last executing test programs: 11.232656793s ago: executing program 3 (id=149): openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ptrace$poke(0x4, 0x0, 0x0, 0x7) r1 = mq_open(&(0x7f0000001600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\aXg\xbb\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x8a=\x0f\n*\x8a\x99\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5\x00\x00\x00\x00\x00\x00\x00\x01\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbbV\x1a\x8a\x03#T\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8', 0x40, 0xb, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x2, 0x136, 0x0) 11.080822398s ago: executing program 2 (id=155): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0x1409, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c080) 9.484971841s ago: executing program 2 (id=164): socket$vsock_stream(0x28, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x5a, 0x13, 0xdd, 0x8, 0x110a, 0x1151, 0x517e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x10, 0x40, 0xf2, [{{0x9, 0x4, 0x94, 0xd1, 0x0, 0xcf, 0xf2, 0xcc, 0x3}}]}}]}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x200000000000011, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00'], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.177107326s ago: executing program 0 (id=172): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000dc0)={0x34, &(0x7f0000000c40)=ANY=[@ANYBLOB="0000790000004149e841fd71f29eef2f7318452de991e203a219733566f1"], 0x0, 0x0, 0x0, 0x0, 0x0}) 7.639391928s ago: executing program 3 (id=173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000841) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) flock(r2, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", "cf00", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1) socket(0x28, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 6.896935629s ago: executing program 2 (id=175): socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000003f80)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x80003ec0, 0xfeffff07, 0x0, 0x80003ef0, 0x80003f20, 0x600], 0x0, 0x0, &(0x7f0000003ec0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000004000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]}, 0x104) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) fcntl$setstatus(r4, 0x4, 0x42800) r5 = dup(r4) r6 = socket(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xe, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0xf8, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc0, 0x3, "1edec35f23b541cc3633daae4a54e12549ae2e2e903dae66ef038c469f1b71510f9c93fd8646d5ed7365fc8bad1938e96956cdbfbd8cffd470b20f03155d9eea7cc50918c7930a29bb0669512b660002f8559029294258a77e6835a0ae0e7e5add2b5fb091e062a4ecd4eba8d1f600f815a7b4cab0032a4f5ec7e742fef09a2cce8e72eea461d0ee150981054e1970055a173ae4b217e3deaea691bc5565eaa3265ec30aeb3dd2496364dae71759a55a8d6e3265c08fa3a460d4e5ca"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x88d0}, 0x40480d4) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 6.896689759s ago: executing program 3 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000841) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) flock(r2, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", "cf00", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) socket(0x28, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 5.612288292s ago: executing program 4 (id=181): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000180)) 4.896645371s ago: executing program 4 (id=183): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/protocols\x00') preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/4095, 0xfff}], 0x1, 0x9, 0x0) 3.957357971s ago: executing program 4 (id=184): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'veth0_to_team\x00', {0x6}, 0xff}) 3.922937264s ago: executing program 0 (id=185): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x80000000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) r6 = dup(r5) connect$unix(r6, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.86093496s ago: executing program 1 (id=186): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000a00)={0x400007f, {{0xa, 0x4e23, 0x130e25a2, @local, 0x7}}}, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setrlimit(0x9, &(0x7f0000000800)={0x5838, 0x2}) shmctl$IPC_RMID(0x0, 0x0) ptrace$getsig(0x4202, r1, 0x6, &(0x7f00000000c0)) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000840)=""/242) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x98, 0xe0, 0x0, {}, [@common=@inet=@socket2={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x10042, 0xa2) ioctl$FS_IOC_RESVSP(r5, 0x40305828, 0x0) unshare(0x2c020400) listen(r4, 0x0) 3.850672141s ago: executing program 2 (id=187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x84}}, 0x20004000) 3.822709974s ago: executing program 4 (id=188): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000880)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r1) r4 = fcntl$dupfd(r0, 0x406, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) 3.661038209s ago: executing program 3 (id=189): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r0, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) 3.247095529s ago: executing program 2 (id=190): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) 3.246902109s ago: executing program 3 (id=191): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x808}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x2, {0x3, 0x1}}, 0x18) bind$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x1, {0x2, 0x1, 0x2}, 0xfd}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000001c0)}, {&(0x7f0000000400)='#', 0x1}], 0x2) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) semop(0x0, &(0x7f0000000200), 0x53) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 3.215438812s ago: executing program 4 (id=192): read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x800000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffd, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in6=@empty, 0x4, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 2.444938026s ago: executing program 3 (id=193): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r2, 0x0, 0x2}, 0x18) readahead(0xffffffffffffffff, 0x7, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000057e89720f20c50620610010203010902120001000000000904"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$l2tp6(0xa, 0x2, 0x73) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000140)=""/76, &(0x7f00000001c0)=0x4c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) 2.444748966s ago: executing program 0 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x20000000, 0x800000}], 0x0) 1.221045023s ago: executing program 2 (id=195): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380), 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ca9bd410991100b098a8010218010902120001000010000904"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 1.214269944s ago: executing program 0 (id=196): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@local, 0x200001}, @local, 0x8, 0x0, 0x347, 0x80000004, 0x24b, 0x10001, 0x9}) 1.14903768s ago: executing program 1 (id=197): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) 1.05307618s ago: executing program 0 (id=198): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x2, 0x2019}}}, 0x7) 458.070287ms ago: executing program 0 (id=199): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000573000/0x1000)=nil, 0x1000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) r0 = socket(0xf, 0x1, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f000083b000/0x1000)=nil, 0x1000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x2}, 0xc) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) socket(0x15, 0x80002, 0xff) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000003c0)={0x2, 0xce20, @empty}, 0x10, 0x0}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1}}], 0x2, 0x4080) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r4}) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'wlan0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0xff, 0xfffffffffffffffa}}) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) 248.996587ms ago: executing program 1 (id=200): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8000008, 0x2) close(r0) 248.763496ms ago: executing program 4 (id=201): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) 248.100477ms ago: executing program 1 (id=202): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"], 0x50) 85.582532ms ago: executing program 1 (id=203): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 1 (id=204): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x9, 0x1, 0x9, 0x30, '\x00', 0x1}, 0x3, 0x2, 0x800, 0x0, 0x0, 0xc, 'syz1\x00', 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.202' (ED25519) to the list of known hosts. [ 45.013372][ T4169] cgroup: Unknown subsys name 'net' [ 45.123954][ T4169] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 46.329543][ T4169] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 48.175576][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 48.202950][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 48.328367][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.335973][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.344293][ T4190] device bridge_slave_0 entered promiscuous mode [ 48.354991][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.362624][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.370406][ T4190] device bridge_slave_1 entered promiscuous mode [ 48.377538][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.384664][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.392253][ T4181] device bridge_slave_0 entered promiscuous mode [ 48.413066][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 48.428076][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.435189][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.443229][ T4181] device bridge_slave_1 entered promiscuous mode [ 48.502577][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.513870][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.524851][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.534125][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 48.560359][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.581783][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 48.614214][ T4190] team0: Port device team_slave_0 added [ 48.625192][ T4190] team0: Port device team_slave_1 added [ 48.632891][ T4181] team0: Port device team_slave_0 added [ 48.669897][ T4181] team0: Port device team_slave_1 added [ 48.700143][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.707086][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.733271][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.762863][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.770004][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.777591][ T4183] device bridge_slave_0 entered promiscuous mode [ 48.785191][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.792285][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.818291][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.830060][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.836993][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.862970][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.883157][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.890766][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.898313][ T4183] device bridge_slave_1 entered promiscuous mode [ 48.909163][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.916096][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.941999][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.985635][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.992836][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.000514][ T4182] device bridge_slave_0 entered promiscuous mode [ 49.024351][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.036207][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.046707][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.054066][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.062151][ T4182] device bridge_slave_1 entered promiscuous mode [ 49.069203][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.076246][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.084542][ T4180] device bridge_slave_0 entered promiscuous mode [ 49.117992][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.125128][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.133318][ T4180] device bridge_slave_1 entered promiscuous mode [ 49.142422][ T4190] device hsr_slave_0 entered promiscuous mode [ 49.149219][ T4190] device hsr_slave_1 entered promiscuous mode [ 49.157889][ T4183] team0: Port device team_slave_0 added [ 49.165716][ T4183] team0: Port device team_slave_1 added [ 49.204635][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.211691][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.237706][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.257305][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.280416][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.287360][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.318747][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.333097][ T4181] device hsr_slave_0 entered promiscuous mode [ 49.339994][ T4181] device hsr_slave_1 entered promiscuous mode [ 49.346432][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.354308][ T4181] Cannot create hsr debugfs directory [ 49.361403][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.371838][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.405489][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.456356][ T4180] team0: Port device team_slave_0 added [ 49.476763][ T4182] team0: Port device team_slave_0 added [ 49.487125][ T4182] team0: Port device team_slave_1 added [ 49.494389][ T4180] team0: Port device team_slave_1 added [ 49.501914][ T4183] device hsr_slave_0 entered promiscuous mode [ 49.508469][ T4183] device hsr_slave_1 entered promiscuous mode [ 49.515981][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.523952][ T4183] Cannot create hsr debugfs directory [ 49.570050][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.576999][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.603183][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.620758][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.627701][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.653933][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.666474][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.673511][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.699527][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.717750][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.724729][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.750708][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.869918][ T4182] device hsr_slave_0 entered promiscuous mode [ 49.879361][ T4182] device hsr_slave_1 entered promiscuous mode [ 49.885797][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.893635][ T4182] Cannot create hsr debugfs directory [ 49.901964][ T4180] device hsr_slave_0 entered promiscuous mode [ 49.908740][ T4180] device hsr_slave_1 entered promiscuous mode [ 49.915291][ T4180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.923535][ T26] Bluetooth: hci1: command 0x0409 tx timeout [ 49.925399][ T4180] Cannot create hsr debugfs directory [ 49.930443][ T26] Bluetooth: hci3: command 0x0409 tx timeout [ 49.944896][ T26] Bluetooth: hci4: command 0x0409 tx timeout [ 49.999330][ T26] Bluetooth: hci0: command 0x0409 tx timeout [ 50.009349][ T4171] Bluetooth: hci2: command 0x0409 tx timeout [ 50.097873][ T4181] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.121891][ T4181] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.136992][ T4181] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.145341][ T4181] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.179476][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 50.195965][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 50.204884][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 50.221375][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 50.267235][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.287014][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.304488][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.313641][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.357627][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.378600][ T4180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.396852][ T4180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.406781][ T4180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.434750][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.441908][ T4180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.453383][ T4182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.464460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.474705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.495481][ T4182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.523405][ T4182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.532825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.542132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.551925][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.559157][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.567517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.577321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.585666][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.592708][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.600562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.612579][ T4182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.626982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.650503][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.668161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.677239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.686878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.696068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.704859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.713449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.722377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.730566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.744191][ T4181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.754652][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.776846][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.784898][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.793540][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.803749][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.812207][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.820912][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.852018][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.890007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.905511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.917952][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.925058][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.933892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.942653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.951411][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.958455][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.967018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.976080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.000834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.010189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.018850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.027842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.053509][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.063516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.072311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.081117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.089760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.097817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.107007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.115523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.123508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.135359][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.145058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.153560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.173558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.185853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.196715][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.203809][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.218440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.230306][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.247065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.255935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.264587][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.271666][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.281420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.309594][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.322918][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.331749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.346375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.355136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.366696][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.393755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.403075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.411759][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.418797][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.427602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.436481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.445110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.455218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.463799][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.470880][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.478583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.487173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.495577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.504420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.512839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.522038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.530550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.538722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.547169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.555784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.579745][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.588222][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.616894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.626269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.634402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.650680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.659530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.666902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.674326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.685149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.693792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.702464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.710659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.719421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.727866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.741756][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.750342][ T4180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.763055][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.779646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.788636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.813825][ T4181] device veth0_vlan entered promiscuous mode [ 51.841508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.851812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.867207][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.874309][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.900439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.915129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.926220][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.933294][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.941611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.950318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.958420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.967209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.976022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.984970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.992704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.000294][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 52.019513][ T4265] Bluetooth: hci3: command 0x041b tx timeout [ 52.026595][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.034693][ T4265] Bluetooth: hci1: command 0x041b tx timeout [ 52.044589][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.071609][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.084971][ T4171] Bluetooth: hci2: command 0x041b tx timeout [ 52.099485][ T4171] Bluetooth: hci0: command 0x041b tx timeout [ 52.106254][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.116219][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.124995][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.133474][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.142223][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.152883][ T4181] device veth1_vlan entered promiscuous mode [ 52.161158][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.169754][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.199383][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.214092][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.232615][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.244078][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.254912][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.264777][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.274139][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.293240][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.301106][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.321532][ T4190] device veth0_vlan entered promiscuous mode [ 52.355678][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.365006][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.374926][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.383992][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.393488][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.403709][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.413307][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.422224][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.437828][ T4190] device veth1_vlan entered promiscuous mode [ 52.446626][ T4181] device veth0_macvtap entered promiscuous mode [ 52.462258][ T4181] device veth1_macvtap entered promiscuous mode [ 52.476638][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.496899][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.516262][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.525411][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.533428][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.541037][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.549312][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.557420][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.566088][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.574846][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.584707][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.595467][ T4180] device veth0_vlan entered promiscuous mode [ 52.612539][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.621145][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.641249][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.651266][ T4190] device veth0_macvtap entered promiscuous mode [ 52.658566][ T4180] device veth1_vlan entered promiscuous mode [ 52.669530][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.677526][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.685695][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.696062][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.704743][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.713425][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.730252][ T4181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.739286][ T4181] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.747947][ T4181] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.756950][ T4181] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.768771][ T4190] device veth1_macvtap entered promiscuous mode [ 52.789614][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.797707][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.806211][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.814769][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.823620][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.832039][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.840543][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.848211][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.876065][ T4182] device veth0_vlan entered promiscuous mode [ 52.888743][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.897263][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.907455][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.916704][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.941543][ T4182] device veth1_vlan entered promiscuous mode [ 52.951750][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.961040][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.970410][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.989991][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.005051][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.016357][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.024798][ T4183] device veth0_vlan entered promiscuous mode [ 53.038609][ T4180] device veth0_macvtap entered promiscuous mode [ 53.049472][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.062934][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.071609][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.083117][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.093589][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.104613][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.115745][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.127998][ T4183] device veth1_vlan entered promiscuous mode [ 53.147792][ T4180] device veth1_macvtap entered promiscuous mode [ 53.158222][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.166458][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.175140][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.182993][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.194008][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.203570][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.212340][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.222808][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.231980][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.240756][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.249624][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.263182][ T4182] device veth0_macvtap entered promiscuous mode [ 53.273248][ T4182] device veth1_macvtap entered promiscuous mode [ 53.312629][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.323920][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.333993][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.345630][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.356589][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.376302][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.387550][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.398102][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.408593][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.418422][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.431599][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.443341][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.457861][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.468459][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.478748][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.489400][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.502553][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.512662][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.520858][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.528653][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.537303][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.546978][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.555579][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.564329][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.572948][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.581752][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.590254][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.600546][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.612221][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.622057][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.632470][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.642721][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.653325][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.664995][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.682573][ T4262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.693340][ T4262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.701259][ T4183] device veth0_macvtap entered promiscuous mode [ 53.708840][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.719872][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.728728][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.737461][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.747497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.755838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.764336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.773404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.786384][ T4180] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.795396][ T4180] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.804526][ T4180] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.814218][ T4180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.830938][ T4183] device veth1_macvtap entered promiscuous mode [ 53.892507][ T4262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.904639][ T4262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.937933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.943949][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.956793][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.965214][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.974411][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.985613][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.985887][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.005397][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.016095][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.026095][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.036686][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.046680][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.057108][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.068837][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.080448][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.088248][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.090315][ T4246] Bluetooth: hci1: command 0x040f tx timeout [ 54.101994][ T4246] Bluetooth: hci3: command 0x040f tx timeout [ 54.104892][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.108048][ T4246] Bluetooth: hci4: command 0x040f tx timeout [ 54.116922][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.141266][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.152250][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.162857][ T4246] Bluetooth: hci0: command 0x040f tx timeout [ 54.163450][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.169084][ T4246] Bluetooth: hci2: command 0x040f tx timeout [ 54.185860][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.195845][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.206455][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.216473][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.227096][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.240560][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.260435][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.274805][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.317948][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.327237][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.336047][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.345372][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.360338][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.369377][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.379118][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.387016][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.402593][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.465866][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.514267][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.531901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.565603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.577405][ T4295] Cannot find set identified by id 0 to match [ 54.971681][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.998877][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.024670][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.033082][ T4304] futex_wake_op: syz.4.7 tries to shift op by -1; fix this program [ 55.036595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.067584][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.080111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.372474][ T4307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.406830][ T4307] bond0: (slave bond1): Enslaving as an active interface with an up link [ 55.440427][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.469563][ T4311] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4'. [ 55.479233][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.168262][ T4246] Bluetooth: hci4: command 0x0419 tx timeout [ 56.181225][ T4246] Bluetooth: hci3: command 0x0419 tx timeout [ 56.189969][ T4246] Bluetooth: hci1: command 0x0419 tx timeout [ 56.239480][ T4246] Bluetooth: hci2: command 0x0419 tx timeout [ 56.248342][ T4246] Bluetooth: hci0: command 0x0419 tx timeout [ 56.310934][ T4311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.487528][ T4311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.513225][ T4311] bond0 (unregistering): (slave bond1): Releasing backup interface [ 56.532364][ T4311] bond0 (unregistering): Released all slaves [ 57.505516][ T25] audit: type=1326 audit(1766317913.572:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4324 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd191835749 code=0x7ffc0000 [ 58.148534][ T25] audit: type=1326 audit(1766317913.572:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4324 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd191835749 code=0x7ffc0000 [ 58.166340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.178906][ T25] audit: type=1326 audit(1766317913.622:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4324 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd191835749 code=0x7ffc0000 [ 58.204202][ T25] audit: type=1326 audit(1766317913.622:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4324 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd191835749 code=0x7ffc0000 [ 58.227257][ T25] audit: type=1326 audit(1766317913.622:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4324 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd191835749 code=0x7ffc0000 [ 58.251926][ T25] audit: type=1326 audit(1766317913.632:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4324 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd191835749 code=0x7ffc0000 [ 58.278249][ T25] audit: type=1326 audit(1766317913.642:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4324 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd191835749 code=0x7ffc0000 [ 58.314608][ T4334] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 58.346500][ T25] audit: type=1326 audit(1766317913.642:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4324 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd191835749 code=0x7ffc0000 [ 58.524510][ T4336] binder: BINDER_SET_CONTEXT_MGR already set [ 58.573592][ T4336] binder: 4335:4336 ioctl 4018620d 200000000040 returned -16 [ 59.140490][ T4347] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 59.684077][ T4345] Cannot find set identified by id 0 to match [ 64.418970][ T25] audit: type=1326 audit(1766317918.132:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f89fb5749 code=0x7ffc0000 [ 64.570156][ T4386] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.599100][ T25] audit: type=1326 audit(1766317918.132:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f89fb5749 code=0x7ffc0000 [ 64.668825][ T25] audit: type=1326 audit(1766317918.152:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0f89fb5749 code=0x7ffc0000 [ 64.670969][ T4387] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.691592][ T25] audit: type=1326 audit(1766317918.152:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f89fb5749 code=0x7ffc0000 [ 64.723951][ T25] audit: type=1326 audit(1766317918.152:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f89fb5749 code=0x7ffc0000 [ 64.746123][ T25] audit: type=1326 audit(1766317918.162:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0f89fb5749 code=0x7ffc0000 [ 64.773511][ T4387] bond0: (slave bond1): Enslaving as an active interface with an up link [ 65.380978][ T4394] netlink: 'syz.3.28': attribute type 3 has an invalid length. [ 65.401102][ T4395] netlink: 14 bytes leftover after parsing attributes in process `syz.1.25'. [ 65.411294][ T25] audit: type=1326 audit(1766317918.172:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f89fb5749 code=0x7ffc0000 [ 65.539953][ T25] audit: type=1326 audit(1766317918.172:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f89fb5749 code=0x7ffc0000 [ 65.584723][ T4395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.615083][ T4395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.356835][ T4395] bond0 (unregistering): (slave bond1): Releasing backup interface [ 66.398962][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 66.408986][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 66.417982][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 66.426931][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 66.435964][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 66.444921][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 66.453870][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 66.463035][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 66.471998][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 66.480954][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 67.669541][ T4395] bond0 (unregistering): Released all slaves [ 67.853758][ T4434] netlink: 96 bytes leftover after parsing attributes in process `syz.2.43'. [ 68.077064][ T4444] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.632153][ T4444] process 'syz.3.46' launched '/dev/fd/5' with NULL argv: empty string added [ 69.019093][ T4231] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.379192][ T4231] usb 1-1: config 0 has no interfaces? [ 69.384901][ T4231] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 69.399167][ T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.424451][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.486440][ T4231] usb 1-1: config 0 descriptor?? [ 69.689087][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 69.809161][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 69.847237][ T4231] usb 1-1: USB disconnect, device number 2 [ 69.896930][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.927390][ T26] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.046454][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 70.058447][ T4470] futex_wake_op: syz.2.51 tries to shift op by -1; fix this program [ 70.083692][ T26] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 70.881067][ T26] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 70.903840][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.939924][ T26] usb 2-1: config 0 descriptor?? [ 70.989862][ T4457] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 71.129389][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.139980][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.319215][ T26] usb 2-1: USB disconnect, device number 2 [ 75.467536][ T4519] 9pnet: Insufficient options for proto=fd [ 76.386611][ T2055] cfg80211: failed to load regulatory.db [ 76.478402][ T4265] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.907674][ T4265] usb 4-1: Using ep0 maxpacket: 16 [ 77.229317][ T4265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.256700][ T4265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.317207][ T4265] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 77.402834][ T4265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.529996][ T4265] usb 4-1: config 0 descriptor?? [ 77.735849][ T4540] xt_TPROXY: Can be used only with -p tcp or -p udp [ 78.589402][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 78.602984][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 78.689887][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 78.697044][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 78.704506][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 78.722415][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 78.731030][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 78.755073][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 78.768988][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 78.780632][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 78.798008][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 78.827187][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 78.854722][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 78.925660][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 78.937348][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 78.957536][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 78.986658][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 78.997998][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 79.543097][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 79.648971][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 79.671742][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 79.678893][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 79.710446][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 79.729213][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 79.765602][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 79.789435][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 79.805815][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 79.823454][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 79.840407][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 79.853833][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 79.868994][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 79.886381][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 79.903911][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 79.921711][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 79.928858][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 79.951094][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 79.958744][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 79.970733][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.977998][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 79.987447][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.995074][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.002651][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.006810][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.010291][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.024809][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.033272][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.043203][ T4584] input: syz1 as /devices/virtual/input/input5 [ 80.069147][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.076289][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.102681][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.123252][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.132061][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.151777][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.156887][ T4599] netlink: 52 bytes leftover after parsing attributes in process `syz.4.95'. [ 80.159459][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.175475][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.182878][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.185265][ T4599] Zero length message leads to an empty skb [ 80.190702][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.203628][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.210949][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.218206][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.226016][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.241353][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.250496][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.257628][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.265205][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.272598][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.279855][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.286981][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.294142][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.301641][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.308812][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.316119][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.373568][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.385176][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.392385][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.402487][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.409717][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.416895][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.424126][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.431361][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.438498][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.445779][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.453280][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.461241][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.468401][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.475751][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.482958][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.490173][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.497333][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.504534][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.511709][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.518849][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.526036][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.533207][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.540399][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.547555][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.554783][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.562772][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.569998][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.577180][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.584394][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.591619][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.598804][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.606054][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.613207][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.620507][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.627626][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.634801][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.642656][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.649805][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.656925][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.664639][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.671807][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.678985][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.686119][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.693247][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.700397][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.707514][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.714656][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.725565][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.732737][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.739886][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.746997][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.754147][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.761960][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.769122][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.776234][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.783362][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.790506][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.797621][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.804780][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.811929][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.819086][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.826201][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.833346][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.840476][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.847571][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.854697][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.861839][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.869722][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.876847][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.883985][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.891149][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.898261][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.905391][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.912533][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.919703][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.926814][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.933963][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.941478][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.948574][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.955780][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.962931][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.970845][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.977965][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.985106][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.992251][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 80.999408][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 81.006519][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 81.013658][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 81.020806][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 81.027912][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 81.035051][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 81.042183][ T4265] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 81.054394][ T4265] logitech 0003:046D:C29C.0001: hidraw0: USB HID v0.01 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 81.096239][ T4265] logitech 0003:046D:C29C.0001: no inputs found [ 81.129539][ T4265] usb 4-1: USB disconnect, device number 2 [ 81.276866][ T4605] fido_id[4605]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 82.185001][ T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.807789][ T4634] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 82.872342][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 83.389214][ T26] usb 2-1: device descriptor read/all, error -71 [ 83.929734][ T4639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.108'. [ 84.008551][ T4640] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.181170][ T4651] overlayfs: missing 'workdir' [ 84.320267][ T4657] tmpfs: Unknown parameter 'usrquota' [ 85.868989][ T4265] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.948981][ T4239] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.138975][ T4265] usb 4-1: Using ep0 maxpacket: 32 [ 86.279509][ T4265] usb 4-1: config 0 has no interfaces? [ 86.285696][ T4265] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 86.331620][ T4265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.929149][ T4265] usb 4-1: config 0 descriptor?? [ 87.216240][ T4665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.121'. [ 87.266570][ T4665] netlink: 2 bytes leftover after parsing attributes in process `syz.3.121'. [ 87.298255][ T25] audit: type=1326 audit(1766317943.472:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4688 comm="syz.2.130" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd191835749 code=0x0 [ 87.359511][ T26] usb 4-1: USB disconnect, device number 3 [ 89.048719][ T4729] netlink: 7 bytes leftover after parsing attributes in process `syz.4.140'. [ 90.745468][ T4750] netlink: 40 bytes leftover after parsing attributes in process `syz.0.143'. [ 91.298461][ T4759] tmpfs: Bad value for 'mpol' [ 91.461636][ T4765] netlink: 16 bytes leftover after parsing attributes in process `syz.1.153'. [ 92.752347][ T4776] netlink: 10 bytes leftover after parsing attributes in process `syz.0.159'. [ 93.359055][ T4224] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 95.035167][ T2055] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 95.091001][ T4224] usb 3-1: unable to get BOS descriptor or descriptor too short [ 95.399324][ T4224] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 95.417062][ T4224] usb 3-1: can't read configurations, error -71 [ 95.494479][ T2055] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 95.559111][ T2055] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.613077][ T2055] usb 1-1: config 0 descriptor?? [ 96.525640][ T2055] cp210x 1-1:0.0: cp210x converter detected [ 97.565698][ T2055] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 97.773496][ T2055] usb 1-1: cp210x converter now attached to ttyUSB0 [ 98.279489][ T4224] usb 1-1: USB disconnect, device number 4 [ 98.492554][ T4224] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 98.590947][ T4224] cp210x 1-1:0.0: device disconnected [ 99.663038][ T4882] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 101.420211][ T4239] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.609239][ T4232] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.699367][ T4239] usb 4-1: Using ep0 maxpacket: 32 [ 101.869253][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 101.979561][ T4239] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.06 [ 102.014619][ T4239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.108304][ T4239] usb 4-1: Product: syz [ 102.149658][ T4232] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 102.184359][ T4239] usb 4-1: Manufacturer: syz [ 102.202352][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 102.217683][ T4239] usb 4-1: SerialNumber: syz [ 102.254631][ T4232] usb 3-1: Product: syz [ 102.258815][ T4232] usb 3-1: Manufacturer: syz [ 102.269997][ T4239] usb 4-1: config 0 descriptor?? [ 102.296093][ T4232] usb 3-1: SerialNumber: syz [ 102.320572][ T4239] ums_eneub6250 4-1:0.0: USB Mass Storage device detected [ 102.349231][ T4908] mmap: syz.0.199 (4908) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 102.363780][ T4232] usb 3-1: config 0 descriptor?? [ 102.622934][ T4184] Bluetooth: hci1: Unknown advertising packet type: 0xd49b [ 102.623185][ T4184] ================================================================== [ 102.623231][ T4239] usb 3-1: USB disconnect, device number 4 [ 102.630675][ T4184] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12db/0x3b80 [ 102.630718][ T4184] Read of size 1 at addr ffff88805d035408 by task kworker/u5:1/4184 [ 102.630733][ T4184] [ 102.630744][ T4184] CPU: 0 PID: 4184 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 102.630763][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.680170][ T4184] Workqueue: hci1 hci_rx_work [ 102.684847][ T4184] Call Trace: [ 102.688104][ T4184] [ 102.691016][ T4184] dump_stack_lvl+0x168/0x230 [ 102.695760][ T4184] ? show_regs_print_info+0x20/0x20 [ 102.700942][ T4184] ? load_image+0x3b0/0x3b0 [ 102.705419][ T4184] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 102.710773][ T4184] print_address_description+0x60/0x2d0 [ 102.716299][ T4184] ? hci_le_meta_evt+0x12db/0x3b80 [ 102.721386][ T4184] kasan_report+0xdf/0x130 [ 102.725780][ T4184] ? hci_le_meta_evt+0x12db/0x3b80 [ 102.730869][ T4184] hci_le_meta_evt+0x12db/0x3b80 [ 102.735789][ T4184] ? hci_event_packet+0x2b0/0x12f0 [ 102.740894][ T4184] ? hci_remote_host_features_evt+0x280/0x280 [ 102.746963][ T4184] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 102.752583][ T4184] ? mark_lock+0x94/0x320 [ 102.756917][ T4184] ? mutex_unlock+0x10/0x10 [ 102.761418][ T4184] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 102.767382][ T4184] ? lock_chain_count+0x20/0x20 [ 102.772212][ T4184] ? __rwlock_init+0x140/0x140 [ 102.776956][ T4184] hci_event_packet+0xe05/0x12f0 [ 102.781877][ T4184] ? lockdep_hardirqs_on+0x94/0x140 [ 102.787061][ T4184] ? rcu_lock_release+0x20/0x20 [ 102.791897][ T4184] ? hci_send_to_monitor+0x9c/0x4a0 [ 102.797080][ T4184] hci_rx_work+0x255/0xa10 [ 102.801487][ T4184] process_one_work+0x863/0x1000 [ 102.806416][ T4184] ? worker_detach_from_pool+0x240/0x240 [ 102.812026][ T4184] ? lockdep_hardirqs_off+0x70/0x100 [ 102.817293][ T4184] ? _raw_spin_lock_irq+0xab/0xe0 [ 102.822310][ T4184] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 102.827663][ T4184] ? wq_worker_running+0x97/0x170 [ 102.832665][ T4184] worker_thread+0xaa8/0x12a0 [ 102.837333][ T4184] kthread+0x436/0x520 [ 102.841380][ T4184] ? rcu_lock_release+0x20/0x20 [ 102.846207][ T4184] ? kthread_blkcg+0xd0/0xd0 [ 102.850783][ T4184] ret_from_fork+0x1f/0x30 [ 102.855225][ T4184] [ 102.858232][ T4184] [ 102.860534][ T4184] Allocated by task 4893: [ 102.864835][ T4184] __kasan_kmalloc+0xb5/0xf0 [ 102.869424][ T4184] __alloc_skb+0x22c/0x750 [ 102.873824][ T4184] vhci_write+0xbc/0x450 [ 102.878041][ T4184] vfs_write+0x712/0xd00 [ 102.882263][ T4184] ksys_write+0x14d/0x250 [ 102.886573][ T4184] do_syscall_64+0x4c/0xa0 [ 102.890967][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.896836][ T4184] [ 102.899141][ T4184] The buggy address belongs to the object at ffff88805d035000 [ 102.899141][ T4184] which belongs to the cache kmalloc-1k of size 1024 [ 102.913168][ T4184] The buggy address is located 8 bytes to the right of [ 102.913168][ T4184] 1024-byte region [ffff88805d035000, ffff88805d035400) [ 102.926853][ T4184] The buggy address belongs to the page: [ 102.932470][ T4184] page:ffffea0001740c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d030 [ 102.942595][ T4184] head:ffffea0001740c00 order:3 compound_mapcount:0 compound_pincount:0 [ 102.950894][ T4184] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 102.958868][ T4184] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016841dc0 [ 102.967433][ T4184] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 102.975989][ T4184] page dumped because: kasan: bad access detected [ 102.982394][ T4184] page_owner tracks the page as allocated [ 102.988096][ T4184] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4331, ts 59796350223, free_ts 11126778969 [ 103.008295][ T4184] get_page_from_freelist+0x1b77/0x1c60 [ 103.013844][ T4184] __alloc_pages+0x1e1/0x470 [ 103.018431][ T4184] new_slab+0xc0/0x4b0 [ 103.022485][ T4184] ___slab_alloc+0x81e/0xdf0 [ 103.027073][ T4184] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 103.032881][ T4184] pskb_expand_head+0x127/0x10f0 [ 103.037812][ T4184] batadv_skb_head_push+0x162/0x1f0 [ 103.043007][ T4184] batadv_send_skb_packet+0xf7/0x5f0 [ 103.048298][ T4184] batadv_iv_send_outstanding_bat_ogm_packet+0x696/0x840 [ 103.055319][ T4184] process_one_work+0x863/0x1000 [ 103.060238][ T4184] worker_thread+0xaa8/0x12a0 [ 103.064897][ T4184] kthread+0x436/0x520 [ 103.068951][ T4184] ret_from_fork+0x1f/0x30 [ 103.073366][ T4184] page last free stack trace: [ 103.078013][ T4184] free_unref_page_prepare+0x637/0x6c0 [ 103.083449][ T4184] free_unref_page+0x94/0x280 [ 103.088104][ T4184] free_contig_range+0x96/0xf0 [ 103.093191][ T4184] destroy_args+0x100/0xa20 [ 103.097691][ T4184] debug_vm_pgtable+0x318/0x370 [ 103.102539][ T4184] do_one_initcall+0x1ee/0x680 [ 103.107282][ T4184] do_initcall_level+0x137/0x1f0 [ 103.112198][ T4184] do_initcalls+0x4b/0x90 [ 103.116505][ T4184] kernel_init_freeable+0x3ce/0x560 [ 103.121678][ T4184] kernel_init+0x19/0x1b0 [ 103.125989][ T4184] ret_from_fork+0x1f/0x30 [ 103.130397][ T4184] [ 103.132701][ T4184] Memory state around the buggy address: [ 103.138307][ T4184] ffff88805d035300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.146360][ T4184] ffff88805d035380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.154420][ T4184] >ffff88805d035400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.162479][ T4184] ^ [ 103.166796][ T4184] ffff88805d035480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.174840][ T4184] ffff88805d035500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.182887][ T4184] ================================================================== [ 103.190925][ T4184] Disabling lock debugging due to kernel taint [ 103.200220][ T4184] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 103.207417][ T4184] CPU: 0 PID: 4184 Comm: kworker/u5:1 Tainted: G B syzkaller #0 [ 103.216323][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.226358][ T4184] Workqueue: hci1 hci_rx_work [ 103.231034][ T4184] Call Trace: [ 103.234303][ T4184] [ 103.237214][ T4184] dump_stack_lvl+0x168/0x230 [ 103.241871][ T4184] ? show_regs_print_info+0x20/0x20 [ 103.247048][ T4184] ? load_image+0x3b0/0x3b0 [ 103.251534][ T4184] panic+0x2c9/0x7f0 [ 103.255410][ T4184] ? bpf_jit_dump+0xd0/0xd0 [ 103.259892][ T4184] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 103.265764][ T4184] ? _raw_spin_unlock+0x40/0x40 [ 103.270594][ T4184] ? hci_le_meta_evt+0x12db/0x3b80 [ 103.275685][ T4184] check_panic_on_warn+0x80/0xa0 [ 103.280605][ T4184] ? hci_le_meta_evt+0x12db/0x3b80 [ 103.285696][ T4184] end_report+0x6d/0xf0 [ 103.289846][ T4184] kasan_report+0x102/0x130 [ 103.294339][ T4184] ? hci_le_meta_evt+0x12db/0x3b80 [ 103.299433][ T4184] hci_le_meta_evt+0x12db/0x3b80 [ 103.304356][ T4184] ? hci_event_packet+0x2b0/0x12f0 [ 103.309447][ T4184] ? hci_remote_host_features_evt+0x280/0x280 [ 103.315496][ T4184] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 103.321103][ T4184] ? mark_lock+0x94/0x320 [ 103.325411][ T4184] ? mutex_unlock+0x10/0x10 [ 103.329894][ T4184] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 103.335857][ T4184] ? lock_chain_count+0x20/0x20 [ 103.340685][ T4184] ? __rwlock_init+0x140/0x140 [ 103.345429][ T4184] hci_event_packet+0xe05/0x12f0 [ 103.350343][ T4184] ? lockdep_hardirqs_on+0x94/0x140 [ 103.355520][ T4184] ? rcu_lock_release+0x20/0x20 [ 103.360348][ T4184] ? hci_send_to_monitor+0x9c/0x4a0 [ 103.365530][ T4184] hci_rx_work+0x255/0xa10 [ 103.369952][ T4184] process_one_work+0x863/0x1000 [ 103.374874][ T4184] ? worker_detach_from_pool+0x240/0x240 [ 103.380482][ T4184] ? lockdep_hardirqs_off+0x70/0x100 [ 103.385752][ T4184] ? _raw_spin_lock_irq+0xab/0xe0 [ 103.390755][ T4184] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 103.396103][ T4184] ? wq_worker_running+0x97/0x170 [ 103.401107][ T4184] worker_thread+0xaa8/0x12a0 [ 103.405767][ T4184] kthread+0x436/0x520 [ 103.409811][ T4184] ? rcu_lock_release+0x20/0x20 [ 103.414638][ T4184] ? kthread_blkcg+0xd0/0xd0 [ 103.419204][ T4184] ret_from_fork+0x1f/0x30 [ 103.423597][ T4184] [ 103.426865][ T4184] Kernel Offset: disabled [ 103.431179][ T4184] Rebooting in 86400 seconds..