last executing test programs: 3.204808178s ago: executing program 3 (id=4): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000280)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r1}) 3.087674668s ago: executing program 2 (id=3): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$eJzs3U9sHFcdB/DvbDbrbJBSt03TgJBqNVIFjUjsrEqChNSAEMohQhFcerUSp7GySSvHRWmEyAYoSJw4oR44FKFw6AkhhFQOCFHOSEhcOOUeiRuHHABXM7O7Xtsbx25ir9t+PtJ43ts3773f/DJ/dsexNsBn1rnXsr+XIueOn79Z1u/d7XTv3e1cG5STTCVpJM16laKdFB8mZ1Mv+Xz5Yn+44mHzvHL/g6L57vudutbsL9X2jc36bTB2y15yYFjZl2SmLv53y8NuGK9aqnEuro73cFObNRbDuMuEHRskDiZtZYPeamPjkd23ft4Ce9bt+r65wXRyMPXdtbrF9a8Oj74yTN6m16be7sUBAAAAO2XsZ/lRTz3Ig9zMod0JBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4divo7A4v+0hiUZ1IMvv+/NfKd+q0Jh/uY3rlcrb771KQDAQAAAAAAAIDH8sKDPMjNHBrUV4rqd/4vVpXD1c/P5a3cyEKWciI3M5/lLGcpc0mmRwZq3ZxfXl6a29jzlyl7rqys3O73PDW256m1cfXWBzrufxps2AgAAAAAAAAAPrN+lHOrv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC9oEj21atqOTwoT6fRTHIgSauYGW7emmiwT8BfJh0AAAAA7Lx2f32o+H9dWCmqz/xHqs/9B/JWrmc5i1lONwu5VD0LqD/1N/7R63Tv3e1cK5eNA3/j39uKoxox9bOH8TPPVls8N+xxLt/O93I8M7mQpSzm+5nPchYyk29VpfkUme4/vZi+d7edQawb4z27pnZhfWwvjJTL+I5WkbRzOYtVbCdysTUIvdHf7ujIbH9sJetmvFNmp3i1b4s5utRfl3v0i/56b5iu9nz/MCOz/dyX2Xh6NO8bc7/N42T9THNpDJ9BHV6dpayun+lj5fxgf13m+qc7m/NtPkpbm4nez8va4Og7snnOky//868XrjSuX71y+cbxvXMYfUzrj4nOSCae31ImumUmeo+RiQOPE/+T0+pno76Kbu9q+WLV91AW8528kUtZyOnMZi5nMpuv5VQ6OTWS1+c2z2t1rjW2d64d+1K/UN6TfjZyb9o1Uw9rKPP69EheR69001Xb6CurWXpmC1kqWhmfpX+NDaX5hX6hnOPHI3ecyVufibmRTDy7eSZ+/b+VJDe6168uXZl/c5M5bv354EuD8qBQnrbvrL02/+ZJ7tc29He3PF6eKf+xUt82Ro+Osu3ZQVudr6KZ1X6Hh21r73OtVqrzuW571JlajnTkzriR6rbnx87SqdqOjrSteZeTN9IdvgsBYA87+PLBVvt+++/t99o/aV9pnz/wzakzU19sZf/fmn/a97vGbxtfL17Oe/lhDk06UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DS48fatq/Pd7sLSHiyk8YQHvDO2aZCK+pXW3tj3T2pharMj6vdJNunemkTM7SR7InVp7sJcUxnTdH74SjtpDONJcnWPfMEdsBNOLl978+SNt299ZfHa/OsLry9cP3Xm9KunO1+du33y8mJ3Ybb+OekogZ2w+jZg0pEAAAAAAAAAAAAAW7Ubf94wZtqiN4F9BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6Zzr2W/b0UmZs9MVvW793tdMtlUF7dspmkkaT4QVJ8mJxNvWR6ZLjiYfO8cv+DX7307vud1bGag+0b6/r94T8rK9vci15/yUySff31o01tabyLI+P1thlYrRjuYZmwY4PEwaR9FAAA///howfX") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000280)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 2.883586095s ago: executing program 0 (id=1): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x100f000, 0x1000, 0x4a, 0x2d329813d788c0ef}, 0x20) 2.808213251s ago: executing program 0 (id=6): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x800}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x9}, &(0x7f0000000440)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1043, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, 0x0, 0x2a) 2.789820062s ago: executing program 4 (id=5): syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905", @ANYRES32], 0x0) 2.586997899s ago: executing program 1 (id=7): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000140)='A', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x0, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 1.95811863s ago: executing program 2 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.896290675s ago: executing program 4 (id=9): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", '\x00', "ec3fff9afd96e6c0"}, 0x38) 1.895815995s ago: executing program 0 (id=10): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000007b80)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="23ce", 0x2}], 0x1, 0x0, 0x0, 0x40805}], 0x1, 0x40) 1.84190572s ago: executing program 0 (id=11): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10b88, 0x40421}, [@IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) 1.649250005s ago: executing program 2 (id=12): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x179a01ef3b49d309, 0xc3072, 0xffffffffffffffff, 0xcc272000) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) 1.548871263s ago: executing program 2 (id=13): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x125) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.547301024s ago: executing program 0 (id=14): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000006bc0), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000006cc0)={0x0, 0x0, &(0x7f0000006c80)={&(0x7f0000000580)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 1.432356513s ago: executing program 1 (id=15): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 1.432129153s ago: executing program 0 (id=16): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x6f2}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a8, 0x0, 0x7ffc, 0x8040024e}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 1.395123556s ago: executing program 1 (id=17): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getpeername$llc(r0, 0x0, 0x0) 1.314634863s ago: executing program 1 (id=18): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000002c0)={'team_slave_0\x00', 0x8000}) 1.180308994s ago: executing program 1 (id=19): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$eJzs3U9sHFcdB/DvbDbrbJBSt03TgJBqNVIFjUjsrEqChNSAEMohQhFcerUSp7GySSvHRWmEyAYoSJw4oR44FKFw6AkhhFQOCFHOSEhcOOUeiRuHHABXM7O7Xtsbx25ir9t+PtJ43ts3773f/DJ/dsexNsBn1rnXsr+XIueOn79Z1u/d7XTv3e1cG5STTCVpJM16laKdFB8mZ1Mv+Xz5Yn+44mHzvHL/g6L57vudutbsL9X2jc36bTB2y15yYFjZl2SmLv53y8NuGK9aqnEuro73cFObNRbDuMuEHRskDiZtZYPeamPjkd23ft4Ce9bt+r65wXRyMPXdtbrF9a8Oj74yTN6m16be7sUBAAAAO2XsZ/lRTz3Ig9zMod0JBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4divo7A4v+0hiUZ1IMvv+/NfKd+q0Jh/uY3rlcrb771KQDAQAAAAAAAIDH8sKDPMjNHBrUV4rqd/4vVpXD1c/P5a3cyEKWciI3M5/lLGcpc0mmRwZq3ZxfXl6a29jzlyl7rqys3O73PDW256m1cfXWBzrufxps2AgAAAAAAAAAPrN+lHOrv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC9oEj21atqOTwoT6fRTHIgSauYGW7emmiwT8BfJh0AAAAA7Lx2f32o+H9dWCmqz/xHqs/9B/JWrmc5i1lONwu5VD0LqD/1N/7R63Tv3e1cK5eNA3/j39uKoxox9bOH8TPPVls8N+xxLt/O93I8M7mQpSzm+5nPchYyk29VpfkUme4/vZi+d7edQawb4z27pnZhfWwvjJTL+I5WkbRzOYtVbCdysTUIvdHf7ujIbH9sJetmvFNmp3i1b4s5utRfl3v0i/56b5iu9nz/MCOz/dyX2Xh6NO8bc7/N42T9THNpDJ9BHV6dpayun+lj5fxgf13m+qc7m/NtPkpbm4nez8va4Og7snnOky//868XrjSuX71y+cbxvXMYfUzrj4nOSCae31ImumUmeo+RiQOPE/+T0+pno76Kbu9q+WLV91AW8528kUtZyOnMZi5nMpuv5VQ6OTWS1+c2z2t1rjW2d64d+1K/UN6TfjZyb9o1Uw9rKPP69EheR69001Xb6CurWXpmC1kqWhmfpX+NDaX5hX6hnOPHI3ecyVufibmRTDy7eSZ+/b+VJDe6168uXZl/c5M5bv354EuD8qBQnrbvrL02/+ZJ7tc29He3PF6eKf+xUt82Ro+Osu3ZQVudr6KZ1X6Hh21r73OtVqrzuW571JlajnTkzriR6rbnx87SqdqOjrSteZeTN9IdvgsBYA87+PLBVvt+++/t99o/aV9pnz/wzakzU19sZf/fmn/a97vGbxtfL17Oe/lhDk06UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DS48fatq/Pd7sLSHiyk8YQHvDO2aZCK+pXW3tj3T2pharMj6vdJNunemkTM7SR7InVp7sJcUxnTdH74SjtpDONJcnWPfMEdsBNOLl978+SNt299ZfHa/OsLry9cP3Xm9KunO1+du33y8mJ3Ybb+OekogZ2w+jZg0pEAAAAAAAAAAAAAW7Ubf94wZtqiN4F9BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6Zzr2W/b0UmZs9MVvW793tdMtlUF7dspmkkaT4QVJ8mJxNvWR6ZLjiYfO8cv+DX7307vud1bGag+0b6/r94T8rK9vci15/yUySff31o01tabyLI+P1thlYrRjuYZmwY4PEwaR9FAAA///howfX") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000280)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 1.153549815s ago: executing program 3 (id=20): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x4}) 913.383405ms ago: executing program 3 (id=21): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0xe, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004041}, 0x4000014) 796.140895ms ago: executing program 3 (id=22): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000780)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x1, 0x32}, 0x9c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x28, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0xcd8) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) close(r5) bind$inet6(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)}, {&(0x7f00000010c0)="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", 0x2bc}], 0x3}}], 0x2, 0x4048884) 683.740684ms ago: executing program 2 (id=23): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=24): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. [ 32.163462][ T4034] cgroup: Unknown subsys name 'net' [ 32.424157][ T4034] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.706237][ T4034] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 34.098916][ T4059] chnl_net:caif_netlink_parms(): no params data found [ 34.161989][ T4059] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.163192][ T4059] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.164830][ T4059] device bridge_slave_0 entered promiscuous mode [ 34.167129][ T4059] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.168173][ T4059] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.169753][ T4059] device bridge_slave_1 entered promiscuous mode [ 34.174214][ T4045] chnl_net:caif_netlink_parms(): no params data found [ 34.189018][ T4051] chnl_net:caif_netlink_parms(): no params data found [ 34.202491][ T4059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.205979][ T4059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.249566][ T4059] team0: Port device team_slave_0 added [ 34.251652][ T4059] team0: Port device team_slave_1 added [ 34.259703][ T4045] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.260990][ T4045] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.262660][ T4045] device bridge_slave_0 entered promiscuous mode [ 34.267110][ T4051] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.268174][ T4051] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.269638][ T4051] device bridge_slave_0 entered promiscuous mode [ 34.274701][ T4051] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.275832][ T4051] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.277370][ T4051] device bridge_slave_1 entered promiscuous mode [ 34.278899][ T4045] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.280068][ T4045] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.281813][ T4045] device bridge_slave_1 entered promiscuous mode [ 34.286052][ T4048] chnl_net:caif_netlink_parms(): no params data found [ 34.288426][ T4059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.289457][ T4059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.293738][ T4059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.305566][ T4059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.306644][ T4059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.310695][ T4059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.316410][ T4051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.328581][ T4044] chnl_net:caif_netlink_parms(): no params data found [ 34.331760][ T4045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.337366][ T4051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.345375][ T4045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.392350][ T4059] device hsr_slave_0 entered promiscuous mode [ 34.431324][ T4059] device hsr_slave_1 entered promiscuous mode [ 34.491829][ T4051] team0: Port device team_slave_0 added [ 34.493810][ T4051] team0: Port device team_slave_1 added [ 34.502089][ T4048] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.503139][ T4048] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.504500][ T4048] device bridge_slave_0 entered promiscuous mode [ 34.507163][ T4045] team0: Port device team_slave_0 added [ 34.519574][ T4048] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.520624][ T4048] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.522419][ T4048] device bridge_slave_1 entered promiscuous mode [ 34.526829][ T4045] team0: Port device team_slave_1 added [ 34.528090][ T4051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.529239][ T4051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.533871][ T4051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.549032][ T4051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.550162][ T4051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.557021][ T4051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.560540][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.562434][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.563909][ T4044] device bridge_slave_0 entered promiscuous mode [ 34.566544][ T4048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.569076][ T4048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.578472][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.579827][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.582114][ T4044] device bridge_slave_1 entered promiscuous mode [ 34.590046][ T4048] team0: Port device team_slave_0 added [ 34.592175][ T4045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.593272][ T4045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.597469][ T4045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.607445][ T4048] team0: Port device team_slave_1 added [ 34.610520][ T4044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.614587][ T4045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.615655][ T4045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.619566][ T4045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.629757][ T4044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.642608][ T4048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.643720][ T4048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.647702][ T4048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.650004][ T4048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.651087][ T4048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.655784][ T4048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.702186][ T4051] device hsr_slave_0 entered promiscuous mode [ 34.741322][ T4051] device hsr_slave_1 entered promiscuous mode [ 34.791176][ T4051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.792433][ T4051] Cannot create hsr debugfs directory [ 34.800215][ T4044] team0: Port device team_slave_0 added [ 34.808758][ T4044] team0: Port device team_slave_1 added [ 34.862367][ T4045] device hsr_slave_0 entered promiscuous mode [ 34.911340][ T4045] device hsr_slave_1 entered promiscuous mode [ 34.961191][ T4045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.962295][ T4045] Cannot create hsr debugfs directory [ 34.970569][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.971862][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.975863][ T4044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.042442][ T4048] device hsr_slave_0 entered promiscuous mode [ 35.081347][ T4048] device hsr_slave_1 entered promiscuous mode [ 35.141572][ T4048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.142757][ T4048] Cannot create hsr debugfs directory [ 35.147959][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.149055][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.153423][ T4044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.232306][ T4044] device hsr_slave_0 entered promiscuous mode [ 35.271357][ T4044] device hsr_slave_1 entered promiscuous mode [ 35.311188][ T4044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.312436][ T4044] Cannot create hsr debugfs directory [ 35.336098][ T4059] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.404048][ T4059] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.457394][ T4059] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.502244][ T4059] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.591896][ T4051] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.645629][ T4051] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.697713][ T4051] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.736569][ T4051] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.803669][ T4048] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.854685][ T4048] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.902662][ T4048] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.944695][ T4048] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.982618][ T4045] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.021670][ T4109] Bluetooth: hci4: command 0x0409 tx timeout [ 36.022800][ T4109] Bluetooth: hci2: command 0x0409 tx timeout [ 36.023816][ T4109] Bluetooth: hci1: command 0x0409 tx timeout [ 36.024752][ T4109] Bluetooth: hci0: command 0x0409 tx timeout [ 36.033218][ T4045] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.083991][ T4045] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.101236][ T4109] Bluetooth: hci3: command 0x0409 tx timeout [ 36.125988][ T4045] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.187999][ T4059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.205783][ T4044] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.233798][ T4044] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.284226][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.286358][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.291001][ T4044] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.332523][ T4044] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.372926][ T4059] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.382978][ T4051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.395475][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.396971][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.398626][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.399742][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.405055][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.406943][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.408319][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.419826][ T4051] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.428638][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.430201][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.431956][ T1646] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.433043][ T1646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.434492][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.436127][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.450343][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.452757][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.454249][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.455716][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.457272][ T447] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.458355][ T447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.460300][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.463977][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.471791][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.473300][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.474707][ T1646] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.475766][ T1646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.477138][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.478673][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.480328][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.490672][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.493091][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.500446][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.502310][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.503875][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.509199][ T4045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.512286][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.514051][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.517921][ T4059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.519452][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.523968][ T4044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.527423][ T4048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.529692][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.531892][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.533393][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.534717][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.541634][ T4045] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.547443][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.548907][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.550382][ T1646] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.551606][ T1646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.553826][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.555420][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.556909][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.567629][ T4048] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.570866][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.572690][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.574128][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.575217][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.576462][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.577676][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.578937][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.580468][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.582499][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.583903][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.585507][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.587090][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.588521][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.589969][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.591057][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.593880][ T4044] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.596750][ T4051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.605561][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.607132][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.611374][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.612931][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.614457][ T1646] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.615573][ T1646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.616901][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.618342][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.619619][ T1646] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.620619][ T1646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.623895][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.632509][ T4045] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.634158][ T4045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.638133][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.639940][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.641495][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.643082][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.644544][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.646454][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.648068][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.649563][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.661099][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.666469][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.667837][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.669307][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.670733][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.671920][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.674099][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.675823][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.677458][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.685054][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.686823][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.694655][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.696378][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.704902][ T4059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.707927][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.709726][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.710985][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.713106][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.714270][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.715393][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.716876][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.720948][ T4051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.729754][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.732015][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.733526][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.734918][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.736504][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.738044][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.746069][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.750519][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.753151][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.754683][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.755814][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.766028][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.767678][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.783533][ T4045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.784792][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.786207][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.787668][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.789216][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.794236][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.795772][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.797491][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.812664][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.814249][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.816265][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.817692][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.819261][ T4051] device veth0_vlan entered promiscuous mode [ 36.826353][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.827842][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.829555][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.830888][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.845060][ T4059] device veth0_vlan entered promiscuous mode [ 36.846530][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.848167][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.850763][ T4051] device veth1_vlan entered promiscuous mode [ 36.859355][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.866095][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.867515][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.868914][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.870079][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.879209][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.880448][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.887736][ T4059] device veth1_vlan entered promiscuous mode [ 36.892920][ T4048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.894967][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.896416][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.897889][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.901539][ T4045] device veth0_vlan entered promiscuous mode [ 36.907603][ T4059] device veth0_macvtap entered promiscuous mode [ 36.909987][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.911510][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.912822][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.914150][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.915629][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.917947][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.922747][ T4051] device veth0_macvtap entered promiscuous mode [ 36.936247][ T4048] device veth0_vlan entered promiscuous mode [ 36.937415][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.939019][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.940471][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.942796][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.944336][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.945807][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.948246][ T4045] device veth1_vlan entered promiscuous mode [ 36.949892][ T4059] device veth1_macvtap entered promiscuous mode [ 36.954604][ T4051] device veth1_macvtap entered promiscuous mode [ 36.956265][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.957799][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.959433][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.960899][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.963557][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.964970][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.973936][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.975486][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.976900][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.985834][ T4048] device veth1_vlan entered promiscuous mode [ 36.988277][ T4045] device veth0_macvtap entered promiscuous mode [ 36.993625][ T4059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.996415][ T4045] device veth1_macvtap entered promiscuous mode [ 36.999396][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.000885][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.003950][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.005407][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.006782][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.008356][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.016462][ T4059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.019672][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.021282][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.022668][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.024174][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.027286][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.028940][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.031736][ T4051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.036766][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.038238][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.042225][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.043823][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.045446][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.047153][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.049247][ T4045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.053530][ T4059] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.054810][ T4059] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.056169][ T4059] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.057442][ T4059] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.061036][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.062771][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.064236][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.065810][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.067473][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.068860][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.074331][ T4048] device veth0_macvtap entered promiscuous mode [ 37.079929][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.083459][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.085944][ T4045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.088037][ T4044] device veth0_vlan entered promiscuous mode [ 37.099202][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.103673][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.105216][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.106737][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.108953][ T4051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.110236][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.112097][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.113564][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.115136][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.116705][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.118255][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.122399][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.125106][ T4048] device veth1_macvtap entered promiscuous mode [ 37.130639][ T4051] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.133548][ T4051] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.134859][ T4051] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.136207][ T4051] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.138517][ T4045] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.139978][ T4045] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.142003][ T4045] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.143323][ T4045] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.156859][ T4044] device veth1_vlan entered promiscuous mode [ 37.184261][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.185872][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.187342][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.188682][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.189982][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.193088][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.195326][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.200397][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.201888][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.203282][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.205174][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.206848][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.210015][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.213785][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.215280][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.216916][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.218424][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.220209][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.225423][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.236494][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.238203][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.254992][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.256291][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.258529][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.270638][ T4048] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.272919][ T4048] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.274354][ T4048] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.275853][ T4048] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.284988][ T347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.286262][ T347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.288770][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.290386][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.294413][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.297611][ T4044] device veth0_macvtap entered promiscuous mode [ 37.299755][ T347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.300671][ T4044] device veth1_macvtap entered promiscuous mode [ 37.300953][ T347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.316405][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.317900][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.319326][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.328843][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.330051][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.334620][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.337929][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.339202][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.344760][ T347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.345945][ T347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.353104][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.354665][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.379496][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.399688][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.404877][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.406419][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.407782][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.409329][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.410783][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.413213][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.415577][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.421458][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.423081][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.435674][ T4160] udc-core: couldn't find an available UDC or it's busy [ 37.436804][ T4160] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 37.452257][ T347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.453654][ T347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.455283][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.472023][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.473646][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.483015][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.484568][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.486077][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.487579][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.488961][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.490405][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.494920][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.496049][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.497740][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.504248][ T4163] loop2: detected capacity change from 0 to 1024 [ 37.507050][ T4044] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.508448][ T4044] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.509883][ T4044] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.514343][ T4044] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.528894][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.530112][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.537755][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.630435][ T347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.633164][ T347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.696846][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.727686][ T347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.730385][ T347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.733981][ T4169] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET) [ 37.738970][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.817443][ T4174] udc-core: couldn't find an available UDC or it's busy [ 37.818757][ T4174] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 38.101741][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 38.103241][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 38.104320][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 38.105571][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 38.181782][ T4156] Bluetooth: hci3: command 0x041b tx timeout [ 38.617932][ T148] hfsplus: b-tree write err: -5, ino 4 [ 38.968445][ T4197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.997576][ T4197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.475384][ T4215] loop1: detected capacity change from 0 to 1024 [ 40.181928][ T4156] Bluetooth: hci4: command 0x040f tx timeout [ 40.184470][ T4156] Bluetooth: hci2: command 0x040f tx timeout [ 40.439376][ T4156] Bluetooth: hci1: command 0x040f tx timeout [ 40.468737][ T4156] Bluetooth: hci0: command 0x040f tx timeout [ 40.570767][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 40.578740][ T4227] hfsplus: b-tree write err: -5, ino 4 [ 40.751460][ T4046] Bluetooth: hci4: Unknown advertising packet type: 0xffff [ 40.751513][ T4046] ================================================================== [ 40.753900][ T4046] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0xcd0/0x3010 [ 40.755181][ T4046] Read of size 1 at addr ffff0000d153e406 by task kworker/u5:1/4046 [ 40.756451][ T4046] [ 40.756819][ T4046] CPU: 1 PID: 4046 Comm: kworker/u5:1 Not tainted 5.15.189-syzkaller #0 [ 40.758176][ T4046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 40.759781][ T4046] Workqueue: hci4 hci_rx_work [ 40.760557][ T4046] Call trace: [ 40.761093][ T4046] dump_backtrace+0x0/0x43c [ 40.761762][ T4046] show_stack+0x2c/0x3c [ 40.762430][ T4046] __dump_stack+0x30/0x40 [ 40.763110][ T4046] dump_stack_lvl+0xf8/0x160 [ 40.763842][ T4046] print_address_description+0x78/0x30c [ 40.764706][ T4046] kasan_report+0xec/0x15c [ 40.765398][ T4046] __asan_report_load1_noabort+0x44/0x50 [ 40.766240][ T4046] hci_le_meta_evt+0xcd0/0x3010 [ 40.766947][ T4046] hci_event_packet+0xd10/0x11bc [ 40.767788][ T4046] hci_rx_work+0x1cc/0x880 [ 40.768533][ T4046] process_one_work+0x79c/0x1140 [ 40.769363][ T4046] worker_thread+0x8f4/0x101c [ 40.770173][ T4046] kthread+0x374/0x454 [ 40.770876][ T4046] ret_from_fork+0x10/0x20 [ 40.771589][ T4046] [ 40.771953][ T4046] Allocated by task 4234: [ 40.772618][ T4046] __kasan_kmalloc+0xb0/0xf0 [ 40.773423][ T4046] __kmalloc_node_track_caller+0x234/0x3bc [ 40.774335][ T4046] kmalloc_reserve+0xe4/0x26c [ 40.775109][ T4046] __alloc_skb+0x23c/0x67c [ 40.775764][ T4046] vhci_write+0xb8/0x3ac [ 40.776455][ T4046] vfs_write+0x7c8/0xa2c [ 40.777219][ T4046] ksys_write+0x120/0x210 [ 40.777965][ T4046] __arm64_sys_write+0x7c/0x90 [ 40.778738][ T4046] invoke_syscall+0x98/0x2b8 [ 40.779501][ T4046] el0_svc_common+0x138/0x258 [ 40.780249][ T4046] do_el0_svc+0x58/0x14c [ 40.780906][ T4046] el0_svc+0x78/0x1e0 [ 40.781523][ T4046] el0t_64_sync_handler+0xcc/0xe4 [ 40.782313][ T4046] el0t_64_sync+0x1a0/0x1a4 [ 40.783005][ T4046] [ 40.783355][ T4046] The buggy address belongs to the object at ffff0000d153e000 [ 40.783355][ T4046] which belongs to the cache kmalloc-1k of size 1024 [ 40.785528][ T4046] The buggy address is located 6 bytes to the right of [ 40.785528][ T4046] 1024-byte region [ffff0000d153e000, ffff0000d153e400) [ 40.787685][ T4046] The buggy address belongs to the page: [ 40.788542][ T4046] page:00000000465206fb refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111538 [ 40.790108][ T4046] head:00000000465206fb order:3 compound_mapcount:0 compound_pincount:0 [ 40.791354][ T4046] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 40.792542][ T4046] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c0002780 [ 40.793951][ T4046] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 40.795324][ T4046] page dumped because: kasan: bad access detected [ 40.796292][ T4046] [ 40.796652][ T4046] Memory state around the buggy address: [ 40.797512][ T4046] ffff0000d153e300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 40.798728][ T4046] ffff0000d153e380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 40.799984][ T4046] >ffff0000d153e400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 40.801236][ T4046] ^ [ 40.801890][ T4046] ffff0000d153e480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 40.803281][ T4046] ffff0000d153e500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 40.804684][ T4046] ================================================================== [ 40.806098][ T4046] Disabling lock debugging due to kernel taint [ 40.821760][ T4046] Bluetooth: hci4: Unknown advertising packet type: 0x9280 [ 42.261467][ T4109] Bluetooth: hci4: command 0x0419 tx timeout [ 42.501337][ T4109] Bluetooth: hci1: command 0x0419 tx timeout [ 42.502352][ T4109] Bluetooth: hci2: command 0x0419 tx timeout [ 42.581438][ T4109] Bluetooth: hci3: command 0x0419 tx timeout [ 42.582628][ T4109] Bluetooth: hci0: command 0x0419 tx timeout