last executing test programs: 32.280363288s ago: executing program 4 (id=371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 29.672814807s ago: executing program 4 (id=386): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000004100)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x2052, r4, 0x4b000) 28.473604856s ago: executing program 4 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x0, 0x14be, 0x7e5e, 0x10000, 0x600000], 0x1, &(0x7f0000000040)=[{}], 0x0, [{}]}, 0x88) 27.96700981s ago: executing program 4 (id=392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 25.837919556s ago: executing program 4 (id=396): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) 25.573297778s ago: executing program 4 (id=398): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100fa"], 0x48) 10.168546004s ago: executing program 32 (id=398): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100fa"], 0x48) 6.132023954s ago: executing program 0 (id=485): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4.813269704s ago: executing program 0 (id=504): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfe, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 4.700027765s ago: executing program 0 (id=507): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @multicast}) 4.641657975s ago: executing program 0 (id=510): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) 4.452080887s ago: executing program 0 (id=513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xd2, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.250744323s ago: executing program 1 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x0, 0x14be, 0x7e5e, 0x10000, 0x600000], 0x1, &(0x7f0000000040)=[{}], 0x0, [{}]}, 0x88) 1.904742356s ago: executing program 5 (id=450): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r4, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) 1.743964187s ago: executing program 3 (id=529): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.625915958s ago: executing program 3 (id=530): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x61ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2042, 0x0) 1.553427078s ago: executing program 3 (id=531): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000004100)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x2052, r2, 0x4b000) 1.247674101s ago: executing program 3 (id=532): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @multicast}) 1.207057761s ago: executing program 1 (id=533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x1d, 0xb, 0x0, 0x1000}]}) 1.155565931s ago: executing program 3 (id=534): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef) 1.032001292s ago: executing program 1 (id=535): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x20008040) 1.022418482s ago: executing program 2 (id=536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'vlan1\x00', 0x400}) 948.941902ms ago: executing program 5 (id=537): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000633277fbac141416ac14141683fe9f034d2f87e589036aab845013f2325f1a39060702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 792.011854ms ago: executing program 5 (id=538): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x3, 0x5, 0x1000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 714.254334ms ago: executing program 5 (id=539): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe35, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='signal_generate\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="85000000180000005d0000000000000095000000000000000a621cf434b9eaafdc2a00e9bfde908990817b364e51afe9c8dab05b16a6437211f9f0570759f1cae63487ff68fffffffffffe8e3932e2b75a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba7541189070000f50c000000d8e5b1dc91c5499be2097784a94b6cc2d272ac751d8bce5db4862c1b2eab7007ceea158dbc329bab5f8450147b2b9629fdd6cdb5507d3a76dbaf6f93d161caa513f8aa41f795507856ea0015166c56ea0103220ed5a66834be086ef206a8606b04fc8462cbbe8233f381b4eefbdbdac708c1f4959cb6c008397006da8e243ec9fb19f3fab2b0f46d73a9f2d7c674cdbe4d7f76f5fbd05043e81f435fccf5063a93aa9b4c7f68670594"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071103f200000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/52}, 0x55) 691.037284ms ago: executing program 3 (id=540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63"], 0xfdef) 661.349075ms ago: executing program 1 (id=541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x803}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) close(0x3) 591.924335ms ago: executing program 2 (id=542): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000004100)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x2052, r2, 0x4b000) 559.985226ms ago: executing program 5 (id=543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x0, 0x14be, 0x7e5e, 0x10000, 0x600000], 0x1, &(0x7f0000000040)=[{}], 0x0, [{}]}, 0x88) 412.216787ms ago: executing program 1 (id=544): close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @multicast}) 380.896977ms ago: executing program 2 (id=545): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xc, [@enum={0x8, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x90}, {0x2, 0x7ff}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x0, 0x5f, 0x2e, 0x2e, 0x5f, 0x30, 0x5f]}}, &(0x7f0000000580)=""/249, 0x40, 0xf9, 0x1, 0x0, 0x0, @void, @value}, 0x28) 287.904158ms ago: executing program 0 (id=546): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x7e0, 0x628, 0x3f8, 0x3f8, 0xeaffffff, 0x628, 0x710, 0x710, 0x710, 0x710, 0x710, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast1, [], [], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@dev, @empty, @remote, @private2, @private1, @dev, @loopback, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @loopback, @local, @private1, @dev]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'nr0\x00'}}}, {{@ipv6={@empty, @private0, [], [], 'sit0\x00', 'sit0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x840) 285.677577ms ago: executing program 1 (id=547): sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040001) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e39dc4509df33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 275.234797ms ago: executing program 2 (id=548): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x61ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2042, 0x0) 239.061618ms ago: executing program 2 (id=549): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 0s ago: executing program 2 (id=550): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xde000, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.21' (ED25519) to the list of known hosts. syzkaller login: [ 43.684997][ T4012] cgroup: Unknown subsys name 'net' [ 43.980337][ T4012] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 44.301690][ T4012] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 45.612318][ T4026] chnl_net:caif_netlink_parms(): no params data found [ 45.648660][ T4022] chnl_net:caif_netlink_parms(): no params data found [ 45.728168][ T4026] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.729904][ T4026] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.732262][ T4026] device bridge_slave_0 entered promiscuous mode [ 45.737605][ T4026] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.739365][ T4026] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.741809][ T4026] device bridge_slave_1 entered promiscuous mode [ 45.746601][ T4029] chnl_net:caif_netlink_parms(): no params data found [ 45.816000][ T4026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.833592][ T4026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.868781][ T4027] chnl_net:caif_netlink_parms(): no params data found [ 45.880455][ T4022] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.882077][ T4022] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.885262][ T4022] device bridge_slave_0 entered promiscuous mode [ 45.891619][ T4026] team0: Port device team_slave_0 added [ 45.903285][ T4022] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.905215][ T4022] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.907362][ T4022] device bridge_slave_1 entered promiscuous mode [ 45.910435][ T4026] team0: Port device team_slave_1 added [ 45.922895][ T4029] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.926103][ T4029] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.928434][ T4029] device bridge_slave_0 entered promiscuous mode [ 45.947336][ T4029] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.948996][ T4029] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.951424][ T4029] device bridge_slave_1 entered promiscuous mode [ 45.959556][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.961141][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.967394][ T4026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.976373][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.977911][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.983149][ T4026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.994122][ T4022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.001713][ T4033] chnl_net:caif_netlink_parms(): no params data found [ 46.021125][ T4022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.029594][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.031160][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.033328][ T4027] device bridge_slave_0 entered promiscuous mode [ 46.047349][ T4029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.061603][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.063253][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.067331][ T4027] device bridge_slave_1 entered promiscuous mode [ 46.078730][ T4029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.088700][ T4022] team0: Port device team_slave_0 added [ 46.110945][ T4022] team0: Port device team_slave_1 added [ 46.186492][ T4026] device hsr_slave_0 entered promiscuous mode [ 46.244518][ T4026] device hsr_slave_1 entered promiscuous mode [ 46.306497][ T4029] team0: Port device team_slave_0 added [ 46.316505][ T4027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.320668][ T4027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.331491][ T4029] team0: Port device team_slave_1 added [ 46.352250][ T4033] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.353796][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.356312][ T4033] device bridge_slave_0 entered promiscuous mode [ 46.367794][ T4022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.369425][ T4022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.375106][ T4022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.378994][ T4022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.380516][ T4022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.386707][ T4022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.395470][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.397073][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.399380][ T4033] device bridge_slave_1 entered promiscuous mode [ 46.416662][ T4027] team0: Port device team_slave_0 added [ 46.432582][ T4033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.435294][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.436789][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.442511][ T4029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.456804][ T4027] team0: Port device team_slave_1 added [ 46.465403][ T4033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.475413][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.476965][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.482352][ T4029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.546166][ T4022] device hsr_slave_0 entered promiscuous mode [ 46.594659][ T4022] device hsr_slave_1 entered promiscuous mode [ 46.634452][ T4022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.636334][ T4022] Cannot create hsr debugfs directory [ 46.638153][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.639711][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.645836][ T4027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.650795][ T4033] team0: Port device team_slave_0 added [ 46.652706][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.654333][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.660136][ T4027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.689217][ T4033] team0: Port device team_slave_1 added [ 46.736032][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.737876][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.743411][ T4033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.771298][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.772813][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.778455][ T4033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.826288][ T4029] device hsr_slave_0 entered promiscuous mode [ 46.885019][ T4029] device hsr_slave_1 entered promiscuous mode [ 46.924332][ T4029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.925958][ T4029] Cannot create hsr debugfs directory [ 46.986312][ T4027] device hsr_slave_0 entered promiscuous mode [ 47.044644][ T4027] device hsr_slave_1 entered promiscuous mode [ 47.094417][ T4027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.096249][ T4027] Cannot create hsr debugfs directory [ 47.206334][ T4033] device hsr_slave_0 entered promiscuous mode [ 47.244643][ T4033] device hsr_slave_1 entered promiscuous mode [ 47.294270][ T4033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.296066][ T4033] Cannot create hsr debugfs directory [ 47.394941][ T1959] Bluetooth: hci0: command 0x0409 tx timeout [ 47.399904][ T4026] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.450149][ T4026] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.464514][ T25] Bluetooth: hci2: command 0x0409 tx timeout [ 47.465857][ T25] Bluetooth: hci3: command 0x0409 tx timeout [ 47.467225][ T25] Bluetooth: hci1: command 0x0409 tx timeout [ 47.503864][ T4026] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.544639][ T1959] Bluetooth: hci4: command 0x0409 tx timeout [ 47.550505][ T4026] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.662204][ T4022] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.706557][ T4022] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.749979][ T4022] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.806817][ T4022] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.877192][ T4029] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.896719][ T4029] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.952657][ T4029] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.001043][ T4029] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.095785][ T4027] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.152011][ T4027] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.187882][ T4026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.193481][ T4027] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.246349][ T4027] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.308575][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.312926][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.327009][ T4026] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.329688][ T4033] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 48.355874][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.358392][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.361213][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.362809][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.365459][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.369346][ T4033] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 48.397240][ T4033] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 48.453955][ T4022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.461066][ T4033] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 48.512112][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.515341][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.517730][ T1552] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.519476][ T1552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.541605][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.545475][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.547613][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.559825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.575556][ T4022] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.577763][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.580791][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.583288][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.593540][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.598448][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.616293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.618767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.620886][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.622548][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.625094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.627601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.630088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.638244][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.640865][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.643113][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.647145][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.649378][ T394] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.650970][ T394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.657976][ T4029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.662620][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.673700][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.690292][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.708171][ T4029] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.709981][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.712567][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.731148][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.733707][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.744289][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.745831][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.750565][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.752940][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.756708][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.758378][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.760333][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.762724][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.772648][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.775841][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.790986][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.793602][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.796386][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.816826][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.819528][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.822202][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.851178][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.853465][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.856975][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.859586][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.861844][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.864118][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.867395][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.875232][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.901851][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.905847][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.907995][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.909730][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.918550][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.920891][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.931907][ T4026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.943411][ T4027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.947463][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.995468][ T4033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.997669][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.999718][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.002866][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.009546][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.029645][ T4027] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.032513][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.034417][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.050309][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.052552][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.061150][ T4022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.073078][ T4033] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.081725][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.086932][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.089307][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.090965][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.100696][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.102910][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.112076][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.122919][ T4026] device veth0_vlan entered promiscuous mode [ 49.130146][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.132370][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.135197][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.137413][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.139523][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.141085][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.143122][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.147202][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.151260][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.153655][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.156504][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.158285][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.162645][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.165630][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.179406][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.181849][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.184018][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.185611][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.197458][ T4026] device veth1_vlan entered promiscuous mode [ 49.201166][ T4029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.203346][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.208475][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.210760][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.212977][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.232954][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.235797][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.238044][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.240557][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.257894][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.260005][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.262221][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.267517][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.269848][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.283238][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.285653][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.287919][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.290151][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.292359][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.296323][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.311500][ T4022] device veth0_vlan entered promiscuous mode [ 49.317819][ T4027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.320791][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.323150][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.325946][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.328236][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.330568][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.333285][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.336585][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.338896][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.341279][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.356617][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.359110][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.361442][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.363838][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.382575][ T4026] device veth0_macvtap entered promiscuous mode [ 49.390782][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.395441][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.397772][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.403851][ T4029] device veth0_vlan entered promiscuous mode [ 49.411522][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.413975][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.419529][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.421933][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.426523][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.437827][ T4022] device veth1_vlan entered promiscuous mode [ 49.440578][ T4026] device veth1_macvtap entered promiscuous mode [ 49.447724][ T4029] device veth1_vlan entered promiscuous mode [ 49.464809][ T3605] Bluetooth: hci0: command 0x041b tx timeout [ 49.518491][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.521091][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.523251][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.526745][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.528959][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.531531][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.533765][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.537042][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.539376][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.541758][ T1552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.544913][ T3605] Bluetooth: hci1: command 0x041b tx timeout [ 49.546785][ T3605] Bluetooth: hci3: command 0x041b tx timeout [ 49.548267][ T3605] Bluetooth: hci2: command 0x041b tx timeout [ 49.548436][ T4022] device veth0_macvtap entered promiscuous mode [ 49.569050][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.571047][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.573280][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.575912][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.577621][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.580694][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.589160][ T4027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.597262][ T4022] device veth1_macvtap entered promiscuous mode [ 49.601411][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.603573][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.608343][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.615971][ T4026] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.618140][ T4026] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.619962][ T4026] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.621943][ T4026] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.624507][ T3605] Bluetooth: hci4: command 0x041b tx timeout [ 49.631973][ T4029] device veth0_macvtap entered promiscuous mode [ 49.656021][ T4029] device veth1_macvtap entered promiscuous mode [ 49.658105][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.660270][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.662398][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.665728][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.683558][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.687613][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.690868][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.692640][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.695519][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.697349][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.699583][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.724045][ T4027] device veth0_vlan entered promiscuous mode [ 49.730563][ T4033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.733420][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.741585][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.743973][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.748429][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.756033][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.758361][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.760519][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.762877][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.774939][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.793722][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.800940][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.807213][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.808962][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.811278][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.813647][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.816349][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.821531][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.823717][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.836192][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.838517][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.841845][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.858468][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.860875][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.873112][ T4022] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.878784][ T4022] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.880638][ T4022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.882409][ T4022] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.901642][ T4027] device veth1_vlan entered promiscuous mode [ 49.918259][ T4029] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.920159][ T4029] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.921999][ T4029] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.923863][ T4029] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.951954][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.959573][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.979677][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.009198][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.011471][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.030560][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.038292][ T4027] device veth0_macvtap entered promiscuous mode [ 50.042757][ T4027] device veth1_macvtap entered promiscuous mode [ 50.064544][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.066916][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.069257][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.071487][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.073721][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.088660][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.090509][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.095589][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.098910][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.168949][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.171321][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.173561][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.204640][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.206916][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.214386][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.218602][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.253876][ T1552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.255814][ T1552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.398342][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.410089][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.412600][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.417346][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.419800][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.422027][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.425287][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.427515][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.429990][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.433598][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.412904][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.415433][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.417818][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.420235][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.422629][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.430494][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.439620][ T4027] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.441635][ T4027] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.443652][ T4027] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.454199][ T4027] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.469286][ T4106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.471068][ T4106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.484843][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.489457][ T4033] device veth0_vlan entered promiscuous mode [ 51.544465][ T3605] Bluetooth: hci0: command 0x040f tx timeout [ 51.552789][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.556965][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.559865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.694426][ T302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.696463][ T302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.699105][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.702736][ T4066] Bluetooth: hci2: command 0x040f tx timeout [ 51.704880][ T4066] Bluetooth: hci3: command 0x040f tx timeout [ 51.706368][ T4066] Bluetooth: hci1: command 0x040f tx timeout [ 51.709339][ T3605] Bluetooth: hci4: command 0x040f tx timeout [ 51.985292][ T4112] kAFS: unparsable volume name [ 52.686920][ T4033] device veth1_vlan entered promiscuous mode [ 52.815491][ T4106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.817834][ T4106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.821560][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.823590][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.843875][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.853563][ T4033] device veth0_macvtap entered promiscuous mode [ 52.886996][ T4033] device veth1_macvtap entered promiscuous mode [ 53.469080][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.472925][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.479430][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.481908][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.486448][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.488968][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.491308][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.493644][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.498009][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.501953][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.509469][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.518448][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.540741][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.554485][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.557216][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.560030][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.563853][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.567241][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.572551][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.577096][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.582274][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.591498][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.601419][ T4033] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.614746][ T4033] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.621070][ T4033] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.624987][ T4066] Bluetooth: hci0: command 0x0419 tx timeout [ 53.627017][ T4033] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.637914][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.640387][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.651338][ T4126] bridge0: port 3(gretap0) entered blocking state [ 53.658123][ T4126] bridge0: port 3(gretap0) entered disabled state [ 53.709658][ T4126] device gretap0 entered promiscuous mode [ 53.725271][ T4126] bridge0: port 3(gretap0) entered blocking state [ 53.726956][ T4126] bridge0: port 3(gretap0) entered forwarding state [ 53.732898][ T4131] device gretap0 left promiscuous mode [ 53.735652][ T4131] bridge0: port 3(gretap0) entered disabled state [ 53.790448][ T4065] Bluetooth: hci4: command 0x0419 tx timeout [ 53.792233][ T4065] Bluetooth: hci1: command 0x0419 tx timeout [ 53.795130][ T4065] Bluetooth: hci3: command 0x0419 tx timeout [ 53.797680][ T4065] Bluetooth: hci2: command 0x0419 tx timeout [ 55.184150][ C0] sched: RT throttling activated [ 55.184645][ T4106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.194551][ T4106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.210434][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.223476][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.394301][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.742825][ T4129] loop1: detected capacity change from 0 to 32768 [ 55.860744][ T4129] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.10 (4129) [ 56.096212][ T4106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.535984][ T4129] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 56.537958][ T4129] BTRFS info (device loop1): enabling auto defrag [ 56.539427][ T4129] BTRFS info (device loop1): doing ref verification [ 56.542663][ T4148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14'. [ 56.565516][ T4129] BTRFS info (device loop1): use no compression [ 56.576264][ T4129] BTRFS info (device loop1): force clearing of disk cache [ 56.586381][ T4129] BTRFS info (device loop1): max_inline at 4096 [ 56.593883][ T4129] BTRFS info (device loop1): disabling free space tree [ 56.601987][ T4129] BTRFS info (device loop1): has skinny extents [ 56.674019][ T4129] BTRFS error (device loop1): open_ctree failed [ 57.809652][ T4188] Zero length message leads to an empty skb [ 59.791499][ T4212] udc-core: couldn't find an available UDC or it's busy [ 59.793096][ T4212] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.334550][ T4066] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 60.575293][ T4239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 60.854370][ T4066] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 60.856601][ T4066] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.858389][ T4066] usb 1-1: Product: syz [ 60.859468][ T4066] usb 1-1: Manufacturer: syz [ 60.860593][ T4066] usb 1-1: SerialNumber: syz [ 60.867479][ T4066] r8152-cfgselector 1-1: config 0 descriptor?? [ 61.885862][ T4066] r8152-cfgselector 1-1: Unknown version 0x0000 [ 61.887521][ T4066] r8152-cfgselector 1-1: bad CDC descriptors [ 61.904503][ T4066] r8152-cfgselector 1-1: Unknown version 0x0000 [ 61.910528][ T4066] r8152-cfgselector 1-1: USB disconnect, device number 2 [ 63.336665][ T4284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'. [ 65.381593][ T4304] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 65.383269][ T4304] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 65.385425][ T4304] vhci_hcd vhci_hcd.0: Device attached [ 65.767142][ T4292] delete_channel: no stack [ 65.854833][ T4306] vhci_hcd: connection closed [ 65.921634][ T4250] vhci_hcd: stop threads [ 65.924591][ T4250] vhci_hcd: release socket [ 65.925933][ T4250] vhci_hcd: disconnect device [ 66.231874][ T4316] delete_channel: no stack [ 67.238250][ T26] audit: type=1326 audit(67.020:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb45e32a8 code=0x7ffc0000 [ 67.252944][ T26] audit: type=1326 audit(67.020:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb45e32a8 code=0x7ffc0000 [ 67.442823][ T4310] delete_channel: no stack [ 67.495379][ T4320] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 67.496921][ T4320] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 67.497531][ T26] audit: type=1326 audit(67.130:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffb45e588c code=0x7ffc0000 [ 67.498752][ T4320] vhci_hcd vhci_hcd.0: Device attached [ 67.507336][ T4321] vhci_hcd: connection closed [ 67.508973][ T4106] vhci_hcd: stop threads [ 67.511157][ T4106] vhci_hcd: release socket [ 67.512135][ T4106] vhci_hcd: disconnect device [ 67.536358][ T26] audit: type=1326 audit(67.130:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb45e1844 code=0x7ffc0000 [ 67.541122][ T26] audit: type=1326 audit(67.130:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffb45e19e0 code=0x7ffc0000 [ 67.554961][ T4328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 67.583279][ T26] audit: type=1326 audit(67.480:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffb45e1c1c code=0x7ffc0000 [ 67.604239][ T26] audit: type=1326 audit(67.480:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb45e32a8 code=0x7ffc0000 [ 67.619924][ T26] audit: type=1326 audit(67.480:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb45e32a8 code=0x7ffc0000 [ 67.648989][ T4331] process 'syz.0.60' launched './file1' with NULL argv: empty string added [ 67.656177][ T4327] loop4: detected capacity change from 0 to 4096 [ 67.668272][ T26] audit: type=1326 audit(67.640:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4330 comm="syz.0.60" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b4e72a8 code=0x0 [ 69.893610][ T2355] cfg80211: failed to load regulatory.db [ 69.936151][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.937888][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.444652][ T4398] udc-core: couldn't find an available UDC or it's busy [ 72.446356][ T4398] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 75.571758][ T144] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 75.574049][ T144] CPU: 1 PID: 144 Comm: kworker/u5:0 Not tainted 5.15.173-syzkaller #0 [ 75.575815][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 75.578129][ T144] Workqueue: hci1 hci_rx_work [ 75.579232][ T144] Call trace: [ 75.579908][ T144] dump_backtrace+0x0/0x530 [ 75.580975][ T144] show_stack+0x2c/0x3c [ 75.581891][ T144] dump_stack_lvl+0x108/0x170 [ 75.582971][ T144] dump_stack+0x1c/0x58 [ 75.583843][ T144] sysfs_create_dir_ns+0x278/0x318 [ 75.584952][ T144] kobject_add_internal+0x384/0x8f0 [ 75.586070][ T144] kobject_add+0x14c/0x21c [ 75.587023][ T144] device_add+0x400/0xef4 [ 75.587995][ T144] hci_conn_add_sysfs+0xc4/0x1cc [ 75.589137][ T144] le_conn_complete_evt+0x954/0x1228 [ 75.590372][ T144] hci_le_meta_evt+0xa50/0x31c0 [ 75.591481][ T144] hci_event_packet+0xd34/0x12b4 [ 75.592594][ T144] hci_rx_work+0x1c0/0x7c4 [ 75.593632][ T144] process_one_work+0x790/0x11b8 [ 75.594730][ T144] worker_thread+0x910/0x1034 [ 75.595811][ T144] kthread+0x37c/0x45c [ 75.596702][ T144] ret_from_fork+0x10/0x20 [ 75.604298][ T144] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 75.607315][ T144] Bluetooth: hci1: failed to register connection device [ 77.634413][ T4067] Bluetooth: hci1: command 0x2016 tx timeout [ 78.453839][ T4470] udc-core: couldn't find an available UDC or it's busy [ 78.556978][ T4470] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 79.931638][ T4482] loop4: detected capacity change from 0 to 4096 [ 81.120694][ T4521] input: syz0 as /devices/virtual/input/input2 [ 81.273991][ T4523] binder: 4522:4523 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 81.565091][ T4531] tmpfs: Unknown parameter 'quota' [ 82.396841][ T4536] udc-core: couldn't find an available UDC or it's busy [ 82.398474][ T4536] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 84.799572][ T4570] binder: 4569:4570 got transaction to invalid handle, 1 [ 84.801364][ T4570] binder: 4569:4570 transaction failed 29201/-22, size 0-0 line 2917 [ 85.568831][ T4069] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.091017][ T1552] Bluetooth: hci5: Frame reassembly failed (-84) [ 88.535104][ T4615] binder: 4614:4615 ioctl 4018620d 0 returned -22 [ 88.537168][ T4615] binder: 4614:4615 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 88.540221][ T4615] binder: 4615 RLIMIT_NICE not set [ 88.588120][ T4618] binder: 4614:4618 got transaction to invalid handle, 1 [ 88.589901][ T4618] binder: 4614:4618 transaction failed 29201/-22, size 0-0 line 2917 [ 88.592601][ T4618] binder: 4614:4618 got reply transaction with no transaction stack [ 88.600146][ T4618] binder: 4614:4618 transaction failed 29201/-71, size 72-24 line 2822 [ 88.779599][ T4624] udc-core: couldn't find an available UDC or it's busy [ 88.781382][ T4624] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 89.951657][ T4066] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.953225][ T4066] binder: undelivered TRANSACTION_ERROR: 29201 [ 90.012726][ T4066] kernel write not supported for file /101/loginuid (pid: 4066 comm: kworker/0:5) [ 90.076993][ T4637] loop3: detected capacity change from 0 to 4096 [ 90.115050][ T4069] Bluetooth: hci5: command 0x1003 tx timeout [ 90.116656][ T4034] Bluetooth: hci5: sending frame failed (-49) [ 90.581806][ T4034] Bluetooth: hci4: link tx timeout [ 90.583302][ T4034] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 91.581145][ T4666] binder: 4665:4666 ioctl 4018620d 0 returned -22 [ 91.587972][ T4031] Bluetooth: hci4: link tx timeout [ 91.591362][ T4031] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 91.628326][ T4031] Bluetooth: hci4: link tx timeout [ 91.629492][ T4031] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 92.186531][ T4069] Bluetooth: hci5: command 0x1001 tx timeout [ 92.500781][ T4031] Bluetooth: hci5: sending frame failed (-49) [ 92.534350][ T4666] binder: 4665:4666 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 92.537264][ T4666] binder: 4666 RLIMIT_NICE not set [ 92.575108][ T4672] binder: 4665:4672 got transaction to invalid handle, 1 [ 92.576786][ T4672] binder: 4665:4672 transaction failed 29201/-22, size 0-0 line 2917 [ 92.588572][ T4672] binder: 4665:4672 got reply transaction with no transaction stack [ 92.596442][ T4672] binder: 4665:4672 transaction failed 29201/-71, size 72-24 line 2822 [ 92.607071][ T4031] Bluetooth: hci4: link tx timeout [ 92.608248][ T4031] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 92.722024][ T4066] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.804629][ T4069] Bluetooth: hci4: command 0x0406 tx timeout [ 92.812980][ T4066] binder: undelivered TRANSACTION_ERROR: 29201 [ 94.504279][ T2355] Bluetooth: hci5: command 0x1009 tx timeout [ 94.712981][ T26] audit: type=1326 audit(94.680:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff928722a8 code=0x7ffc0000 [ 94.720649][ T26] audit: type=1326 audit(94.680:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff928722a8 code=0x7ffc0000 [ 94.754219][ T26] audit: type=1326 audit(94.690:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff928722a8 code=0x7ffc0000 [ 94.764512][ T26] audit: type=1326 audit(94.690:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff928722a8 code=0x7ffc0000 [ 94.774956][ T26] audit: type=1326 audit(94.690:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff928722a8 code=0x7ffc0000 [ 94.804774][ T26] audit: type=1326 audit(94.700:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff928722a8 code=0x7ffc0000 [ 94.809641][ T26] audit: type=1326 audit(94.700:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff928722a8 code=0x7ffc0000 [ 94.851151][ T26] audit: type=1326 audit(94.700:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff928722a8 code=0x7ffc0000 [ 95.277356][ T26] audit: type=1326 audit(94.720:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=237 compat=0 ip=0xffff928722a8 code=0x7ffc0000 [ 95.563381][ T26] audit: type=1326 audit(94.720:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff928722a8 code=0x7ffc0000 [ 96.168453][ T4710] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 97.140073][ T4031] Bluetooth: hci4: link tx timeout [ 97.141303][ T4031] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 97.143312][ T4031] Bluetooth: hci4: link tx timeout [ 97.145896][ T4031] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 97.839935][ T4729] binder: 4728:4729 ioctl 4018620d 0 returned -22 [ 97.855320][ T4729] binder: 4728:4729 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 97.858004][ T4729] binder: 4729 RLIMIT_NICE not set [ 97.906938][ T4735] binder: 4728:4735 got transaction to invalid handle, 1 [ 97.908535][ T4735] binder: 4728:4735 transaction failed 29201/-22, size 0-0 line 2917 [ 97.913446][ T4735] binder: 4728:4735 got reply transaction with no transaction stack [ 97.928759][ T4735] binder: 4728:4735 transaction failed 29201/-71, size 72-24 line 2822 [ 98.641384][ T2355] binder: undelivered TRANSACTION_ERROR: 29201 [ 98.650626][ T2355] binder: undelivered TRANSACTION_ERROR: 29201 [ 98.807895][ T1959] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.995084][ T144] Bluetooth: hci4: link tx timeout [ 98.996355][ T144] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 99.149779][ T144] Bluetooth: hci4: link tx timeout [ 99.151109][ T144] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 99.344280][ T1959] usb 1-1: Using ep0 maxpacket: 8 [ 100.354496][ T1959] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.368590][ T4780] loop4: detected capacity change from 0 to 4096 [ 100.554726][ T1959] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=d3.dd [ 100.557036][ T1959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.559020][ T1959] usb 1-1: Product: syz [ 100.560052][ T1959] usb 1-1: Manufacturer: syz [ 100.561163][ T1959] usb 1-1: SerialNumber: syz [ 100.759883][ T1959] usb 1-1: config 0 descriptor?? [ 101.208750][ T1959] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state. [ 101.317369][ T1959] dvb-usb: bulk message failed: -22 (2/0) [ 101.323344][ T1959] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 101.554883][ T1959] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 2) [ 101.557027][ T1959] usb 1-1: media controller created [ 101.569275][ T4811] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 101.571186][ T4811] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 101.574019][ T144] Bluetooth: hci4: link tx timeout [ 101.575256][ T144] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 101.577036][ T144] Bluetooth: hci4: link tx timeout [ 101.578217][ T144] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 101.581090][ T1959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.647326][ T1959] cxusb: set interface failed [ 101.648492][ T1959] dvb-usb: bulk message failed: -22 (1/0) [ 101.663786][ T4815] binder: 4814:4815 ioctl c0306201 0 returned -14 [ 101.680170][ T4815] binder: 4814:4815 tried to acquire reference to desc 0, got 1 instead [ 101.682286][ T1959] DVB: Unable to find symbol mt352_attach() [ 101.683916][ T1959] dvb-usb: bulk message failed: -22 (5/0) [ 101.686911][ T1959] zl10353_read_register: readreg error (reg=127, ret==-121) [ 101.688754][ T1959] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 2' [ 101.702037][ T4815] binder: 4814:4815 got reply transaction with no transaction stack [ 101.704033][ T4815] binder: 4814:4815 transaction failed 29201/-71, size 72-24 line 2822 [ 101.709371][ T4069] binder: undelivered TRANSACTION_ERROR: 29201 [ 101.711010][ T4069] binder: send failed reply for transaction 20 to 4814:4815 [ 101.724543][ T1959] Registered IR keymap rc-dvico-mce [ 101.728262][ T1959] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 101.733283][ T1959] input: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input4 [ 101.751789][ T1959] dvb-usb: schedule remote query interval to 100 msecs. [ 101.758326][ T1959] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully initialized and connected. [ 101.778661][ T1959] usb 1-1: USB disconnect, device number 3 [ 101.785821][ T4069] binder: undelivered TRANSACTION_COMPLETE [ 101.787218][ T4069] binder: undelivered TRANSACTION_ERROR: 29189 [ 101.812363][ T4820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.186'. [ 101.854552][ T4820] device bridge_slave_1 left promiscuous mode [ 101.856918][ T4820] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.909236][ T4820] bridge1: port 1(bridge_slave_1) entered blocking state [ 101.911173][ T4820] bridge1: port 1(bridge_slave_1) entered disabled state [ 101.920839][ T4820] device bridge_slave_1 entered promiscuous mode [ 101.940626][ T1959] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully deinitialized and disconnected. [ 104.782377][ T4870] binder: 4869:4870 ioctl c0306201 0 returned -14 [ 104.811653][ T4870] binder: 4869:4870 tried to acquire reference to desc 0, got 1 instead [ 104.823631][ T4870] binder: 4869:4870 got reply transaction with no transaction stack [ 104.841402][ T4870] binder: 4869:4870 transaction failed 29201/-71, size 72-24 line 2822 [ 104.843758][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 104.845632][ T13] binder: send failed reply for transaction 26 to 4869:4870 [ 104.863864][ T13] binder: undelivered TRANSACTION_COMPLETE [ 104.865506][ T13] binder: undelivered TRANSACTION_ERROR: 29189 [ 105.104289][ T4878] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 105.104289][ T4878] The task syz.3.198 (4878) triggered the difference, watch for misbehavior. [ 106.708356][ T4899] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.711689][ T4899] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.713430][ T4899] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.766500][ T4899] device bridge_slave_0 left promiscuous mode [ 106.768078][ T4899] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.796862][ T4899] device bridge_slave_1 left promiscuous mode [ 106.798327][ T4899] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.857550][ T4899] bond0: (slave bond_slave_0): Releasing backup interface [ 106.903720][ T4899] bond0: (slave bond_slave_1): Releasing backup interface [ 107.008678][ T4899] team0: Port device team_slave_0 removed [ 107.050649][ T4899] team0: Port device team_slave_1 removed [ 107.059787][ T4899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.063312][ T4899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.066903][ T4899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.068834][ T4899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.082441][ T4905] binder: BINDER_SET_CONTEXT_MGR already set [ 107.086576][ T4905] binder: 4904:4905 ioctl 4018620d 200001c0 returned -16 [ 107.088659][ T4905] binder: 4904:4905 ioctl c0306201 0 returned -14 [ 107.091720][ T4905] binder: 4904:4905 got transaction to invalid handle, 1 [ 107.093963][ T4905] binder: 4904:4905 transaction failed 29201/-22, size 0-0 line 2917 [ 107.099679][ T4905] binder: 4904:4905 got reply transaction with no transaction stack [ 107.101597][ T4905] binder: 4904:4905 transaction failed 29201/-71, size 72-24 line 2822 [ 107.104003][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 107.121187][ T4067] binder: undelivered TRANSACTION_ERROR: 29201 [ 107.295248][ T4902] team0: Port device wg2 added [ 108.064320][ T4909] loop1: detected capacity change from 0 to 4096 [ 108.183681][ T4936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'. [ 108.992513][ T4948] binder: 4947:4948 tried to acquire reference to desc 0, got 1 instead [ 109.005496][ T4948] binder: 4947:4948 got reply transaction with no transaction stack [ 109.007861][ T4948] binder: 4947:4948 transaction failed 29201/-71, size 72-24 line 2822 [ 109.010364][ T2355] binder: undelivered TRANSACTION_ERROR: 29201 [ 109.011863][ T2355] binder: send failed reply for transaction 36 to 4947:4948 [ 109.876475][ T2355] binder: undelivered TRANSACTION_COMPLETE [ 109.877944][ T2355] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.058920][ T4972] Process accounting resumed [ 112.187053][ T4983] binder: 4982:4983 tried to acquire reference to desc 0, got 1 instead [ 112.234761][ T4983] binder: 4982:4983 got reply transaction with no transaction stack [ 112.236618][ T4983] binder: 4982:4983 transaction failed 29201/-71, size 72-24 line 2822 [ 112.358210][ T1959] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.359753][ T1959] binder: send failed reply for transaction 42 to 4982:4983 [ 112.367595][ T1959] binder: undelivered TRANSACTION_COMPLETE [ 112.368853][ T1959] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.684255][ T4134] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.075633][ T4134] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 113.078033][ T4134] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 113.080230][ T4134] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 113.082325][ T4134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.134575][ T4987] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.953198][ T4134] usb 1-1: USB disconnect, device number 4 [ 114.065618][ T5006] misc userio: The device must be registered before sending interrupts [ 114.924489][ T144] Bluetooth: hci4: link tx timeout [ 114.925792][ T144] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.962070][ T5014] udc-core: couldn't find an available UDC or it's busy [ 114.963593][ T5014] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 114.998746][ T5016] binder: 5015:5016 tried to acquire reference to desc 0, got 1 instead [ 115.031567][ T5016] binder: 5015:5016 got reply transaction with no transaction stack [ 115.033435][ T5016] binder: 5015:5016 transaction failed 29201/-71, size 72-24 line 2822 [ 115.177936][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 115.179635][ T13] binder: send failed reply for transaction 48 to 5015:5016 [ 115.191817][ T13] binder: undelivered TRANSACTION_COMPLETE [ 115.193856][ T13] binder: undelivered TRANSACTION_ERROR: 29189 [ 115.209131][ T5022] udc-core: couldn't find an available UDC or it's busy [ 115.210668][ T5022] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 116.406422][ T5033] loop0: detected capacity change from 0 to 4096 [ 116.418614][ T4014] udevd[4014]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.361238][ T5048] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 121.445660][ T5106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 121.677728][ T5109] Process accounting resumed [ 122.589922][ T5117] syz.3.277 uses obsolete (PF_INET,SOCK_PACKET) [ 122.605006][ T5117] udc-core: couldn't find an available UDC or it's busy [ 122.606605][ T5117] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 123.798142][ T5129] sp0: Synchronizing with TNC [ 124.812328][ T2355] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.891930][ T5131] loop4: detected capacity change from 0 to 4096 [ 126.408597][ T2355] usb 1-1: device not accepting address 5, error -71 [ 127.303522][ T5154] input: syz1 as /devices/virtual/input/input6 [ 129.969908][ T5190] input: syz1 as /devices/virtual/input/input7 [ 130.768663][ T5192] udc-core: couldn't find an available UDC or it's busy [ 130.771702][ T5192] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 130.994005][ T5195] sp0: Synchronizing with TNC [ 131.096156][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.104333][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.843650][ T5188] loop1: detected capacity change from 0 to 4096 [ 131.860709][ T5197] device syzkaller1 entered promiscuous mode [ 131.921990][ T5204] udc-core: couldn't find an available UDC or it's busy [ 131.923592][ T5204] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 133.978395][ T5242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.318'. [ 134.054125][ T5246] capability: warning: `syz.4.320' uses deprecated v2 capabilities in a way that may be insecure [ 135.048957][ T5251] loop3: detected capacity change from 0 to 4096 [ 136.573679][ T5278] bridge0: port 2(vxlan0) entered blocking state [ 136.575453][ T5278] bridge0: port 2(vxlan0) entered disabled state [ 136.583887][ T5278] device vxlan0 entered promiscuous mode [ 136.937646][ T5284] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 140.365794][ T5320] udc-core: couldn't find an available UDC or it's busy [ 140.367419][ T5320] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.467524][ T5327] udc-core: couldn't find an available UDC or it's busy [ 140.469170][ T5327] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 143.546673][ T5351] Process accounting paused [ 144.821948][ T5369] loop4: detected capacity change from 0 to 256 [ 145.675206][ T4134] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 146.141345][ T5369] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 146.503897][ T5381] binder: 5380:5381 tried to acquire reference to desc 0, got 1 instead [ 146.547261][ T5381] binder: 5380:5381 transaction failed 29201/-22, size -13-24 line 3085 [ 146.557174][ T4067] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.424346][ T4134] usb 1-1: device not accepting address 7, error -71 [ 147.674332][ T144] Bluetooth: hci4: link tx timeout [ 147.675613][ T144] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 147.677252][ T144] Bluetooth: hci4: link tx timeout [ 147.678445][ T144] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.754805][ T5405] udc-core: couldn't find an available UDC or it's busy [ 147.756419][ T5405] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 149.011922][ T5419] ptrace attach of "./syz-executor exec"[5420] was attempted by "./syz-executor exec"[5419] [ 149.098199][ T5426] loop0: detected capacity change from 0 to 512 [ 150.227656][ T4067] Bluetooth: hci4: command 0x0406 tx timeout [ 150.947185][ T5426] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.385: inode #1: comm syz.0.385: iget: illegal inode # [ 150.962268][ T5426] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.385: error while reading EA inode 1 err=-117 [ 152.368461][ T5447] binder: 5439:5447 unknown command 1074553619 [ 152.369951][ T5447] binder: 5439:5447 ioctl c0306201 200001c0 returned -22 [ 152.388297][ T5426] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 152.391461][ T5426] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.385: inode #1: comm syz.0.385: iget: illegal inode # [ 152.495487][ T5426] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.385: error while reading EA inode 1 err=-117 [ 152.523951][ T5426] EXT4-fs (loop0): 1 orphan inode deleted [ 152.614406][ T5426] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 155.498002][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 155.532140][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.560933][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.580733][ T5496] loop2: detected capacity change from 0 to 1024 [ 155.688311][ T5496] hfsplus: unable to parse mount options [ 155.822650][ T5494] team0: Port device wg2 removed [ 162.185991][ T5548] loop1: detected capacity change from 0 to 256 [ 164.194000][ T5548] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 166.219518][ T5601] MD5 Hash mismatch for [fe80::bb]:0->[fe80::aa]:20002 L3 index 0 [ 166.286603][ T5600] loop3: detected capacity change from 0 to 4096 [ 168.986328][ T4130] Bluetooth: hci3: command 0x0406 tx timeout [ 168.987940][ T4130] Bluetooth: hci2: command 0x0406 tx timeout [ 169.064317][ T4130] Bluetooth: hci1: command 0x0406 tx timeout [ 170.014739][ T5656] netlink: 6 bytes leftover after parsing attributes in process `syz.2.457'. [ 170.016772][ T5656] bridge_slave_0: default FDB implementation only supports local addresses [ 170.686076][ T5639] chnl_net:caif_netlink_parms(): no params data found [ 170.812831][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.815131][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.817438][ T5639] device bridge_slave_0 entered promiscuous mode [ 170.820494][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.831968][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.840521][ T5639] device bridge_slave_1 entered promiscuous mode [ 171.046961][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.063280][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.074658][ T4066] Bluetooth: hci5: command 0x0409 tx timeout [ 171.084771][ T5639] team0: Port device team_slave_0 added [ 171.087953][ T5639] team0: Port device team_slave_1 added [ 172.054762][ T5699] loop2: detected capacity change from 0 to 256 [ 172.132343][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.134031][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.146271][ T5699] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 172.149408][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.209190][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.210946][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.239363][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.443855][ T5639] device hsr_slave_0 entered promiscuous mode [ 172.485201][ T5639] device hsr_slave_1 entered promiscuous mode [ 172.585264][ T5639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.587171][ T5639] Cannot create hsr debugfs directory [ 172.971491][ T5639] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 173.026658][ T5737] netlink: 'syz.2.490': attribute type 8 has an invalid length. [ 173.032866][ T5639] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 173.041387][ T5736] dccp_close: ABORT with 36 bytes unread [ 173.086346][ T5639] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 173.117239][ T5639] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 173.144732][ T4130] Bluetooth: hci5: command 0x041b tx timeout [ 173.390669][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.539348][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.541491][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.557476][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.610258][ T5728] Process accounting resumed [ 173.620810][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.623492][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.627356][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.629325][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.874744][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.903420][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.915236][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.932479][ T4801] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.934005][ T4801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.940749][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.964947][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.967118][ T5772] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 173.990719][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.000508][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.004770][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.020130][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.024633][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.038033][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.058536][ T5639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.061377][ T5639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.070854][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.075604][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.086919][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.351625][ T4130] Bluetooth: hci5: command 0x040f tx timeout [ 175.379362][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.381193][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.391199][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.697483][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.699823][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.728453][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.731043][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.735378][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.747992][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.758990][ T5639] device veth0_vlan entered promiscuous mode [ 175.798144][ T5639] device veth1_vlan entered promiscuous mode [ 175.861363][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 175.871702][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 175.874722][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.892498][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.927960][ T5639] device veth0_macvtap entered promiscuous mode [ 175.940554][ T5639] device veth1_macvtap entered promiscuous mode [ 175.997967][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.012570][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.040711][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.042984][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.054531][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.056818][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.058870][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.061083][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.144473][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.182042][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.185376][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.190601][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.195026][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.250426][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.252818][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.264400][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.272928][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.284368][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.286862][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.316550][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.319152][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.356651][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.374915][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.377427][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.392441][ T5639] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.403941][ T5639] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.414299][ T5639] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.422806][ T5639] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.623424][ T4287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.631186][ T4287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.645647][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.675876][ T4287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.677848][ T4287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.681006][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.386263][ T4068] Bluetooth: hci5: command 0x0419 tx timeout [ 178.704985][ T5895] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 178.815911][ T4489] ------------[ cut here ]------------ [ 178.817616][ T4489] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 178.819836][ T4489] WARNING: CPU: 1 PID: 4489 at fs/sysfs/group.c:281 sysfs_remove_group+0x174/0x288 [ 178.821974][ T4489] Modules linked in: [ 178.822802][ T4489] CPU: 1 PID: 4489 Comm: kbnepd bnep0 Not tainted 5.15.173-syzkaller #0 [ 178.824617][ T4489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 178.826854][ T4489] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 178.828590][ T4489] pc : sysfs_remove_group+0x174/0x288 [ 178.829730][ T4489] lr : sysfs_remove_group+0x174/0x288 [ 178.830872][ T4489] sp : ffff8000208e7830 [ 178.831834][ T4489] x29: ffff8000208e7830 x28: 1fffe0001957fcbb x27: 0000000000000000 [ 178.833593][ T4489] x26: 0000000000000000 x25: 1fffe0001957fc88 x24: 1ffff000026c5474 [ 178.835450][ T4489] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e5320418 [ 178.837228][ T4489] x20: ffff0000e2e289f8 x19: ffff80001362aa80 x18: 1fffe00036835d8e [ 178.839071][ T4489] x17: 1fffe00036835d8e x16: ffff800011ab8a34 x15: ffff800014b5fa40 [ 178.840923][ T4489] x14: 1ffff0000295806a x13: dfff800000000000 x12: 0000000000000001 [ 178.842762][ T4489] x11: 0000000000000000 x10: 0000000000000000 x9 : 20c5c664b2307000 [ 178.844590][ T4489] x8 : 20c5c664b2307000 x7 : 0000000000000000 x6 : 0000000000000000 [ 178.846451][ T4489] x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff800008555e80 [ 178.848282][ T4489] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000003c [ 178.850031][ T4489] Call trace: [ 178.850791][ T4489] sysfs_remove_group+0x174/0x288 [ 178.851973][ T4489] netdev_queue_update_kobjects+0x388/0x404 [ 178.853286][ T4489] netdev_unregister_kobject+0x100/0x204 [ 178.854629][ T4489] unregister_netdevice_many+0x12c8/0x189c [ 178.855908][ T4489] unregister_netdev+0x178/0x1f0 [ 178.856949][ T4489] bnep_session+0x2274/0x2424 [ 178.857927][ T4489] kthread+0x37c/0x45c [ 178.858764][ T4489] ret_from_fork+0x10/0x20 [ 178.859661][ T4489] irq event stamp: 9364 [ 178.860537][ T4489] hardirqs last enabled at (9363): [] finish_lock_switch+0xbc/0x1e8 [ 178.862547][ T4489] hardirqs last disabled at (9364): [] el1_dbg+0x24/0x80 [ 178.864331][ T4489] softirqs last enabled at (9284): [] handle_softirqs+0xb88/0xdbc [ 178.866340][ T4489] softirqs last disabled at (9131): [] __irq_exit_rcu+0x268/0x4d8 [ 178.868265][ T4489] ---[ end trace 6e40485802565702 ]--- [ 178.874570][ T4489] ================================================================== [ 178.876445][ T4489] BUG: KASAN: use-after-free in device_for_each_child+0xa8/0x174 [ 178.878131][ T4489] Read of size 8 at addr ffff0000dfdd9388 by task kbnepd bnep0/4489 [ 178.879819][ T4489] [ 178.880349][ T4489] CPU: 1 PID: 4489 Comm: kbnepd bnep0 Tainted: G W 5.15.173-syzkaller #0 [ 178.882395][ T4489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 178.884405][ T4489] Call trace: [ 178.885056][ T4489] dump_backtrace+0x0/0x530 [ 178.885968][ T4489] show_stack+0x2c/0x3c [ 178.886815][ T4489] dump_stack_lvl+0x108/0x170 [ 178.887828][ T4489] print_address_description+0x7c/0x3f0 [ 178.889012][ T4489] kasan_report+0x174/0x1e4 [ 178.889923][ T4489] __asan_report_load8_noabort+0x44/0x50 [ 178.891119][ T4489] device_for_each_child+0xa8/0x174 [ 178.892250][ T4489] pm_runtime_set_memalloc_noio+0xf0/0x210 [ 178.893437][ T4489] netdev_unregister_kobject+0x144/0x204 [ 178.894671][ T4489] unregister_netdevice_many+0x12c8/0x189c [ 178.896034][ T4489] unregister_netdev+0x178/0x1f0 [ 178.897076][ T4489] bnep_session+0x2274/0x2424 [ 178.898094][ T4489] kthread+0x37c/0x45c [ 178.898920][ T4489] ret_from_fork+0x10/0x20 [ 178.899814][ T4489] [ 178.900294][ T4489] Allocated by task 4033: [ 178.901194][ T4489] ____kasan_kmalloc+0xbc/0xfc [ 178.902168][ T4489] __kasan_kmalloc+0x10/0x1c [ 178.903110][ T4489] __kmalloc+0x29c/0x4c8 [ 178.904007][ T4489] hci_alloc_dev_priv+0x30/0x18b0 [ 178.905029][ T4489] vhci_create_device+0xf8/0x568 [ 178.906048][ T4489] vhci_write+0x318/0x3b8 [ 178.906954][ T4489] vfs_write+0x884/0xb44 [ 178.907816][ T4489] ksys_write+0x15c/0x26c [ 178.908757][ T4489] __arm64_sys_write+0x7c/0x90 [ 178.909784][ T4489] invoke_syscall+0x98/0x2b8 [ 178.910897][ T4489] el0_svc_common+0x138/0x258 [ 178.911939][ T4489] do_el0_svc+0x58/0x14c [ 178.912817][ T4489] el0_svc+0x7c/0x1f0 [ 178.913675][ T4489] el0t_64_sync_handler+0x84/0xe4 [ 178.914713][ T4489] el0t_64_sync+0x1a0/0x1a4 [ 178.915691][ T4489] [ 178.916182][ T4489] Freed by task 5463: [ 178.917021][ T4489] kasan_set_track+0x4c/0x84 [ 178.917997][ T4489] kasan_set_free_info+0x28/0x4c [ 178.919035][ T4489] ____kasan_slab_free+0x118/0x164 [ 178.920321][ T4489] __kasan_slab_free+0x18/0x28 [ 178.921441][ T4489] slab_free_freelist_hook+0x128/0x1ec [ 178.922663][ T4489] kfree+0x178/0x410 [ 178.923554][ T4489] hci_release_dev+0x1004/0x116c [ 178.924655][ T4489] bt_host_release+0x70/0x88 [ 178.925671][ T4489] device_release+0x8c/0x1ac [ 178.926651][ T4489] kobject_put+0x2c4/0x438 [ 178.927542][ T4489] put_device+0x28/0x40 [ 178.928527][ T4489] hci_free_dev+0x24/0x34 [ 178.929494][ T4489] vhci_release+0x7c/0xc4 [ 178.930502][ T4489] __fput+0x1c4/0x800 [ 178.931418][ T4489] ____fput+0x20/0x30 [ 178.932387][ T4489] task_work_run+0x130/0x1e4 [ 178.933430][ T4489] do_exit+0x670/0x20bc [ 178.934384][ T4489] do_group_exit+0x110/0x268 [ 178.935456][ T4489] get_signal+0x634/0x1550 [ 178.936565][ T4489] do_notify_resume+0x3d0/0x32b8 [ 178.937697][ T4489] el0_svc+0xfc/0x1f0 [ 178.938636][ T4489] el0t_64_sync_handler+0x84/0xe4 [ 178.939741][ T4489] el0t_64_sync+0x1a0/0x1a4 [ 178.940786][ T4489] [ 178.941349][ T4489] Last potentially related work creation: [ 178.942630][ T4489] kasan_save_stack+0x38/0x68 [ 178.943625][ T4489] kasan_record_aux_stack+0xd4/0x11c [ 178.944722][ T4489] insert_work+0x64/0x394 [ 178.945621][ T4489] __queue_work+0xb84/0x114c [ 178.946541][ T4489] queue_work_on+0xc4/0x17c [ 178.947474][ T4489] hci_cmd_timeout+0x1d0/0x204 [ 178.948473][ T4489] process_one_work+0x790/0x11b8 [ 178.949490][ T4489] worker_thread+0x910/0x1034 [ 178.950501][ T4489] kthread+0x37c/0x45c [ 178.951406][ T4489] ret_from_fork+0x10/0x20 [ 178.952398][ T4489] [ 178.952887][ T4489] Second to last potentially related work creation: [ 178.954383][ T4489] kasan_save_stack+0x38/0x68 [ 178.955357][ T4489] kasan_record_aux_stack+0xd4/0x11c [ 178.956602][ T4489] insert_work+0x64/0x394 [ 178.957559][ T4489] __queue_work+0xb84/0x114c [ 178.958556][ T4489] delayed_work_timer_fn+0x74/0x90 [ 178.959673][ T4489] call_timer_fn+0x19c/0x8f0 [ 178.960669][ T4489] __run_timers+0x584/0x718 [ 178.961672][ T4489] run_timer_softirq+0x7c/0x114 [ 178.962789][ T4489] handle_softirqs+0x384/0xdbc [ 178.963774][ T4489] run_ksoftirqd+0x6c/0x29c [ 178.964710][ T4489] smpboot_thread_fn+0x4b0/0x920 [ 178.965754][ T4489] kthread+0x37c/0x45c [ 178.966634][ T4489] ret_from_fork+0x10/0x20 [ 178.967529][ T4489] [ 178.968004][ T4489] The buggy address belongs to the object at ffff0000dfdd8000 [ 178.968004][ T4489] which belongs to the cache kmalloc-8k of size 8192 [ 178.970892][ T4489] The buggy address is located 5000 bytes inside of [ 178.970892][ T4489] 8192-byte region [ffff0000dfdd8000, ffff0000dfdda000) [ 178.973632][ T4489] The buggy address belongs to the page: [ 178.974774][ T4489] page:00000000c32b4b24 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11fdd8 [ 178.976911][ T4489] head:00000000c32b4b24 order:3 compound_mapcount:0 compound_pincount:0 [ 178.978702][ T4489] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 178.980507][ T4489] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c0002c00 [ 178.982332][ T4489] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 178.984166][ T4489] page dumped because: kasan: bad access detected [ 178.985480][ T4489] [ 178.985961][ T4489] Memory state around the buggy address: [ 178.987166][ T4489] ffff0000dfdd9280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.988882][ T4489] ffff0000dfdd9300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.990594][ T4489] >ffff0000dfdd9380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.992368][ T4489] ^ [ 178.993287][ T4489] ffff0000dfdd9400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.995009][ T4489] ffff0000dfdd9480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.996751][ T4489] ================================================================== [ 178.998471][ T4489] Disabling lock debugging due to kernel taint [ 179.016935][ T4489] ================================================================================ [ 179.018985][ T4489] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:130:9 [ 179.020711][ T4489] index 13411 is out of range for type 'unsigned long[8]' [ 179.022303][ T4489] CPU: 1 PID: 4489 Comm: kbnepd bnep0 Tainted: G B W 5.15.173-syzkaller #0 [ 179.024447][ T4489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 179.026817][ T4489] Call trace: [ 179.027627][ T4489] dump_backtrace+0x0/0x530 [ 179.028628][ T4489] show_stack+0x2c/0x3c [ 179.029586][ T4489] dump_stack_lvl+0x108/0x170 [ 179.030521][ T4489] dump_stack+0x1c/0x58 [ 179.031354][ T4489] __ubsan_handle_out_of_bounds+0x108/0x15c [ 179.032591][ T4489] queued_spin_lock_slowpath+0x854/0x938 [ 179.033781][ T4489] do_raw_spin_lock+0x334/0x35c [ 179.034911][ T4489] _raw_spin_lock_irqsave+0xcc/0x14c [ 179.036489][ T4489] klist_next+0x8c/0x2f4 [ 179.037438][ T4489] device_for_each_child+0xc0/0x174 [ 179.038649][ T4489] pm_runtime_set_memalloc_noio+0xf0/0x210 [ 179.039884][ T4489] netdev_unregister_kobject+0x144/0x204 [ 179.041155][ T4489] unregister_netdevice_many+0x12c8/0x189c [ 179.042492][ T4489] unregister_netdev+0x178/0x1f0 [ 179.043683][ T4489] bnep_session+0x2274/0x2424 [ 179.044740][ T4489] kthread+0x37c/0x45c [ 179.045606][ T4489] ret_from_fork+0x10/0x20 [ 179.046601][ T4489] ================================================================================ [ 179.048710][ T4489] Unable to handle kernel paging request at virtual address ffff800014a27720 [ 179.050680][ T4489] Mem abort info: [ 179.051499][ T4489] ESR = 0x0000000096000047 [ 179.052549][ T4489] EC = 0x25: DABT (current EL), IL = 32 bits [ 179.053920][ T4489] SET = 0, FnV = 0 [ 179.054741][ T4489] EA = 0, S1PTW = 0 [ 179.055634][ T4489] FSC = 0x07: level 3 translation fault [ 179.056865][ T4489] Data abort info: [ 179.057687][ T4489] ISV = 0, ISS = 0x00000047 [ 179.058789][ T4489] CM = 0, WnR = 1 [ 179.059595][ T4489] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001ae2e0000 [ 179.061143][ T4489] [ffff800014a27720] pgd=100000023ffff003, p4d=100000023ffff003, pud=100000023fffe003, pmd=100000023fff9003, pte=0000000000000000 [ 179.063867][ T4489] Internal error: Oops: 0000000096000047 [#1] PREEMPT SMP [ 179.065436][ T4489] Modules linked in: [ 179.066318][ T4489] CPU: 1 PID: 4489 Comm: kbnepd bnep0 Tainted: G B W 5.15.173-syzkaller #0 [ 179.068369][ T4489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 179.070359][ T4489] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 179.072012][ T4489] pc : queued_spin_lock_slowpath+0x36c/0x938 [ 179.073502][ T4489] lr : queued_spin_lock_slowpath+0x854/0x938 [ 179.074800][ T4489] sp : ffff8000208e7580 [ 179.075694][ T4489] x29: ffff8000208e7620 x28: 1ffff0000411cebc x27: 0000000000000000 [ 179.077372][ T4489] x26: dfff800000000000 x25: ffff70000411ceb4 x24: 0000000000080000 [ 179.079012][ T4489] x23: ffff800014a27720 x22: ffff0001b41c2708 x21: ffff0001b41c2700 [ 179.080648][ T4489] x20: ffff800014a27720 x19: ffff0000d5f20800 x18: 0000000000000002 [ 179.082370][ T4489] x17: 0000000000000000 x16: ffff800011ab8a34 x15: 00000000ffffffff [ 179.084176][ T4489] x14: ffff0000c7fd8000 x13: 0000000000000001 x12: ffff700002e22564 [ 179.085805][ T4489] x11: 0000000000000001 x10: ffff800014a27700 x9 : 0000000000000002 [ 179.087516][ T4489] x8 : 0000000000000000 x7 : 0000000000000001 x6 : 0000000000000001 [ 179.089046][ T4489] x5 : ffff8000208e6c78 x4 : ffff800014ba05e0 x3 : ffff80000819c3ec [ 179.090587][ T4489] x2 : 0000000000000001 x1 : 0000000000000004 x0 : ffff0001b41c2708 [ 179.092137][ T4489] Call trace: [ 179.092760][ T4489] queued_spin_lock_slowpath+0x36c/0x938 [ 179.093843][ T4489] do_raw_spin_lock+0x334/0x35c [ 179.094777][ T4489] _raw_spin_lock_irqsave+0xcc/0x14c [ 179.095822][ T4489] klist_next+0x8c/0x2f4 [ 179.096672][ T4489] device_for_each_child+0xc0/0x174 [ 179.097691][ T4489] pm_runtime_set_memalloc_noio+0xf0/0x210 [ 179.098913][ T4489] netdev_unregister_kobject+0x144/0x204 [ 179.100238][ T4489] unregister_netdevice_many+0x12c8/0x189c [ 179.101412][ T4489] unregister_netdev+0x178/0x1f0 [ 179.102373][ T4489] bnep_session+0x2274/0x2424 [ 179.103383][ T4489] kthread+0x37c/0x45c [ 179.104254][ T4489] ret_from_fork+0x10/0x20 [ 179.105160][ T4489] Code: aa1703e0 9417451d aa1603e0 52800081 (f90002f5) [ 179.106543][ T4489] ---[ end trace 6e40485802565703 ]--- [ 179.583214][ T4489] Kernel panic - not syncing: Oops: Fatal exception [ 179.584729][ T4489] SMP: stopping secondary CPUs [ 179.585870][ T4489] Kernel Offset: disabled [ 179.586856][ T4489] CPU features: 0x8,000081c1,21302e40 [ 179.588078][ T4489] Memory Limit: none [ 180.059165][ T4489] Rebooting in 86400 seconds..