last executing test programs: 16.372255843s ago: executing program 4 (id=464): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) chroot(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioprio_get$pid(0x1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000380)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 15.85801569s ago: executing program 4 (id=470): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000200)=0x40b) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) write(r0, &(0x7f0000000040)="e2b93b458749a1d8439e1b922bfd32e88c88024c98449bfc", 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x3, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_INSNLIST(r5, 0x8010640b, &(0x7f0000075e40)={0x1, &(0x7f0000075dc0)=[{0x8000001, 0x0, 0x0, 0x0, 0x3}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x135002, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r6, 0xc004ae0a, &(0x7f0000000140)) 14.880322711s ago: executing program 4 (id=474): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc2240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) 10.677775023s ago: executing program 2 (id=493): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioprio_get$pid(0x1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000380)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 9.48333135s ago: executing program 2 (id=500): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) fcntl$setstatus(r3, 0x4, 0x2c00) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 7.237678422s ago: executing program 3 (id=508): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000a40)=[{&(0x7f00000005c0)=""/177, 0xb1}], 0x1) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8050) 7.054859948s ago: executing program 1 (id=511): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x3, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0x3ff, 0x0, 0x34, 0x24, 0xfd}) 6.97248813s ago: executing program 1 (id=512): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x1b, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffff"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018"], 0x4c}}, 0x0) 6.803247216s ago: executing program 1 (id=513): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) chroot(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioprio_get$pid(0x1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) dup(r4) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000380)='connect aa:aa:aa:aa:aa:11 1', 0x1b) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000000)={@empty, @dev}, &(0x7f0000000040)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xa}]}]}}, 0x0, 0x2e, 0x0, 0x1, 0xa}, 0x28) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 6.278709632s ago: executing program 3 (id=514): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x800) 5.788198558s ago: executing program 2 (id=516): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x300, 0x0, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 5.209267206s ago: executing program 1 (id=517): ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x4, @local, 0xa098}, {0xa, 0x4ea5, 0x9, @local, 0xb}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="05"], 0x10) close(r3) socket(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000500), &(0x7f0000000540)=r3}, 0x20) sendto$rxrpc(r2, 0x0, 0x0, 0xc040, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000090) r6 = syz_io_uring_setup(0x2f90, &(0x7f0000000080)={0x0, 0x91d9, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000580)={0xe000200f}) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000140)={&(0x7f00000e9000/0x2000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x2000, 0x1}) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010100}, 0xfffffffffffffeaf) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 5.189417826s ago: executing program 2 (id=519): syz_emit_ethernet(0x7a, &(0x7f0000000240)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381409", 0x44, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8}, {}, {}, {0xa888, 0x88be, 0x8000003, {{0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x20}}}, {0x8, 0x6558, 0xfffffffc}}}}}}}, 0x0) 5.141977488s ago: executing program 1 (id=520): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r0, &(0x7f0000009c00)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="030000ffffffffffffffff000000000000000000bb990b2f727792deff785783db50aa9fd7f5eea710df83e0d4383c62111ee4539c8092b464f45257f064451b2481baaca5ad1fa56ec660abf6164a9e0fd732af676d067925fce5ecafdd69ee1196f7c28edc3329ce9bee38e24895cd5e3d7216674548d705cc9b52a17e02295d547b4786c32e565c4a9c23740c1e63195b", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x3}]}]}, {0x4}, {0xc}, {0x68}}}]}]}, 0x6c}}, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x0, 0x3}) close_range(r5, r3, 0x0) 5.103099169s ago: executing program 2 (id=521): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setuid(0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x461e, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000002117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 5.051318321s ago: executing program 3 (id=522): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bdf000fedb00000114"], 0x44}, 0x1, 0x0, 0x0, 0x4040050}, 0x8080) 4.403761971s ago: executing program 3 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x10000008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000a40)=[{&(0x7f00000005c0)=""/177, 0xb1}], 0x1) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8050) 4.227603817s ago: executing program 1 (id=526): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) fcntl$setstatus(r3, 0x4, 0x2c00) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 3.979251765s ago: executing program 4 (id=527): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) chroot(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioprio_get$pid(0x1, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r3) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000380)='connect aa:aa:aa:aa:aa:11 1', 0x1b) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000000)={@empty, @dev}, &(0x7f0000000040)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xa}]}]}}, 0x0, 0x2e, 0x0, 0x1, 0xa}, 0x28) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 3.070214644s ago: executing program 3 (id=528): syz_usb_connect(0x2, 0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06", @ANYRES32], 0x0) 2.895253919s ago: executing program 4 (id=530): ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x4, @local, 0xa098}, {0xa, 0x4ea5, 0x9, @local, 0xb}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="05"], 0x10) close(r3) socket(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000500), &(0x7f0000000540)=r3}, 0x20) sendto$rxrpc(r2, 0x0, 0x0, 0xc040, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000090) r6 = syz_io_uring_setup(0x2f90, &(0x7f0000000080)={0x0, 0x91d9, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000580)={0xe000200f}) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000140)={&(0x7f00000e9000/0x2000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x2000, 0x1}) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010100}, 0xfffffffffffffeaf) close_range(r5, 0xffffffffffffffff, 0x0) 2.21231192s ago: executing program 4 (id=531): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="001401"], 0x0, 0x0}) 2.030103326s ago: executing program 0 (id=533): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x5]}, 0x8, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) msgctl$IPC_RMID(0x0, 0x0) getpeername$packet(r0, 0x0, 0x0) 2.029619946s ago: executing program 0 (id=534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x40880) 1.943276149s ago: executing program 0 (id=535): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, &(0x7f0000000300)=0x897, &(0x7f0000000080)=0x276) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) io_uring_enter(r1, 0x221c, 0x7721, 0x53, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0], 0x1}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) 1.878197731s ago: executing program 0 (id=536): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r0, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000000380)="73d92c724658daa58235d0eaedf77a51", 0x10}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.810875153s ago: executing program 0 (id=537): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r0, &(0x7f0000009c00)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="030000ffffffffffffffff000000000000000000bb990b2f727792deff785783db50aa9fd7f5eea710df83e0d4383c62111ee4539c8092b464f45257f064451b2481baaca5ad1fa56ec660abf6164a9e0fd732af676d067925fce5ecafdd69ee1196f7c28edc3329ce9bee38e24895cd5e3d7216674548d705cc9b52a17e02295d547b4786c32e565c4a9c23740c1e63195b", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x3}]}]}, {0x4}, {0xc}, {0x68}}}]}]}, 0x6c}}, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x0, 0x3}) close_range(r5, r3, 0x0) 904.398921ms ago: executing program 0 (id=538): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = dup(0xffffffffffffffff) write$binfmt_elf32(r5, 0x0, 0x58) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f0000000100)="0827e0b9d3ed", 0x6}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 60.248248ms ago: executing program 3 (id=539): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 0s ago: executing program 2 (id=540): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r6 = fsmount(r0, 0x1, 0xe) fchdir(r6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts. [ 61.105644][ T4175] cgroup: Unknown subsys name 'net' [ 61.231586][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.659127][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.547967][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 64.582901][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 64.685908][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.693035][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.702044][ T4190] device bridge_slave_0 entered promiscuous mode [ 64.711121][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 64.734994][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.744502][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.753118][ T4190] device bridge_slave_1 entered promiscuous mode [ 64.772398][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 64.828821][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.838154][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 64.875329][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.897756][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.904857][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.913528][ T4192] device bridge_slave_0 entered promiscuous mode [ 64.941257][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.948604][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.956985][ T4192] device bridge_slave_1 entered promiscuous mode [ 64.980681][ T4190] team0: Port device team_slave_0 added [ 65.009083][ T4190] team0: Port device team_slave_1 added [ 65.025628][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.032857][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.041307][ T4188] device bridge_slave_0 entered promiscuous mode [ 65.076318][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.085884][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.092970][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.101676][ T4188] device bridge_slave_1 entered promiscuous mode [ 65.114529][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.121779][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.130043][ T4191] device bridge_slave_0 entered promiscuous mode [ 65.145320][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.162152][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.169260][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.195299][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.207595][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.214678][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.223572][ T4191] device bridge_slave_1 entered promiscuous mode [ 65.230675][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.237946][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.246100][ T4189] device bridge_slave_0 entered promiscuous mode [ 65.276108][ T4192] team0: Port device team_slave_0 added [ 65.282662][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.289792][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.315813][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.338517][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.345620][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.353887][ T4189] device bridge_slave_1 entered promiscuous mode [ 65.363380][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.375094][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.386445][ T4192] team0: Port device team_slave_1 added [ 65.426761][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.439216][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.470741][ T4190] device hsr_slave_0 entered promiscuous mode [ 65.477686][ T4190] device hsr_slave_1 entered promiscuous mode [ 65.500312][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.512254][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.523975][ T4188] team0: Port device team_slave_0 added [ 65.538032][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.545017][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.571129][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.602825][ T4188] team0: Port device team_slave_1 added [ 65.620039][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.627286][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.653373][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.667758][ T4191] team0: Port device team_slave_0 added [ 65.690934][ T4189] team0: Port device team_slave_0 added [ 65.705937][ T4189] team0: Port device team_slave_1 added [ 65.717423][ T4191] team0: Port device team_slave_1 added [ 65.728723][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.735944][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.762016][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.794028][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.801306][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.828530][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.844193][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.851300][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.877267][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.889101][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.896213][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.922305][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.970650][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.977862][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.004144][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.016951][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.023929][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.049868][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.084365][ T4192] device hsr_slave_0 entered promiscuous mode [ 66.091262][ T4192] device hsr_slave_1 entered promiscuous mode [ 66.097990][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.105884][ T4192] Cannot create hsr debugfs directory [ 66.130923][ T4188] device hsr_slave_0 entered promiscuous mode [ 66.138281][ T4188] device hsr_slave_1 entered promiscuous mode [ 66.145176][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.153269][ T4188] Cannot create hsr debugfs directory [ 66.226059][ T4189] device hsr_slave_0 entered promiscuous mode [ 66.227270][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 66.239644][ T4189] device hsr_slave_1 entered promiscuous mode [ 66.246829][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.254419][ T4189] Cannot create hsr debugfs directory [ 66.273594][ T4191] device hsr_slave_0 entered promiscuous mode [ 66.280679][ T4191] device hsr_slave_1 entered promiscuous mode [ 66.287464][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.295056][ T4191] Cannot create hsr debugfs directory [ 66.315720][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 66.318644][ T4177] Bluetooth: hci4: command 0x0409 tx timeout [ 66.321965][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 66.332455][ T4177] Bluetooth: hci2: command 0x0409 tx timeout [ 66.565639][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.576460][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.599353][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.612353][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.673809][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.682918][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.694093][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.715537][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.773510][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.785088][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.813415][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.832625][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.839794][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.877893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.888504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.899218][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.918004][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.933192][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.944039][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.960253][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.002793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.011722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.022512][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.029866][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.039015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.048120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.056930][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.064019][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.072029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.090664][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.116344][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.130104][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.151219][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.160248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.171539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.180821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.210983][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.221097][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.230388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.240274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.250083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.258688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.268421][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.279352][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.289525][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.302741][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.333525][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.342997][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.352371][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.359510][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.371363][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.382962][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.406974][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.418013][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.427443][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.436915][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.445634][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.455141][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.462274][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.470357][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.490472][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.515793][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.541518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.555215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.567635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.576654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.591287][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.614695][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.632614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.640747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.651225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.659350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.669285][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.678134][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.685200][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.693489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.702363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.711873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.720700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.749149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.766377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.775249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.786064][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.793149][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.802865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.816790][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.825262][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.847128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.857210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.865054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.877409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.889481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.898387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.916763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.925957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.937717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.947804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.956813][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.963970][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.971972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.990422][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.020397][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.035003][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.044013][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.057811][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.067199][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.074279][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.082385][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.105241][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.128615][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.156954][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.172188][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.197263][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.206779][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.214297][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.231535][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.240772][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.248978][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.258411][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.268524][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.278705][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.297039][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.307451][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 68.320303][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.330847][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.351440][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.379488][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.386637][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 68.405890][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 68.415563][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 68.425830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.434291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.449760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.460927][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 68.464809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.483213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.492651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.508715][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.515843][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.523769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.531417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.549053][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.590398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.605609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.614814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.631688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.644345][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.651483][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.666681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.681910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.693379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.710686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.725303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.765505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.776709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.822488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.832498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.842151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.853468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.862426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.871506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.881975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.892472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.904503][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.916487][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.936418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.947535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.990543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.001037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.016873][ T4192] device veth0_vlan entered promiscuous mode [ 69.040820][ T4190] device veth0_vlan entered promiscuous mode [ 69.059685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.069282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.078457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.088316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.096084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.104890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.116125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.124533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.140807][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.161950][ T4190] device veth1_vlan entered promiscuous mode [ 69.176398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.184728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.194150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.202952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.211530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.222558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.230562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.239392][ T4192] device veth1_vlan entered promiscuous mode [ 69.252679][ T4188] device veth0_vlan entered promiscuous mode [ 69.282942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.292747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.303245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.313163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.322956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.340129][ T4188] device veth1_vlan entered promiscuous mode [ 69.379420][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.390415][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.399493][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.412876][ T4192] device veth0_macvtap entered promiscuous mode [ 69.432398][ T4190] device veth0_macvtap entered promiscuous mode [ 69.439822][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.448289][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.458390][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.467475][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.476559][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.485528][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.494265][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.503017][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.512186][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.523815][ T4189] device veth0_vlan entered promiscuous mode [ 69.533421][ T4192] device veth1_macvtap entered promiscuous mode [ 69.548263][ T4190] device veth1_macvtap entered promiscuous mode [ 69.557206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.565190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.575294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.583174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.600904][ T4189] device veth1_vlan entered promiscuous mode [ 69.615017][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.636836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.645187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.653700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.663117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.674892][ T4188] device veth0_macvtap entered promiscuous mode [ 69.695565][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.713409][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.725083][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.734247][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.743344][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.752347][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.763848][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.772655][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.781688][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.792476][ T4188] device veth1_macvtap entered promiscuous mode [ 69.800974][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.812828][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.825239][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.852878][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.863438][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.874708][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.885159][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.894589][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.903861][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.912924][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.924313][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.933421][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.942255][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.950152][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.960471][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.970421][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.979562][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.988651][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.006516][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.015263][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.026636][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.035411][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.052604][ T4189] device veth0_macvtap entered promiscuous mode [ 70.061287][ T4191] device veth0_vlan entered promiscuous mode [ 70.075005][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.085001][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.107409][ T4189] device veth1_macvtap entered promiscuous mode [ 70.125004][ T4191] device veth1_vlan entered promiscuous mode [ 70.133799][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.154110][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.163564][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.181470][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.195398][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.205612][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.218146][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.230495][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.272880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.282100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.302067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.314182][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.325102][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.335582][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.346963][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.359540][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.375638][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.384475][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.387898][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 70.397721][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.411213][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.438149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.447264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.457033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.465454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.473805][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 70.480269][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 70.486991][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 70.502281][ T4191] device veth0_macvtap entered promiscuous mode [ 70.526167][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.537622][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.546593][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 70.551119][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.564324][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.574224][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.585155][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.597557][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.622496][ T4191] device veth1_macvtap entered promiscuous mode [ 70.636835][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.644838][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.652556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.661431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.670131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.678323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.687082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.699451][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.710970][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.721022][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.734431][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.744924][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.756572][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.769727][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.806747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.815427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.830197][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.840336][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.849147][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.858400][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.931570][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.941146][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.958614][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.966260][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.974437][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.987865][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.997996][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.008695][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.019285][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.030940][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.040995][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.052445][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.064751][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.079490][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.080512][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.094831][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.103142][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.113330][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.126608][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.140923][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.171242][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.182070][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.193695][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.204541][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.210041][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.214946][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.225793][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.232905][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.247629][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.258405][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.271278][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.284820][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.293654][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.302500][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.311766][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.326768][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.338530][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.414916][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.424223][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.435348][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.443869][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.509242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.524350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.617712][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.625602][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.654966][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.680364][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.722758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.734831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.752167][ T4279] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.804924][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.813986][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.823060][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.853629][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.883392][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.926716][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.166517][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 74.176330][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 74.187139][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 74.193226][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 74.199984][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 74.407821][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.716347][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.796138][ T23] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 74.813126][ T23] usb 4-1: can't read configurations, error -71 [ 75.076019][ T13] usb 1-1: config 0 has an invalid interface number: 80 but max is 0 [ 75.094495][ T13] usb 1-1: config 0 has no interface number 0 [ 75.282365][ T13] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.59 [ 75.305989][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.333118][ T13] usb 1-1: Product: syz [ 75.347570][ T13] usb 1-1: Manufacturer: syz [ 75.352213][ T13] usb 1-1: SerialNumber: syz [ 75.387455][ T13] usb 1-1: config 0 descriptor?? [ 75.448121][ T13] usb 1-1: can't set config #0, error -71 [ 75.550082][ T13] usb 1-1: USB disconnect, device number 2 [ 79.255708][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 80.307832][ T4289] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.446040][ T4414] 9pnet_virtio: no channels available for device syz [ 81.380000][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.509221][ T4289] usb 3-1: Using ep0 maxpacket: 32 [ 81.636001][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 81.806228][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 81.942168][ T13] usb 5-1: config 4 interface 0 has no altsetting 0 [ 82.275893][ T13] usb 5-1: string descriptor 0 read error: -22 [ 82.282168][ T13] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 82.355850][ T4289] usb 3-1: config 3 has no interfaces? [ 82.360138][ T13] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 82.442060][ T13] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 82.517097][ T13] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 82.601062][ T13] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 82.656730][ T13] usb 5-1: media controller created [ 82.894864][ T4412] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 83.208584][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.402666][ T13] zl10353_read_register: readreg error (reg=127, ret==0) [ 83.436007][ T4289] usb 3-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 83.450751][ T4289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.535894][ T4289] usb 3-1: can't set config #3, error -71 [ 83.552928][ T4289] usb 3-1: USB disconnect, device number 2 [ 83.773701][ T13] usb 5-1: USB disconnect, device number 2 [ 83.804811][ T4466] syz.0.65 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 84.782395][ T4483] ======================================================= [ 84.782395][ T4483] WARNING: The mand mount option has been deprecated and [ 84.782395][ T4483] and is ignored by this kernel. Remove the mand [ 84.782395][ T4483] option from the mount to silence this warning. [ 84.782395][ T4483] ======================================================= [ 84.831819][ T4485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'. [ 84.903529][ T4480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.620081][ T7] cfg80211: failed to load regulatory.db [ 88.425770][ T4534] gfs2: not a GFS2 filesystem [ 88.595993][ T4540] netlink: 'syz.3.88': attribute type 4 has an invalid length. [ 88.645931][ T4540] netlink: 152 bytes leftover after parsing attributes in process `syz.3.88'. [ 88.727531][ T4540] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 88.753825][ T4544] loop4: detected capacity change from 0 to 128 [ 88.838692][ T4544] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.962853][ T4544] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.135953][ T4234] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.004714][ T4586] sched: RT throttling activated [ 93.015690][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 93.117922][ T4234] usb 5-1: Using ep0 maxpacket: 16 [ 93.185234][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.192905][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.204146][ T4587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.290977][ T4234] usb 5-1: config 10 has an invalid interface number: 145 but max is 0 [ 93.302819][ T4234] usb 5-1: config 10 has no interface number 0 [ 93.307955][ T4578] sctp: failed to load transform for md5: -4 [ 93.310175][ T4234] usb 5-1: config 10 interface 145 has no altsetting 0 [ 93.596769][ T4234] usb 5-1: New USB device found, idVendor=07aa, idProduct=0017, bcdDevice=5b.44 [ 93.606229][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.614535][ T4234] usb 5-1: Product: syz [ 93.618943][ T4234] usb 5-1: Manufacturer: syz [ 93.624298][ T4234] usb 5-1: SerialNumber: syz [ 93.888047][ T4234] asix: probe of 5-1:10.145 failed with error -22 [ 93.951030][ T4234] usb 5-1: USB disconnect, device number 3 [ 94.723426][ T4596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.565917][ T4328] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.755699][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 95.775695][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 95.785685][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 95.795686][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 95.805684][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 95.815688][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 96.895709][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 96.915685][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 98.563765][ T4643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.118'. [ 98.662907][ T4647] loop1: detected capacity change from 0 to 128 [ 98.753733][ T4647] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.776326][ T4647] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.083788][ T4328] libceph: connect (1)[c::]:6789 error -101 [ 99.093817][ T4656] Attempt to restore checkpoint with obsolete wellknown handles [ 99.102746][ T4328] libceph: mon0 (1)[c::]:6789 connect error [ 99.161244][ T4328] libceph: connect (1)[c::]:6789 error -101 [ 99.297694][ T4328] libceph: mon0 (1)[c::]:6789 connect error [ 99.672688][ T4652] ceph: No mds server is up or the cluster is laggy [ 99.820460][ T4674] syz.0.128 uses obsolete (PF_INET,SOCK_PACKET) [ 99.898554][ T4328] libceph: connect (1)[c::]:6789 error -101 [ 99.904587][ T4328] libceph: mon0 (1)[c::]:6789 connect error [ 101.546493][ T4236] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 101.665274][ T4708] loop0: detected capacity change from 0 to 128 [ 101.770324][ T4708] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.812694][ T4708] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 102.858376][ T4236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 102.870553][ T4236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 102.936675][ T4726] Attempt to restore checkpoint with obsolete wellknown handles [ 103.046224][ T4236] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 103.065705][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.073754][ T4236] usb 3-1: Product: syz [ 103.085858][ T4236] usb 3-1: Manufacturer: syz [ 103.106640][ T4236] usb 3-1: SerialNumber: syz [ 103.261302][ T4236] usb 3-1: config 0 descriptor?? [ 103.316670][ T4236] hub 3-1:0.0: bad descriptor, ignoring hub [ 103.328541][ T4236] hub: probe of 3-1:0.0 failed with error -5 [ 103.365832][ T4236] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 103.531714][ T4236] usb 3-1: USB disconnect, device number 3 [ 107.808666][ T4771] loop0: detected capacity change from 0 to 128 [ 107.960139][ T4771] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.057213][ T4771] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.411982][ T4786] Attempt to restore checkpoint with obsolete wellknown handles [ 110.172488][ T4791] process 'syz.1.165' launched '/dev/fd/-1' with NULL argv: empty string added [ 112.328336][ T4831] loop3: detected capacity change from 0 to 128 [ 112.513844][ T4831] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.653900][ T4831] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.640517][ T4842] Attempt to restore checkpoint with obsolete wellknown handles [ 114.648857][ T4851] syz.1.172 (4851) used greatest stack depth: 19280 bytes left [ 119.605945][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.940704][ T4898] crypto_alloc_aead failed rc=-4 [ 120.065891][ T13] usb 1-1: config 2 has an invalid interface number: 174 but max is 0 [ 120.136002][ T13] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 120.234231][ T13] usb 1-1: config 2 has no interface number 0 [ 120.416471][ T13] usb 1-1: config 2 interface 174 altsetting 0 has an invalid endpoint with address 0x9E, skipping [ 120.428462][ T13] usb 1-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.236470][ T13] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 121.344317][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.359466][ T4931] capability: warning: `syz.3.194' uses deprecated v2 capabilities in a way that may be insecure [ 121.377159][ T13] usb 1-1: Product: syz [ 121.381371][ T13] usb 1-1: Manufacturer: syz [ 121.386869][ T13] usb 1-1: SerialNumber: syz [ 121.577022][ T4944] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 121.607846][ T4947] netlink: 40 bytes leftover after parsing attributes in process `syz.1.207'. [ 121.615988][ T4267] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.845223][ T4950] netlink: 156 bytes leftover after parsing attributes in process `syz.1.207'. [ 121.878855][ T4950] futex_wake_op: syz.1.207 tries to shift op by -1; fix this program [ 122.067097][ T13] usb 1-1: probing VID:PID(0424:012C) [ 122.083906][ T13] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 122.116208][ T13] vub300: probe of 1-1:2.174 failed with error -22 [ 122.185807][ T4267] usb 5-1: Using ep0 maxpacket: 8 [ 122.911949][ T13] usb 1-1: USB disconnect, device number 3 [ 122.985948][ T4267] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 123.005315][ T4267] usb 5-1: config 0 has no interface number 0 [ 123.021179][ T4267] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 123.041680][ T4267] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 123.188335][ T4267] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 123.201902][ T4267] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 123.221365][ T4267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.234714][ T4267] usb 5-1: config 0 descriptor?? [ 123.652671][ T4267] ldusb 5-1:0.55: Interrupt in endpoint not found [ 123.868722][ T4267] usb 5-1: USB disconnect, device number 4 [ 124.161913][ T5001] loop3: detected capacity change from 0 to 128 [ 124.647587][ T5001] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.948058][ T5001] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.931372][ T5014] Attempt to restore checkpoint with obsolete wellknown handles [ 127.020925][ T5031] qrtr: Invalid version 0 [ 129.421256][ T5058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.238'. [ 129.430648][ T5058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.238'. [ 130.066639][ T5066] binder: BINDER_SET_CONTEXT_MGR already set [ 130.090909][ T5066] binder: 5065:5066 ioctl 4018620d 2000000002c0 returned -16 [ 131.178145][ T4232] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 131.525738][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 132.175830][ T4205] Bluetooth: hci3: Dropping invalid advertising data [ 132.325883][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 132.629492][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.635864][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.696493][ T4232] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 132.714410][ T4232] usb 4-1: can't read configurations, error -71 [ 132.831037][ T5135] bond0: option ad_select: unable to set because the bond device is up [ 132.897944][ T5141] binder: BINDER_SET_CONTEXT_MGR already set [ 132.917039][ T5141] binder: 5133:5141 ioctl 4018620d 2000000002c0 returned -16 [ 133.160630][ T5151] netlink: 'syz.0.264': attribute type 26 has an invalid length. [ 140.569267][ T5253] qrtr: Invalid version 0 [ 142.359050][ T5268] netlink: 52 bytes leftover after parsing attributes in process `syz.2.302'. [ 142.410622][ T5265] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 142.417437][ T5265] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 143.718539][ T5282] mmap: syz.1.307 (5282) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 143.814377][ T5284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 146.012863][ T5314] netlink: 'syz.3.317': attribute type 16 has an invalid length. [ 146.033343][ T5314] netlink: 'syz.3.317': attribute type 17 has an invalid length. [ 146.122993][ T5321] usb usb8: usbfs: process 5321 (syz.4.322) did not claim interface 0 before use [ 146.124261][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 146.192994][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 146.277463][ T5314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.293469][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 148.755852][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 149.652178][ T23] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 149.899287][ T23] usb 5-1: config 0 has no interface number 0 [ 149.916430][ T23] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 150.045697][ T23] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 150.424277][ T23] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 150.433901][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.442403][ T23] usb 5-1: Product: syz [ 150.446882][ T23] usb 5-1: Manufacturer: syz [ 150.451503][ T23] usb 5-1: SerialNumber: syz [ 150.459336][ T23] usb 5-1: config 0 descriptor?? [ 151.235983][ T23] usb 5-1: can't set config #0, error -71 [ 151.246009][ T23] usb 5-1: USB disconnect, device number 5 [ 154.059603][ T5459] Zero length message leads to an empty skb [ 156.536108][ T1108] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 157.127583][ T5507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.387'. [ 157.138285][ T5507] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 157.739129][ T1108] usb 3-1: config index 0 descriptor too short (expected 37906, got 18) [ 157.822660][ T1108] usb 3-1: config 0 has too many interfaces: 103, using maximum allowed: 32 [ 157.975593][ T1108] usb 3-1: config 0 has an invalid interface number: 121 but max is 102 [ 158.215442][ T1108] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 103 [ 158.225550][ T1108] usb 3-1: config 0 has no interface number 0 [ 158.233343][ T1108] usb 3-1: too many endpoints for config 0 interface 121 altsetting 187: 242, using maximum allowed: 30 [ 158.246020][ T1108] usb 3-1: config 0 interface 121 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 242 [ 158.261271][ T1108] usb 3-1: config 0 interface 121 has no altsetting 0 [ 158.476581][ T1108] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 158.767226][ T1108] usb 3-1: New USB device strings: Mfr=2, Product=79, SerialNumber=3 [ 159.224365][ T1108] usb 3-1: Product: syz [ 159.423697][ T1108] usb 3-1: Manufacturer: syz [ 159.434407][ T1108] usb 3-1: SerialNumber: syz [ 159.441193][ T1108] usb 3-1: config 0 descriptor?? [ 159.697045][ T1108] usb 3-1: can't set config #0, error -71 [ 159.711357][ T1108] usb 3-1: USB disconnect, device number 4 [ 159.958142][ T5540] netlink: 36 bytes leftover after parsing attributes in process `syz.4.399'. [ 164.210498][ T5589] binder: transaction release 17 bad handle 1, ret = -22 [ 167.483012][ T5603] syz.0.419 (5603): drop_caches: 2 [ 169.339661][ T5639] binder: transaction release 26 bad handle 1, ret = -22 [ 169.866391][ T1108] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 170.086474][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.123027][ T5658] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 171.364384][ T1108] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 171.373102][ T1108] usb 4-1: config 0 has no interface number 0 [ 171.379423][ T1108] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 171.390850][ T1108] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 171.404338][ T1108] usb 4-1: config 0 interface 255 has no altsetting 0 [ 171.411355][ T1108] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 171.421132][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.444856][ T1108] usb 4-1: config 0 descriptor?? [ 171.946955][ T1108] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 172.206194][ T1108] usb 4-1: USB disconnect, device number 7 [ 172.331789][ T5682] binder: transaction release 35 bad handle 1, ret = -22 [ 173.475864][ T5709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.448'. [ 173.485953][ T5709] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 174.328284][ T5715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'. [ 178.021919][ T5755] binder: transaction release 44 bad handle 1, ret = -22 [ 179.690871][ T4430] Bluetooth: hci5: Frame reassembly failed (-84) [ 179.905253][ T5795] bdev: Unknown parameter 'Zz-#F<]%gC [ 179.905253][ T5795] SȘȞZ6' [ 181.866205][ T5816] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 181.974415][ T1325] Bluetooth: hci5: command 0x1003 tx timeout [ 181.981180][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 184.066169][ T4328] Bluetooth: hci5: command 0x1001 tx timeout [ 184.078805][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 184.898106][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'. [ 186.338909][ T4231] Bluetooth: hci5: command 0x1009 tx timeout [ 186.475514][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.505'. [ 186.484649][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.505'. [ 187.554824][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'. [ 188.363157][ T5926] netlink: 'syz.3.514': attribute type 10 has an invalid length. [ 188.434224][ T5926] wlan1: mtu less than device minimum [ 188.452462][ T5926] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 188.464118][ T5929] netlink: 'syz.3.514': attribute type 10 has an invalid length. [ 188.650180][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.871585][ T5929] team0: Port device bond0 added [ 189.477260][ T5945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.520'. [ 189.486404][ T5945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.520'. [ 191.345805][ T4231] Bluetooth: hci0: command 0x0406 tx timeout [ 191.352352][ T4231] Bluetooth: hci3: command 0x0406 tx timeout [ 191.429167][ T4231] Bluetooth: hci2: command 0x0406 tx timeout [ 191.455560][ T4298] Bluetooth: hci1: command 0x0406 tx timeout [ 191.486096][ T4231] Bluetooth: hci4: command 0x0406 tx timeout [ 192.495776][ T1325] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 192.685847][ T4298] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 192.810034][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'. [ 192.819425][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'. [ 192.866326][ T1325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 192.906996][ T1325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 65535, setting to 64 [ 193.065826][ T4298] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 193.166264][ T1325] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 193.200068][ T1325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.274271][ T1325] usb 4-1: Product: syz [ 193.316613][ T1325] usb 4-1: Manufacturer: syz [ 193.363793][ T1325] usb 4-1: SerialNumber: syz [ 193.476449][ T1325] usb 4-1: config 0 descriptor?? [ 193.549218][ T5967] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 193.573589][ T4298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.604207][ T4298] usb 5-1: config 0 descriptor?? [ 193.627435][ T1325] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 193.647727][ T4298] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 193.905832][ T1325] scsi host1: usb-storage 4-1:0.0 [ 193.953579][ T1325] usb 4-1: USB disconnect, device number 8 [ 194.075401][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.081752][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.105858][ T4298] gp8psk: usb in 137 operation failed. [ 194.111808][ T4298] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 194.151158][ T4298] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 194.196900][ T4298] usb 5-1: USB disconnect, device number 6 [ 194.501308][ T4205] ================================================================== [ 194.509752][ T4205] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1324/0x3c90 [ 194.517595][ T4205] Read of size 1 at addr ffff88807564640a by task kworker/u5:7/4205 [ 194.525563][ T4205] [ 194.527889][ T4205] CPU: 0 PID: 4205 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 194.535420][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.545464][ T4205] Workqueue: hci3 hci_rx_work [ 194.550156][ T4205] Call Trace: [ 194.553429][ T4205] [ 194.556352][ T4205] dump_stack_lvl+0x188/0x250 [ 194.561033][ T4205] ? show_regs_print_info+0x20/0x20 [ 194.566257][ T4205] ? load_image+0x400/0x400 [ 194.570807][ T4205] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 194.576304][ T4205] ? mutex_lock_io_nested+0x60/0x60 [ 194.581505][ T4205] print_address_description+0x60/0x2d0 [ 194.587083][ T4205] ? hci_le_meta_evt+0x1324/0x3c90 [ 194.592195][ T4205] kasan_report+0xdf/0x130 [ 194.596701][ T4205] ? hci_le_meta_evt+0x1324/0x3c90 [ 194.601854][ T4205] hci_le_meta_evt+0x1324/0x3c90 [ 194.606838][ T4205] ? hci_remote_host_features_evt+0x280/0x280 [ 194.612908][ T4205] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 194.618548][ T4205] ? mark_lock+0x94/0x320 [ 194.622872][ T4205] ? mutex_unlock+0x10/0x10 [ 194.627387][ T4205] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 194.633385][ T4205] ? lock_chain_count+0x20/0x20 [ 194.638232][ T4205] ? __rwlock_init+0x140/0x140 [ 194.642993][ T4205] hci_event_packet+0xe48/0x1370 [ 194.647946][ T4205] ? lockdep_hardirqs_on+0x94/0x140 [ 194.653149][ T4205] ? rcu_lock_release+0x20/0x20 [ 194.658006][ T4205] ? hci_send_to_monitor+0x9c/0x4a0 [ 194.663205][ T4205] hci_rx_work+0x255/0xa10 [ 194.667648][ T4205] process_one_work+0x85f/0x1010 [ 194.672613][ T4205] ? worker_detach_from_pool+0x240/0x240 [ 194.678260][ T4205] ? lockdep_hardirqs_off+0x70/0x100 [ 194.683565][ T4205] ? _raw_spin_lock_irq+0xb7/0xf0 [ 194.688584][ T4205] ? _raw_spin_lock_irqsave+0x100/0x100 [ 194.694131][ T4205] ? wq_worker_running+0x97/0x170 [ 194.699154][ T4205] worker_thread+0xaa6/0x1290 [ 194.703841][ T4205] ? lockdep_hardirqs_on+0x94/0x140 [ 194.709041][ T4205] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 194.714934][ T4205] kthread+0x436/0x520 [ 194.719014][ T4205] ? rcu_lock_release+0x20/0x20 [ 194.723861][ T4205] ? kthread_blkcg+0xd0/0xd0 [ 194.728450][ T4205] ret_from_fork+0x1f/0x30 [ 194.732878][ T4205] [ 194.735898][ T4205] [ 194.738235][ T4205] Allocated by task 6003: [ 194.742559][ T4205] __kasan_kmalloc+0xb5/0xf0 [ 194.747150][ T4205] __alloc_skb+0x22c/0x750 [ 194.751565][ T4205] vhci_write+0xbc/0x450 [ 194.755817][ T4205] vfs_write+0x745/0xd60 [ 194.760062][ T4205] ksys_write+0x152/0x260 [ 194.764387][ T4205] do_syscall_64+0x4c/0xa0 [ 194.768818][ T4205] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 194.774710][ T4205] [ 194.777029][ T4205] Last potentially related work creation: [ 194.782769][ T4205] kasan_save_stack+0x35/0x60 [ 194.787448][ T4205] kasan_record_aux_stack+0xb8/0x100 [ 194.792734][ T4205] call_rcu+0x189/0x950 [ 194.796886][ T4205] sctp_association_free+0x69d/0x7e0 [ 194.802171][ T4205] sctp_do_sm+0x3725/0x55f0 [ 194.806675][ T4205] sctp_assoc_bh_rcv+0x3ee/0x630 [ 194.811615][ T4205] sctp_backlog_rcv+0x15f/0x3c0 [ 194.816460][ T4205] __release_sock+0x1e1/0x450 [ 194.821133][ T4205] release_sock+0x5b/0x1b0 [ 194.825559][ T4205] sctp_wait_for_connect+0x38b/0x680 [ 194.830849][ T4205] sctp_sendmsg_to_asoc+0x17bd/0x1d90 [ 194.836217][ T4205] sctp_sendmsg+0x196a/0x2900 [ 194.840908][ T4205] __sys_sendto+0x46d/0x620 [ 194.845404][ T4205] __x64_sys_sendto+0xda/0xf0 [ 194.850074][ T4205] do_syscall_64+0x4c/0xa0 [ 194.854560][ T4205] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 194.860456][ T4205] [ 194.862776][ T4205] The buggy address belongs to the object at ffff888075646000 [ 194.862776][ T4205] which belongs to the cache kmalloc-1k of size 1024 [ 194.876824][ T4205] The buggy address is located 10 bytes to the right of [ 194.876824][ T4205] 1024-byte region [ffff888075646000, ffff888075646400) [ 194.890618][ T4205] The buggy address belongs to the page: [ 194.896250][ T4205] page:ffffea0001d59000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75640 [ 194.906395][ T4205] head:ffffea0001d59000 order:3 compound_mapcount:0 compound_pincount:0 [ 194.914713][ T4205] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 194.922693][ T4205] raw: 00fff00000010200 ffffea0001ea1400 0000000500000005 ffff888016c41dc0 [ 194.931270][ T4205] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 194.939834][ T4205] page dumped because: kasan: bad access detected [ 194.946234][ T4205] page_owner tracks the page as allocated [ 194.951934][ T4205] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4256, ts 68610873992, free_ts 68604298913 [ 194.971051][ T4205] get_page_from_freelist+0x1bbd/0x1ca0 [ 194.976706][ T4205] __alloc_pages+0x1ee/0x480 [ 194.981297][ T4205] new_slab+0xc0/0x4b0 [ 194.985357][ T4205] ___slab_alloc+0x80a/0xdd0 [ 194.989940][ T4205] __kmalloc+0x1cd/0x330 [ 194.994171][ T4205] load_elf_phdrs+0x132/0x230 [ 194.998857][ T4205] load_elf_binary+0x962/0x28e0 [ 195.003703][ T4205] bprm_execve+0xaee/0x1840 [ 195.008200][ T4205] kernel_execve+0x82a/0x900 [ 195.012787][ T4205] call_usermodehelper_exec_async+0x207/0x350 [ 195.018850][ T4205] ret_from_fork+0x1f/0x30 [ 195.023280][ T4205] page last free stack trace: [ 195.027952][ T4205] free_unref_page_prepare+0x637/0x6c0 [ 195.033401][ T4205] free_unref_page+0x8f/0x2a0 [ 195.038093][ T4205] __unfreeze_partials+0x1a5/0x200 [ 195.043211][ T4205] put_cpu_partial+0x12d/0x190 [ 195.047968][ T4205] qlist_free_all+0x35/0x90 [ 195.052465][ T4205] kasan_quarantine_reduce+0x150/0x160 [ 195.057922][ T4205] __kasan_slab_alloc+0x2f/0xd0 [ 195.062770][ T4205] slab_post_alloc_hook+0x4c/0x380 [ 195.067875][ T4205] kmem_cache_alloc+0x100/0x290 [ 195.072719][ T4205] vm_area_alloc+0x20/0xe0 [ 195.077136][ T4205] mmap_region+0xac0/0x1650 [ 195.081631][ T4205] do_mmap+0x819/0xe90 [ 195.085696][ T4205] vm_mmap_pgoff+0x1c1/0x2d0 [ 195.090279][ T4205] ksys_mmap_pgoff+0x54b/0x790 [ 195.095049][ T4205] do_syscall_64+0x4c/0xa0 [ 195.099475][ T4205] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 195.105386][ T4205] [ 195.107745][ T4205] Memory state around the buggy address: [ 195.113367][ T4205] ffff888075646300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 195.121421][ T4205] ffff888075646380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 195.129474][ T4205] >ffff888075646400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 195.137527][ T4205] ^ [ 195.141851][ T4205] ffff888075646480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 195.149901][ T4205] ffff888075646500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 195.157971][ T4205] ================================================================== [ 195.166017][ T4205] Disabling lock debugging due to kernel taint [ 195.194075][ T4205] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 195.201301][ T4205] CPU: 0 PID: 4205 Comm: kworker/u5:7 Tainted: G B syzkaller #0 [ 195.210230][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.220303][ T4205] Workqueue: hci3 hci_rx_work [ 195.224976][ T4205] Call Trace: [ 195.228251][ T4205] [ 195.231216][ T4205] dump_stack_lvl+0x188/0x250 [ 195.236672][ T4205] ? show_regs_print_info+0x20/0x20 [ 195.241869][ T4205] ? load_image+0x400/0x400 [ 195.246370][ T4205] panic+0x2e5/0x810 [ 195.250263][ T4205] ? bpf_jit_dump+0xd0/0xd0 [ 195.254755][ T4205] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 195.260726][ T4205] ? _raw_spin_unlock+0x40/0x40 [ 195.265572][ T4205] ? hci_le_meta_evt+0x1324/0x3c90 [ 195.270698][ T4205] check_panic_on_warn+0x80/0xa0 [ 195.275635][ T4205] ? hci_le_meta_evt+0x1324/0x3c90 [ 195.280761][ T4205] end_report+0x6d/0xf0 [ 195.284930][ T4205] kasan_report+0x102/0x130 [ 195.289431][ T4205] ? hci_le_meta_evt+0x1324/0x3c90 [ 195.294553][ T4205] hci_le_meta_evt+0x1324/0x3c90 [ 195.299598][ T4205] ? hci_remote_host_features_evt+0x280/0x280 [ 195.305697][ T4205] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 195.311351][ T4205] ? mark_lock+0x94/0x320 [ 195.315674][ T4205] ? mutex_unlock+0x10/0x10 [ 195.320186][ T4205] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 195.326170][ T4205] ? lock_chain_count+0x20/0x20 [ 195.331034][ T4205] ? __rwlock_init+0x140/0x140 [ 195.335792][ T4205] hci_event_packet+0xe48/0x1370 [ 195.340718][ T4205] ? lockdep_hardirqs_on+0x94/0x140 [ 195.345922][ T4205] ? rcu_lock_release+0x20/0x20 [ 195.350767][ T4205] ? hci_send_to_monitor+0x9c/0x4a0 [ 195.356002][ T4205] hci_rx_work+0x255/0xa10 [ 195.360421][ T4205] process_one_work+0x85f/0x1010 [ 195.365362][ T4205] ? worker_detach_from_pool+0x240/0x240 [ 195.370991][ T4205] ? lockdep_hardirqs_off+0x70/0x100 [ 195.376295][ T4205] ? _raw_spin_lock_irq+0xb7/0xf0 [ 195.381332][ T4205] ? _raw_spin_lock_irqsave+0x100/0x100 [ 195.386879][ T4205] ? wq_worker_running+0x97/0x170 [ 195.392060][ T4205] worker_thread+0xaa6/0x1290 [ 195.396745][ T4205] ? lockdep_hardirqs_on+0x94/0x140 [ 195.401938][ T4205] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 195.407848][ T4205] kthread+0x436/0x520 [ 195.411920][ T4205] ? rcu_lock_release+0x20/0x20 [ 195.416819][ T4205] ? kthread_blkcg+0xd0/0xd0 [ 195.421413][ T4205] ret_from_fork+0x1f/0x30 [ 195.425836][ T4205] [ 195.429207][ T4205] Kernel Offset: disabled [ 195.433539][ T4205] Rebooting in 86400 seconds..