last executing test programs: 26.723297639s ago: executing program 0 (id=207): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) write(r2, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x1, 0x3, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000600)=""/56, 0x38}], 0x1, 0x3c, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 24.618725313s ago: executing program 0 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) poll(&(0x7f00000000c0)=[{r7, 0x4000}], 0x1, 0x7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xf6, 0x3a36}, 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r2, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}}, 0x0) 19.969505878s ago: executing program 0 (id=218): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r4, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004200ff9d7275c600fedbdf250500000008000200050000f3"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) 19.938807898s ago: executing program 4 (id=219): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r4, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004200ff9d7275c600fedbdf250500000008000200050000f3"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) 18.555410901s ago: executing program 0 (id=221): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) write(r2, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x1, 0x3, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000600)=""/56, 0x38}], 0x1, 0x3c, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 15.874029964s ago: executing program 2 (id=223): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, 0x0, 0x607, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x68, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 14.85894858s ago: executing program 2 (id=224): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) poll(&(0x7f00000000c0)=[{r6, 0x4000}], 0x1, 0x7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xf6, 0x3a36}, 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 14.841523101s ago: executing program 1 (id=225): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x202}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) mknod$loop(0x0, 0x6000, 0x0) creat(0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) write(r5, &(0x7f00000004c0)="dc4a9e9286e4949e611ad4dad0cc88614a4e03e404066d8971179b01685998e86b15e8e9904c89d5a534855e6a8ccf8249464a9110bb037590c7e53a7b7c85f26b73eb89bfc8f0104bac88d16016319cf3302dcec945bcc173d2ee158dd977e47ff850", 0x63) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000001280), 0x6) 14.839590751s ago: executing program 0 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) poll(&(0x7f00000000c0)=[{r6, 0x4000}], 0x1, 0x7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xf6, 0x3a36}, 0x8) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r2, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}}, 0x0) 14.830644901s ago: executing program 3 (id=227): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) poll(&(0x7f00000000c0)=[{r5, 0x4000}], 0x1, 0x7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xf6, 0x3a36}, 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 13.03190948s ago: executing program 1 (id=228): r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) munlock(&(0x7f00006cc000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'team_slave_0\x00', 0x7811}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x0, &(0x7f0000000100)) setregid(0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f00000006c0)="170000000200020000ffbe8c5ee17688a2003c000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff0100000001", 0xbd) 13.0160513s ago: executing program 3 (id=229): r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) munlock(&(0x7f00006cc000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'team_slave_0\x00', 0x7811}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x0, &(0x7f0000000100)) setregid(0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f00000006c0)="170000000200020000ffbe8c5ee17688a2003c000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff0100000001", 0xbd) 11.954992077s ago: executing program 3 (id=230): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000007000000181200", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 11.633619503s ago: executing program 2 (id=231): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x202}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) mknod$loop(0x0, 0x6000, 0x0) creat(0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) write(r5, &(0x7f00000004c0)="dc4a9e9286e4949e611ad4dad0cc88614a4e03e404066d8971179b01685998e86b15e8e9904c89d5a534855e6a8ccf8249464a9110bb037590c7e53a7b7c85f26b73eb89bfc8f0104bac88d16016319cf3302dcec945bcc173d2ee158dd977e47ff850", 0x63) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[], 0x4c}}, 0x0) 10.774445217s ago: executing program 3 (id=232): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) shutdown(r3, 0x0) 9.717362404s ago: executing program 2 (id=233): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) mount$9p_fd(0x0, 0x0, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) write(r2, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x1, 0x3, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000600)=""/56, 0x38}], 0x1, 0x3c, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 9.653379385s ago: executing program 4 (id=234): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) write(r2, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x1, 0x3, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000600)=""/56, 0x38}], 0x1, 0x3c, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) 8.651770451s ago: executing program 3 (id=235): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, 0x0, 0x607, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x68, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 8.523159693s ago: executing program 4 (id=236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r4, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) 7.654071167s ago: executing program 3 (id=237): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) poll(&(0x7f00000000c0)=[{r7, 0x4000}], 0x1, 0x7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xf6, 0x3a36}, 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r2, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}}, 0x0) 7.4944939s ago: executing program 1 (id=238): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x202}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) mknod$loop(0x0, 0x6000, 0x0) creat(0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) write(r5, &(0x7f00000004c0)="dc4a9e9286e4949e611ad4dad0cc88614a4e03e404066d8971179b01685998e86b15e8e9904c89d5a534855e6a8ccf8249464a9110bb037590c7e53a7b7c85f26b73eb89bfc8f0104bac88d16016319cf3302dcec945bcc173d2ee158dd977e47ff850", 0x63) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000001280), 0x6) 6.486308906s ago: executing program 1 (id=239): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000"], 0x58}}, 0x0) 4.962278781s ago: executing program 1 (id=240): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) poll(&(0x7f00000000c0)=[{r5, 0x4000}], 0x1, 0x7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xf6, 0x3a36}, 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}}, 0x0) 4.873387982s ago: executing program 4 (id=241): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x202}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) mknod$loop(0x0, 0x6000, 0x0) creat(0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) write(r5, &(0x7f00000004c0)="dc4a9e9286e4949e611ad4dad0cc88614a4e03e404066d8971179b01685998e86b15e8e9904c89d5a534855e6a8ccf8249464a9110bb037590c7e53a7b7c85f26b73eb89bfc8f0104bac88d16016319cf3302dcec945bcc173d2ee158dd977e47ff850", 0x63) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000001280), 0x6) 4.775101364s ago: executing program 2 (id=242): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000007000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000a25b63677aed69d7de830d93493d5ff70c173fad9a72c783879cb4897beb33a69f066737a7a6ec5840cf3b43e0845226b2981d03cb5e057a6f82661a1c5f2a9cdec93e8c1294abf1b33961cad7ae7c879bad04fba19bebd31aa9d0059274e16ef2d501fe2fc38c94a75a0ad5a0b33118da6107a31692975105a2a6bbc8147fe73f8e1912a48aa10ed1b6da51828fccb1780f185e49298a4ec6916d73f52992c6b166ba308baad680b2b3315071d04c49c420ad90d67da2e10876bb47dea7186adadbc01a7dd994df0591b49486713a4f1a02d43af6cc909feb4aa8b4c18518e1878f2436054d103ad397d7c724b922515bceaf22d23f28ac440cd9"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 3.593641943s ago: executing program 4 (id=243): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x202}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) mknod$loop(0x0, 0x6000, 0x0) creat(0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) write(r5, &(0x7f00000004c0)="dc4a9e9286e4949e611ad4dad0cc88614a4e03e404066d8971179b01685998e86b15e8e9904c89d5a534855e6a8ccf8249464a9110bb037590c7e53a7b7c85f26b73eb89bfc8f0104bac88d16016319cf3302dcec945bcc173d2ee158dd977e47ff850", 0x63) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[], 0x4c}}, 0x0) 3.535227364s ago: executing program 1 (id=244): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004200ff9d7275c600fedbdf250500000008000200050000f3"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) 196.638337ms ago: executing program 2 (id=245): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) shutdown(0xffffffffffffffff, 0x0) 53.7218ms ago: executing program 4 (id=246): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000007000000181200", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10) 0s ago: executing program 0 (id=247): socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) mount$9p_fd(0x0, 0x0, 0x0, 0x800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) write(r2, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x1, 0x3, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000600)=""/56, 0x38}], 0x1, 0x3c, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts. [ 73.729580][ T4259] cgroup: Unknown subsys name 'net' [ 73.873453][ T4259] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.410703][ T4259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 77.319177][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.328014][ T4271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.335578][ T4271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.344209][ T4271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.355723][ T4271] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.373008][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.381201][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.389225][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.396996][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.404680][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.413398][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.420943][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.428393][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.431091][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.443587][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.452085][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.459418][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.466766][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.474988][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.482742][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.490342][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.515043][ T4274] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.523031][ T4274] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.531634][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.541560][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.549711][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.557978][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.566191][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.573885][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.581290][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.017390][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 78.065379][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 78.115491][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 78.188385][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 78.237973][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 78.265789][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.273771][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.282601][ T4270] device bridge_slave_0 entered promiscuous mode [ 78.296360][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.303730][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.311925][ T4270] device bridge_slave_1 entered promiscuous mode [ 78.355558][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.362856][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.371792][ T4275] device bridge_slave_0 entered promiscuous mode [ 78.383094][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.390292][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.398314][ T4275] device bridge_slave_1 entered promiscuous mode [ 78.467075][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.486836][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.501056][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.508795][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.518416][ T4281] device bridge_slave_0 entered promiscuous mode [ 78.527604][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.536919][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.544302][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.552242][ T4276] device bridge_slave_0 entered promiscuous mode [ 78.562230][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.574818][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.582008][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.590609][ T4281] device bridge_slave_1 entered promiscuous mode [ 78.605115][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.612646][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.620971][ T4276] device bridge_slave_1 entered promiscuous mode [ 78.661930][ T4270] team0: Port device team_slave_0 added [ 78.701643][ T4270] team0: Port device team_slave_1 added [ 78.724771][ T4275] team0: Port device team_slave_0 added [ 78.732606][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.740753][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.749126][ T4279] device bridge_slave_0 entered promiscuous mode [ 78.758328][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.779347][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.790023][ T4275] team0: Port device team_slave_1 added [ 78.797501][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.806739][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.816421][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.825755][ T4279] device bridge_slave_1 entered promiscuous mode [ 78.834822][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.855505][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.862637][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.888739][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.946088][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.953288][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.979510][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.001100][ T4276] team0: Port device team_slave_0 added [ 79.007878][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.014855][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.041202][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.062421][ T4281] team0: Port device team_slave_0 added [ 79.074739][ T4276] team0: Port device team_slave_1 added [ 79.081347][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.088755][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.114926][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.128103][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.143515][ T4281] team0: Port device team_slave_1 added [ 79.173053][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.192812][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.200007][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.225976][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.270160][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.277411][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.303452][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.315003][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.322384][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.348379][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.386016][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.393565][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.420104][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.435931][ T4279] team0: Port device team_slave_0 added [ 79.445117][ T4270] device hsr_slave_0 entered promiscuous mode [ 79.452229][ T4270] device hsr_slave_1 entered promiscuous mode [ 79.463517][ T4275] device hsr_slave_0 entered promiscuous mode [ 79.470592][ T4275] device hsr_slave_1 entered promiscuous mode [ 79.477848][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.485661][ T4275] Cannot create hsr debugfs directory [ 79.498400][ T4279] team0: Port device team_slave_1 added [ 79.558058][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 79.567589][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 79.567606][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 79.605319][ T4281] device hsr_slave_0 entered promiscuous mode [ 79.612630][ T4281] device hsr_slave_1 entered promiscuous mode [ 79.619342][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.628143][ T4281] Cannot create hsr debugfs directory [ 79.634260][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.641340][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.667524][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 79.667543][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 79.673897][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.695035][ T4276] device hsr_slave_0 entered promiscuous mode [ 79.702199][ T4276] device hsr_slave_1 entered promiscuous mode [ 79.709078][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.716674][ T4276] Cannot create hsr debugfs directory [ 79.739383][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.746378][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.772794][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.942728][ T4279] device hsr_slave_0 entered promiscuous mode [ 79.949859][ T4279] device hsr_slave_1 entered promiscuous mode [ 79.956491][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.964691][ T4279] Cannot create hsr debugfs directory [ 80.163606][ T4270] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.179232][ T4270] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.190083][ T4270] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.208645][ T4270] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.248640][ T4276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.258969][ T4276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.277125][ T4276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.288223][ T4276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.354116][ T4281] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.379799][ T4281] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.390813][ T4281] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.423434][ T4281] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.437856][ T4275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.455754][ T4275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.466447][ T4275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.497459][ T4275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.550620][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.562298][ T4279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.576715][ T4279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.588550][ T4279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.604691][ T4279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.645460][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.667706][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.678900][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.702521][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.711963][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.721444][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.728849][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.745100][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.766771][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.778970][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.792095][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.800696][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.816492][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.826295][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.836191][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.843372][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.878679][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.888575][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.897263][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.904355][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.913099][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.923179][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.938100][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.947674][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.962220][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.972097][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.979273][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.994692][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.004461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.013919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.050521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.058958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.068429][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.078725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.107536][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.116348][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.129529][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.139058][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.147568][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.155972][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.175935][ T4270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.188535][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.202843][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.215732][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.224673][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.235901][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.245133][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.254403][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.262455][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.278071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.286576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.301110][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.314872][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.325206][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.332420][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.369660][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.381922][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.405262][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.414585][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.423579][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.438600][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.452741][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.479281][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.492782][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.504161][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.520019][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.530025][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.537251][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.569977][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.579870][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.592136][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.607053][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.615686][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.630271][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.638350][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 81.647528][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 81.653586][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 81.717760][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.726655][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.734776][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 81.742258][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 81.750601][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.757858][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.765691][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.775427][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.784664][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.791830][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.800884][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.810058][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.818987][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.826107][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.834350][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.844180][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.853473][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.860763][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.868927][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.878830][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.887651][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.896583][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.905498][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.914303][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.923140][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.931923][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.940318][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.960319][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.978291][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.987110][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.004486][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.014181][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.036234][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.045535][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.056594][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.111002][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.121247][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.140794][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.157032][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.165863][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.174956][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.183210][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.195529][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.207869][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.226512][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.243084][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.268911][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.285793][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.295513][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.312959][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.334482][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.364880][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.391769][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.401195][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.437764][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.476022][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.537578][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.559697][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.604302][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.637883][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.651224][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.740763][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.770832][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.834218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.878049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.927431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.935449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.977956][ T4276] device veth0_vlan entered promiscuous mode [ 83.028112][ T4276] device veth1_vlan entered promiscuous mode [ 83.064161][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.174012][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.199928][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.231165][ T4276] device veth0_macvtap entered promiscuous mode [ 83.256480][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.268758][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.276291][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.289021][ T4276] device veth1_macvtap entered promiscuous mode [ 83.312680][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.328387][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.335929][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.373309][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.392223][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.421472][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.432367][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.444887][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.467747][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.488037][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.502096][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.512141][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.532292][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.540268][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.550759][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.580316][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.601854][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.611364][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.620816][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.630303][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.651091][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.660509][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.700332][ T4275] device veth0_vlan entered promiscuous mode [ 83.706941][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.715683][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.725795][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.726753][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 83.735398][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.747058][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 83.747066][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 83.765494][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.774921][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.785525][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.794960][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.807421][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 83.811891][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 83.842976][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.851639][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.860000][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.869611][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.883078][ T4275] device veth1_vlan entered promiscuous mode [ 83.899111][ T4281] device veth0_vlan entered promiscuous mode [ 83.921062][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.930090][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.938625][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.946958][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.956599][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.965308][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.981573][ T4279] device veth0_vlan entered promiscuous mode [ 84.010598][ T4281] device veth1_vlan entered promiscuous mode [ 84.027905][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.036044][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.044746][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.057717][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.066172][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.074336][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.082989][ T4270] device veth0_vlan entered promiscuous mode [ 84.126313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.135186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.153626][ T4275] device veth0_macvtap entered promiscuous mode [ 84.165850][ T4275] device veth1_macvtap entered promiscuous mode [ 84.176761][ T4279] device veth1_vlan entered promiscuous mode [ 84.185939][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.196554][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.206737][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.217957][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.228155][ T4281] device veth0_macvtap entered promiscuous mode [ 84.247634][ T4270] device veth1_vlan entered promiscuous mode [ 84.256328][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.265240][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.287107][ T4281] device veth1_macvtap entered promiscuous mode [ 84.304969][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.315776][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.327961][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.336018][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.344885][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.353366][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.363118][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.374534][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.423395][ T4279] device veth0_macvtap entered promiscuous mode [ 84.439277][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.450228][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.461034][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.472570][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.484776][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.493198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.502137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.510989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.521404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.530675][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.541319][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.553435][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.568587][ T4270] device veth0_macvtap entered promiscuous mode [ 84.575960][ T2910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.584425][ T4279] device veth1_macvtap entered promiscuous mode [ 84.595283][ T2910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.597942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.613126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.621511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.630743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.639699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.651930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.660767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.674809][ T4270] device veth1_macvtap entered promiscuous mode [ 84.685299][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.694162][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.704475][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.713308][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.728747][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.740106][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.751285][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.762708][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.774770][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.802087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.812325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.821156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.830304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.854154][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.865325][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.875567][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.886521][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.896622][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.907573][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.923554][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.938064][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.948949][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.961854][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.973234][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.988944][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.008024][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.020256][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.029314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.049654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.059921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.072884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.219748][ T4281] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.228635][ T4281] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.237940][ T4281] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.246688][ T4281] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.264379][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.276281][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.286371][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.297160][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.307822][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.322918][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.332947][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.344141][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.613493][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.707668][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.754506][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.797817][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 85.804997][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 85.812990][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 85.877541][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 85.887715][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 85.918392][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.933819][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.944178][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.960408][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.972238][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.982923][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.994248][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.004950][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.017598][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.104820][ T4279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.115022][ T4279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.124493][ T4279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.133684][ T4279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.160847][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.173942][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.184793][ T4270] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.195679][ T4270] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.204626][ T4270] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.214612][ T4270] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.999049][ T127] cfg80211: failed to load regulatory.db [ 87.196124][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.204761][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.222734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.317925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.326206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.397860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.406113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.998217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.006974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.015978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.171208][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.183719][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.243780][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.251426][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.261010][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.324093][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.367902][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.392399][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.419312][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.428412][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.445629][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.768453][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.278090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.286446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.407552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.468141][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.476139][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.056635][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.056989][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.073975][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.125716][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.190375][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.223462][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.336666][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.096705][ T4430] loop0: detected capacity change from 0 to 8 [ 92.565986][ T4430] SQUASHFS error: zlib decompression failed, data probably corrupt [ 94.027241][ C0] sched: RT throttling activated [ 94.035784][ T4430] SQUASHFS error: Failed to read block 0x9b: -5 [ 94.465544][ T4430] SQUASHFS error: Unable to read metadata cache entry [99] [ 94.473998][ T4430] SQUASHFS error: Unable to read inode 0x127 [ 94.510979][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 95.393830][ T4447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.401454][ T4447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.443435][ T4447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.450985][ T4447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.581698][ T4488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.590471][ T4488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.612725][ T4488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.620401][ T4488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.524149][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.532557][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.590706][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.601749][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.566141][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 104.028754][ T4522] loop4: detected capacity change from 0 to 8 [ 104.257769][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.265257][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.317649][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.325104][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.117247][ T4522] SQUASHFS error: Failed to allocate zlib workspace [ 106.408757][ T4522] squashfs image failed sanity check [ 123.162252][ T4649] device bridge0 entered promiscuous mode [ 123.168614][ T4649] device macvlan2 entered promiscuous mode [ 125.727091][ T48] Bluetooth: hci4: link tx timeout [ 125.733617][ T48] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.797420][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 129.603318][ T4697] netlink: 'syz.4.69': attribute type 29 has an invalid length. [ 129.611159][ T4697] netlink: 'syz.4.69': attribute type 3 has an invalid length. [ 129.619041][ T4697] netlink: 76 bytes leftover after parsing attributes in process `syz.4.69'. [ 130.907056][ T4712] device bridge0 entered promiscuous mode [ 130.913222][ T4712] device macvlan2 entered promiscuous mode [ 131.408288][ T4715] loop2: detected capacity change from 0 to 1024 [ 131.552764][ T4714] tipc: Started in network mode [ 131.567557][ T4714] tipc: Node identity c261b5b4abc9, cluster identity 4711 [ 131.600841][ T4714] tipc: Enabled bearer , priority 0 [ 131.617652][ T4710] device syzkaller0 entered promiscuous mode [ 131.670468][ T4710] tipc: Resetting bearer [ 131.738305][ T4709] tipc: Resetting bearer [ 133.857073][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.883320][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.521561][ T4331] tipc: Node number set to 1772664244 [ 134.671784][ T4709] tipc: Disabling bearer [ 137.347427][ T4752] netlink: 'syz.4.82': attribute type 29 has an invalid length. [ 137.355140][ T4752] netlink: 'syz.4.82': attribute type 3 has an invalid length. [ 137.363037][ T4752] netlink: 76 bytes leftover after parsing attributes in process `syz.4.82'. [ 137.730847][ T48] Bluetooth: hci4: link tx timeout [ 137.736030][ T48] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 137.746397][ T48] Bluetooth: hci4: link tx timeout [ 137.751723][ T48] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.264535][ T4776] device bridge0 entered promiscuous mode [ 138.270660][ T4776] device macvlan2 entered promiscuous mode [ 139.112431][ T4780] loop3: detected capacity change from 0 to 40427 [ 139.248707][ T4780] F2FS-fs (loop3): invalid crc value [ 139.356190][ T4780] F2FS-fs (loop3): Found nat_bits in checkpoint [ 139.503558][ T4780] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 139.781563][ T4281] syz-executor: attempt to access beyond end of device [ 139.781563][ T4281] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 139.797597][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 140.522725][ T4798] netlink: 36 bytes leftover after parsing attributes in process `syz.1.93'. [ 141.576862][ T4807] loop1: detected capacity change from 0 to 2048 [ 141.721891][ T4807] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.816667][ T4813] loop4: detected capacity change from 0 to 1024 [ 141.890363][ T4817] netlink: 'syz.2.97': attribute type 29 has an invalid length. [ 141.898150][ T4817] netlink: 'syz.2.97': attribute type 3 has an invalid length. [ 141.905726][ T4817] netlink: 76 bytes leftover after parsing attributes in process `syz.2.97'. [ 142.656615][ T26] audit: type=1800 audit(1753219505.907:2): pid=4818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.96" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 142.682052][ T4816] loop3: detected capacity change from 0 to 1024 [ 144.041735][ T4827] tipc: Started in network mode [ 144.046679][ T4827] tipc: Node identity 3ad1548d544a, cluster identity 4711 [ 144.110166][ T4827] tipc: Enabled bearer , priority 0 [ 144.138708][ T4828] device syzkaller0 entered promiscuous mode [ 144.208500][ T4827] tipc: Resetting bearer [ 144.335614][ T4826] tipc: Resetting bearer [ 145.029464][ T4826] tipc: Disabling bearer [ 147.541093][ T4858] netlink: 'syz.3.107': attribute type 29 has an invalid length. [ 147.548996][ T4858] netlink: 'syz.3.107': attribute type 3 has an invalid length. [ 147.556655][ T4858] netlink: 76 bytes leftover after parsing attributes in process `syz.3.107'. [ 148.253702][ T4866] loop4: detected capacity change from 0 to 2048 [ 148.281428][ T4866] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.313844][ T26] audit: type=1800 audit(1753219511.567:3): pid=4866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.109" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 149.831380][ T4874] loop2: detected capacity change from 0 to 1024 [ 151.234284][ T4886] device macvlan3 entered promiscuous mode [ 160.220982][ T4945] netlink: 36 bytes leftover after parsing attributes in process `syz.4.130'. [ 160.377696][ T4948] device macvlan3 entered promiscuous mode [ 160.822311][ T4935] loop1: detected capacity change from 0 to 40427 [ 160.893270][ T4935] F2FS-fs (loop1): invalid crc value [ 160.955555][ T4935] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 162.715149][ T4947] device bridge0 entered promiscuous mode [ 162.741611][ T4947] device macvlan2 entered promiscuous mode [ 168.204640][ T4999] device macvlan3 entered promiscuous mode [ 169.005300][ T5001] loop2: detected capacity change from 0 to 40427 [ 169.028247][ T5001] F2FS-fs (loop2): invalid crc value [ 169.211874][ T5001] F2FS-fs (loop2): Found nat_bits in checkpoint [ 169.340978][ T5001] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 170.123198][ T4275] syz-executor: attempt to access beyond end of device [ 170.123198][ T4275] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.605024][ T5034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.152'. [ 172.792320][ T5039] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 174.249554][ T5050] netlink: 'syz.3.154': attribute type 29 has an invalid length. [ 174.257409][ T5050] netlink: 'syz.3.154': attribute type 3 has an invalid length. [ 174.265060][ T5050] netlink: 76 bytes leftover after parsing attributes in process `syz.3.154'. [ 175.032716][ T5060] loop1: detected capacity change from 0 to 40427 [ 175.044366][ T5060] F2FS-fs (loop1): invalid crc value [ 175.303691][ T5069] device macvlan4 entered promiscuous mode [ 175.953554][ T5060] F2FS-fs (loop1): Found nat_bits in checkpoint [ 175.998321][ T5060] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 176.787735][ T4279] syz-executor: attempt to access beyond end of device [ 176.787735][ T4279] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 180.517735][ T5109] netlink: 28 bytes leftover after parsing attributes in process `syz.0.169'. [ 180.569993][ T5110] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 181.852697][ T5122] loop1: detected capacity change from 0 to 1024 [ 182.215936][ T5128] device macvlan4 entered promiscuous mode [ 183.640693][ T5141] netlink: 'syz.1.180': attribute type 29 has an invalid length. [ 183.648841][ T5141] netlink: 'syz.1.180': attribute type 3 has an invalid length. [ 183.656568][ T5141] netlink: 76 bytes leftover after parsing attributes in process `syz.1.180'. [ 183.821427][ T5147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.182'. [ 183.857061][ T5148] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 184.164940][ T5155] tipc: Enabled bearer , priority 0 [ 184.401849][ T5156] device macvlan5 entered promiscuous mode [ 184.562170][ T5158] device syzkaller0 entered promiscuous mode [ 184.590736][ T5155] Zero length message leads to an empty skb [ 184.916852][ T5155] tipc: Resetting bearer [ 185.096169][ T5161] device bridge0 entered promiscuous mode [ 185.102590][ T5161] device macvlan2 entered promiscuous mode [ 185.198680][ T5154] tipc: Resetting bearer [ 185.218092][ T7] tipc: Node number set to 1855673485 [ 185.265562][ T5154] tipc: Disabling bearer [ 186.640027][ T5182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.194'. [ 187.448971][ T5190] device macvlan6 entered promiscuous mode [ 187.698320][ T5195] netlink: 'syz.3.195': attribute type 29 has an invalid length. [ 187.706214][ T5195] netlink: 'syz.3.195': attribute type 3 has an invalid length. [ 187.713950][ T5195] netlink: 76 bytes leftover after parsing attributes in process `syz.3.195'. [ 187.857357][ T5163] loop4: detected capacity change from 0 to 40427 [ 187.902819][ T5163] F2FS-fs (loop4): invalid crc value [ 187.938809][ T5198] tipc: Started in network mode [ 187.943759][ T5198] tipc: Node identity 6a4f658019da, cluster identity 4711 [ 187.956924][ T5198] tipc: Enabled bearer , priority 0 [ 187.978150][ T5198] device syzkaller0 entered promiscuous mode [ 188.288373][ T5163] F2FS-fs (loop4): Found nat_bits in checkpoint [ 188.519735][ T5197] tipc: Resetting bearer [ 188.894903][ T5197] tipc: Disabling bearer [ 189.283819][ T4332] tipc: Node number set to 1939170688 [ 189.695045][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 190.712365][ T5224] device macvlan4 entered promiscuous mode [ 194.136956][ T5261] device macvlan7 entered promiscuous mode [ 194.281532][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.288200][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.684262][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 201.690595][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 201.692212][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 201.696713][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 202.365831][ T5310] device macvlan8 entered promiscuous mode [ 209.994344][ T5364] device macvlan3 entered promiscuous mode [ 218.083241][ T5407] ================================================================== [ 218.091375][ T5407] BUG: KASAN: use-after-free in rose_transmit_link+0x5b6/0x730 [ 218.098996][ T5407] Read of size 1 at addr ffff88807edff432 by task syz.1.244/5407 [ 218.106748][ T5407] [ 218.109118][ T5407] CPU: 0 PID: 5407 Comm: syz.1.244 Not tainted 6.1.146-syzkaller #0 [ 218.117134][ T5407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.127233][ T5407] Call Trace: [ 218.130551][ T5407] [ 218.133502][ T5407] dump_stack_lvl+0x168/0x22e [ 218.138217][ T5407] ? read_lock_is_recursive+0x10/0x10 [ 218.143619][ T5407] ? show_regs_print_info+0x12/0x12 [ 218.148876][ T5407] ? load_image+0x3b0/0x3b0 [ 218.153405][ T5407] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 218.158816][ T5407] ? __virt_addr_valid+0x188/0x540 [ 218.163941][ T5407] ? __virt_addr_valid+0x465/0x540 [ 218.169067][ T5407] ? rose_transmit_link+0x5b6/0x730 [ 218.174281][ T5407] print_report+0xa8/0x200 [ 218.178719][ T5407] kasan_report+0x10b/0x140 [ 218.183242][ T5407] ? rose_transmit_link+0x5b6/0x730 [ 218.188464][ T5407] rose_transmit_link+0x5b6/0x730 [ 218.193510][ T5407] ? skb_put+0x117/0x210 [ 218.197769][ T5407] rose_write_internal+0x1096/0x1eb0 [ 218.203070][ T5407] ? debug_object_assert_init+0x1ed/0x2f0 [ 218.208800][ T5407] ? rose_validate_nr+0x120/0x120 [ 218.213841][ T5407] ? skb_queue_purge+0x64/0x1b0 [ 218.218703][ T5407] rose_release+0x22a/0x4f0 [ 218.223221][ T5407] sock_close+0xd5/0x240 [ 218.227482][ T5407] ? sock_mmap+0x90/0x90 [ 218.231736][ T5407] __fput+0x22c/0x920 [ 218.235739][ T5407] task_work_run+0x1ca/0x250 [ 218.240337][ T5407] ? task_work_cancel+0x230/0x230 [ 218.245374][ T5407] get_signal+0x11a6/0x1350 [ 218.249899][ T5407] arch_do_signal_or_restart+0xb0/0x1230 [ 218.255539][ T5407] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 218.260916][ T5407] ? wake_bit_function+0x200/0x200 [ 218.266074][ T5407] ? __might_fault+0xa6/0x120 [ 218.270771][ T5407] ? get_sigframe_size+0x10/0x10 [ 218.275712][ T5407] ? __sys_connect+0x239/0x410 [ 218.280490][ T5407] ? exit_to_user_mode_loop+0x3b/0x110 [ 218.285964][ T5407] exit_to_user_mode_loop+0x70/0x110 [ 218.291326][ T5407] exit_to_user_mode_prepare+0xb1/0x140 [ 218.296891][ T5407] syscall_exit_to_user_mode+0x16/0x40 [ 218.302362][ T5407] do_syscall_64+0x58/0xa0 [ 218.306787][ T5407] ? clear_bhb_loop+0x60/0xb0 [ 218.311474][ T5407] ? clear_bhb_loop+0x60/0xb0 [ 218.316161][ T5407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.322076][ T5407] RIP: 0033:0x7faf5b38e9a9 [ 218.326528][ T5407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.346242][ T5407] RSP: 002b:00007faf5c252038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 218.354673][ T5407] RAX: fffffffffffffe00 RBX: 00007faf5b5b6160 RCX: 00007faf5b38e9a9 [ 218.362653][ T5407] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000b [ 218.370629][ T5407] RBP: 00007faf5b410d69 R08: 0000000000000000 R09: 0000000000000000 [ 218.378607][ T5407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.386586][ T5407] R13: 0000000000000000 R14: 00007faf5b5b6160 R15: 00007ffc916af6a8 [ 218.394574][ T5407] [ 218.397685][ T5407] [ 218.400037][ T5407] Allocated by task 5218: [ 218.404366][ T5407] kasan_set_track+0x4b/0x70 [ 218.408973][ T5407] __kasan_kmalloc+0x8e/0xa0 [ 218.413575][ T5407] rose_add_node+0x227/0xdb0 [ 218.418181][ T5407] rose_rt_ioctl+0xa4c/0xe90 [ 218.422786][ T5407] rose_ioctl+0x27a/0x790 [ 218.427124][ T5407] sock_do_ioctl+0xd3/0x2f0 [ 218.431643][ T5407] sock_ioctl+0x4ed/0x6e0 [ 218.435995][ T5407] __se_sys_ioctl+0xfa/0x170 [ 218.440621][ T5407] do_syscall_64+0x4c/0xa0 [ 218.445055][ T5407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.450972][ T5407] [ 218.453297][ T5407] Freed by task 5406: [ 218.457278][ T5407] kasan_set_track+0x4b/0x70 [ 218.461880][ T5407] kasan_save_free_info+0x2d/0x50 [ 218.466916][ T5407] ____kasan_slab_free+0x126/0x1e0 [ 218.472041][ T5407] slab_free_freelist_hook+0x131/0x1a0 [ 218.477514][ T5407] __kmem_cache_free+0xb6/0x1f0 [ 218.482386][ T5407] rose_rt_device_down+0x4e2/0x530 [ 218.487519][ T5407] rose_device_event+0x600/0x690 [ 218.492506][ T5407] raw_notifier_call_chain+0xcb/0x160 [ 218.497891][ T5407] __dev_notify_flags+0x178/0x2d0 [ 218.502955][ T5407] dev_change_flags+0xe3/0x1a0 [ 218.507723][ T5407] dev_ifsioc+0x159/0xe90 [ 218.512064][ T5407] dev_ioctl+0x578/0xea0 [ 218.516319][ T5407] sock_do_ioctl+0x222/0x2f0 [ 218.520923][ T5407] sock_ioctl+0x4ed/0x6e0 [ 218.525268][ T5407] __se_sys_ioctl+0xfa/0x170 [ 218.529871][ T5407] do_syscall_64+0x4c/0xa0 [ 218.534293][ T5407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.540198][ T5407] [ 218.542610][ T5407] Last potentially related work creation: [ 218.548327][ T5407] kasan_save_stack+0x3a/0x60 [ 218.553012][ T5407] __kasan_record_aux_stack+0xb2/0xc0 [ 218.558403][ T5407] call_rcu+0x154/0x980 [ 218.562572][ T5407] addrconf_permanent_addr+0x34d/0x980 [ 218.568069][ T5407] addrconf_notify+0x986/0xf40 [ 218.572853][ T5407] raw_notifier_call_chain+0xcb/0x160 [ 218.578241][ T5407] __dev_notify_flags+0x178/0x2d0 [ 218.583267][ T5407] dev_change_flags+0xe3/0x1a0 [ 218.588035][ T5407] do_setlink+0xc31/0x3c40 [ 218.592459][ T5407] rtnl_newlink+0x17d6/0x1ff0 [ 218.597148][ T5407] rtnetlink_rcv_msg+0x79b/0xed0 [ 218.602099][ T5407] netlink_rcv_skb+0x1de/0x420 [ 218.606871][ T5407] netlink_unicast+0x74d/0x8d0 [ 218.611640][ T5407] netlink_sendmsg+0x89e/0xbc0 [ 218.616415][ T5407] __sys_sendto+0x44f/0x5c0 [ 218.620925][ T5407] __x64_sys_sendto+0xda/0xf0 [ 218.625612][ T5407] do_syscall_64+0x4c/0xa0 [ 218.630037][ T5407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.635943][ T5407] [ 218.638280][ T5407] The buggy address belongs to the object at ffff88807edff400 [ 218.638280][ T5407] which belongs to the cache kmalloc-512 of size 512 [ 218.652334][ T5407] The buggy address is located 50 bytes inside of [ 218.652334][ T5407] 512-byte region [ffff88807edff400, ffff88807edff600) [ 218.665527][ T5407] [ 218.667857][ T5407] The buggy address belongs to the physical page: [ 218.674294][ T5407] page:ffffea0001fb7f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7edfc [ 218.684458][ T5407] head:ffffea0001fb7f00 order:2 compound_mapcount:0 compound_pincount:0 [ 218.692804][ T5407] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 218.700851][ T5407] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017441c80 [ 218.709464][ T5407] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 218.718059][ T5407] page dumped because: kasan: bad access detected [ 218.724501][ T5407] page_owner tracks the page as allocated [ 218.730234][ T5407] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4261, tgid 4261 (kworker/1:3), ts 83239350459, free_ts 83135058758 [ 218.750928][ T5407] post_alloc_hook+0x173/0x1a0 [ 218.755719][ T5407] get_page_from_freelist+0x1a26/0x1ac0 [ 218.761486][ T5407] __alloc_pages+0x1df/0x4e0 [ 218.766135][ T5407] alloc_slab_page+0x5d/0x160 [ 218.770874][ T5407] new_slab+0x87/0x2c0 [ 218.774956][ T5407] ___slab_alloc+0xbc6/0x1220 [ 218.779652][ T5407] __kmem_cache_alloc_node+0x1a0/0x260 [ 218.785128][ T5407] __kmalloc_node_track_caller+0x9e/0x230 [ 218.790864][ T5407] __alloc_skb+0x22a/0x7e0 [ 218.795290][ T5407] __pskb_copy_fclone+0xa6/0x1010 [ 218.800325][ T5407] hsr_create_tagged_frame+0x21f/0xc80 [ 218.805884][ T5407] hsr_forward_skb+0xf08/0x20d0 [ 218.810782][ T5407] hsr_dev_xmit+0x139/0x200 [ 218.815324][ T5407] dev_hard_start_xmit+0x262/0x870 [ 218.820452][ T5407] __dev_queue_xmit+0x1bf1/0x3760 [ 218.825492][ T5407] ip6_finish_output2+0xda2/0x1590 [ 218.830613][ T5407] page last free stack trace: [ 218.835285][ T5407] free_unref_page_prepare+0x8b4/0x9a0 [ 218.840756][ T5407] free_unref_page+0x2e/0x3f0 [ 218.845446][ T5407] qlist_free_all+0x76/0xe0 [ 218.849956][ T5407] kasan_quarantine_reduce+0x144/0x160 [ 218.855419][ T5407] __kasan_slab_alloc+0x1e/0x80 [ 218.860295][ T5407] slab_post_alloc_hook+0x4b/0x480 [ 218.865416][ T5407] kmem_cache_alloc+0x123/0x2f0 [ 218.870283][ T5407] vm_area_alloc+0x20/0xe0 [ 218.874718][ T5407] mmap_region+0xda0/0x1d30 [ 218.879244][ T5407] do_mmap+0x894/0xf30 [ 218.883325][ T5407] vm_mmap_pgoff+0x1b2/0x2b0 [ 218.887933][ T5407] ksys_mmap_pgoff+0x516/0x6f0 [ 218.892712][ T5407] do_syscall_64+0x4c/0xa0 [ 218.897168][ T5407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.903088][ T5407] [ 218.905418][ T5407] Memory state around the buggy address: [ 218.911053][ T5407] ffff88807edff300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 218.919128][ T5407] ffff88807edff380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 218.927199][ T5407] >ffff88807edff400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 218.935267][ T5407] ^ [ 218.940899][ T5407] ffff88807edff480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 218.948967][ T5407] ffff88807edff500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 218.957033][ T5407] ================================================================== [ 218.998990][ T5407] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 219.006243][ T5407] CPU: 0 PID: 5407 Comm: syz.1.244 Not tainted 6.1.146-syzkaller #0 [ 219.014228][ T5407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.024288][ T5407] Call Trace: [ 219.027570][ T5407] [ 219.030515][ T5407] dump_stack_lvl+0x168/0x22e [ 219.035237][ T5407] ? memcpy+0x3c/0x60 [ 219.039265][ T5407] ? show_regs_print_info+0x12/0x12 [ 219.044482][ T5407] ? load_image+0x3b0/0x3b0 [ 219.049021][ T5407] panic+0x2c9/0x710 [ 219.052927][ T5407] ? bpf_jit_dump+0xd0/0xd0 [ 219.057445][ T5407] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 219.063369][ T5407] ? _raw_spin_unlock+0x40/0x40 [ 219.068265][ T5407] check_panic_on_warn+0x80/0xa0 [ 219.073230][ T5407] ? rose_transmit_link+0x5b6/0x730 [ 219.078453][ T5407] end_report+0x66/0x110 [ 219.082701][ T5407] kasan_report+0x118/0x140 [ 219.087240][ T5407] ? rose_transmit_link+0x5b6/0x730 [ 219.092451][ T5407] rose_transmit_link+0x5b6/0x730 [ 219.097496][ T5407] ? skb_put+0x117/0x210 [ 219.101751][ T5407] rose_write_internal+0x1096/0x1eb0 [ 219.107135][ T5407] ? debug_object_assert_init+0x1ed/0x2f0 [ 219.112899][ T5407] ? rose_validate_nr+0x120/0x120 [ 219.117956][ T5407] ? skb_queue_purge+0x64/0x1b0 [ 219.122815][ T5407] rose_release+0x22a/0x4f0 [ 219.127329][ T5407] sock_close+0xd5/0x240 [ 219.131579][ T5407] ? sock_mmap+0x90/0x90 [ 219.135828][ T5407] __fput+0x22c/0x920 [ 219.139825][ T5407] task_work_run+0x1ca/0x250 [ 219.144416][ T5407] ? task_work_cancel+0x230/0x230 [ 219.149460][ T5407] get_signal+0x11a6/0x1350 [ 219.153991][ T5407] arch_do_signal_or_restart+0xb0/0x1230 [ 219.159640][ T5407] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 219.165085][ T5407] ? wake_bit_function+0x200/0x200 [ 219.170236][ T5407] ? __might_fault+0xa6/0x120 [ 219.174952][ T5407] ? get_sigframe_size+0x10/0x10 [ 219.179897][ T5407] ? __sys_connect+0x239/0x410 [ 219.184670][ T5407] ? exit_to_user_mode_loop+0x3b/0x110 [ 219.190138][ T5407] exit_to_user_mode_loop+0x70/0x110 [ 219.195432][ T5407] exit_to_user_mode_prepare+0xb1/0x140 [ 219.200987][ T5407] syscall_exit_to_user_mode+0x16/0x40 [ 219.206453][ T5407] do_syscall_64+0x58/0xa0 [ 219.210911][ T5407] ? clear_bhb_loop+0x60/0xb0 [ 219.215584][ T5407] ? clear_bhb_loop+0x60/0xb0 [ 219.220264][ T5407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.226183][ T5407] RIP: 0033:0x7faf5b38e9a9 [ 219.230711][ T5407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.250343][ T5407] RSP: 002b:00007faf5c252038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 219.258766][ T5407] RAX: fffffffffffffe00 RBX: 00007faf5b5b6160 RCX: 00007faf5b38e9a9 [ 219.266738][ T5407] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000b [ 219.274708][ T5407] RBP: 00007faf5b410d69 R08: 0000000000000000 R09: 0000000000000000 [ 219.282677][ T5407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.290666][ T5407] R13: 0000000000000000 R14: 00007faf5b5b6160 R15: 00007ffc916af6a8 [ 219.298671][ T5407] [ 219.302053][ T5407] Kernel Offset: disabled [ 219.306394][ T5407] Rebooting in 86400 seconds..