last executing test programs: 7.885363997s ago: executing program 4 (id=37): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x5) 6.877735197s ago: executing program 4 (id=42): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000300)={[{@utf8}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@check_relaxed}, {@overriderock}, {@hide}, {@session={'session', 0x3d, 0x32}}, {@map_off}, {@map_acorn}, {@mode={'mode', 0x3d, 0xb2eb}}, {@check_relaxed}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@overriderock}]}, 0x4, 0xa07, &(0x7f0000001f80)="$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") openat(0xffffffffffffff9c, 0x0, 0x1c9b41, 0x8) 5.47280827s ago: executing program 2 (id=54): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 4.739678139s ago: executing program 0 (id=55): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0xa031, 0xffffffffffffffff, 0xeb92e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 4.706139712s ago: executing program 2 (id=57): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x80000000, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x9, 0xb}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0xa, 0x8001, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.690114603s ago: executing program 4 (id=58): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.183743894s ago: executing program 2 (id=62): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x8000600) ioprio_get$pid(0x0, r0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 3.785429956s ago: executing program 4 (id=63): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card2/oss_mixer\x00', 0x2a0702, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.677474825s ago: executing program 1 (id=65): r0 = socket$rxrpc(0x21, 0x2, 0x2) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xec}}, 0x8890) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r2, 0x1, 0x0, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010000000000fcdbcf2554"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff0905"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_disconnect(r3) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3.474139661s ago: executing program 0 (id=66): syz_open_dev$hidraw(&(0x7f0000002300), 0xffffffffffffffff, 0x14a042) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) pipe2(&(0x7f0000000040), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x60d}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) socket$inet6(0xa, 0x2, 0x0) 3.310772064s ago: executing program 2 (id=68): syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r4], 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0xfffffffc}, 0x1c) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="6719", 0x2, 0x20004810, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f00000017c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 2.681697995s ago: executing program 4 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x1c, 0x0, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) 2.583568043s ago: executing program 0 (id=70): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000300)={[{@utf8}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@check_relaxed}, {@overriderock}, {@hide}, {@session={'session', 0x3d, 0x32}}, {@map_off}, {@map_acorn}, {@mode={'mode', 0x3d, 0xb2eb}}, {@check_relaxed}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@overriderock}]}, 0x4, 0xa07, &(0x7f0000001f80)="$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") openat(0xffffffffffffff9c, 0x0, 0x1c9b41, 0x8) 2.542736516s ago: executing program 3 (id=71): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="020a030002000000e4a17c45", 0xc}], 0x1}, 0x0) 2.142615548s ago: executing program 3 (id=72): socket$nl_audit(0x10, 0x3, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket(0x1000000000000010, 0x80802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB='\n\x00\x00\x00\t\x00\x00\x00\b\x00'], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$kcm(0x2, 0xa, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.079220923s ago: executing program 1 (id=73): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x80000000, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x9, 0xb}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0xa, 0x8001, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.057187315s ago: executing program 3 (id=74): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.971768782s ago: executing program 1 (id=75): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x8000600) ioprio_get$pid(0x0, r0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c, 0x2, 0x2, 0x101, 0x70bd29, 0x25dfdbfd, {0x1, 0x0, 0xa}, [@typed={0x8, 0x4b, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) dup3(r3, r4, 0x0) 1.919240666s ago: executing program 3 (id=76): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x40) dup3(r2, r0, 0x80000) 1.593688402s ago: executing program 4 (id=77): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0xa031, 0xffffffffffffffff, 0xeb92e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.469166472s ago: executing program 3 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x61, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x1d) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0xc810) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xcf) close_range(r2, 0xffffffffffffffff, 0x0) 1.11446659s ago: executing program 1 (id=79): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card2/oss_mixer\x00', 0x2a0702, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.018762099s ago: executing program 0 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x8000600) ioprio_get$pid(0x0, r0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c, 0x2, 0x2, 0x101, 0x70bd29, 0x25dfdbfd, {0x1, 0x0, 0xa}, [@typed={0x8, 0x4b, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) dup3(0xffffffffffffffff, r3, 0x0) 514.244739ms ago: executing program 3 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x8000600) ioprio_get$pid(0x0, r0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 80.077284ms ago: executing program 1 (id=82): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="020a030002000000e4a17c45", 0xc}], 0x1}, 0x0) 79.823253ms ago: executing program 0 (id=83): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) 67.088105ms ago: executing program 2 (id=84): socket$nl_audit(0x10, 0x3, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket(0x1000000000000010, 0x80802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB='\n\x00\x00\x00\t\x00\x00\x00\b\x00'], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$kcm(0x2, 0xa, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 48.481706ms ago: executing program 0 (id=85): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x80000000, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x9, 0xb}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0xa, 0x8001, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 14.033699ms ago: executing program 1 (id=86): r0 = socket$rxrpc(0x21, 0x2, 0x2) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0xfffffffc) 0s ago: executing program 2 (id=87): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts. [ 31.060923][ T4034] cgroup: Unknown subsys name 'net' [ 31.334564][ T4034] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.615340][ T4034] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 32.898651][ T4049] chnl_net:caif_netlink_parms(): no params data found [ 32.904496][ T4051] chnl_net:caif_netlink_parms(): no params data found [ 32.946609][ T4044] chnl_net:caif_netlink_parms(): no params data found [ 32.948543][ T4047] chnl_net:caif_netlink_parms(): no params data found [ 32.976913][ T4051] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.978135][ T4051] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.979682][ T4051] device bridge_slave_0 entered promiscuous mode [ 32.982861][ T4051] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.983859][ T4051] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.985274][ T4051] device bridge_slave_1 entered promiscuous mode [ 32.986958][ T4049] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.988173][ T4049] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.989602][ T4049] device bridge_slave_0 entered promiscuous mode [ 32.996790][ T4050] chnl_net:caif_netlink_parms(): no params data found [ 33.001218][ T4049] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.002552][ T4049] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.003953][ T4049] device bridge_slave_1 entered promiscuous mode [ 33.027904][ T4051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.029450][ T4047] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.030688][ T4047] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.032413][ T4047] device bridge_slave_0 entered promiscuous mode [ 33.040895][ T4051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.042697][ T4047] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.043846][ T4047] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.045337][ T4047] device bridge_slave_1 entered promiscuous mode [ 33.050312][ T4049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.066804][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.067978][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.069525][ T4044] device bridge_slave_0 entered promiscuous mode [ 33.072418][ T4049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.077218][ T4051] team0: Port device team_slave_0 added [ 33.079122][ T4047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.080658][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.081967][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.083525][ T4044] device bridge_slave_1 entered promiscuous mode [ 33.087248][ T4050] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.088380][ T4050] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.089797][ T4050] device bridge_slave_0 entered promiscuous mode [ 33.094925][ T4051] team0: Port device team_slave_1 added [ 33.096747][ T4047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.105617][ T4050] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.106735][ T4050] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.108393][ T4050] device bridge_slave_1 entered promiscuous mode [ 33.118578][ T4044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.120885][ T4049] team0: Port device team_slave_0 added [ 33.129935][ T4044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.137640][ T4049] team0: Port device team_slave_1 added [ 33.141279][ T4051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.142582][ T4051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.146740][ T4051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.149699][ T4047] team0: Port device team_slave_0 added [ 33.157200][ T4044] team0: Port device team_slave_0 added [ 33.161402][ T4050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.163401][ T4051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.164531][ T4051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.168642][ T4051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.171407][ T4050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.173480][ T4047] team0: Port device team_slave_1 added [ 33.179831][ T4044] team0: Port device team_slave_1 added [ 33.187667][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.188740][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.193101][ T4049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.195353][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.196399][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.200313][ T4049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.207883][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.209036][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.213611][ T4044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.215866][ T4047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.216964][ T4047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.221276][ T4047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.227096][ T4050] team0: Port device team_slave_0 added [ 33.230196][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.231302][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.235693][ T4044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.237836][ T4047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.238960][ T4047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.243070][ T4047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.250701][ T4050] team0: Port device team_slave_1 added [ 33.312867][ T4051] device hsr_slave_0 entered promiscuous mode [ 33.351978][ T4051] device hsr_slave_1 entered promiscuous mode [ 33.398645][ T4050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.399750][ T4050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.404376][ T4050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.410390][ T4050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.411438][ T4050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.418411][ T4050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.462748][ T4049] device hsr_slave_0 entered promiscuous mode [ 33.501977][ T4049] device hsr_slave_1 entered promiscuous mode [ 33.541794][ T4049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.543067][ T4049] Cannot create hsr debugfs directory [ 33.632669][ T4044] device hsr_slave_0 entered promiscuous mode [ 33.671869][ T4044] device hsr_slave_1 entered promiscuous mode [ 33.731750][ T4044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.732997][ T4044] Cannot create hsr debugfs directory [ 33.762728][ T4047] device hsr_slave_0 entered promiscuous mode [ 33.811966][ T4047] device hsr_slave_1 entered promiscuous mode [ 33.871738][ T4047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.872989][ T4047] Cannot create hsr debugfs directory [ 33.932838][ T4050] device hsr_slave_0 entered promiscuous mode [ 33.981938][ T4050] device hsr_slave_1 entered promiscuous mode [ 34.021864][ T4050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.023055][ T4050] Cannot create hsr debugfs directory [ 34.123862][ T4051] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.176861][ T4051] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.203222][ T4051] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.242917][ T4051] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.312686][ T4049] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.346962][ T4049] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.385206][ T4049] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.433717][ T4049] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.473416][ T4047] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.536023][ T4047] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.575329][ T4047] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.642272][ T4047] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.696677][ T4050] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.759852][ T4051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.764574][ T4050] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.809747][ T4050] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.812336][ T1970] Bluetooth: hci2: command 0x0409 tx timeout [ 34.813625][ T1970] Bluetooth: hci4: command 0x0409 tx timeout [ 34.814640][ T1970] Bluetooth: hci1: command 0x0409 tx timeout [ 34.814949][ T4097] Bluetooth: hci3: command 0x0409 tx timeout [ 34.815692][ T1970] Bluetooth: hci0: command 0x0409 tx timeout [ 34.843161][ T4050] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.886540][ T4051] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.895643][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.897325][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.898848][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.900908][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.902603][ T1621] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.903800][ T1621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.905114][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.906659][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.908021][ T1621] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.909139][ T1621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.910418][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.912547][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.914206][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.915756][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.928048][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.929653][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.936966][ T4044] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.966866][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.968500][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.972605][ T4044] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.015156][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.017882][ T4044] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.062807][ T4044] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.105014][ T4051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.107077][ T4051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.109257][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.120652][ T4049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.141033][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.142960][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.151050][ T4049] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.154075][ T4050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.159581][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.161154][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.164081][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.165265][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.166808][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.176683][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.178266][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.179878][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.180995][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.189549][ T4051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.191626][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.193336][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.194668][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.196071][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.197269][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.205935][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.207578][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.211215][ T4047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.218086][ T4050] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.219299][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.235318][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.236809][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.238226][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.239319][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.240612][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.242292][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.243800][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.245211][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.246690][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.248098][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.249550][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.250876][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.258916][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.260354][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.263452][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.264744][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.266078][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.267479][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.268874][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.270531][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.272879][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.274290][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.277213][ T4047] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.280303][ T4051] device veth0_vlan entered promiscuous mode [ 35.284471][ T4049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.286457][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.289263][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.290906][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.292936][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.294290][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.295370][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.296706][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.298300][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.299858][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.310349][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.311985][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.313373][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.314858][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.315932][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.318579][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.320471][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.328803][ T4044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.333254][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.334666][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.338954][ T4051] device veth1_vlan entered promiscuous mode [ 35.341438][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.343165][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.344762][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.346444][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.347933][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.349397][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.361113][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.362696][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.364705][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.366267][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.367827][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.369596][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.370999][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.372825][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.374341][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.376270][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.379175][ T4050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.381329][ T4044] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.387468][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.389057][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.390675][ T1621] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.391823][ T1621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.396261][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.397791][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.399223][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.404544][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.405786][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.406994][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.408418][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.413761][ T4049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.420297][ T4051] device veth0_macvtap entered promiscuous mode [ 35.422912][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.424447][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.425782][ T1640] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.426955][ T1640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.428254][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.429913][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.432880][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.436996][ T4051] device veth1_macvtap entered promiscuous mode [ 35.438514][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.439998][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.451227][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.453023][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.454691][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.456352][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.457785][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.459293][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.460808][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.463058][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.464429][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.465857][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.467330][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.474225][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.475847][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.481934][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.483430][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.487818][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.489246][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.491532][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.502419][ T4049] device veth0_vlan entered promiscuous mode [ 35.505761][ T4051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.507664][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.509375][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.519993][ T4051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.523767][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.525316][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.527678][ T4049] device veth1_vlan entered promiscuous mode [ 35.536117][ T4047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.539754][ T4051] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.541105][ T4051] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.542561][ T4051] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.543881][ T4051] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.545742][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.547253][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.548621][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.549814][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.554219][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.555482][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.558804][ T4050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.590691][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.597042][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.598339][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.604747][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.606452][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.620605][ T1640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.622413][ T1640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.623620][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.625200][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.627787][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.629738][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.631191][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.637612][ T4049] device veth0_macvtap entered promiscuous mode [ 35.642526][ T4047] device veth0_vlan entered promiscuous mode [ 35.648175][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.649638][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.651215][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.653139][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.654487][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.659271][ T4049] device veth1_macvtap entered promiscuous mode [ 35.667137][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.668570][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.671083][ T4047] device veth1_vlan entered promiscuous mode [ 35.673990][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.675490][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.677000][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.679379][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.680965][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.684508][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.691499][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.693223][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.696449][ T4044] device veth0_vlan entered promiscuous mode [ 35.699256][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.700793][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.703268][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.706221][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.707735][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.709303][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.710972][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.717380][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.722411][ T4044] device veth1_vlan entered promiscuous mode [ 35.740545][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.742121][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.743519][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.744947][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.756314][ T4155] tipc: Started in network mode [ 35.757169][ T4155] tipc: Node identity aef5af9b3878, cluster identity 4711 [ 35.758288][ T4155] tipc: Enabled bearer , priority 0 [ 35.759666][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.761290][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.763541][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.765121][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.767653][ T4155] device syzkaller0 entered promiscuous mode [ 35.769601][ T4049] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.770979][ T4049] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.773358][ T4049] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.774682][ T4049] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.777572][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.779288][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.783145][ T4047] device veth0_macvtap entered promiscuous mode [ 35.785772][ T4047] device veth1_macvtap entered promiscuous mode [ 35.790785][ T4044] device veth0_macvtap entered promiscuous mode [ 35.796637][ T4155] tipc: Resetting bearer [ 35.800397][ T4044] device veth1_macvtap entered promiscuous mode [ 35.805455][ T4154] tipc: Resetting bearer [ 35.808897][ T4154] tipc: Disabling bearer [ 35.816377][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.818241][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.819775][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.821453][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.826698][ T4047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.830585][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.832633][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.834060][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.835440][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.836869][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.838864][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.840442][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.842075][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.843863][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.845193][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.847326][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.849119][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.850782][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.853401][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.855406][ T4047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.856559][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.858056][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.864824][ T4050] device veth0_vlan entered promiscuous mode [ 35.888955][ T4050] device veth1_vlan entered promiscuous mode [ 35.894408][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.896401][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.898099][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.900083][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.906547][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.908140][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.910409][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.913334][ T4047] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.914646][ T4047] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.915860][ T4047] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.917162][ T4047] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.920677][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.922588][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.923895][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.925425][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.927738][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.929426][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.931344][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.934055][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.935588][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.937233][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.939325][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.941536][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.943618][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.954140][ T1640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.955335][ T1640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.957170][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.958631][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.960103][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.969347][ T4050] device veth0_macvtap entered promiscuous mode [ 35.979128][ T4050] device veth1_macvtap entered promiscuous mode [ 35.983237][ T4044] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.984553][ T4044] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.985884][ T4044] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.987107][ T4044] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.999985][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.002101][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.003341][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.014080][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.015610][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.017085][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.018507][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.020088][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.021638][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.023445][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.025619][ T4050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.028125][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.029924][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.031290][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.034548][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.036319][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.065435][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.067203][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.069556][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.071251][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.073336][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.074854][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.076282][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.077805][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.079795][ T4050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.088280][ T4050] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.089592][ T4050] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.090839][ T4050] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.093586][ T4050] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.095765][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.097426][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.107304][ T1605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.108778][ T1605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.183935][ T4166] ======================================================= [ 36.183935][ T4166] WARNING: The mand mount option has been deprecated and [ 36.183935][ T4166] and is ignored by this kernel. Remove the mand [ 36.183935][ T4166] option from the mount to silence this warning. [ 36.183935][ T4166] ======================================================= [ 36.457447][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.512999][ T1605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.514381][ T1605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.520719][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.522952][ T1621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.524146][ T1621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.526163][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.544212][ T1621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.545513][ T1621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.551380][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.564143][ T1640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.565417][ T1640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.567454][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.587470][ T1605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.588998][ T1605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.591115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.991437][ T4175] loop2: detected capacity change from 0 to 1764 [ 37.157405][ T4171] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 37.167342][ T1970] Bluetooth: hci0: command 0x041b tx timeout [ 37.168462][ T1970] Bluetooth: hci3: command 0x041b tx timeout [ 37.169473][ T1970] Bluetooth: hci1: command 0x041b tx timeout [ 37.170381][ T1970] Bluetooth: hci4: command 0x041b tx timeout [ 37.171420][ T1970] Bluetooth: hci2: command 0x041b tx timeout [ 37.199679][ T4175] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 37.225947][ T4178] tipc: Started in network mode [ 37.226891][ T4178] tipc: Node identity e63a05c17c65, cluster identity 4711 [ 37.231166][ T4178] tipc: Enabled bearer , priority 0 [ 37.247248][ T4180] tipc: Enabling of bearer rejected, failed to enable media [ 37.251433][ T4178] device syzkaller0 entered promiscuous mode [ 37.286495][ T4172] tipc: Resetting bearer [ 37.317016][ T4172] tipc: Disabling bearer [ 37.322707][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 37.351952][ T4183] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 37.378610][ T4183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 38.487753][ T4214] tipc: Enabled bearer , priority 0 [ 38.489383][ T4214] device syzkaller0 entered promiscuous mode [ 38.522564][ T4214] tipc: Resetting bearer [ 38.524933][ T4213] tipc: Resetting bearer [ 38.528843][ T4213] tipc: Disabling bearer [ 39.396463][ T4103] Bluetooth: hci2: command 0x040f tx timeout [ 39.397890][ T4103] Bluetooth: hci4: command 0x040f tx timeout [ 39.399043][ T4103] Bluetooth: hci1: command 0x040f tx timeout [ 39.400073][ T4103] Bluetooth: hci3: command 0x040f tx timeout [ 39.401230][ T4103] Bluetooth: hci0: command 0x040f tx timeout [ 39.489848][ T4229] tipc: Enabled bearer , priority 0 [ 39.491458][ T4229] device syzkaller0 entered promiscuous mode [ 39.499620][ T4228] tipc: Resetting bearer [ 39.506817][ T4228] tipc: Disabling bearer [ 40.710839][ T4238] tipc: Enabling of bearer rejected, failed to enable media [ 40.996329][ T4253] loop3: detected capacity change from 0 to 1764 [ 41.136515][ T4253] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 41.452375][ T4120] Bluetooth: hci0: command 0x0419 tx timeout [ 41.454477][ T4120] Bluetooth: hci3: command 0x0419 tx timeout [ 41.456749][ T4120] Bluetooth: hci1: command 0x0419 tx timeout [ 41.457809][ T4120] Bluetooth: hci4: command 0x0419 tx timeout [ 41.458966][ T4120] Bluetooth: hci2: command 0x0419 tx timeout [ 42.529209][ T4279] tipc: Enabling of bearer rejected, failed to enable media [ 44.128781][ T4319] tipc: Enabled bearer , priority 0 [ 44.130683][ T4319] device syzkaller0 entered promiscuous mode [ 44.137438][ T4318] tipc: Resetting bearer [ 44.144747][ T4318] tipc: Disabling bearer [ 44.237790][ T4322] tipc: Enabled bearer , priority 0 [ 44.239335][ T4322] device syzkaller0 entered promiscuous mode [ 44.247752][ T4322] tipc: Resetting bearer [ 44.250265][ T4321] tipc: Resetting bearer [ 44.254439][ T4321] tipc: Disabling bearer [ 44.261301][ T4320] loop4: detected capacity change from 0 to 1764 [ 44.338156][ T4320] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 44.826981][ T4332] tipc: Enabling of bearer rejected, failed to enable media [ 46.165674][ T4363] tipc: Started in network mode [ 46.166749][ T4363] tipc: Node identity 925bbc7800fe, cluster identity 4711 [ 46.167956][ T4363] tipc: Enabled bearer , priority 0 [ 46.188563][ T4363] device syzkaller0 entered promiscuous mode [ 46.196000][ T4362] tipc: Resetting bearer [ 46.203478][ T4362] tipc: Disabling bearer [ 46.253521][ T4368] tipc: Enabled bearer , priority 0 [ 46.254968][ T4368] device syzkaller0 entered promiscuous mode [ 46.262365][ T4368] tipc: Resetting bearer [ 46.264409][ T4366] tipc: Resetting bearer [ 46.616313][ T4366] tipc: Disabling bearer [ 47.190667][ T4387] udc-core: couldn't find an available UDC or it's busy [ 47.192108][ T4387] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 47.548316][ T4395] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input2 [ 48.065044][ T4399] udc-core: couldn't find an available UDC or it's busy [ 48.066217][ T4399] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.385955][ T4406] binder: 4400:4406 unknown command 1074553619 [ 48.387182][ T4406] binder: 4400:4406 ioctl c0306201 20000040 returned -22 [ 48.761577][ T4413] tipc: Enabled bearer , priority 0 [ 48.763325][ T4413] device syzkaller0 entered promiscuous mode [ 48.767881][ T4412] tipc: Resetting bearer [ 48.787027][ T4412] tipc: Disabling bearer [ 48.794533][ T4414] loop0: detected capacity change from 0 to 1764 [ 48.795377][ T4416] tipc: Started in network mode [ 48.797414][ T4416] tipc: Node identity 4a48c97f31f2, cluster identity 4711 [ 48.798686][ T4416] tipc: Enabled bearer , priority 0 [ 48.800458][ T4416] device syzkaller0 entered promiscuous mode [ 48.813983][ T4415] tipc: Resetting bearer [ 48.821597][ T4415] tipc: Disabling bearer [ 48.835874][ T4414] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 50.800451][ T4448] tipc: Started in network mode [ 50.801247][ T4448] tipc: Node identity f20dd6cacc42, cluster identity 4711 [ 50.804174][ T4448] tipc: Enabled bearer , priority 0 [ 50.805665][ T4448] device syzkaller0 entered promiscuous mode [ 50.809060][ T4447] tipc: Resetting bearer [ 50.822952][ T4447] tipc: Disabling bearer [ 50.840373][ T4061] ================================================================== [ 50.841697][ T4061] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0xcd0/0x3010 [ 50.842805][ T4061] Read of size 1 at addr ffff0000d70bc40a by task kworker/u5:5/4061 [ 50.843998][ T4061] [ 50.844398][ T4061] CPU: 1 PID: 4061 Comm: kworker/u5:5 Not tainted 5.15.189-syzkaller #0 [ 50.845838][ T4061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 50.847428][ T4061] Workqueue: hci1 hci_rx_work [ 50.848148][ T4061] Call trace: [ 50.848636][ T4061] dump_backtrace+0x0/0x43c [ 50.849334][ T4061] show_stack+0x2c/0x3c [ 50.850027][ T4061] __dump_stack+0x30/0x40 [ 50.850760][ T4061] dump_stack_lvl+0xf8/0x160 [ 50.851542][ T4061] print_address_description+0x78/0x30c [ 50.852443][ T4061] kasan_report+0xec/0x15c [ 50.853216][ T4061] __asan_report_load1_noabort+0x44/0x50 [ 50.854132][ T4061] hci_le_meta_evt+0xcd0/0x3010 [ 50.854915][ T4061] hci_event_packet+0xd10/0x11bc [ 50.855752][ T4061] hci_rx_work+0x1cc/0x880 [ 50.856534][ T4061] process_one_work+0x79c/0x1140 [ 50.857402][ T4061] worker_thread+0x8f4/0x101c [ 50.858216][ T4061] kthread+0x374/0x454 [ 50.858914][ T4061] ret_from_fork+0x10/0x20 [ 50.859617][ T4061] [ 50.859969][ T4061] Allocated by task 4452: [ 50.860620][ T4061] __kasan_kmalloc+0xb0/0xf0 [ 50.861263][ T4061] __kmalloc_node_track_caller+0x234/0x3bc [ 50.862213][ T4061] kmalloc_reserve+0xe4/0x26c [ 50.862946][ T4061] __alloc_skb+0x23c/0x67c [ 50.863652][ T4061] vhci_write+0xb8/0x3ac [ 50.864254][ T4061] vfs_write+0x7c8/0xa2c [ 50.864937][ T4061] ksys_write+0x120/0x210 [ 50.865655][ T4061] __arm64_sys_write+0x7c/0x90 [ 50.866430][ T4061] invoke_syscall+0x98/0x2b8 [ 50.867152][ T4061] el0_svc_common+0x138/0x258 [ 50.867929][ T4061] do_el0_svc+0x58/0x14c [ 50.868649][ T4061] el0_svc+0x78/0x1e0 [ 50.869248][ T4061] el0t_64_sync_handler+0xcc/0xe4 [ 50.869991][ T4061] el0t_64_sync+0x1a0/0x1a4 [ 50.870716][ T4061] [ 50.871103][ T4061] The buggy address belongs to the object at ffff0000d70bc000 [ 50.871103][ T4061] which belongs to the cache kmalloc-1k of size 1024 [ 50.873222][ T4061] The buggy address is located 10 bytes to the right of [ 50.873222][ T4061] 1024-byte region [ffff0000d70bc000, ffff0000d70bc400) [ 50.875319][ T4061] The buggy address belongs to the page: [ 50.876174][ T4061] page:000000006c9e0cfc refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1170b8 [ 50.877618][ T4061] head:000000006c9e0cfc order:3 compound_mapcount:0 compound_pincount:0 [ 50.878815][ T4061] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 50.880042][ T4061] raw: 05ffc00000010200 fffffc0003adea00 0000000600000006 ffff0000c0002780 [ 50.881432][ T4061] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 50.882793][ T4061] page dumped because: kasan: bad access detected [ 50.883864][ T4061] [ 50.884231][ T4061] Memory state around the buggy address: [ 50.885126][ T4061] ffff0000d70bc300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 50.886386][ T4061] ffff0000d70bc380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 50.887664][ T4061] >ffff0000d70bc400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 50.889026][ T4061] ^ [ 50.889720][ T4061] ffff0000d70bc480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 50.890996][ T4061] ffff0000d70bc500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 50.892385][ T4061] ================================================================== [ 50.893669][ T4061] Disabling lock debugging due to kernel taint