last executing test programs: 8.84979589s ago: executing program 3 (id=235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017800000400006803c0004"], 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x4000004) 8.8107342s ago: executing program 1 (id=237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x44, r1, 0x8007023327f40d31, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000005}, 0x10) 8.433866465s ago: executing program 1 (id=242): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 8.433665685s ago: executing program 2 (id=243): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) poll(0x0, 0x0, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000007f00)=[{{&(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000002c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002340)=[{0x0}, {&(0x7f0000000a00)="351123dc74df6fdcc65ae8338d62c2cb5f765d755250b9087294a06fb43e0117d81e2effd833daeb7f02c368414bfda7e9ac71c6f3c8853c177aeb54b4ff420e0879ece33d75c90788f1", 0x4a}], 0x2}}], 0x2, 0x40080) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a00)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="010000b24400000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="5300330050000000ffffffffffff080211000000505050505050"], 0x70}}, 0x80) 8.433217045s ago: executing program 3 (id=245): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x114, 0xe) 8.345339586s ago: executing program 1 (id=247): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x20440, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) creat(&(0x7f0000000540)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xe24) 8.333336547s ago: executing program 3 (id=248): socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) read(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 8.265633967s ago: executing program 2 (id=249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x4003, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r2]) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100), 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r5, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x2, 0x0, &(0x7f0000000300)) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x4004014) 8.10378724s ago: executing program 3 (id=250): bpf$MAP_CREATE(0x0, 0x0, 0x48) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000240)="bf1ea0e3c19ed614ebadb3161741", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 7.886892233s ago: executing program 2 (id=251): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffa8, &(0x7f0000000000)=0x1002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 5.973754049s ago: executing program 4 (id=252): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/18, 0xffffffffffffff91}, 0xe}], 0x1, 0x2043, 0x0) 4.834873424s ago: executing program 3 (id=253): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 4.325817731s ago: executing program 0 (id=255): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socket$packet(0x11, 0x3, 0x300) close_range(r1, 0xffffffffffffffff, 0x0) 4.121177584s ago: executing program 0 (id=256): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.957046026s ago: executing program 4 (id=257): r0 = socket$packet(0x11, 0xa, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x884}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpeername$packet(r0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf000080040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) mmap(&(0x7f0000f9f000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000780)={[{0x0, 0x8, 0x3, 0x0, 0xb9, 0x4, 0x3, 0x1, 0x0, 0x4, 0x5, 0x3, 0x8}, {0x400, 0x8001, 0x0, 0x6, 0x8, 0x9, 0x58, 0xb, 0xc1, 0x5, 0x8a, 0x8, 0xfffffffffffffffa}, {0x4, 0xe5, 0x9, 0x8, 0x91, 0x4, 0xf, 0x0, 0x15, 0xff, 0x2, 0x8, 0x17e}], 0xfffffc00}) 3.813684758s ago: executing program 0 (id=258): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5d3bf4aa}, @TCA_FQ_CE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x71}]}}]}, 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, 0x0, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x40000000004) 3.158838407s ago: executing program 2 (id=259): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) poll(0x0, 0x0, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000007f00)=[{{&(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000002c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002340)=[{0x0}, {&(0x7f0000000a00)="351123dc74df6fdcc65ae8338d62c2cb5f765d755250b9087294a06fb43e0117d81e2effd833daeb7f02c368414bfda7e9ac71c6f3c8853c177aeb54b4ff420e0879ece33d75c90788f1", 0x4a}], 0x2}}], 0x2, 0x40080) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a00)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="010000b24400000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="5300330050000000ffffffffffff080211000000505050505050"], 0x70}}, 0x80) 2.607283435s ago: executing program 4 (id=260): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lstat(&(0x7f0000000540)='./file0\x00', 0x0) 2.525713596s ago: executing program 1 (id=261): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2, 0x0, 0xf0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000280)) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) socket$packet(0x11, 0x3, 0x300) syz_open_dev$tty20(0xc, 0x4, 0x1) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) 2.405433247s ago: executing program 2 (id=262): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) socketpair(0x18, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x62, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x4, 0x1, 0x34}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x21, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x1c, r4, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 2.328356978s ago: executing program 0 (id=263): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0xea, 0x4) 2.269783569s ago: executing program 4 (id=264): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2000) 2.162530361s ago: executing program 0 (id=265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10}]}, 0x50}}, 0x0) 1.43728409s ago: executing program 1 (id=266): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) r4 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r4, 0xfffffffffffffff9, 0x3) open(0x0, 0x80242, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring) pipe(&(0x7f0000005880)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [0x61, 0x61]}}, 0x0, 0xffffff42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d030000000000000003000000000000000000000105000000080000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) 1.148779904s ago: executing program 4 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 926.057577ms ago: executing program 3 (id=268): socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b08000340000000080800"], 0xa8}}, 0x0) 925.497768ms ago: executing program 2 (id=269): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24000814) poll(0x0, 0x0, 0x10000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet(0x2, 0x2, 0x0) 797.911829ms ago: executing program 0 (id=270): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x44000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000005c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/212, 0xd4}, {&(0x7f0000000480)=""/175, 0xaf}, {&(0x7f00000009c0)=""/160, 0xa0}, {&(0x7f0000000a80)=""/120, 0x78}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0x7ffffffc}, {{0x0, 0x0, 0x0}, 0x10003}], 0x4, 0x40008062, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 69.646649ms ago: executing program 1 (id=271): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) bind$ax25(r3, &(0x7f0000000f00)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) recvfrom$netrom(r3, 0x0, 0x0, 0x10000, 0x0, 0x0) 0s ago: executing program 4 (id=272): r0 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0x21dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts. [ 48.553494][ T4158] cgroup: Unknown subsys name 'net' [ 48.685450][ T4158] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.831085][ T4158] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.158952][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 51.230627][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 51.249538][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 51.286539][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 51.348893][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.356767][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.365715][ T4169] device bridge_slave_0 entered promiscuous mode [ 51.395902][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.403081][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.410626][ T4180] device bridge_slave_0 entered promiscuous mode [ 51.417827][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.425195][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.433647][ T4169] device bridge_slave_1 entered promiscuous mode [ 51.459861][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.467004][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.475314][ T4180] device bridge_slave_1 entered promiscuous mode [ 51.482366][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 51.498990][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.506193][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.513897][ T4170] device bridge_slave_0 entered promiscuous mode [ 51.533945][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.548031][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.555365][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.562999][ T4170] device bridge_slave_1 entered promiscuous mode [ 51.584098][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.605890][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.628242][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.635486][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.643897][ T4176] device bridge_slave_0 entered promiscuous mode [ 51.658206][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.677234][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.684643][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.693034][ T4176] device bridge_slave_1 entered promiscuous mode [ 51.701356][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.737555][ T4169] team0: Port device team_slave_0 added [ 51.744782][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.774580][ T4169] team0: Port device team_slave_1 added [ 51.789132][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.800385][ T4180] team0: Port device team_slave_0 added [ 51.806529][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.813754][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.821464][ T4171] device bridge_slave_0 entered promiscuous mode [ 51.842484][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.852371][ T4180] team0: Port device team_slave_1 added [ 51.866209][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.873497][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.881268][ T4171] device bridge_slave_1 entered promiscuous mode [ 51.895168][ T4170] team0: Port device team_slave_0 added [ 51.918482][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.925666][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.951871][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.965336][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.972475][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.998422][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.010493][ T4170] team0: Port device team_slave_1 added [ 52.025657][ T4176] team0: Port device team_slave_0 added [ 52.050445][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.057581][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.083636][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.095916][ T4176] team0: Port device team_slave_1 added [ 52.111940][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.136430][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.143458][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.169585][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.197375][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.214001][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.221072][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.247154][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.261791][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.268741][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.294743][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.315121][ T4169] device hsr_slave_0 entered promiscuous mode [ 52.322057][ T4169] device hsr_slave_1 entered promiscuous mode [ 52.329076][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.336179][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.366066][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.381749][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.388702][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.414680][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.433727][ T4171] team0: Port device team_slave_0 added [ 52.473551][ T4171] team0: Port device team_slave_1 added [ 52.517372][ T4180] device hsr_slave_0 entered promiscuous mode [ 52.524380][ T4180] device hsr_slave_1 entered promiscuous mode [ 52.530847][ T4180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.538631][ T4180] Cannot create hsr debugfs directory [ 52.546943][ T4170] device hsr_slave_0 entered promiscuous mode [ 52.553895][ T4170] device hsr_slave_1 entered promiscuous mode [ 52.560256][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.567939][ T4170] Cannot create hsr debugfs directory [ 52.607961][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.615114][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.641849][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.677247][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.684335][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.710695][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.725594][ T4176] device hsr_slave_0 entered promiscuous mode [ 52.732489][ T4176] device hsr_slave_1 entered promiscuous mode [ 52.738883][ T4176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.746813][ T4176] Cannot create hsr debugfs directory [ 52.821706][ T26] Bluetooth: hci0: command 0x0409 tx timeout [ 52.838801][ T1335] Bluetooth: hci2: command 0x0409 tx timeout [ 52.847666][ T1335] Bluetooth: hci1: command 0x0409 tx timeout [ 52.867755][ T4171] device hsr_slave_0 entered promiscuous mode [ 52.874725][ T4171] device hsr_slave_1 entered promiscuous mode [ 52.881649][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.889213][ T4171] Cannot create hsr debugfs directory [ 52.903798][ T4160] Bluetooth: hci3: command 0x0409 tx timeout [ 52.917905][ T1335] Bluetooth: hci4: command 0x0409 tx timeout [ 53.053266][ T4169] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.067967][ T4169] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.077350][ T4169] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.088960][ T4169] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.136139][ T4180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.145342][ T4180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.158199][ T4180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.176220][ T4180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.226198][ T4170] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.245685][ T4170] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.257100][ T4170] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.272964][ T4170] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.327985][ T4171] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.338028][ T4171] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.373111][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.389694][ T4171] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.413906][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.420666][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.430426][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.439224][ T4171] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.448945][ T4176] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.466442][ T4176] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.477094][ T4176] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.488254][ T4176] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.504339][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.513868][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.523041][ T556] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.530136][ T556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.545943][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.560251][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.570070][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.583667][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.593282][ T556] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.600299][ T556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.627438][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.636035][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.649783][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.675013][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.694146][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.704811][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.714585][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.723352][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.751917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.760683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.769042][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.776102][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.786595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.796716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.805213][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.812296][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.820222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.828792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.837018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.845826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.854333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.862443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.879999][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.895419][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.906103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.928109][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.939647][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.948253][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.956748][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.968083][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.976409][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.984785][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.992732][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.001285][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.009528][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.020620][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.040759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.051346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.065545][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.084769][ T4180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.107041][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.115903][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.126633][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.134836][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.143917][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.152780][ T556] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.159816][ T556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.168346][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.176909][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.185549][ T556] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.192668][ T556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.200243][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.208859][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.220735][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.229074][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.261776][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.270443][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.290408][ T556] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.297542][ T556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.327283][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.336682][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.368425][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.377708][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.388502][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.395618][ T1241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.412142][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.436143][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.444868][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.453261][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.464753][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.477519][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.497245][ T4171] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.508941][ T4171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.533298][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.547756][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.555673][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.564902][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.574756][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.582731][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.590183][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.599607][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.608414][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.617160][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.626809][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.635622][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.643717][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.660578][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.679210][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.695890][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.706958][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.719041][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.727489][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.735435][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.751513][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.771525][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.782112][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.796507][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.805715][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.815920][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.844372][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.855279][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.879980][ T1241] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.887127][ T1241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.902318][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.917144][ T4215] Bluetooth: hci1: command 0x041b tx timeout [ 54.925268][ T4215] Bluetooth: hci2: command 0x041b tx timeout [ 54.935435][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.943546][ T4215] Bluetooth: hci0: command 0x041b tx timeout [ 54.951375][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.958402][ T1241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.967789][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.992866][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 55.010828][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 55.022985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.032211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.042286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.052210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.065446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.079255][ T4180] device veth0_vlan entered promiscuous mode [ 55.096659][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.107673][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.117886][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.134455][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.149661][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.158882][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.167480][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.175574][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.198921][ T4180] device veth1_vlan entered promiscuous mode [ 55.214238][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.222486][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.230515][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.238906][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.247043][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.255739][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.264254][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.273392][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.281965][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.289625][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.300038][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.310370][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.335208][ T4169] device veth0_vlan entered promiscuous mode [ 55.344457][ T4176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.355911][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.380192][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.389287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.397915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.406893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.417719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.425250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.434678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.453836][ T4180] device veth0_macvtap entered promiscuous mode [ 55.474149][ T4169] device veth1_vlan entered promiscuous mode [ 55.503086][ T4180] device veth1_macvtap entered promiscuous mode [ 55.512559][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.523346][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.537973][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.548269][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.584875][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.594307][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.603930][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.613034][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.630313][ T4171] device veth0_vlan entered promiscuous mode [ 55.639280][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.669443][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.682343][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.690101][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.699041][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.708414][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.717390][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.725942][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.734685][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.743234][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.751643][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.762413][ T4171] device veth1_vlan entered promiscuous mode [ 55.776989][ T4169] device veth0_macvtap entered promiscuous mode [ 55.785250][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.794259][ T4170] device veth0_vlan entered promiscuous mode [ 55.808111][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.822183][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.830291][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.839049][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.847790][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.856480][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.865814][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.873636][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.885752][ T4169] device veth1_macvtap entered promiscuous mode [ 55.896126][ T4180] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.907229][ T4180] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.916127][ T4180] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.925232][ T4180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.950293][ T4170] device veth1_vlan entered promiscuous mode [ 56.022081][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.037434][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.048429][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.062022][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.070402][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.079196][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.087360][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.096250][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.108128][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.119318][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.129591][ T4171] device veth0_macvtap entered promiscuous mode [ 56.144704][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.157736][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.168712][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.193723][ T4171] device veth1_macvtap entered promiscuous mode [ 56.201905][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.209865][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.222636][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.231606][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.239871][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.249238][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.258122][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.267875][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.279675][ T4170] device veth0_macvtap entered promiscuous mode [ 56.288616][ T4169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.297559][ T4169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.306535][ T4169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.315425][ T4169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.339963][ T4170] device veth1_macvtap entered promiscuous mode [ 56.341297][ T1241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.355203][ T1241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.366731][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.375186][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.383334][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.445891][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.458090][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.469268][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.480000][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.493138][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.505817][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.519803][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.529895][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.540579][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.550571][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.561015][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.572548][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.585437][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.596293][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.606047][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.614208][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.623654][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.633229][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.644065][ T4176] device veth0_vlan entered promiscuous mode [ 56.657749][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.668510][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.679020][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.689556][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.700359][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.710131][ T1241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.710969][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.721296][ T1241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.734342][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.746655][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.757103][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.768072][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.778556][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.789296][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.810347][ T4176] device veth1_vlan entered promiscuous mode [ 56.819044][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.828651][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.837350][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.845794][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.853885][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.862993][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.874804][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.883414][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.902749][ T4171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.912545][ T4171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.922935][ T4171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.932317][ T4171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.944307][ T4170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.954507][ T556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.962529][ T4170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.971649][ T556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.976733][ T4170] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.988133][ T4213] Bluetooth: hci0: command 0x040f tx timeout [ 56.991093][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 56.994618][ T4170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.000230][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 57.043728][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.053033][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.073652][ T1108] Bluetooth: hci3: command 0x040f tx timeout [ 57.079830][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 57.127885][ T4176] device veth0_macvtap entered promiscuous mode [ 57.167476][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.183898][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.203524][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.222916][ T4176] device veth1_macvtap entered promiscuous mode [ 57.238360][ T4220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.253528][ T4220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.274615][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.308529][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.319908][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.339698][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.351140][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.367392][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.382776][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.400478][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.425004][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.442737][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.459419][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.475533][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.494076][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.510266][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.514759][ T4249] loop1: detected capacity change from 0 to 40427 [ 57.523303][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.541710][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.552237][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.563160][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.583410][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.593278][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.601489][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.610150][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.619187][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.634461][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.668938][ T4249] F2FS-fs (loop1): invalid crc value [ 57.680609][ T4176] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.695640][ T4249] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 57.738153][ T4176] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.752141][ T4249] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 57.762175][ T4249] F2FS-fs (loop1): Start checkpoint disabled! [ 57.766219][ T4176] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.777525][ T4176] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.777653][ T4249] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 57.949367][ T4220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.990431][ T4220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.047613][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.076888][ T1241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.094632][ T1241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.426649][ T4259] attempt to access beyond end of device [ 58.426649][ T4259] loop1: rw=2049, want=45224, limit=40427 [ 58.744799][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.773585][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.846230][ T4261] attempt to access beyond end of device [ 58.846230][ T4261] loop1: rw=2049, want=45240, limit=40427 [ 58.869898][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.884732][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.929091][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.938234][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.008292][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.061823][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.075970][ T4244] Bluetooth: hci1: command 0x0419 tx timeout [ 59.100818][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.122442][ T4244] Bluetooth: hci2: command 0x0419 tx timeout [ 59.148259][ T4244] Bluetooth: hci0: command 0x0419 tx timeout [ 59.159186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.180668][ T4268] fuse: Bad value for 'rootmode' [ 59.186932][ T556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.188680][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 59.217762][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 59.223135][ T556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.280448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.407669][ T4272] loop2: detected capacity change from 0 to 512 [ 61.200792][ C0] sched: RT throttling activated [ 61.233741][ T4272] EXT4-fs (loop2): Ignoring removed nobh option [ 61.240212][ T4272] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 61.584860][ T4278] loop0: detected capacity change from 0 to 262144 [ 61.748804][ T4278] F2FS-fs (loop0): invalid crc value [ 61.788505][ T4278] F2FS-fs (loop0): Found nat_bits in checkpoint [ 62.734709][ T4272] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 62.905985][ T4298] loop3: detected capacity change from 0 to 512 [ 63.213448][ T4298] EXT4-fs (loop3): inline encryption not supported [ 63.220025][ T4298] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 63.383958][ T4298] EXT4-fs (loop3): 1 orphan inode deleted [ 63.421580][ T4313] loop2: detected capacity change from 0 to 512 [ 63.459320][ T4298] EXT4-fs (loop3): mounted filesystem without journal. Opts: inlinecrypt,dioread_nolock,,errors=continue. Quota mode: writeback. [ 63.501086][ T4298] ext4 filesystem being mounted at /3/file6 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.557071][ T4313] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 63.653821][ T4313] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.503758][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d1ef800: rx timeout, send abort [ 65.011061][ T4160] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.012675][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d1ef800: abort rx timeout. Force session deactivation [ 65.196855][ T4328] loop3: detected capacity change from 0 to 40427 [ 65.219233][ T4330] fuse: Bad value for 'rootmode' [ 65.285712][ T4328] F2FS-fs (loop3): invalid crc value [ 65.320815][ T4328] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 65.330964][ T4160] usb 3-1: device descriptor read/64, error -71 [ 65.383273][ T4328] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 65.390411][ T4328] F2FS-fs (loop3): Start checkpoint disabled! [ 65.423854][ T4328] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 65.610996][ T4160] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 66.025814][ T4340] attempt to access beyond end of device [ 66.025814][ T4340] loop3: rw=2049, want=45224, limit=40427 [ 66.522417][ T556] attempt to access beyond end of device [ 66.522417][ T556] loop3: rw=2049, want=45240, limit=40427 [ 68.193138][ T4354] loop2: detected capacity change from 0 to 8192 [ 70.097544][ T4380] loop2: detected capacity change from 0 to 512 [ 70.493423][ T4380] EXT4-fs (loop2): inline encryption not supported [ 70.524349][ T4384] loop0: detected capacity change from 0 to 512 [ 70.638018][ T4380] EXT4-fs (loop2): 1 orphan inode deleted [ 70.646904][ T4380] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,dioread_nolock,,errors=continue. Quota mode: writeback. [ 70.670157][ T4380] ext4 filesystem being mounted at /6/file6 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.710060][ T4384] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.770295][ T4384] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.916459][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.923045][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.949767][ T4377] loop3: detected capacity change from 0 to 32768 [ 72.466811][ T4418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 72.482439][ T4418] Zero length message leads to an empty skb [ 72.501503][ T4244] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.517412][ T4418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.50'. [ 72.528401][ T4377] XFS (loop3): Mounting V5 Filesystem [ 72.634106][ T4377] XFS (loop3): log mount failed [ 72.711146][ T4244] usb 1-1: device descriptor read/64, error -71 [ 72.991000][ T4244] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 73.048867][ T4440] loop4: detected capacity change from 0 to 512 [ 73.260657][ T4244] usb 1-1: device descriptor read/64, error -71 [ 73.286640][ T4440] EXT4-fs (loop4): inline encryption not supported [ 73.404612][ T4244] usb usb1-port1: attempt power cycle [ 73.746035][ T4443] tipc: Started in network mode [ 73.787254][ T4440] EXT4-fs (loop4): 1 orphan inode deleted [ 73.900518][ T4443] tipc: Node identity ee5c370785ff, cluster identity 4711 [ 73.907934][ T4443] tipc: Enabled bearer , priority 0 [ 73.930896][ T4440] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,dioread_nolock,,errors=continue. Quota mode: writeback. [ 73.982962][ T4443] device syzkaller0 entered promiscuous mode [ 74.042236][ T4440] ext4 filesystem being mounted at /17/file6 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.125732][ T4452] 9pnet: Insufficient options for proto=fd [ 74.198064][ T4442] tipc: Resetting bearer [ 74.305486][ T4442] tipc: Disabling bearer [ 74.577468][ T4459] tipc: Started in network mode [ 74.604623][ T4459] tipc: Node identity 564b18d7da59, cluster identity 4711 [ 75.386258][ T4459] tipc: Enabled bearer , priority 0 [ 75.575460][ T4465] device syzkaller0 entered promiscuous mode [ 75.713342][ T4480] loop1: detected capacity change from 0 to 512 [ 75.721340][ T4455] tipc: Resetting bearer [ 75.959655][ T4475] loop2: detected capacity change from 0 to 32768 [ 76.124425][ T3145] cfg80211: failed to load regulatory.db [ 76.152755][ T4455] tipc: Disabling bearer [ 76.202458][ T4480] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.233984][ T4480] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.861182][ T4247] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.101030][ T4247] usb 2-1: device descriptor read/64, error -71 [ 77.346513][ T4498] 9pnet: Insufficient options for proto=fd [ 77.361086][ T4475] XFS (loop2): Mounting V5 Filesystem [ 77.382817][ T4247] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.506805][ T4475] XFS (loop2): Ending clean mount [ 77.570922][ T4247] usb 2-1: device descriptor read/64, error -71 [ 77.629077][ T4171] XFS (loop2): Unmounting Filesystem [ 77.691082][ T4247] usb usb2-port1: attempt power cycle [ 78.101378][ T4247] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 78.224649][ T4247] usb 2-1: device descriptor read/8, error -71 [ 78.582062][ T4247] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 79.698800][ T4247] usb 2-1: device not accepting address 5, error -71 [ 79.752491][ T4247] usb usb2-port1: unable to enumerate USB device [ 80.317789][ T4531] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 81.572736][ T4528] netlink: 277 bytes leftover after parsing attributes in process `syz.4.81'. [ 81.800587][ T4538] loop2: detected capacity change from 0 to 512 [ 81.870888][ T4538] EXT4-fs (loop2): inline encryption not supported [ 82.956784][ T4538] EXT4-fs (loop2): 1 orphan inode deleted [ 82.982617][ T4549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.86'. [ 82.997497][ T4538] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,dioread_nolock,,errors=continue. Quota mode: writeback. [ 83.067044][ T4538] ext4 filesystem being mounted at /9/file6 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.089829][ T4549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.86'. [ 86.267430][ T4569] device syzkaller1 entered promiscuous mode [ 86.464024][ T4574] loop4: detected capacity change from 0 to 8192 [ 86.651278][ T4592] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.367846][ T4619] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.576247][ T4623] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 91.091454][ T4625] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 94.282180][ T4647] loop0: detected capacity change from 0 to 8192 [ 94.307620][ T4646] loop4: detected capacity change from 0 to 8192 [ 94.375526][ T4650] loop3: detected capacity change from 0 to 8192 [ 97.525835][ T4677] syz.3.119 uses obsolete (PF_INET,SOCK_PACKET) [ 97.791679][ T4683] tipc: Enabled bearer , priority 0 [ 97.842233][ T4683] device syzkaller0 entered promiscuous mode [ 97.887274][ T4683] tipc: Resetting bearer [ 97.947630][ T4682] tipc: Resetting bearer [ 97.967605][ T4682] tipc: Disabling bearer [ 98.466763][ T4707] crypto_alloc_aead failed rc=-4 [ 98.743963][ T4745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'. [ 98.780505][ T4745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'. [ 99.003735][ T4754] tipc: Enabled bearer , priority 0 [ 99.106593][ T4754] device syzkaller0 entered promiscuous mode [ 99.194395][ T4763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 99.212397][ T4753] tipc: Resetting bearer [ 99.332786][ T4753] tipc: Disabling bearer [ 99.446258][ T4776] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 99.508297][ T4776] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.516856][ T4776] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.577351][ T4776] syz.2.148 (4776) used greatest stack depth: 19400 bytes left [ 100.154438][ T4816] netlink: 56 bytes leftover after parsing attributes in process `syz.1.165'. [ 100.577298][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806058c400: rx timeout, send abort [ 100.586188][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079deb800: rx timeout, send abort [ 100.742376][ T4847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.179'. [ 100.812817][ T4849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'. [ 100.839033][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 101.085619][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806058c400: abort rx timeout. Force session deactivation [ 101.098578][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079deb800: abort rx timeout. Force session deactivation [ 101.232487][ T4877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.190'. [ 101.368380][ T4885] IPv6: NLM_F_REPLACE set, but no existing node found! [ 101.747234][ T4905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 101.797596][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 102.886929][ T4958] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 103.513806][ T4979] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.300830][ T5019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.246'. [ 104.351306][ T1335] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.182508][ T5037] loop3: detected capacity change from 0 to 512 [ 107.402601][ T5039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.251'. [ 107.842094][ T5042] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 109.266749][ T5067] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.795659][ T5073] sch_fq: defrate 113 ignored. [ 111.339401][ T5085] syz.2.262 (5085) used greatest stack depth: 16992 bytes left [ 111.515091][ T4181] Bluetooth: hci4: link tx timeout [ 111.522409][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 111.712198][ T4181] Bluetooth: hci4: link tx timeout [ 111.731863][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 112.661265][ T5109] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 112.670135][ T4181] Bluetooth: hci4: link tx timeout [ 112.675619][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 112.699901][ T4181] Bluetooth: hci4: link tx timeout [ 112.706364][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 112.741162][ T5109] [ 112.743538][ T5109] ====================================================== [ 112.750566][ T5109] WARNING: possible circular locking dependency detected [ 112.757596][ T5109] 5.15.183-syzkaller #0 Not tainted [ 112.762803][ T5109] ------------------------------------------------------ [ 112.769835][ T5109] syz.1.271/5109 is trying to acquire lock: [ 112.775742][ T5109] ffff88801f5c4120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 112.785173][ T5109] [ 112.785173][ T5109] but task is already holding lock: [ 112.792548][ T5109] ffffffff8d22a388 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 112.800842][ T5109] [ 112.800842][ T5109] which lock already depends on the new lock. [ 112.800842][ T5109] [ 112.811261][ T5109] [ 112.811261][ T5109] the existing dependency chain (in reverse order) is: [ 112.820287][ T5109] [ 112.820287][ T5109] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 112.827642][ T5109] __mutex_lock_common+0x1eb/0x2390 [ 112.833391][ T5109] mutex_lock_nested+0x17/0x20 [ 112.838702][ T5109] ax25_setsockopt+0x830/0xa40 [ 112.844007][ T5109] __sys_setsockopt+0x3d6/0x5e0 [ 112.849404][ T5109] __x64_sys_setsockopt+0xb1/0xc0 [ 112.854973][ T5109] do_syscall_64+0x4c/0xa0 [ 112.859935][ T5109] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.866378][ T5109] [ 112.866378][ T5109] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 112.874046][ T5109] __lock_acquire+0x2c33/0x7c60 [ 112.879428][ T5109] lock_acquire+0x197/0x3f0 [ 112.884464][ T5109] lock_sock_nested+0x44/0x100 [ 112.889766][ T5109] ax25_device_event+0x217/0x4f0 [ 112.895247][ T5109] raw_notifier_call_chain+0xcb/0x160 [ 112.901158][ T5109] __dev_notify_flags+0x178/0x2d0 [ 112.906735][ T5109] dev_change_flags+0xe3/0x1a0 [ 112.912031][ T5109] dev_ifsioc+0x147/0xe70 [ 112.916894][ T5109] dev_ioctl+0x55f/0xe50 [ 112.921673][ T5109] sock_do_ioctl+0x222/0x2f0 [ 112.926806][ T5109] sock_ioctl+0x4ed/0x6e0 [ 112.931677][ T5109] __se_sys_ioctl+0xfa/0x170 [ 112.936805][ T5109] do_syscall_64+0x4c/0xa0 [ 112.941761][ T5109] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.948204][ T5109] [ 112.948204][ T5109] other info that might help us debug this: [ 112.948204][ T5109] [ 112.958459][ T5109] Possible unsafe locking scenario: [ 112.958459][ T5109] [ 112.965930][ T5109] CPU0 CPU1 [ 112.971310][ T5109] ---- ---- [ 112.976693][ T5109] lock(rtnl_mutex); [ 112.980695][ T5109] lock(sk_lock-AF_AX25); [ 112.987649][ T5109] lock(rtnl_mutex); [ 112.994172][ T5109] lock(sk_lock-AF_AX25); [ 112.998623][ T5109] [ 112.998623][ T5109] *** DEADLOCK *** [ 112.998623][ T5109] [ 113.006784][ T5109] 1 lock held by syz.1.271/5109: [ 113.011739][ T5109] #0: ffffffff8d22a388 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 113.020479][ T5109] [ 113.020479][ T5109] stack backtrace: [ 113.026392][ T5109] CPU: 0 PID: 5109 Comm: syz.1.271 Not tainted 5.15.183-syzkaller #0 [ 113.034499][ T5109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.044577][ T5109] Call Trace: [ 113.047881][ T5109] [ 113.050831][ T5109] dump_stack_lvl+0x168/0x230 [ 113.055538][ T5109] ? load_image+0x3b0/0x3b0 [ 113.060064][ T5109] ? show_regs_print_info+0x20/0x20 [ 113.065304][ T5109] ? print_circular_bug+0x12b/0x1a0 [ 113.070526][ T5109] check_noncircular+0x274/0x310 [ 113.075490][ T5109] ? add_chain_block+0x940/0x940 [ 113.080454][ T5109] ? lockdep_lock+0xdc/0x1e0 [ 113.085073][ T5109] ? lockdep_unlock+0x134/0x2d0 [ 113.089946][ T5109] ? mark_lock+0x94/0x320 [ 113.094302][ T5109] __lock_acquire+0x2c33/0x7c60 [ 113.099191][ T5109] ? lock_chain_count+0x20/0x20 [ 113.104064][ T5109] ? mark_lock+0x94/0x320 [ 113.108427][ T5109] ? verify_lock_unused+0x140/0x140 [ 113.113657][ T5109] ? verify_lock_unused+0x140/0x140 [ 113.118880][ T5109] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 113.124890][ T5109] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 113.130896][ T5109] ? __local_bh_enable_ip+0x12a/0x1b0 [ 113.136295][ T5109] ? mark_lock+0x94/0x320 [ 113.140651][ T5109] lock_acquire+0x197/0x3f0 [ 113.145182][ T5109] ? ax25_device_event+0x217/0x4f0 [ 113.150312][ T5109] ? lock_chain_count+0x20/0x20 [ 113.155192][ T5109] ? read_lock_is_recursive+0x10/0x10 [ 113.160585][ T5109] ? __local_bh_enable_ip+0x12a/0x1b0 [ 113.165973][ T5109] ? lockdep_hardirqs_on+0x94/0x140 [ 113.171193][ T5109] ? __local_bh_enable_ip+0x12a/0x1b0 [ 113.176580][ T5109] ? _local_bh_enable+0xa0/0xa0 [ 113.181450][ T5109] lock_sock_nested+0x44/0x100 [ 113.186240][ T5109] ? ax25_device_event+0x217/0x4f0 [ 113.191374][ T5109] ax25_device_event+0x217/0x4f0 [ 113.196345][ T5109] raw_notifier_call_chain+0xcb/0x160 [ 113.201747][ T5109] __dev_notify_flags+0x178/0x2d0 [ 113.206790][ T5109] ? __dev_change_flags+0x6a0/0x6a0 [ 113.212004][ T5109] ? __dev_change_flags+0x4bb/0x6a0 [ 113.217230][ T5109] ? dev_get_flags+0x1c0/0x1c0 [ 113.222019][ T5109] ? dev_ioctl+0x54e/0xe50 [ 113.226454][ T5109] ? dev_ioctl+0x54e/0xe50 [ 113.230888][ T5109] dev_change_flags+0xe3/0x1a0 [ 113.235669][ T5109] dev_ifsioc+0x147/0xe70 [ 113.240035][ T5109] ? dev_ioctl+0xe50/0xe50 [ 113.244473][ T5109] ? apparmor_capable+0x12c/0x190 [ 113.249519][ T5109] ? full_name_hash+0x8e/0xe0 [ 113.254219][ T5109] dev_ioctl+0x55f/0xe50 [ 113.258487][ T5109] ? _copy_from_user+0x111/0x170 [ 113.263455][ T5109] sock_do_ioctl+0x222/0x2f0 [ 113.268073][ T5109] ? sock_show_fdinfo+0xb0/0xb0 [ 113.272949][ T5109] sock_ioctl+0x4ed/0x6e0 [ 113.277300][ T5109] ? sock_poll+0x3f0/0x3f0 [ 113.281734][ T5109] ? bpf_lsm_file_ioctl+0x5/0x10 [ 113.286676][ T5109] ? security_file_ioctl+0x7c/0xa0 [ 113.291789][ T5109] ? sock_poll+0x3f0/0x3f0 [ 113.296228][ T5109] __se_sys_ioctl+0xfa/0x170 [ 113.300807][ T5109] do_syscall_64+0x4c/0xa0 [ 113.305221][ T5109] ? clear_bhb_loop+0x15/0x70 [ 113.309877][ T5109] ? clear_bhb_loop+0x15/0x70 [ 113.314537][ T5109] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.320413][ T5109] RIP: 0033:0x7fe95a096969 [ 113.324825][ T5109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.344518][ T5109] RSP: 002b:00007fe957efe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.352957][ T5109] RAX: ffffffffffffffda RBX: 00007fe95a2bdfa0 RCX: 00007fe95a096969 [ 113.360946][ T5109] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 113.369104][ T5109] RBP: 00007fe95a118ab1 R08: 0000000000000000 R09: 0000000000000000 [ 113.377093][ T5109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.385082][ T5109] R13: 0000000000000000 R14: 00007fe95a2bdfa0 R15: 00007fff57cebdc8 [ 113.393079][ T5109] [ 113.398654][ T5109] ================================================================== [ 113.406749][ T5109] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 113.414495][ T5109] Write of size 4 at addr ffff88802488b0b8 by task syz.1.271/5109 [ 113.422315][ T5109] [ 113.424650][ T5109] CPU: 1 PID: 5109 Comm: syz.1.271 Not tainted 5.15.183-syzkaller #0 [ 113.432725][ T5109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.442788][ T5109] Call Trace: [ 113.446078][ T5109] [ 113.449027][ T5109] dump_stack_lvl+0x168/0x230 [ 113.453723][ T5109] ? show_regs_print_info+0x20/0x20 [ 113.458949][ T5109] ? load_image+0x3b0/0x3b0 [ 113.463465][ T5109] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 113.468854][ T5109] print_address_description+0x60/0x2d0 [ 113.474410][ T5109] ? ax25_dev_device_down+0x35e/0x520 [ 113.479805][ T5109] kasan_report+0xdf/0x130 [ 113.484240][ T5109] ? ax25_dev_device_down+0x35e/0x520 [ 113.489628][ T5109] ? kfree+0xef/0x2a0 [ 113.493624][ T5109] kasan_check_range+0x27b/0x290 [ 113.498573][ T5109] ax25_dev_device_down+0x35e/0x520 [ 113.503789][ T5109] ax25_device_event+0x4b4/0x4f0 [ 113.508743][ T5109] raw_notifier_call_chain+0xcb/0x160 [ 113.514134][ T5109] __dev_notify_flags+0x178/0x2d0 [ 113.519179][ T5109] ? __dev_change_flags+0x6a0/0x6a0 [ 113.524399][ T5109] ? __dev_change_flags+0x4bb/0x6a0 [ 113.529625][ T5109] ? dev_get_flags+0x1c0/0x1c0 [ 113.534413][ T5109] ? dev_ioctl+0x54e/0xe50 [ 113.538865][ T5109] ? dev_ioctl+0x54e/0xe50 [ 113.542625][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 113.543304][ T5109] dev_change_flags+0xe3/0x1a0 [ 113.554045][ T5109] dev_ifsioc+0x147/0xe70 [ 113.558402][ T5109] ? dev_ioctl+0xe50/0xe50 [ 113.562828][ T5109] ? apparmor_capable+0x12c/0x190 [ 113.567870][ T5109] ? full_name_hash+0x8e/0xe0 [ 113.572568][ T5109] dev_ioctl+0x55f/0xe50 [ 113.576821][ T5109] ? _copy_from_user+0x111/0x170 [ 113.581770][ T5109] sock_do_ioctl+0x222/0x2f0 [ 113.586376][ T5109] ? sock_show_fdinfo+0xb0/0xb0 [ 113.591242][ T5109] sock_ioctl+0x4ed/0x6e0 [ 113.595583][ T5109] ? sock_poll+0x3f0/0x3f0 [ 113.600016][ T5109] ? bpf_lsm_file_ioctl+0x5/0x10 [ 113.604975][ T5109] ? security_file_ioctl+0x7c/0xa0 [ 113.610096][ T5109] ? sock_poll+0x3f0/0x3f0 [ 113.614518][ T5109] __se_sys_ioctl+0xfa/0x170 [ 113.619111][ T5109] do_syscall_64+0x4c/0xa0 [ 113.623533][ T5109] ? clear_bhb_loop+0x15/0x70 [ 113.628210][ T5109] ? clear_bhb_loop+0x15/0x70 [ 113.632878][ T5109] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.638768][ T5109] RIP: 0033:0x7fe95a096969 [ 113.643185][ T5109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.662787][ T5109] RSP: 002b:00007fe957efe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.671201][ T5109] RAX: ffffffffffffffda RBX: 00007fe95a2bdfa0 RCX: 00007fe95a096969 [ 113.679169][ T5109] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 113.687133][ T5109] RBP: 00007fe95a118ab1 R08: 0000000000000000 R09: 0000000000000000 [ 113.695111][ T5109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.703096][ T5109] R13: 0000000000000000 R14: 00007fe95a2bdfa0 R15: 00007fff57cebdc8 [ 113.711083][ T5109] [ 113.714097][ T5109] [ 113.716501][ T5109] Allocated by task 5109: [ 113.720815][ T5109] __kasan_kmalloc+0xb5/0xf0 [ 113.725408][ T5109] ax25_dev_device_up+0x50/0x580 [ 113.730342][ T5109] ax25_device_event+0x483/0x4f0 [ 113.735271][ T5109] raw_notifier_call_chain+0xcb/0x160 [ 113.740638][ T5109] __dev_notify_flags+0x178/0x2d0 [ 113.745656][ T5109] dev_change_flags+0xe3/0x1a0 [ 113.750420][ T5109] dev_ifsioc+0x147/0xe70 [ 113.754740][ T5109] dev_ioctl+0x55f/0xe50 [ 113.758972][ T5109] sock_do_ioctl+0x222/0x2f0 [ 113.763555][ T5109] sock_ioctl+0x4ed/0x6e0 [ 113.767873][ T5109] __se_sys_ioctl+0xfa/0x170 [ 113.772455][ T5109] do_syscall_64+0x4c/0xa0 [ 113.776864][ T5109] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.782754][ T5109] [ 113.785072][ T5109] Freed by task 5109: [ 113.789047][ T5109] kasan_set_track+0x4b/0x70 [ 113.793648][ T5109] kasan_set_free_info+0x1f/0x40 [ 113.798678][ T5109] ____kasan_slab_free+0xd5/0x110 [ 113.803704][ T5109] slab_free_freelist_hook+0xea/0x170 [ 113.809074][ T5109] kfree+0xef/0x2a0 [ 113.812873][ T5109] ax25_dev_device_down+0x1c0/0x520 [ 113.818107][ T5109] ax25_device_event+0x4b4/0x4f0 [ 113.823038][ T5109] raw_notifier_call_chain+0xcb/0x160 [ 113.828404][ T5109] __dev_notify_flags+0x178/0x2d0 [ 113.833420][ T5109] dev_change_flags+0xe3/0x1a0 [ 113.838174][ T5109] dev_ifsioc+0x147/0xe70 [ 113.842506][ T5109] dev_ioctl+0x55f/0xe50 [ 113.846897][ T5109] sock_do_ioctl+0x222/0x2f0 [ 113.851494][ T5109] sock_ioctl+0x4ed/0x6e0 [ 113.855820][ T5109] __se_sys_ioctl+0xfa/0x170 [ 113.860421][ T5109] do_syscall_64+0x4c/0xa0 [ 113.864855][ T5109] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.870757][ T5109] [ 113.873081][ T5109] Last potentially related work creation: [ 113.878790][ T5109] kasan_save_stack+0x35/0x60 [ 113.883475][ T5109] kasan_record_aux_stack+0xb8/0x100 [ 113.888752][ T5109] insert_work+0x54/0x3d0 [ 113.893074][ T5109] __queue_work+0x9c5/0xd50 [ 113.897569][ T5109] queue_work_on+0x11d/0x1d0 [ 113.902151][ T5109] inet6addr_event+0x9c/0xc0 [ 113.906734][ T5109] atomic_notifier_call_chain+0x15d/0x280 [ 113.912445][ T5109] ipv6_add_addr+0xb30/0xde0 [ 113.917025][ T5109] addrconf_add_linklocal+0x280/0x6b0 [ 113.922387][ T5109] addrconf_addr_gen+0x4ee/0x620 [ 113.927319][ T5109] addrconf_init_auto_addrs+0x6e0/0xb20 [ 113.932864][ T5109] addrconf_notify+0xa6b/0xf00 [ 113.937623][ T5109] raw_notifier_call_chain+0xcb/0x160 [ 113.942985][ T5109] netdev_state_change+0xd2/0x140 [ 113.948000][ T5109] linkwatch_do_dev+0x10d/0x160 [ 113.952841][ T5109] __linkwatch_run_queue+0x4a9/0x7b0 [ 113.958120][ T5109] linkwatch_event+0x48/0x50 [ 113.962706][ T5109] process_one_work+0x863/0x1000 [ 113.967638][ T5109] worker_thread+0xaa8/0x12a0 [ 113.972305][ T5109] kthread+0x436/0x520 [ 113.976363][ T5109] ret_from_fork+0x1f/0x30 [ 113.980775][ T5109] [ 113.983104][ T5109] The buggy address belongs to the object at ffff88802488b000 [ 113.983104][ T5109] which belongs to the cache kmalloc-192 of size 192 [ 113.997162][ T5109] The buggy address is located 184 bytes inside of [ 113.997162][ T5109] 192-byte region [ffff88802488b000, ffff88802488b0c0) [ 114.010449][ T5109] The buggy address belongs to the page: [ 114.016067][ T5109] page:ffffea00009222c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2488b [ 114.026212][ T5109] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 114.033757][ T5109] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888016841a00 [ 114.042334][ T5109] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 114.050990][ T5109] page dumped because: kasan: bad access detected [ 114.057389][ T5109] page_owner tracks the page as allocated [ 114.063090][ T5109] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 7972752015, free_ts 7416950041 [ 114.078622][ T5109] get_page_from_freelist+0x1b77/0x1c60 [ 114.084172][ T5109] __alloc_pages+0x1e1/0x470 [ 114.088763][ T5109] alloc_page_interleave+0x24/0x1e0 [ 114.093958][ T5109] new_slab+0xc0/0x4b0 [ 114.098195][ T5109] ___slab_alloc+0x81e/0xdf0 [ 114.102777][ T5109] __kmalloc+0x1cd/0x330 [ 114.107015][ T5109] usb_alloc_urb+0x3f/0x140 [ 114.111517][ T5109] usb_control_msg+0x115/0x3e0 [ 114.116275][ T5109] usb_get_descriptor+0xad/0x3d0 [ 114.121202][ T5109] usb_get_bos_descriptor+0x21a/0x950 [ 114.126565][ T5109] register_root_hub+0x18f/0x580 [ 114.131499][ T5109] usb_add_hcd+0xa88/0xef0 [ 114.135907][ T5109] vhci_hcd_probe+0x1bd/0x370 [ 114.140579][ T5109] platform_probe+0x137/0x1c0 [ 114.145252][ T5109] really_probe+0x284/0xc80 [ 114.149746][ T5109] __driver_probe_device+0x18c/0x330 [ 114.155021][ T5109] page last free stack trace: [ 114.159679][ T5109] free_unref_page_prepare+0x637/0x6c0 [ 114.165129][ T5109] free_unref_page+0x94/0x280 [ 114.169801][ T5109] __mmdrop+0xaa/0x3e0 [ 114.173866][ T5109] free_bprm+0x141/0x300 [ 114.178113][ T5109] kernel_execve+0x380/0x900 [ 114.182705][ T5109] call_usermodehelper_exec_async+0x207/0x350 [ 114.189127][ T5109] ret_from_fork+0x1f/0x30 [ 114.193546][ T5109] [ 114.195861][ T5109] Memory state around the buggy address: [ 114.201477][ T5109] ffff88802488af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 114.209527][ T5109] ffff88802488b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 114.217574][ T5109] >ffff88802488b080: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 114.225623][ T5109] ^ [ 114.231501][ T5109] ffff88802488b100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 114.239548][ T5109] ffff88802488b180: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 114.247593][ T5109] ================================================================== [ 114.262008][ T5109] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 114.269235][ T5109] CPU: 0 PID: 5109 Comm: syz.1.271 Tainted: G B 5.15.183-syzkaller #0 [ 114.278705][ T5109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.288794][ T5109] Call Trace: [ 114.292087][ T5109] [ 114.295027][ T5109] dump_stack_lvl+0x168/0x230 [ 114.299723][ T5109] ? show_regs_print_info+0x20/0x20 [ 114.307022][ T5109] ? load_image+0x3b0/0x3b0 [ 114.311548][ T5109] panic+0x2c9/0x7f0 [ 114.315461][ T5109] ? bpf_jit_dump+0xd0/0xd0 [ 114.319982][ T5109] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 114.325893][ T5109] ? _raw_spin_unlock+0x40/0x40 [ 114.330763][ T5109] ? ax25_dev_device_down+0x35e/0x520 [ 114.336166][ T5109] check_panic_on_warn+0x80/0xa0 [ 114.341114][ T5109] ? ax25_dev_device_down+0x35e/0x520 [ 114.346486][ T5109] end_report+0x6d/0xf0 [ 114.350638][ T5109] kasan_report+0x102/0x130 [ 114.355136][ T5109] ? ax25_dev_device_down+0x35e/0x520 [ 114.360504][ T5109] ? kfree+0xef/0x2a0 [ 114.364482][ T5109] kasan_check_range+0x27b/0x290 [ 114.369420][ T5109] ax25_dev_device_down+0x35e/0x520 [ 114.374620][ T5109] ax25_device_event+0x4b4/0x4f0 [ 114.379552][ T5109] raw_notifier_call_chain+0xcb/0x160 [ 114.384923][ T5109] __dev_notify_flags+0x178/0x2d0 [ 114.389943][ T5109] ? __dev_change_flags+0x6a0/0x6a0 [ 114.395135][ T5109] ? __dev_change_flags+0x4bb/0x6a0 [ 114.400328][ T5109] ? dev_get_flags+0x1c0/0x1c0 [ 114.405084][ T5109] ? dev_ioctl+0x54e/0xe50 [ 114.409491][ T5109] ? dev_ioctl+0x54e/0xe50 [ 114.413895][ T5109] dev_change_flags+0xe3/0x1a0 [ 114.418655][ T5109] dev_ifsioc+0x147/0xe70 [ 114.422980][ T5109] ? dev_ioctl+0xe50/0xe50 [ 114.427398][ T5109] ? apparmor_capable+0x12c/0x190 [ 114.432414][ T5109] ? full_name_hash+0x8e/0xe0 [ 114.437085][ T5109] dev_ioctl+0x55f/0xe50 [ 114.441316][ T5109] ? _copy_from_user+0x111/0x170 [ 114.446248][ T5109] sock_do_ioctl+0x222/0x2f0 [ 114.450832][ T5109] ? sock_show_fdinfo+0xb0/0xb0 [ 114.455676][ T5109] sock_ioctl+0x4ed/0x6e0 [ 114.459998][ T5109] ? sock_poll+0x3f0/0x3f0 [ 114.464411][ T5109] ? bpf_lsm_file_ioctl+0x5/0x10 [ 114.469344][ T5109] ? security_file_ioctl+0x7c/0xa0 [ 114.474450][ T5109] ? sock_poll+0x3f0/0x3f0 [ 114.478860][ T5109] __se_sys_ioctl+0xfa/0x170 [ 114.483442][ T5109] do_syscall_64+0x4c/0xa0 [ 114.487849][ T5109] ? clear_bhb_loop+0x15/0x70 [ 114.492517][ T5109] ? clear_bhb_loop+0x15/0x70 [ 114.497189][ T5109] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.503075][ T5109] RIP: 0033:0x7fe95a096969 [ 114.507483][ T5109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.527080][ T5109] RSP: 002b:00007fe957efe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.535492][ T5109] RAX: ffffffffffffffda RBX: 00007fe95a2bdfa0 RCX: 00007fe95a096969 [ 114.543456][ T5109] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 114.551422][ T5109] RBP: 00007fe95a118ab1 R08: 0000000000000000 R09: 0000000000000000 [ 114.559384][ T5109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.567354][ T5109] R13: 0000000000000000 R14: 00007fe95a2bdfa0 R15: 00007fff57cebdc8 [ 114.575330][ T5109] [ 114.578526][ T5109] Kernel Offset: disabled [ 114.586684][ T5109] Rebooting in 86400 seconds..