last executing test programs: 2.304294028s ago: executing program 1 (id=8): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x3, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x1, 0x564b, 0x1, 0x0, 0x0) 2.229229582s ago: executing program 3 (id=4): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x4000) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x105) 1.820684564s ago: executing program 4 (id=5): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) linkat(r4, &(0x7f0000000000)='./file0\x00', r4, 0x0, 0x1400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], 0x0, 0xffffffff, 0x33, &(0x7f00000000c0)=""/51, 0x41000, 0x647521105d7f6156, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000180)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x1, 0x3ff, 0x80000001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[r4], 0x0, 0x10, 0x3}, 0x94) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 1.69506601s ago: executing program 0 (id=13): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f00000005c0)=0x400000001, 0x4) syz_emit_ethernet(0x76, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x101005, @remote, 0x7}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) 923.784051ms ago: executing program 2 (id=18): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x8936, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 768.352319ms ago: executing program 0 (id=19): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) read(r0, &(0x7f00000001c0)=""/36, 0xffffffc0) close(0x3) 760.8175ms ago: executing program 2 (id=20): close(0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000001c0)={r1, r1, 0x1, 0x88eb, 0x2}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 748.62956ms ago: executing program 1 (id=21): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14", 0x3}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "9005451377480361", "bbad434d19477339418b5b79f10c141a", "dc717b03", "72f2ea1a3290afcc"}, 0x28) 675.141224ms ago: executing program 2 (id=22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0d0f080882040032c4c15564efb9050000000f01d966ba410066ed0fa80f01c40fc70036f4c4e2fd40db6681ba6100003e9f0000ef", 0x35}], 0x1, 0x1d, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 560.35084ms ago: executing program 0 (id=23): add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="192a", 0x2, 0xfffffffffffffffc) 560.03881ms ago: executing program 1 (id=24): creat(&(0x7f0000000300)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), &(0x7f0000000100)=@v3={0x3000000, [{0x80000001, 0xdd}, {0x8000, 0x8}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 483.168864ms ago: executing program 1 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000001580)=ANY=[], 0x3d0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000000600)="b56511e72c6cba780ce701ed0b2db27a336692892a6491e2488652ff00c468d353d809d5b20d8ee0f9fefa6cd7bd1036ed25f0e37053d291887c707a892884c2b4aa2ebac156ef8288264449eea05c4f51c3bb4355eb108744fe34e5d0e851d51a855854135f04dd5d854459226f090b6f0d6135e8f2824eed7469236cad2251116a381d8cd30bae59c1fe71e028a667cb910d523aa5d7208286755075ee8be937304cca20e234303df72ad4e2bdc71219456229460a7c6a2df61e8b21b4a4941dcba5c257b90bbf0a976a73973319258ad7f738c04dfbdee4ea0e1b77a909a154fd934f791ebea03db6f06c8f14bc40924e46cbb9b343f25d63f332f9b3f176601f842a4e40401cbc62ee7803c3a2d71f3878f61d8fb8cb5ee90a696b22fb97bbdfd36af05c2e34dfb3d36cf7333ea9dc98af537780ae7bc701053b9009d654d84f04c851b311341efcec16ef3d5c8a7e8af494068dbad55bfa7b7bf4475ceb03a6f4ef11ce14652dc36f279671b7184586c7aab57d50ca23deaeeeaebc2ed024d91f399c84834e7802ad28b6ffec7ed089e8af35d15f2713e70ce55b3f60b9c002496e110c3a68e4c01faf901df4e39d007bf99f3a2d2e33c58b92b961937060a92ab6347995c09eb6a363092e3a45b68bd5e734d43b0bc98070d66c8d03490897a7d05e894da6d92c46cb1d961d11a7d1cd9d3c437c07e9f090690d2b344a93fdc5d7276b74231f1ad050024359e7a73ee913e9a7eba72f23482de94c572d07491328ca363762c44ddcdb1623ec6d639b368d407ffafbb265de19bd5e52ec86c12167dfe2a3de629af1d66612c3f313e07a301d8378fc6eb551196b51680d1194d682ff6cdbb0f811608d6321b41664108ef6dd1dfcc7df602901b0c0d549fb8d0c1aa9b542b99d76b6b8c360c9bcb01ed819a57441948465279d0b2652be1058065929bffae3e9c8923ba01c954f3c49298db8ffad96b73684daf2e608046be2ffb0de70237e044d4be3e6ccc1984ebd2f6e0f57e99fcb0ec30598f121bd93a4003e0ba0815e5ddbeba9f3f8600ef86258a5423fb1f30da5be531e573bf5322a5842eeb23107f02021dc332e0e687bd1f4f0ac09293c3638603279484dd552d534089e0b5b903c4ceeedef410662ec12e17e9b616950874e24d313d770e84b488544a8b829039d06637269367c108dc37712d46ef6601ef4e937a120c607e570446d6216366a72ced5d543ba92a929cef7c4fb03307e88174ad88381b16de1c3f9985f483ff75e9b40fc0e001d037dda41df9a583009baa3b246c19ab5a20cb4e62accb7a86090717c17db68b0d14905ed0ce6e49555de65448782fc0899f631393b5ccd65da59265d1b4ba9ff4d8a328cb42d2e3a465db23cfa9f159ce5716df7ccf393a561a1783679048570f2467c5336106bc8954569c047e854b2211141d169b27ca796b42c544f70123bd9f6ae23f87d1be164cd7bb2da3dc79e6f12a687296942c9c8f2d99b6961b48e046028bd69dcda162510ad235b7bf28a0ff994e23f08e807437dcd1a426a31e818b918e5c28725bf12f42d6f719d9d81100e529b9f7e4891167aef44ec7afa086e46cf832d144ebe668dbafcbf229be799f33df6c1fb3365f4cb64f360fb70ee140818503a185a44f15d3db5fd5abe8ea3c59f4120c23d3792a4ac791959858dc88286e403ad45b31716e28be7684375c2651f88ed78c2948d673ef2a8a937136ca9842717585894453a83280edc21f3fadb974c36696fe7d8bd136a005a69d14d034a869c4035282ac7c91642a05743814b4cd57df50a4eb15dd7a561637ea4ef6b3bcf89695f125fcd390746357917a6bcf55e0268a09ae5b1195f99a7fe5fec2d4115978052e195d7b5df345b827121a86166c9095e387301fc561654db0183715239247eb9dc15e83c20389aa6271b42125bd475b82db032150aa39fab06fde1034347a8a884c74edb21be34c8cf5b437ad7223970defbb27ca8eb0029fdd4acd4bc92236584ed42f03706376c583a5c8e5cf9f2415ee1f8c1b01f34d7cf1b673db2158eb99d55878ee41b391f8d7339c6f3471ae4af25e5ecb8cea2fbed9f915ce483f1a9411ca5b21776295aa4f52fa31d875f9850f3e07b8093b0f92570d41d77e68e9a79a27b6f5a2c9a100cde02ea745353e996b99b43e0f1aa51288d863859bc618a602c17a15e285e6c189a21a4762b57ce396c852a5453f035c7a2d849a98c30a2e7f797ed13ffae44e4d15a240d092a25b4820e0d2fe3b9cb74b89efc977634d1f37eddc1433f6b06fd13c543bceca1254f91413d8b914bd67f1dca660ad8ef561dfb2ce5f0486b3e1a19a3682dad8a727177a1ea448273c3cd308300e3b4fc4f96efa8d6d723de8b38f7688e13c47b2aa801ba5c33a138208412524250e41eb253520f68324dbdb5e7de6e02dc315e20cf1844cc7a5f15428dd342bcf40895d94b3de0e1acdb698a94e0dd881edfb7569d0c81981213e7186eac0d80dd35e1a48aa5319678db523e9cea10163e3924c52d1d4ff589b3b228d98e64e6ee22990600ac9b272b483520148dac0e26d27ef618c86b0a49075f71d8c21e49bbcf83eb1374f0ad393074e32fa33a257f13fb187ba40b02ee6e688092e81ce0c04e3e53507b4b244fcf3afd4dbf05747a8c81828351558223a7bd0ff6684e94cd264ab3841cca4983c10b627c3c13286872798a3bce148b7f9847cb2b485bb900ad006b08482c801e9f05e5e57591e9c9ed1235c397ebffec2bffdf0eaa4aa2b3927e583f913edb95ce47603bc725ad16c59c4b638668190bd1f9c4b2c9e1b14a85d9e3e81ef3668baf27e59dd14d1ade2d7873d4feb989cdac04675f40b59a1a41453b44e0fdb89f4a7f3f52cb3a6a79d0763f85826fe1b5acb3215a0328c32ccdf2c21bb4ab3310c2d33f9b1255582e0807492ce59953f6cd4422bfa5ea9192177bbf13bd7a83807362036708653bd01b67d3def4ef7041ea29995404c0b10b0eae74bbf614652f887f755e94d390341437d50cecbf2c16fa21638ad3f85f30db17e1af9bf2b4aa8113d6a9170dc4c024f484200a471e9c73f6d2055585bdb499156081d3bc288a2ddd2b9d856c69c22ad3b4ee16555c64d86b7a9d83722860fdbf06b3a1592f3e5832fdf2d3ee078e54b7cee981cec96de0a4c77e052d2f86061cba468f6c5861771014dd56320f5fd4f84b5a890838e9fe72f41620d131cfdb7d0e627dd490acab383d5fc8cfc95e966ced3dfe3d315ad76a0452a50e8b4e9882ca9294eaa12f73629affc9050df48aedc1da6081259226056012decf4a60c3e252860cc7452e6058d8029d2d0971496e19cc94558c96678bd1b074894271b2bff2810f8a684c9329c584641bfeeb2fd4db920aec9d18e1b05803c37bc1b3cd1b3782a713ea754b1a35f137e21e31afd230aa1ba53cbc0af2ec98c860c993441007f910b8814e115725753f7a05d0b0b290048dd6aa97f3ae6f14b9652db8017e23303a3aa52c9fd5b83aa3f8ecb5e280425709237cd6fc6728664168bb2dda083ceab3ca528a78432104912e96a2ff9057885b1aebf1a8423b5c390f32bc5f3f0093870a27d8eee3576aa70a9b1ee21041a64e7dc0bbac8b46e7aa6a825bddeeab7ffbdad2ffa238a6cc77532551ebe4e650faadf67328371563e17b508ace6ed5dfcec60cd4b90ca23260f8ae78d937b7503f9595f233c7b719b837484bb684b2f9ca4df4d716a7de9ceadf0212e7f24574f1f14015ffb583c9ad2747cbddf2f0903d3dfc60eb204c6b581ba9caba16471d1bfb09b8b96ddadadcc97435ad6fe5ed249e25b01e0d5af5fe0430e4fb18eefce981fa6c78abab2a35f186137f256d8719f2053316680c03e7499941efd68a0ff066519f4d02608c320228c8cdc42fde4abecefde9d2113f730529e0215f284732d267c6804a49778a4ee32fb860122b4584a519ced4dfc0c8a3d25d90142d16e9e36eff436881dbddd06b99dee8c4e2ff7dbc19edaa7e1ad5b1f9d713abd72d4e4547b3a46ab6acfaa7d92b6da52b75bd530f6d833d156b95f1da248219c85fe807af0a47ae22c20392c889f5e89a3524cf42412a70277fe98196deb7a4c2b136fba8cc", 0xb6b) write$char_usb(r0, &(0x7f0000000440)="93c8d8d65de512f8ff3d262ef1522ba9a9e25fb60dfb244415dac6aaf43a6ad09826182666913dd4b08cd8df6dbe201265798866485a08e5e75d143fca212b14f6c201c3ff4aaceb409a2ffc9927cf75d3ca3f5a87bdcafe15820a87be1d927245e44d9619fb10d4d2c2afcad36e90865fb48d2b9b8f1bf373e466f189a8f0dead5f8172a1fe5abf4ee8d2f6050fc3092c3451aaae8980527853555121d5997b9bae8fcf2bfd17cc49ddfb67044a36340ca3f1aa96635de8e39a0dbcaf9136c2f5c269d6c5", 0xc5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 471.177765ms ago: executing program 0 (id=26): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000003780)=[{&(0x7f0000000bc0)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000c00)="9f", 0x1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0xc044) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000000) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000340)={'filter\x00', 0x1d, "580dba4fa91b788dead865b9536fb4cf85c16d678cd1538e0ef10d37e4"}, 0x0) 320.321873ms ago: executing program 1 (id=27): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000380)={0x6, {0x39b14d69, 0xfffffffc, 0x2, 0x40000004, 0x6, 0x80000001}}) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 295.261324ms ago: executing program 2 (id=28): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 214.573639ms ago: executing program 3 (id=29): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000200)="bc024cddc5c2455ca31af215cb3ec7a6b2658cee1125fbb4c804035407878144c69e92502efa56baa2d6", 0x2a, 0x8000, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @link_local}, 0x14) 168.410141ms ago: executing program 0 (id=30): r0 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xb9, @local, 0x6, 0x2}, 0x20) getsockname$l2tp6(r0, 0x0, &(0x7f0000000580)) 167.987891ms ago: executing program 2 (id=31): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x20, 0x1, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x40}]}, 0x20}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4000) 78.777566ms ago: executing program 2 (id=32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 52.150887ms ago: executing program 1 (id=33): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'sit0\x00', 0x0}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x101602, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040affaa40162e4bb48e9af2"], 0xd) 427.39µs ago: executing program 0 (id=34): madvise(&(0x7f0000185000/0x4000)=nil, 0x4000, 0xa) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 0s ago: executing program 3 (id=35): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) preadv(r2, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/172, 0xac}], 0x1, 0x4e0a, 0x11) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.57' (ED25519) to the list of known hosts. [ 61.733347][ T4172] cgroup: Unknown subsys name 'net' [ 61.874461][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.343081][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.195646][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 65.236004][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 65.261433][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 65.311251][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 65.368464][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 65.460195][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.467523][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.476072][ T4184] device bridge_slave_0 entered promiscuous mode [ 65.492734][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.500027][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.508109][ T4196] device bridge_slave_0 entered promiscuous mode [ 65.516102][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.523349][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.532181][ T4194] device bridge_slave_0 entered promiscuous mode [ 65.542960][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.550296][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.558415][ T4184] device bridge_slave_1 entered promiscuous mode [ 65.579431][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.586620][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.595286][ T4196] device bridge_slave_1 entered promiscuous mode [ 65.602639][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.610184][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.618284][ T4194] device bridge_slave_1 entered promiscuous mode [ 65.636055][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.643304][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.651853][ T4188] device bridge_slave_0 entered promiscuous mode [ 65.684854][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.698410][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.706057][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.714238][ T4188] device bridge_slave_1 entered promiscuous mode [ 65.723229][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.735860][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.746636][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.777447][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.788016][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.817334][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.829225][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.859633][ T4196] team0: Port device team_slave_0 added [ 65.865823][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.873143][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.881783][ T4189] device bridge_slave_0 entered promiscuous mode [ 65.896396][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.903942][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.912499][ T4189] device bridge_slave_1 entered promiscuous mode [ 65.928415][ T4194] team0: Port device team_slave_0 added [ 65.936063][ T4196] team0: Port device team_slave_1 added [ 65.956753][ T4184] team0: Port device team_slave_0 added [ 65.963924][ T4194] team0: Port device team_slave_1 added [ 65.997783][ T4188] team0: Port device team_slave_0 added [ 66.005530][ T4184] team0: Port device team_slave_1 added [ 66.018954][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.029277][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.036531][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.063463][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.076963][ T4188] team0: Port device team_slave_1 added [ 66.091030][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.098179][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.124715][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.139217][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.153687][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.160953][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.187194][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.199322][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.206386][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.233914][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.263770][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.271028][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.298230][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.340465][ T4189] team0: Port device team_slave_0 added [ 66.347206][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.354667][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.386396][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.403063][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.410395][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.436811][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.450054][ T4189] team0: Port device team_slave_1 added [ 66.456330][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.463755][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.490102][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.521510][ T4196] device hsr_slave_0 entered promiscuous mode [ 66.528252][ T4196] device hsr_slave_1 entered promiscuous mode [ 66.601682][ T4188] device hsr_slave_0 entered promiscuous mode [ 66.608495][ T4188] device hsr_slave_1 entered promiscuous mode [ 66.615536][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.623636][ T4188] Cannot create hsr debugfs directory [ 66.630293][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.637610][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.664441][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.678999][ T4194] device hsr_slave_0 entered promiscuous mode [ 66.685788][ T4194] device hsr_slave_1 entered promiscuous mode [ 66.693074][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.701003][ T4194] Cannot create hsr debugfs directory [ 66.715055][ T4184] device hsr_slave_0 entered promiscuous mode [ 66.721894][ T4184] device hsr_slave_1 entered promiscuous mode [ 66.728436][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.736800][ T4184] Cannot create hsr debugfs directory [ 66.743605][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.750955][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.777243][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.839626][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 66.922289][ T2289] Bluetooth: hci3: command 0x0409 tx timeout [ 66.928501][ T2289] Bluetooth: hci4: command 0x0409 tx timeout [ 66.954616][ T2289] Bluetooth: hci2: command 0x0409 tx timeout [ 66.962262][ T2289] Bluetooth: hci1: command 0x0409 tx timeout [ 66.975501][ T4189] device hsr_slave_0 entered promiscuous mode [ 66.983179][ T4189] device hsr_slave_1 entered promiscuous mode [ 66.990420][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.998096][ T4189] Cannot create hsr debugfs directory [ 67.176992][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.188425][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.202868][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.214118][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.263418][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.286307][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.301551][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.316602][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.381576][ T4194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.398383][ T4194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.416674][ T4194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.451055][ T4194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.462489][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.477131][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.490040][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.516691][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.555372][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.568529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.578301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.589787][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.598558][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.613782][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.621436][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.634341][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.655790][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.663718][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.676473][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.684779][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.726329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.735870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.746547][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.753869][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.763203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.773309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.783104][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.790208][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.797921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.809709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.818129][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.825247][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.862611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.871632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.881387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.892645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.901778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.913084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.922192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.932994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.941974][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.949330][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.957436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.966428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.975239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.985697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.015857][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.025550][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.035356][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.044937][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.055923][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.064925][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.073763][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.082521][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.091414][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.101015][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.117714][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.131071][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.154222][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.162766][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.173604][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.211695][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.226744][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.236195][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.249172][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.257596][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.265523][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.285519][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.340062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.355954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.366482][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.373648][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.384210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.394387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.403803][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.410986][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.434359][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.453312][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.467009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.475306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.484264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.515257][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.533998][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.548075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.557329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.570831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.580874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.590337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.598039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.607037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.615648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.624149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.632215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.640520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.648278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.656768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.674632][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.701172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.717804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.726843][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.734171][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.744338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.753031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.762129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.771424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.780350][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.787424][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.795314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.806395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.815159][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.822222][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.841227][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.859314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.867643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.876093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.885309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.894598][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.901833][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.912477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.923246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.929435][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 68.931157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.944483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.953858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.967028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.976336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.988116][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.009362][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 69.021300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.029043][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 69.041146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.043206][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 69.056491][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 69.063309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.078421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.091734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.104178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.113256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.123845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.132643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.142663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.151284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.173319][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.188202][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.206339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.225362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.236152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.254537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.265374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.274726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.291167][ T4196] device veth0_vlan entered promiscuous mode [ 69.329965][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.348143][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.357323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.370700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.381161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.390681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.400055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.407731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.422915][ T4196] device veth1_vlan entered promiscuous mode [ 69.436315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.444713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.463055][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.519381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.531269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.555176][ T4196] device veth0_macvtap entered promiscuous mode [ 69.601793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.611110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.620382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.630282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.639418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.652799][ T4188] device veth0_vlan entered promiscuous mode [ 69.669271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.679444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.695064][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.712809][ T4194] device veth0_vlan entered promiscuous mode [ 69.725013][ T4188] device veth1_vlan entered promiscuous mode [ 69.733627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.743596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.753404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.762310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.772091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.780697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.789355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.811724][ T4196] device veth1_macvtap entered promiscuous mode [ 69.826336][ T4194] device veth1_vlan entered promiscuous mode [ 69.840407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.848467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.856736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.865556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.874387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.883652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.922878][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.934460][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.947244][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.957112][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.966591][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.975879][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.003145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.012153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.020905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.030359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.040258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.050176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.059077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.067489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.081479][ T4188] device veth0_macvtap entered promiscuous mode [ 70.096169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.105629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.113632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.130499][ T4194] device veth0_macvtap entered promiscuous mode [ 70.143310][ T4188] device veth1_macvtap entered promiscuous mode [ 70.158211][ T4189] device veth0_vlan entered promiscuous mode [ 70.165169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.173830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.183639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.193680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.203164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.212242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.221048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.229184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.246607][ T4194] device veth1_macvtap entered promiscuous mode [ 70.266479][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.284194][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.311508][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.325412][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.339319][ T4189] device veth1_vlan entered promiscuous mode [ 70.352705][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.376543][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.386785][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.397318][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.409268][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.424280][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.435457][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.450756][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.458421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.467187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.475789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.484553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.493579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.502500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.511908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.521189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.537878][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.548980][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.559127][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.569874][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.581298][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.617858][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.633760][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.645160][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.661286][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.677046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.689761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.700621][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.710414][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.719767][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.729589][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.792413][ T4189] device veth0_macvtap entered promiscuous mode [ 70.804396][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.813004][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.813724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.830993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.865862][ T4189] device veth1_macvtap entered promiscuous mode [ 70.909326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.920440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.929374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.944924][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.961536][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.984284][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.993119][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.002160][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 71.006465][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.018176][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.030537][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.043521][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.054211][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.064307][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.074947][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.085388][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 71.092063][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 71.092180][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.098202][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 71.111299][ T4184] device veth0_vlan entered promiscuous mode [ 71.117977][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 71.142788][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.167142][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.183889][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.197519][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.207988][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.219624][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.230120][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.244523][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.254966][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.265791][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.277401][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.306067][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.317982][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.342512][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.355031][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.373826][ T4184] device veth1_vlan entered promiscuous mode [ 71.382735][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.392990][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.403434][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.413131][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.448925][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.449229][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.469223][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.477297][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.492243][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.498875][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.527280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.536937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.552021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.574257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.616276][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.626353][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.662053][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.711532][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.723286][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.737595][ T4184] device veth0_macvtap entered promiscuous mode [ 71.794482][ T4184] device veth1_macvtap entered promiscuous mode [ 71.794676][ T26] audit: type=1326 audit(1777141019.568:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4276 comm="syz.2.7" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f285fed6dd9 code=0x0 [ 71.816903][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.835092][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.846645][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.857442][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.869124][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.880001][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.891288][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.901964][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.914632][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.935175][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.936162][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.943858][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.967027][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.968112][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.978252][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.985423][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.003035][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.013493][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.024261][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.034551][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.046238][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.059387][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.071993][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.082084][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.091084][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.099574][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.108071][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.117120][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.125880][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.134980][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.154859][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.168543][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.178623][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.188105][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.276249][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.311260][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.354969][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.422417][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.442653][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.538551][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.564145][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.592061][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.660550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.725161][ T4291] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.898872][ T4233] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.022891][ T4299] xt_hashlimit: size too large, truncated to 1048576 [ 73.064043][ T4301] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.102338][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 73.169204][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 73.175613][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 73.193258][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 73.216560][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 73.264994][ T4233] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 73.283466][ T4233] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 73.316022][ T4233] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 73.362993][ T4233] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 73.510840][ T4233] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 73.530624][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 73.556525][ T4233] usb 4-1: Product: syz [ 73.573085][ T4233] usb 4-1: Manufacturer: syz [ 73.629825][ T4288] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 73.671602][ T4233] cdc_wdm 4-1:1.0: skipping garbage [ 73.684718][ T4233] cdc_wdm 4-1:1.0: skipping garbage [ 73.703751][ T4233] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 73.915865][ T4274] usb 4-1: USB disconnect, device number 2 [ 74.247116][ T4323] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 74.276471][ T4323] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 74.437731][ T4336] input: syz1 as /devices/virtual/input/input5 [ 74.710846][ T4193] Bluetooth: unknown link type 242 [ 74.713497][ T4197] ================================================================== [ 74.725271][ T4197] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1324/0x3c90 [ 74.733205][ T4197] Read of size 1 at addr ffff88807d487c0a by task kworker/u5:6/4197 [ 74.741218][ T4197] [ 74.743673][ T4197] CPU: 0 PID: 4197 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 74.751509][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 74.761779][ T4197] Workqueue: hci4 hci_rx_work [ 74.766503][ T4197] Call Trace: [ 74.769916][ T4197] [ 74.772876][ T4197] dump_stack_lvl+0x188/0x250 [ 74.777717][ T4197] ? show_regs_print_info+0x20/0x20 [ 74.783045][ T4197] ? load_image+0x400/0x400 [ 74.787578][ T4197] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 74.793328][ T4197] ? mutex_lock_io_nested+0x60/0x60 [ 74.798638][ T4197] print_address_description+0x60/0x2d0 [ 74.804307][ T4197] ? hci_le_meta_evt+0x1324/0x3c90 [ 74.809456][ T4197] kasan_report+0xdf/0x130 [ 74.813915][ T4197] ? hci_le_meta_evt+0x1324/0x3c90 [ 74.819070][ T4197] hci_le_meta_evt+0x1324/0x3c90 [ 74.824061][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 74.830162][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 74.835829][ T4197] ? mark_lock+0x94/0x320 [ 74.840358][ T4197] ? mutex_unlock+0x10/0x10 [ 74.844868][ T4197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 74.850868][ T4197] ? lock_chain_count+0x20/0x20 [ 74.855733][ T4197] ? __rwlock_init+0x140/0x140 [ 74.860589][ T4197] hci_event_packet+0xe48/0x1370 [ 74.865536][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 74.870748][ T4197] ? rcu_lock_release+0x20/0x20 [ 74.875615][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 74.880821][ T4197] hci_rx_work+0x255/0xa10 [ 74.885363][ T4197] process_one_work+0x85f/0x1010 [ 74.890568][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 74.896986][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 74.902322][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 74.907438][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 74.913088][ T4197] ? wq_worker_running+0x97/0x170 [ 74.918292][ T4197] worker_thread+0xaa6/0x1290 [ 74.923106][ T4197] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 74.929027][ T4197] kthread+0x436/0x520 [ 74.933103][ T4197] ? rcu_lock_release+0x20/0x20 [ 74.938044][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 74.942639][ T4197] ret_from_fork+0x1f/0x30 [ 74.947350][ T4197] [ 74.950377][ T4197] [ 74.952703][ T4197] Allocated by task 4347: [ 74.957026][ T4197] __kasan_kmalloc+0xb5/0xf0 [ 74.961619][ T4197] __alloc_skb+0x22c/0x750 [ 74.966043][ T4197] vhci_write+0xbc/0x450 [ 74.970286][ T4197] vfs_write+0x745/0xd60 [ 74.974613][ T4197] ksys_write+0x152/0x260 [ 74.978945][ T4197] do_syscall_64+0x4c/0xa0 [ 74.983454][ T4197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.989350][ T4197] [ 74.991678][ T4197] The buggy address belongs to the object at ffff88807d487800 [ 74.991678][ T4197] which belongs to the cache kmalloc-1k of size 1024 [ 75.006130][ T4197] The buggy address is located 10 bytes to the right of [ 75.006130][ T4197] 1024-byte region [ffff88807d487800, ffff88807d487c00) [ 75.020270][ T4197] The buggy address belongs to the page: [ 75.025908][ T4197] page:ffffea0001f52000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d480 [ 75.036060][ T4197] head:ffffea0001f52000 order:3 compound_mapcount:0 compound_pincount:0 [ 75.044486][ T4197] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 75.052645][ T4197] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0 [ 75.061404][ T4197] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 75.069983][ T4197] page dumped because: kasan: bad access detected [ 75.076514][ T4197] page_owner tracks the page as allocated [ 75.082322][ T4197] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4167, ts 53598677950, free_ts 53551508738 [ 75.101560][ T4197] get_page_from_freelist+0x1bbd/0x1ca0 [ 75.107117][ T4197] __alloc_pages+0x1ee/0x480 [ 75.111898][ T4197] new_slab+0xc0/0x4b0 [ 75.115972][ T4197] ___slab_alloc+0x80a/0xdd0 [ 75.120561][ T4197] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 75.126454][ T4197] __alloc_skb+0x22c/0x750 [ 75.130872][ T4197] __tcp_send_ack+0x9d/0x5d0 [ 75.135486][ T4197] tcp_delack_timer_handler+0x32e/0x730 [ 75.141649][ T4197] tcp_delack_timer+0x188/0x2e0 [ 75.146689][ T4197] call_timer_fn+0x17b/0x540 [ 75.151378][ T4197] __run_timers+0x53e/0x800 [ 75.155988][ T4197] run_timer_softirq+0x63/0xf0 [ 75.160754][ T4197] handle_softirqs+0x339/0x830 [ 75.165519][ T4197] __irq_exit_rcu+0x13b/0x230 [ 75.170285][ T4197] irq_exit_rcu+0x5/0x20 [ 75.174538][ T4197] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 75.180303][ T4197] page last free stack trace: [ 75.184972][ T4197] free_unref_page_prepare+0x637/0x6c0 [ 75.190689][ T4197] free_unref_page+0x8f/0x2a0 [ 75.195453][ T4197] skb_release_data+0x3b1/0x800 [ 75.200398][ T4197] __kfree_skb+0x4c/0x60 [ 75.204643][ T4197] tcp_recvmsg_locked+0x14e1/0x27f0 [ 75.209928][ T4197] tcp_recvmsg+0x232/0x770 [ 75.214443][ T4197] inet_recvmsg+0x146/0x200 [ 75.219056][ T4197] sock_read_iter+0x2b8/0x380 [ 75.223820][ T4197] vfs_read+0x759/0xd60 [ 75.228178][ T4197] ksys_read+0x152/0x260 [ 75.232421][ T4197] do_syscall_64+0x4c/0xa0 [ 75.236837][ T4197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.242909][ T4197] [ 75.245249][ T4197] Memory state around the buggy address: [ 75.250964][ T4197] ffff88807d487b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.259199][ T4197] ffff88807d487b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.267256][ T4197] >ffff88807d487c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.275312][ T4197] ^ [ 75.279638][ T4197] ffff88807d487c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.287808][ T4197] ffff88807d487d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.296041][ T4197] ================================================================== [ 75.304100][ T4197] Disabling lock debugging due to kernel taint [ 75.324759][ T4197] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 75.332087][ T4197] CPU: 0 PID: 4197 Comm: kworker/u5:6 Tainted: G B syzkaller #0 [ 75.341357][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 75.351522][ T4197] Workqueue: hci4 hci_rx_work [ 75.356237][ T4197] Call Trace: [ 75.359569][ T4197] [ 75.362527][ T4197] dump_stack_lvl+0x188/0x250 [ 75.367239][ T4197] ? show_regs_print_info+0x20/0x20 [ 75.372571][ T4197] ? load_image+0x400/0x400 [ 75.377195][ T4197] panic+0x2e5/0x810 [ 75.381219][ T4197] ? bpf_jit_dump+0xd0/0xd0 [ 75.385762][ T4197] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 75.391954][ T4197] ? _raw_spin_unlock+0x40/0x40 [ 75.396843][ T4197] ? hci_le_meta_evt+0x1324/0x3c90 [ 75.402195][ T4197] check_panic_on_warn+0x80/0xa0 [ 75.407255][ T4197] ? hci_le_meta_evt+0x1324/0x3c90 [ 75.412397][ T4197] end_report+0x6d/0xf0 [ 75.416657][ T4197] kasan_report+0x102/0x130 [ 75.421376][ T4197] ? hci_le_meta_evt+0x1324/0x3c90 [ 75.426511][ T4197] hci_le_meta_evt+0x1324/0x3c90 [ 75.431481][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 75.437588][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 75.443251][ T4197] ? mark_lock+0x94/0x320 [ 75.447902][ T4197] ? mutex_unlock+0x10/0x10 [ 75.452450][ T4197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 75.458588][ T4197] ? lock_chain_count+0x20/0x20 [ 75.463486][ T4197] ? __rwlock_init+0x140/0x140 [ 75.468388][ T4197] hci_event_packet+0xe48/0x1370 [ 75.470654][ T4353] kvm [4350]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x100000000 [ 75.473696][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 75.473725][ T4197] ? rcu_lock_release+0x20/0x20 [ 75.493151][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 75.499060][ T4197] hci_rx_work+0x255/0xa10 [ 75.499726][ T4353] kvm [4350]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 75.503517][ T4197] process_one_work+0x85f/0x1010 [ 75.517436][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 75.523179][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 75.528506][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 75.533836][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 75.537272][ T4353] kvm [4350]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x100000079 [ 75.539412][ T4197] ? wq_worker_running+0x97/0x170 [ 75.539439][ T4197] worker_thread+0xaa6/0x1290 [ 75.558744][ T4197] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 75.560341][ T4353] kvm [4350]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 75.564662][ T4197] kthread+0x436/0x520 [ 75.564686][ T4197] ? rcu_lock_release+0x20/0x20 [ 75.582630][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 75.587347][ T4197] ret_from_fork+0x1f/0x30 [ 75.591912][ T4197] [ 75.595152][ T4197] Kernel Offset: disabled [ 75.599657][ T4197] Rebooting in 86400 seconds..