slave_1: entered promiscuous mode [ 83.678883][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.686474][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.694217][ T5775] bridge_slave_1: entered allmulticast mode [ 83.701224][ T5775] bridge_slave_1: entered promiscuous mode [ 83.709156][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.716348][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.742455][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.786923][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.794034][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.820102][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.854272][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.866169][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.878915][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.902578][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.914922][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.952827][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.995706][ T5780] team0: Port device team_slave_0 added [ 84.026172][ T5776] hsr_slave_0: entered promiscuous mode [ 84.032816][ T5776] hsr_slave_1: entered promiscuous mode [ 84.041656][ T5780] team0: Port device team_slave_1 added [ 84.061852][ T5777] team0: Port device team_slave_0 added [ 84.074085][ T5777] team0: Port device team_slave_1 added [ 84.105416][ T5775] team0: Port device team_slave_0 added [ 84.124298][ T5775] team0: Port device team_slave_1 added [ 84.139719][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.147310][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.173862][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.221939][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.229293][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.256400][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.291132][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.298117][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.324221][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.337278][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.344330][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.370393][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.384528][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.391485][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.420836][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.434611][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.441605][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.467819][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.545024][ T5780] hsr_slave_0: entered promiscuous mode [ 84.551450][ T5780] hsr_slave_1: entered promiscuous mode [ 84.557610][ T5781] Bluetooth: hci3: command tx timeout [ 84.563438][ T5792] Bluetooth: hci2: command tx timeout [ 84.563573][ T5792] Bluetooth: hci1: command tx timeout [ 84.563682][ T5792] Bluetooth: hci0: command tx timeout [ 84.580402][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.588667][ T5780] Cannot create hsr debugfs directory [ 84.655318][ T5777] hsr_slave_0: entered promiscuous mode [ 84.664764][ T5777] hsr_slave_1: entered promiscuous mode [ 84.671208][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.678930][ T5777] Cannot create hsr debugfs directory [ 84.732967][ T5775] hsr_slave_0: entered promiscuous mode [ 84.739714][ T5775] hsr_slave_1: entered promiscuous mode [ 84.746109][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.753763][ T5775] Cannot create hsr debugfs directory [ 85.037829][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.061917][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.081317][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.091311][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.168609][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.188553][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.199551][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.209628][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.275386][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.296988][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.307855][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.322513][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.416440][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.429521][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.440472][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.461491][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.562203][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.604060][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.642475][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.649988][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.688322][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.700348][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.707513][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.724173][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.739107][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.786598][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.801153][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.828316][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.835501][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.855162][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.877146][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.884328][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.912854][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.920060][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.931550][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.938690][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.951030][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.958186][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.988147][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.995283][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.446032][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.563412][ T5776] veth0_vlan: entered promiscuous mode [ 86.598304][ T5776] veth1_vlan: entered promiscuous mode [ 86.612009][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.638355][ T5781] Bluetooth: hci0: command tx timeout [ 86.638371][ T5788] Bluetooth: hci1: command tx timeout [ 86.638396][ T5788] Bluetooth: hci2: command tx timeout [ 86.646007][ T5792] Bluetooth: hci3: command tx timeout [ 86.690477][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.711082][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.740236][ T5776] veth0_macvtap: entered promiscuous mode [ 86.751901][ T5776] veth1_macvtap: entered promiscuous mode [ 86.848299][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.897768][ T5775] veth0_vlan: entered promiscuous mode [ 86.915873][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.938366][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.947467][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.964842][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.978263][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.028164][ T5777] veth0_vlan: entered promiscuous mode [ 87.045899][ T5780] veth0_vlan: entered promiscuous mode [ 87.070350][ T5780] veth1_vlan: entered promiscuous mode [ 87.079312][ T5775] veth1_vlan: entered promiscuous mode [ 87.097824][ T5777] veth1_vlan: entered promiscuous mode [ 87.207227][ T5775] veth0_macvtap: entered promiscuous mode [ 87.282601][ T5780] veth0_macvtap: entered promiscuous mode [ 87.296089][ T5775] veth1_macvtap: entered promiscuous mode [ 87.327244][ T5777] veth0_macvtap: entered promiscuous mode [ 87.379532][ T5780] veth1_macvtap: entered promiscuous mode [ 87.391717][ T5777] veth1_macvtap: entered promiscuous mode [ 87.418042][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.453167][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.468385][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.483848][ T3435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.512555][ T3435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.595334][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.605961][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.620501][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.637716][ T3515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.645657][ T3515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.661134][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.672047][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.682736][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.693361][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.711233][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.719911][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.731733][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.740719][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.751516][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.766846][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.778807][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.789192][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.800383][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.810395][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.820942][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.833624][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.850358][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.861275][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.871518][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.882036][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.895026][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.908223][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.918967][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.927987][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.941717][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.981398][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.999709][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.011593][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.022298][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.032419][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.043096][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.054689][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.095092][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.123094][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.131852][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.151429][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.997999][ T5781] Bluetooth: hci2: command tx timeout [ 90.003539][ T5781] Bluetooth: hci1: command tx timeout [ 90.009196][ T5781] Bluetooth: hci0: command tx timeout [ 90.014592][ T5792] Bluetooth: hci3: command tx timeout [ 90.126847][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.149913][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.191878][ T3515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.213680][ T3515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.265795][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.282107][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.350962][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.383031][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.436235][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.455702][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.580446][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.623582][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.253645][ T5781] Bluetooth: hci3: command tx timeout [ 92.259118][ T5781] Bluetooth: hci0: command tx timeout [ 92.264908][ T5788] Bluetooth: hci1: command tx timeout [ 92.270641][ T5792] Bluetooth: hci2: command tx timeout [ 92.288697][ T3067] cfg80211: failed to load regulatory.db [ 94.584414][ T5792] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 94.602619][ T5792] CPU: 0 PID: 5792 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 94.610223][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.620319][ T5792] Workqueue: hci1 hci_rx_work [ 94.625072][ T5792] Call Trace: [ 94.628372][ T5792] [ 94.631335][ T5792] dump_stack_lvl+0x18c/0x250 [ 94.636063][ T5792] ? show_regs_print_info+0x20/0x20 [ 94.641306][ T5792] ? load_image+0x420/0x420 [ 94.645866][ T5792] sysfs_create_dir_ns+0x26e/0x2a0 [ 94.651011][ T5792] ? __lock_acquire+0x7d80/0x7d80 [ 94.656091][ T5792] ? sysfs_warn_dup+0xa0/0xa0 [ 94.660828][ T5792] ? do_raw_spin_unlock+0x121/0x230 [ 94.666078][ T5792] kobject_add_internal+0x617/0xc90 [ 94.671340][ T5792] kobject_add+0x164/0x240 [ 94.675797][ T5792] ? kobject_init+0x1d0/0x1d0 [ 94.680543][ T5792] ? get_device_parent+0x366/0x390 [ 94.685699][ T5792] device_add+0x3fa/0xc40 [ 94.690074][ T5792] hci_conn_add_sysfs+0xd5/0x1e0 [ 94.695080][ T5792] le_conn_complete_evt+0xe9a/0x1480 [ 94.700510][ T5792] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 94.706794][ T5792] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 94.712469][ T5792] ? mutex_unlock+0x10/0x10 [ 94.717000][ T5792] ? skb_pull_data+0xf0/0x1f0 [ 94.721741][ T5792] hci_le_conn_complete_evt+0x187/0x440 [ 94.727328][ T5792] ? hci_remote_host_features_evt+0x150/0x150 [ 94.733454][ T5792] hci_event_packet+0x7b4/0x1280 [ 94.738429][ T5792] ? __lock_acquire+0x7d80/0x7d80 [ 94.743491][ T5792] ? lock_chain_count+0x20/0x20 [ 94.748385][ T5792] ? bis_list+0x290/0x290 [ 94.752756][ T5792] ? kcov_remote_start+0x513/0x810 [ 94.757918][ T5792] ? lockdep_hardirqs_on+0x98/0x150 [ 94.763166][ T5792] ? hci_send_to_monitor+0xd7/0x4f0 [ 94.768410][ T5792] hci_rx_work+0x43a/0xd60 [ 94.772871][ T5792] ? process_scheduled_works+0x975/0x1600 [ 94.778634][ T5792] process_scheduled_works+0xa60/0x1600 [ 94.784263][ T5792] ? worker_attach_to_pool+0x370/0x370 [ 94.789859][ T5792] ? assign_work+0x3cc/0x5d0 [ 94.794497][ T5792] worker_thread+0xa5e/0xfe0 [ 94.799155][ T5792] kthread+0x2fa/0x390 [ 94.803302][ T5792] ? pr_cont_work+0x550/0x550 [ 94.808029][ T5792] ? kthread_blkcg+0xd0/0xd0 [ 94.812681][ T5792] ret_from_fork+0x48/0x80 [ 94.817229][ T5792] ? kthread_blkcg+0xd0/0xd0 [ 94.821874][ T5792] ret_from_fork_asm+0x11/0x20 [ 94.826708][ T5792] [ 94.844463][ T5792] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 94.860292][ T5792] Bluetooth: hci1: failed to register connection device [ 95.187256][ T5862] sched: RT throttling activated [ 97.278288][ T5788] Bluetooth: hci1: command tx timeout [ 100.393429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.803065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.900851][ T5900] syz.0.11[5900]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 104.925865][ T5900] loop0: detected capacity change from 0 to 8 [ 106.634694][ T5911] process 'syz.2.16' launched './file0' with NULL argv: empty string added [ 108.073429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 108.483192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.429107][ T5925] loop0: detected capacity change from 0 to 512 [ 111.512271][ T5925] EXT4-fs (loop0): bad s_min_extra_isize: 544 [ 111.721331][ T5797] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 115.753345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 119.451773][ T6005] syz.0.38 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 119.460506][ T6008] loop3: detected capacity change from 0 to 1024 [ 119.993206][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 121.373344][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 122.995363][ T6032] batadv_slave_0: entered promiscuous mode [ 123.001276][ T6032] batadv_slave_0: entered allmulticast mode [ 123.074469][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.105018][ T6039] batadv_slave_0: left promiscuous mode [ 123.122141][ T6039] batadv_slave_0: left allmulticast mode [ 126.403189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 128.625496][ T6067] smc: net device team0 applied user defined pnetid SYZ2 [ 128.838021][ T6067] smc: removing net device team0 with user defined pnetid SYZ2 [ 128.916410][ T6067] team0 (unregistering): Port device team_slave_0 removed [ 128.964756][ T6067] team0 (unregistering): Port device team_slave_1 removed [ 130.449072][ T6076] tmpfs: Bad value for 'nr_inodes' [ 131.113013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 133.715240][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.723601][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.153751][ T6095] syzkaller0: entered promiscuous mode [ 135.159901][ T6095] syzkaller0: entered allmulticast mode [ 135.170898][ T6095] 0: reclassify loop, rule prio 0, protocol 700 [ 135.353568][ T6097] loop3: detected capacity change from 0 to 164 [ 136.619605][ T6082] Zero length message leads to an empty skb [ 136.761358][ T6106] loop2: detected capacity change from 0 to 4096 [ 136.768433][ T6106] ======================================================= [ 136.768433][ T6106] WARNING: The mand mount option has been deprecated and [ 136.768433][ T6106] and is ignored by this kernel. Remove the mand [ 136.768433][ T6106] option from the mount to silence this warning. [ 136.768433][ T6106] ======================================================= [ 136.846268][ T6109] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.133946][ T6134] mmap: syz.1.68 (6134) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.228062][ T6135] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 140.507551][ T8] IPVS: starting estimator thread 0... [ 140.644066][ T6136] IPVS: using max 18 ests per chain, 43200 per kthread [ 141.763103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 146.724432][ T6150] loop2: detected capacity change from 0 to 128 [ 146.828280][ T6156] bridge0: port 3(netdevsim0) entered blocking state [ 146.841067][ T6156] bridge0: port 3(netdevsim0) entered disabled state [ 146.851350][ T6156] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 146.875418][ T6156] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 147.092696][ T6156] bridge0: port 3(netdevsim0) entered blocking state [ 147.099687][ T6156] bridge0: port 3(netdevsim0) entered forwarding state [ 147.673258][ T6157] netlink: 'syz.1.74': attribute type 10 has an invalid length. [ 147.728001][ T6157] bridge0: port 3(netdevsim0) entered disabled state [ 147.735234][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.743893][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.766868][ T6157] bridge0: port 3(netdevsim0) entered blocking state [ 147.773687][ T6157] bridge0: port 3(netdevsim0) entered forwarding state [ 147.780944][ T6157] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.788479][ T6157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.796059][ T6157] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.803523][ T6157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.839922][ T6157] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 149.139628][ T6169] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 149.139628][ T6169] [ 149.153996][ T6169] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 149.168061][ T6169] CIFS: Attempting to mount //127.0.0.1/share [ 150.357662][ T6169] CIFS: VFS: cifs_mount failed w/return code = -112 [ 151.697816][ T6186] loop2: detected capacity change from 0 to 512 [ 151.730802][ T6186] ext4: Bad value for 'data' [ 152.694390][ T5849] IPVS: starting estimator thread 0... [ 152.758996][ T6194] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 152.783130][ T6192] IPVS: using max 21 ests per chain, 50400 per kthread [ 156.750954][ T6226] loop3: detected capacity change from 0 to 512 [ 156.770576][ T6226] ext4: Bad value for 'data' [ 159.273275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 159.683220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 159.914261][ T6237] input: syz0 as /devices/virtual/input/input5 [ 160.996952][ T6242] bond_slave_0: entered promiscuous mode [ 161.003007][ T6242] bond_slave_1: entered promiscuous mode [ 161.737968][ T6242] vlan2: entered promiscuous mode [ 161.963023][ T6242] bond0: entered promiscuous mode [ 164.111204][ T6257] tmpfs: Bad value for 'nr_inodes' [ 173.065498][ T6293] syzkaller0: entered promiscuous mode [ 173.071053][ T6293] syzkaller0: entered allmulticast mode [ 174.496233][ T6305] loop2: detected capacity change from 0 to 1024 [ 177.079521][ T6313] bond_slave_0: entered promiscuous mode [ 177.085498][ T6313] bond_slave_1: entered promiscuous mode [ 177.091210][ T6313] bridge0: entered promiscuous mode [ 177.123806][ T6313] vlan2: entered promiscuous mode [ 177.145318][ T6313] bond0: entered promiscuous mode [ 178.653130][ T28] audit: type=1326 audit(1790176781.389:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.2.116" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcacf9e159 code=0x0 [ 183.853952][ T6351] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.593750][ T6354] loop0: detected capacity change from 0 to 512 [ 184.601094][ T6354] ext4: Bad value for 'data' [ 186.159338][ T5797] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 186.968622][ T6368] loop1: detected capacity change from 0 to 128 [ 192.598199][ T6395] 0x000000000000-0x000000020000 : "" [ 192.675101][ T6395] ftl_cs: FTL header not found. [ 194.318226][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.324833][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.168092][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 200.244515][ T6438] loop3: detected capacity change from 0 to 512 [ 200.252456][ T6438] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.604781][ T6438] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 200.808752][ T6438] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2974: inode #15: comm syz.3.143: corrupted xattr block 252: invalid header [ 200.836332][ T6438] EXT4-fs (loop3): Remounting filesystem read-only [ 200.842913][ T6438] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 200.852576][ T6438] EXT4-fs (loop3): 1 orphan inode deleted [ 200.860418][ T6438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.120785][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.403819][ C0] hrtimer: interrupt took 333355 ns [ 204.639452][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 204.650562][ T5788] ------------[ cut here ]------------ [ 204.656342][ T5788] WARNING: CPU: 1 PID: 5788 at net/bluetooth/hci_conn.c:579 hci_conn_timeout+0xf9/0x290 [ 204.666178][ T5788] Modules linked in: [ 204.670114][ T5788] CPU: 1 PID: 5788 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 204.677826][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.687994][ T5788] Workqueue: hci0 hci_conn_timeout [ 204.693223][ T5788] RIP: 0010:hci_conn_timeout+0xf9/0x290 [ 204.698829][ T5788] Code: f7 48 89 df e8 a8 ee 08 00 eb 07 e8 a1 6b f7 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 cc e2 fe ff e8 87 6b f7 f7 <0f> 0b eb 8e 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 38 ff ff ff 4c [ 204.718530][ T5788] RSP: 0018:ffffc90004a77b90 EFLAGS: 00010293 [ 204.724673][ T5788] RAX: ffffffff89901fc9 RBX: ffff88823bd26000 RCX: ffff888076305a00 [ 204.732690][ T5788] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 204.741807][ T5788] RBP: 00000000ffffffff R08: ffff88823bd26013 R09: 1ffff110477a4c02 [ 204.750019][ T5788] R10: dffffc0000000000 R11: ffffed10477a4c03 R12: dffffc0000000000 [ 204.758078][ T5788] R13: 0000000000000001 R14: ffff88823bd26350 R15: ffff88823bd26010 [ 204.766126][ T5788] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 204.775169][ T5788] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.781793][ T5788] CR2: 0000001b2de19ff8 CR3: 000000002f240000 CR4: 00000000003506e0 [ 204.789838][ T5788] Call Trace: [ 204.793204][ T5788] [ 204.796169][ T5788] ? process_scheduled_works+0x975/0x1600 [ 204.801941][ T5788] process_scheduled_works+0xa60/0x1600 [ 204.807670][ T5788] ? worker_attach_to_pool+0x370/0x370 [ 204.813209][ T5788] ? assign_work+0x3cc/0x5d0 [ 204.817881][ T5788] worker_thread+0xa5e/0xfe0 [ 204.822562][ T5788] kthread+0x2fa/0x390 [ 204.826708][ T5788] ? pr_cont_work+0x550/0x550 [ 204.831443][ T5788] ? kthread_blkcg+0xd0/0xd0 [ 204.836151][ T5788] ret_from_fork+0x48/0x80 [ 204.841561][ T5788] ? kthread_blkcg+0xd0/0xd0 [ 204.846577][ T5788] ret_from_fork_asm+0x11/0x20 [ 204.851420][ T5788] [ 204.854535][ T5788] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 204.861856][ T5788] CPU: 1 PID: 5788 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 204.869441][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.879529][ T5788] Workqueue: hci0 hci_conn_timeout [ 204.884702][ T5788] Call Trace: [ 204.888023][ T5788] [ 204.890983][ T5788] dump_stack_lvl+0x18c/0x250 [ 204.895708][ T5788] ? show_regs_print_info+0x20/0x20 [ 204.900952][ T5788] ? load_image+0x420/0x420 [ 204.905505][ T5788] panic+0x2ca/0x720 [ 204.909455][ T5788] ? bpf_jit_dump+0xd0/0xd0 [ 204.914002][ T5788] ? ret_from_fork_asm+0x11/0x20 [ 204.919015][ T5788] __warn+0x2e0/0x470 [ 204.923052][ T5788] ? hci_conn_timeout+0xf9/0x290 [ 204.928036][ T5788] ? hci_conn_timeout+0xf9/0x290 [ 204.933013][ T5788] report_bug+0x2be/0x4f0 [ 204.937386][ T5788] ? hci_conn_timeout+0xf9/0x290 [ 204.942365][ T5788] ? hci_conn_timeout+0xf9/0x290 [ 204.947354][ T5788] ? hci_conn_timeout+0xfb/0x290 [ 204.952327][ T5788] handle_bug+0xcf/0x120 [ 204.956599][ T5788] exc_invalid_op+0x1a/0x50 [ 204.961137][ T5788] asm_exc_invalid_op+0x1a/0x20 [ 204.966017][ T5788] RIP: 0010:hci_conn_timeout+0xf9/0x290 [ 204.971595][ T5788] Code: f7 48 89 df e8 a8 ee 08 00 eb 07 e8 a1 6b f7 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 cc e2 fe ff e8 87 6b f7 f7 <0f> 0b eb 8e 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 38 ff ff ff 4c [ 204.991248][ T5788] RSP: 0018:ffffc90004a77b90 EFLAGS: 00010293 [ 204.997341][ T5788] RAX: ffffffff89901fc9 RBX: ffff88823bd26000 RCX: ffff888076305a00 [ 205.005338][ T5788] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 205.013362][ T5788] RBP: 00000000ffffffff R08: ffff88823bd26013 R09: 1ffff110477a4c02 [ 205.021368][ T5788] R10: dffffc0000000000 R11: ffffed10477a4c03 R12: dffffc0000000000 [ 205.029368][ T5788] R13: 0000000000000001 R14: ffff88823bd26350 R15: ffff88823bd26010 [ 205.037371][ T5788] ? hci_conn_timeout+0xf9/0x290 [ 205.042353][ T5788] ? process_scheduled_works+0x975/0x1600 [ 205.048113][ T5788] process_scheduled_works+0xa60/0x1600 [ 205.053726][ T5788] ? worker_attach_to_pool+0x370/0x370 [ 205.059234][ T5788] ? assign_work+0x3cc/0x5d0 [ 205.063866][ T5788] worker_thread+0xa5e/0xfe0 [ 205.068517][ T5788] kthread+0x2fa/0x390 [ 205.072611][ T5788] ? pr_cont_work+0x550/0x550 [ 205.077310][ T5788] ? kthread_blkcg+0xd0/0xd0 [ 205.081922][ T5788] ret_from_fork+0x48/0x80 [ 205.086393][ T5788] ? kthread_blkcg+0xd0/0xd0 [ 205.091006][ T5788] ret_from_fork_asm+0x11/0x20 [ 205.095825][ T5788] [ 205.099444][ T5788] Kernel Offset: disabled [ 205.103835][ T5788] Rebooting in 86400 seconds..