last executing test programs: 9.208773811s ago: executing program 3 (id=79): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}]}, 0x3c}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ab80)={0x34, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}}, 0xc000) 8.204794708s ago: executing program 3 (id=85): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) eventfd(0x8) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={0x0, 0x0, 0x4018}, 0x18) write$cgroup_subtree(r0, 0x0, 0xfe33) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 7.650784397s ago: executing program 4 (id=87): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)}, 0x2400c000) close(r0) socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000001680)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="c7", 0x1}], 0x1, &(0x7f0000000040)=[@ip_retopts={{0x20, 0x84, 0x2}}], 0x20}, 0x0) 6.679993235s ago: executing program 3 (id=89): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x3, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000500)="fee0", 0x2}], 0x1}, 0xc0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 6.616939435s ago: executing program 4 (id=91): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000dc0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 6.550498884s ago: executing program 1 (id=92): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/221, 0xdd}, {&(0x7f0000002400)=""/4089, 0xff9}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f00000006c0)=""/210, 0xd2}, {&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000b00)=""/201, 0xc9}, {&(0x7f00000002c0)=""/243, 0xf3}], 0x7}, 0x10000) 6.547767224s ago: executing program 2 (id=93): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000000), &(0x7f0000000380)=r1}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 6.468960254s ago: executing program 4 (id=95): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}]}, 0x3c}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ab80)={0x34, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}}, 0xc000) 6.375224994s ago: executing program 2 (id=96): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="2b0d911f56551ad9ff000000000000", 0xf}, {&(0x7f0000001240)="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", 0x472}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x40) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6.203004464s ago: executing program 0 (id=97): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) syz_init_net_socket$ax25(0x3, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1115000, 0x0, 0x0, 0x2}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat\x00') openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x25) read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000340)={0x0, 0xffff, 0x6, 0x0, 0x100003, 0x8001}, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 5.237528172s ago: executing program 4 (id=98): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f00000002c0)={'filter\x00', 0x0, 0x4, 0x79, [0xd22, 0x101, 0x8000000000000001, 0x531, 0x1, 0x6], 0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000240)=""/121}, &(0x7f0000000180)=0x78) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000500)=""/171, &(0x7f0000000380)=0xab) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_LOCK(0x0, 0xb) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route_sched(r3, 0x0, 0x20008000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 4.978036431s ago: executing program 0 (id=99): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.977785401s ago: executing program 1 (id=100): name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=@fuse={0xc, 0x81, {0x1ff, 0x4, 0x6}}, &(0x7f0000000400), 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}]}}]}, 0x58}}, 0x0) 4.976359301s ago: executing program 2 (id=101): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4044050) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) shutdown(r1, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) prctl$PR_CAPBSET_READ(0x59616d61, 0x20) 4.809065361s ago: executing program 3 (id=102): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) epoll_create(0x207ffd) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0xc901, 0x0) 4.775043501s ago: executing program 1 (id=103): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000002d80)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffffffffffdcc}, 0x9}], 0x1, 0x40000003, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) pipe(&(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r1, 0x4b32, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000012400)={0x2020}, 0x2020) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='@-}\xe7-!*\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$packet(0x11, 0x3, 0x300) 3.974131859s ago: executing program 2 (id=104): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8252", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f00000008c0)="73fe8c61013f8b6a1e40ddadf723351bca11e00e05c5ec99e487", 0x7a, 0x3b00, 0x0, 0x0) 3.757104318s ago: executing program 1 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r2, 0x40}], 0x1, &(0x7f0000000440)={0x77359400}, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) close(0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 3.699256648s ago: executing program 2 (id=106): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x4040810) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.235839807s ago: executing program 4 (id=107): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000001001000050007000000000008000900fffffffe06f208b5d43c0002000100000008000a000100000008001800ac1414aa080019004ae92dd2933ae5600839df2648125d83797b5422b0bb2e9ce000000214001fe2000000"], 0x58}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x29, 0x1d, &(0x7f0000000000)={0xffb, 0x8, 0xdb59, 0x8, 0xfffffff5}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r5 = syz_io_uring_setup(0x893, &(0x7f0000000140)={0x0, 0xaee3, 0x1c0a, 0xffffffff, 0xffdffffe}, &(0x7f0000000000), &(0x7f0000000280)) io_uring_enter(r5, 0x47f6, 0x0, 0x4b, 0x0, 0x0) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r6, 0xa7c1}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_BULK(r11, 0xc0105502, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000507000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="0000000000001a00240012800b00010062726964676500001400028005002b0003000000080004"], 0x44}}, 0x0) r12 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e0019", 0x23}], 0x1}, 0x4004080) write$cgroup_subtree(r12, &(0x7f0000000040)=ANY=[], 0xfe33) 3.037062407s ago: executing program 3 (id=108): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}]}, 0x3c}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ab80)={0x34, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}}, 0xc000) 2.855112036s ago: executing program 0 (id=109): syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$xdp(0x2c, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 2.051173205s ago: executing program 3 (id=110): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x112, 0x0, 0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netstat\x00') preadv(r2, &(0x7f0000000c80)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4b6, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) 1.178481313s ago: executing program 0 (id=111): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="2b0d911f56551ad9ff000000000000", 0xf}, {&(0x7f0000001240)="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", 0x472}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r1 = syz_io_uring_setup(0xd2, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.016764672s ago: executing program 0 (id=112): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f00000002c0), 0x0) r4 = syz_io_uring_setup(0x4d1f, &(0x7f0000000380)={0x0, 0xea9d, 0x10, 0x1, 0x7e}, &(0x7f0000000440), &(0x7f0000000540)) r5 = syz_io_uring_setup(0x10c, &(0x7f0000000300)={0x0, 0x6b9f, 0x80, 0x0, 0x289, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r8, 0xc04064aa, &(0x7f00000001c0)={0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2}}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000005c0)=@get={0x1, &(0x7f0000000580)=""/8, 0xffff}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open$dir(&(0x7f0000000500)='./file0\x00', 0x3f00, 0x0) 792.126812ms ago: executing program 1 (id=113): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000380)) 237.313801ms ago: executing program 2 (id=114): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4044050) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) shutdown(r1, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) prctl$PR_CAPBSET_READ(0x59616d61, 0x20) 166.9951ms ago: executing program 0 (id=115): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000002d80)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffffffffffdcc}, 0x9}], 0x1, 0x40000003, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) pipe(&(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r1, 0x4b32, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000012400)={0x2020}, 0x2020) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='@-}\xe7-!*\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$packet(0x11, 0x3, 0x300) 16.98239ms ago: executing program 4 (id=116): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.126' (ED25519) to the list of known hosts. [ 57.277336][ T4154] cgroup: Unknown subsys name 'net' [ 57.440226][ T4154] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.903973][ T4154] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.390965][ T4165] chnl_net:caif_netlink_parms(): no params data found [ 60.469657][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 60.487487][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 60.566573][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 60.590711][ T4165] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.598422][ T4165] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.607118][ T4165] device bridge_slave_0 entered promiscuous mode [ 60.644330][ T4165] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.651416][ T4165] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.659823][ T4165] device bridge_slave_1 entered promiscuous mode [ 60.667535][ T4164] chnl_net:caif_netlink_parms(): no params data found [ 60.713085][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.720346][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.728417][ T4166] device bridge_slave_0 entered promiscuous mode [ 60.762687][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.769980][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.778337][ T4166] device bridge_slave_1 entered promiscuous mode [ 60.785664][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.792771][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.800794][ T4176] device bridge_slave_0 entered promiscuous mode [ 60.810480][ T4165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.847598][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.854830][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.862714][ T4176] device bridge_slave_1 entered promiscuous mode [ 60.871256][ T4165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.918072][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.925467][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.933219][ T4168] device bridge_slave_0 entered promiscuous mode [ 60.942634][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.976621][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.984448][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.992262][ T4168] device bridge_slave_1 entered promiscuous mode [ 61.000736][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.012059][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.023973][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.036395][ T4165] team0: Port device team_slave_0 added [ 61.076841][ T4165] team0: Port device team_slave_1 added [ 61.089608][ T4164] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.096771][ T4164] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.105038][ T4164] device bridge_slave_0 entered promiscuous mode [ 61.137445][ T4176] team0: Port device team_slave_0 added [ 61.143917][ T4164] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.150996][ T4164] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.159037][ T4164] device bridge_slave_1 entered promiscuous mode [ 61.167835][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.179202][ T4166] team0: Port device team_slave_0 added [ 61.196400][ T4176] team0: Port device team_slave_1 added [ 61.211445][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.222222][ T4166] team0: Port device team_slave_1 added [ 61.229139][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.236221][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.262157][ T4165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.306579][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.313757][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.340026][ T4165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.367279][ T4164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.405987][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.412946][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.439489][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.452256][ T4164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.464320][ T4168] team0: Port device team_slave_0 added [ 61.477281][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.484334][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.510959][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.533039][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.540058][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.566463][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.578960][ T4168] team0: Port device team_slave_1 added [ 61.593464][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.600432][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.626726][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.640891][ T4165] device hsr_slave_0 entered promiscuous mode [ 61.648271][ T4165] device hsr_slave_1 entered promiscuous mode [ 61.670152][ T4164] team0: Port device team_slave_0 added [ 61.701730][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.708797][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.735629][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.748119][ T4164] team0: Port device team_slave_1 added [ 61.779733][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.786883][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.813032][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.842986][ T4166] device hsr_slave_0 entered promiscuous mode [ 61.850008][ T4166] device hsr_slave_1 entered promiscuous mode [ 61.857169][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.865114][ T4166] Cannot create hsr debugfs directory [ 61.919526][ T4164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.926838][ T4164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.953103][ T4164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.967379][ T4176] device hsr_slave_0 entered promiscuous mode [ 61.974285][ T4176] device hsr_slave_1 entered promiscuous mode [ 61.980931][ T4176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.989224][ T4176] Cannot create hsr debugfs directory [ 62.014972][ T4164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.021942][ T4164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.047946][ T4164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.064417][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 62.073642][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 62.074026][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 62.079690][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 62.090888][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 62.162678][ T4164] device hsr_slave_0 entered promiscuous mode [ 62.169831][ T4164] device hsr_slave_1 entered promiscuous mode [ 62.176779][ T4164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.184791][ T4164] Cannot create hsr debugfs directory [ 62.198092][ T4168] device hsr_slave_0 entered promiscuous mode [ 62.205160][ T4168] device hsr_slave_1 entered promiscuous mode [ 62.211670][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.219815][ T4168] Cannot create hsr debugfs directory [ 62.477959][ T4165] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.494379][ T4165] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.503232][ T4165] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.515173][ T4165] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.561260][ T4166] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.580079][ T4166] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.596812][ T4166] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.630966][ T4166] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.642453][ T4176] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.658341][ T4176] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.687284][ T4176] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.701089][ T4176] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.742222][ T4164] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.753064][ T4164] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.762611][ T4164] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.784863][ T4165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.797308][ T4164] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.831406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.841699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.857558][ T4165] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.888850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.898850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.908749][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.916023][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.944918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.987395][ T4168] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.998766][ T4168] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.010246][ T4168] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.019901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.029158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.037696][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.044789][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.068519][ T4168] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.089125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.107729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.138691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.148219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.158867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.172103][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.188170][ T4164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.198175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.207583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.219187][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.235942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.245500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.265190][ T4164] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.276822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.285825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.294298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.302908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.311834][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.318927][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.332616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.344703][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.353880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.364140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.383922][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.411214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.419870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.428709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.438658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.447437][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.454561][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.462786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.471451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.479894][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.486971][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.495754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.504704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.513247][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.520333][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.529005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.538580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.547937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.557178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.577048][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.600167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.609358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.618854][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.625949][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.634213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.642969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.653145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.661756][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.668874][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.678055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.687104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.697443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.706468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.716161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.725767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.751855][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.762677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.775942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.786538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.796250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.805154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.813988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.822418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.832062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.840497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.849320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.859611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.869303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.890248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.899019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.910205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.919326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.929596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.939368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.955669][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.979796][ T4164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.999482][ T4164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.021946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.031434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.047725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.061208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.070953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.080194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.089059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.099383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.108833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.119142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.131254][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.141367][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.149441][ T4210] Bluetooth: hci0: command 0x041b tx timeout [ 64.153971][ T4167] Bluetooth: hci4: command 0x041b tx timeout [ 64.157630][ T4210] Bluetooth: hci2: command 0x041b tx timeout [ 64.161607][ T4167] Bluetooth: hci1: command 0x041b tx timeout [ 64.184136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.192717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.221838][ T4210] Bluetooth: hci3: command 0x041b tx timeout [ 64.222033][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.234988][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.295016][ T4165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.310524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.320705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.329593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.339331][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.346463][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.356320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.365492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.374914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.383025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.406989][ T4168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.417587][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.436066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.446275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.474111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.488962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.499184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.515387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.524531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.532909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.542364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.551411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.597189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.606106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.618186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.626901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.645518][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.656129][ T4164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.680440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.689927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.699786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.710635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.736670][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.754803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.763055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.823115][ T4165] device veth0_vlan entered promiscuous mode [ 64.841203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.850981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.859663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.868736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.903047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.912828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.923260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.932483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.941402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.950890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.959729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.968108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.983562][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.001660][ T4166] device veth0_vlan entered promiscuous mode [ 65.008722][ T4164] device veth0_vlan entered promiscuous mode [ 65.016434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.025974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.035751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.043683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.076462][ T4166] device veth1_vlan entered promiscuous mode [ 65.090444][ T4164] device veth1_vlan entered promiscuous mode [ 65.099532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.108488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.117220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.126477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.148790][ T4165] device veth1_vlan entered promiscuous mode [ 65.163547][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.171683][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.180911][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.190839][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.199293][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.207961][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.235797][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.247258][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.257384][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.268214][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.290862][ T4176] device veth0_vlan entered promiscuous mode [ 65.303887][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.312638][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.321896][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.332162][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.344211][ T4166] device veth0_macvtap entered promiscuous mode [ 65.357273][ T4164] device veth0_macvtap entered promiscuous mode [ 65.371777][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.380418][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.389374][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.398082][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.407515][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.416432][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.426273][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.434472][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.444226][ T4166] device veth1_macvtap entered promiscuous mode [ 65.459324][ T4164] device veth1_macvtap entered promiscuous mode [ 65.467258][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.476531][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.486873][ T4165] device veth0_macvtap entered promiscuous mode [ 65.504722][ T4176] device veth1_vlan entered promiscuous mode [ 65.520810][ T4164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.531103][ T4168] device veth0_vlan entered promiscuous mode [ 65.542477][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.553712][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.565384][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.572742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.581523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.593301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.601932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.617294][ T4165] device veth1_macvtap entered promiscuous mode [ 65.628520][ T4164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.640717][ T4164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.650897][ T4164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.660428][ T4164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.670024][ T4164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.692226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.701847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.716794][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.727947][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.739326][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.769128][ T4168] device veth1_vlan entered promiscuous mode [ 65.781219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.790507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.805983][ T4166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.816735][ T4166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.826312][ T4166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.835393][ T4166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.857920][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.868517][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.879169][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.889959][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.901881][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.922845][ T4176] device veth0_macvtap entered promiscuous mode [ 65.937318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.947509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.961748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.970725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.986367][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.998180][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.008355][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.019404][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.031104][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.043420][ T4165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.052145][ T4165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.061899][ T4165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.071835][ T4165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.084371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.092921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.101881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.143998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.153107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.173012][ T4168] device veth0_macvtap entered promiscuous mode [ 66.192552][ T4176] device veth1_macvtap entered promiscuous mode [ 66.215220][ T4168] device veth1_macvtap entered promiscuous mode [ 66.239507][ T4244] Bluetooth: hci2: command 0x040f tx timeout [ 66.246055][ T4244] Bluetooth: hci1: command 0x040f tx timeout [ 66.255728][ T4244] Bluetooth: hci4: command 0x040f tx timeout [ 66.261856][ T4244] Bluetooth: hci0: command 0x040f tx timeout [ 66.320461][ T4167] Bluetooth: hci3: command 0x040f tx timeout [ 66.322374][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.344270][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.354525][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.365272][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.375699][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.386484][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.398829][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.406784][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.417798][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.427728][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.438410][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.449020][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.459490][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.470752][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.481526][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.493196][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.503278][ T1376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.511361][ T1376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.514411][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.529713][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.539876][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.551144][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.562123][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.572607][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.584022][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.596849][ T4168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.605856][ T4168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.615196][ T4168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.626076][ T4168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.636697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.646157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.654718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.662663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.671618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.680395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.689548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.698930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.708546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.718567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.729131][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.739953][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.749936][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.760555][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.770439][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.781551][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.792207][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.802726][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.815500][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.842557][ T4216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.848952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.851060][ T4216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.863892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.876889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.888981][ T4176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.898108][ T4176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.907138][ T4176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.916278][ T4176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.998613][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.007567][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.016783][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.056001][ T4216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.070166][ T4216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.084294][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.122043][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.140781][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.141103][ T4216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.179485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.190756][ T4216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.208334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.224080][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.233410][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.270617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.354409][ T1376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.362488][ T1376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.483050][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.609305][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.624266][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.178887][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.189535][ T4167] Bluetooth: hci0: command 0x0419 tx timeout [ 69.201934][ T4167] Bluetooth: hci4: command 0x0419 tx timeout [ 69.212981][ T4223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.213248][ T4167] Bluetooth: hci1: command 0x0419 tx timeout [ 69.231613][ T4167] Bluetooth: hci3: command 0x0419 tx timeout [ 69.262716][ T4223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.275542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.903889][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.913381][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.923364][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 69.932399][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 69.941306][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 69.950298][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 69.959277][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 69.968254][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 69.977197][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 69.986179][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 70.089312][ T4285] syz.3.10 uses obsolete (PF_INET,SOCK_PACKET) [ 71.145756][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 71.267744][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.275033][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.388299][ T4320] sctp: [Deprecated]: syz.3.21 (pid 4320) Use of struct sctp_assoc_value in delayed_ack socket option. [ 72.388299][ T4320] Use struct sctp_sack_info instead [ 73.105282][ T7] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 73.129588][ T7] Bluetooth: hci2: Injecting HCI hardware error event [ 73.215721][ T146] Bluetooth: hci2: hardware error 0x00 [ 73.607434][ T4345] netlink: 'syz.1.29': attribute type 21 has an invalid length. [ 73.673586][ T4345] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.29'. [ 74.228498][ T4358] device veth1_macvtap left promiscuous mode [ 77.437577][ T4406] openvswitch: netlink: Message has 4 unknown bytes. [ 81.160225][ T4466] netlink: 60 bytes leftover after parsing attributes in process `syz.1.74'. [ 81.180895][ T4466] netlink: 60 bytes leftover after parsing attributes in process `syz.1.74'. [ 81.199947][ T4465] netlink: 60 bytes leftover after parsing attributes in process `syz.1.74'. [ 81.240676][ T4469] netlink: 60 bytes leftover after parsing attributes in process `syz.1.74'. [ 81.568720][ T1110] cfg80211: failed to load regulatory.db [ 81.680434][ T4483] openvswitch: netlink: Message has 4 unknown bytes. [ 82.428873][ T4492] bridge0: port 3(vlan2) entered blocking state [ 82.437901][ T4492] bridge0: port 3(vlan2) entered disabled state [ 82.472982][ T4492] device vlan2 entered promiscuous mode [ 82.505084][ T4492] device bond0 entered promiscuous mode [ 82.529137][ T4492] device bond_slave_0 entered promiscuous mode [ 82.572755][ T4492] device bond_slave_1 entered promiscuous mode [ 82.590483][ T4492] bridge0: port 3(vlan2) entered blocking state [ 82.597086][ T4492] bridge0: port 3(vlan2) entered forwarding state [ 84.497836][ T4527] openvswitch: netlink: Message has 4 unknown bytes. [ 85.674747][ T4532] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.094731][ T4211] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.474302][ T4211] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 86.474562][ T4211] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 86.474792][ T4211] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 86.476293][ T4211] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 86.476755][ T4211] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 86.704628][ T4211] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 86.704662][ T4211] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 86.704685][ T4211] usb 1-1: Product: syz [ 86.704702][ T4211] usb 1-1: Manufacturer: syz [ 86.746170][ T4211] cdc_wdm 1-1:1.0: skipping garbage [ 86.746232][ T4211] cdc_wdm 1-1:1.0: skipping garbage [ 86.756557][ T4211] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 86.756594][ T4211] cdc_wdm 1-1:1.0: Unknown control protocol [ 87.216095][ T4245] usb 1-1: USB disconnect, device number 2 [ 87.283437][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.441958][ T4559] netlink: 52 bytes leftover after parsing attributes in process `syz.4.107'. [ 87.533494][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 87.653626][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.709509][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.777480][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 87.807573][ T7] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 87.820025][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.857970][ T4566] openvswitch: netlink: Message has 4 unknown bytes. [ 88.037180][ T7] usb 3-1: config 0 descriptor?? [ 88.231925][ T4560] device bond0 entered promiscuous mode [ 88.280026][ T4560] device bond_slave_0 entered promiscuous mode [ 88.445724][ T4560] device bond_slave_1 entered promiscuous mode [ 88.714230][ T7] hid (null): unknown global tag 0xe [ 88.728868][ T4560] netlink: 10 bytes leftover after parsing attributes in process `syz.4.107'. [ 88.788379][ T7] kye 0003:0458:5011.0001: unknown main item tag 0x0 [ 88.832544][ T7] kye 0003:0458:5011.0001: unknown main item tag 0x0 [ 88.877741][ T7] kye 0003:0458:5011.0001: unknown main item tag 0x0 [ 88.919029][ T7] kye 0003:0458:5011.0001: unknown main item tag 0x0 [ 88.945988][ T7] kye 0003:0458:5011.0001: unknown main item tag 0x0 [ 88.971698][ T7] kye 0003:0458:5011.0001: unknown main item tag 0x0 [ 89.003897][ T7] kye 0003:0458:5011.0001: unknown main item tag 0x0 [ 89.032244][ T7] kye 0003:0458:5011.0001: unknown main item tag 0x0 [ 89.062586][ T7] kye 0003:0458:5011.0001: unknown main item tag 0x0 [ 89.095514][ T7] kye 0003:0458:5011.0001: unknown main item tag 0x0 [ 89.125113][ T7] kye 0003:0458:5011.0001: unknown global tag 0xe [ 89.152659][ T7] kye 0003:0458:5011.0001: item 0 2 1 14 parsing failed [ 89.185026][ T7] kye 0003:0458:5011.0001: parse failed [ 89.214813][ T7] kye: probe of 0003:0458:5011.0001 failed with error -22 [ 89.928686][ T4580] overlayfs: failed to resolve './file0': -2 [ 90.335217][ T4212] usb 3-1: USB disconnect, device number 2 [ 90.771153][ T146] ================================================================== [ 90.779417][ T146] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x11d6/0x3f50 [ 90.787261][ T146] Read of size 1 at addr ffff88802150940a by task kworker/u5:0/146 [ 90.795229][ T146] [ 90.797559][ T146] CPU: 1 PID: 146 Comm: kworker/u5:0 Not tainted 5.15.176-syzkaller #0 [ 90.805817][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 90.815872][ T146] Workqueue: hci0 hci_rx_work [ 90.820569][ T146] Call Trace: [ 90.823942][ T146] [ 90.826900][ T146] dump_stack_lvl+0x1e3/0x2d0 [ 90.831624][ T146] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 90.837347][ T146] ? _printk+0xd1/0x120 [ 90.841511][ T146] ? __wake_up_klogd+0xcc/0x100 [ 90.846454][ T146] ? panic+0x860/0x860 [ 90.850530][ T146] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 90.856175][ T146] print_address_description+0x63/0x3b0 [ 90.861739][ T146] ? hci_le_meta_evt+0x11d6/0x3f50 [ 90.866884][ T146] kasan_report+0x16b/0x1c0 [ 90.871394][ T146] ? hci_le_meta_evt+0x11d6/0x3f50 [ 90.876517][ T146] hci_le_meta_evt+0x11d6/0x3f50 [ 90.881471][ T146] ? __lock_acquire+0x1ff0/0x1ff0 [ 90.886509][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 90.892605][ T146] ? __mutex_unlock_slowpath+0x218/0x750 [ 90.898259][ T146] ? hci_event_packet+0x3b4/0x1550 [ 90.903411][ T146] ? mutex_unlock+0x10/0x10 [ 90.907920][ T146] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 90.913896][ T146] ? print_irqtrace_events+0x210/0x210 [ 90.919363][ T146] hci_event_packet+0xc41/0x1550 [ 90.924325][ T146] ? rcu_lock_release+0x20/0x20 [ 90.929285][ T146] ? hci_send_to_monitor+0x99/0x4d0 [ 90.934502][ T146] hci_rx_work+0x237/0xa10 [ 90.938924][ T146] process_one_work+0x8a1/0x10c0 [ 90.943878][ T146] ? worker_detach_from_pool+0x260/0x260 [ 90.949528][ T146] ? _raw_spin_lock_irqsave+0x120/0x120 [ 90.955076][ T146] ? kthread_data+0x4e/0xc0 [ 90.959575][ T146] ? wq_worker_running+0x97/0x170 [ 90.964595][ T146] worker_thread+0xaca/0x1280 [ 90.969290][ T146] kthread+0x3f6/0x4f0 [ 90.973385][ T146] ? rcu_lock_release+0x20/0x20 [ 90.978232][ T146] ? kthread_blkcg+0xd0/0xd0 [ 90.982924][ T146] ret_from_fork+0x1f/0x30 [ 90.987361][ T146] [ 90.990415][ T146] [ 90.992728][ T146] Allocated by task 4596: [ 90.997039][ T146] ____kasan_kmalloc+0xba/0xf0 [ 91.001794][ T146] __kmalloc_node_track_caller+0x195/0x390 [ 91.007601][ T146] __alloc_skb+0x12c/0x590 [ 91.012012][ T146] vhci_write+0xbc/0x430 [ 91.016246][ T146] vfs_write+0xacd/0xe50 [ 91.020484][ T146] ksys_write+0x1a2/0x2c0 [ 91.024827][ T146] do_syscall_64+0x3b/0xb0 [ 91.029241][ T146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.035139][ T146] [ 91.037454][ T146] The buggy address belongs to the object at ffff888021509000 [ 91.037454][ T146] which belongs to the cache kmalloc-1k of size 1024 [ 91.051671][ T146] The buggy address is located 10 bytes to the right of [ 91.051671][ T146] 1024-byte region [ffff888021509000, ffff888021509400) [ 91.065462][ T146] The buggy address belongs to the page: [ 91.071198][ T146] page:ffffea0000854200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21508 [ 91.081432][ T146] head:ffffea0000854200 order:3 compound_mapcount:0 compound_pincount:0 [ 91.089749][ T146] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 91.097739][ T146] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017441dc0 [ 91.106461][ T146] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 91.115075][ T146] page dumped because: kasan: bad access detected [ 91.121498][ T146] page_owner tracks the page as allocated [ 91.127211][ T146] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4154, ts 59215186934, free_ts 59212792751 [ 91.146306][ T146] get_page_from_freelist+0x3b78/0x3d40 [ 91.151882][ T146] __alloc_pages+0x272/0x700 [ 91.156482][ T146] new_slab+0xbb/0x4b0 [ 91.160564][ T146] ___slab_alloc+0x6f6/0xe10 [ 91.165176][ T146] __kmalloc_node_track_caller+0x1f6/0x390 [ 91.170995][ T146] __alloc_skb+0x12c/0x590 [ 91.175405][ T146] sk_stream_alloc_skb+0x1fc/0xac0 [ 91.180528][ T146] tcp_sendmsg_locked+0xd34/0x3a90 [ 91.185635][ T146] tcp_sendmsg+0x2c/0x40 [ 91.189895][ T146] sock_write_iter+0x39b/0x530 [ 91.194657][ T146] vfs_write+0xacd/0xe50 [ 91.198917][ T146] ksys_write+0x1a2/0x2c0 [ 91.203274][ T146] do_syscall_64+0x3b/0xb0 [ 91.207710][ T146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.213880][ T146] page last free stack trace: [ 91.218543][ T146] free_unref_page_prepare+0xc34/0xcf0 [ 91.224005][ T146] free_unref_page+0x95/0x2d0 [ 91.228692][ T146] skb_release_data+0x411/0x8a0 [ 91.233536][ T146] __kfree_skb+0x4c/0x60 [ 91.237788][ T146] tcp_ack+0x2326/0x6ab0 [ 91.242195][ T146] tcp_rcv_established+0xc19/0x1e20 [ 91.247413][ T146] tcp_v4_do_rcv+0x423/0x960 [ 91.252022][ T146] __release_sock+0x198/0x4b0 [ 91.256800][ T146] __sk_flush_backlog+0x22/0x30 [ 91.261677][ T146] tcp_sendmsg_locked+0x2baa/0x3a90 [ 91.266916][ T146] tcp_sendmsg+0x2c/0x40 [ 91.271262][ T146] sock_write_iter+0x39b/0x530 [ 91.276104][ T146] vfs_write+0xacd/0xe50 [ 91.280340][ T146] ksys_write+0x1a2/0x2c0 [ 91.284659][ T146] do_syscall_64+0x3b/0xb0 [ 91.289067][ T146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.295306][ T146] [ 91.297636][ T146] Memory state around the buggy address: [ 91.303258][ T146] ffff888021509300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 91.311497][ T146] ffff888021509380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 91.319556][ T146] >ffff888021509400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.327694][ T146] ^ [ 91.332012][ T146] ffff888021509480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.340062][ T146] ffff888021509500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.348216][ T146] ================================================================== [ 91.356291][ T146] Disabling lock debugging due to kernel taint [ 91.430477][ T146] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.437700][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Tainted: G B 5.15.176-syzkaller #0 [ 91.447344][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 91.457418][ T146] Workqueue: hci0 hci_rx_work [ 91.462216][ T146] Call Trace: [ 91.465506][ T146] [ 91.468447][ T146] dump_stack_lvl+0x1e3/0x2d0 [ 91.473182][ T146] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 91.479012][ T146] ? panic+0x860/0x860 [ 91.483105][ T146] ? preempt_schedule_irq+0x155/0x1c0 [ 91.488505][ T146] panic+0x318/0x860 [ 91.492419][ T146] ? check_panic_on_warn+0x1d/0xa0 [ 91.497549][ T146] ? fb_is_primary_device+0xd0/0xd0 [ 91.502762][ T146] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 91.508500][ T146] ? check_panic_on_warn+0x1d/0xa0 [ 91.513610][ T146] ? check_panic_on_warn+0x6a/0xa0 [ 91.518758][ T146] check_panic_on_warn+0x7e/0xa0 [ 91.523695][ T146] ? hci_le_meta_evt+0x11d6/0x3f50 [ 91.528815][ T146] end_report+0x6d/0xf0 [ 91.532960][ T146] kasan_report+0x18e/0x1c0 [ 91.537462][ T146] ? hci_le_meta_evt+0x11d6/0x3f50 [ 91.542592][ T146] hci_le_meta_evt+0x11d6/0x3f50 [ 91.547547][ T146] ? __lock_acquire+0x1ff0/0x1ff0 [ 91.552587][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 91.558766][ T146] ? __mutex_unlock_slowpath+0x218/0x750 [ 91.564496][ T146] ? hci_event_packet+0x3b4/0x1550 [ 91.569610][ T146] ? mutex_unlock+0x10/0x10 [ 91.574106][ T146] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 91.580197][ T146] ? print_irqtrace_events+0x210/0x210 [ 91.585649][ T146] hci_event_packet+0xc41/0x1550 [ 91.590584][ T146] ? rcu_lock_release+0x20/0x20 [ 91.595446][ T146] ? hci_send_to_monitor+0x99/0x4d0 [ 91.600640][ T146] hci_rx_work+0x237/0xa10 [ 91.605057][ T146] process_one_work+0x8a1/0x10c0 [ 91.610002][ T146] ? worker_detach_from_pool+0x260/0x260 [ 91.615760][ T146] ? _raw_spin_lock_irqsave+0x120/0x120 [ 91.621300][ T146] ? kthread_data+0x4e/0xc0 [ 91.625795][ T146] ? wq_worker_running+0x97/0x170 [ 91.630813][ T146] worker_thread+0xaca/0x1280 [ 91.635501][ T146] kthread+0x3f6/0x4f0 [ 91.639563][ T146] ? rcu_lock_release+0x20/0x20 [ 91.644406][ T146] ? kthread_blkcg+0xd0/0xd0 [ 91.649013][ T146] ret_from_fork+0x1f/0x30 [ 91.653453][ T146] [ 91.656562][ T146] Kernel Offset: disabled [ 91.660881][ T146] Rebooting in 86400 seconds..